last executing test programs: 2.771265613s ago: executing program 0 (id=3871): perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b8000005002b0000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.521894325s ago: executing program 2 (id=3877): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0x7000000}}, @ip_tos_u8={{0x10, 0x29, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 2.375405542s ago: executing program 4 (id=3879): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000003c0)=""/82, 0x0, 0x52, 0x0, 0x0, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfdae, &(0x7f000000cf3d)=""/195, 0x2000000, 0x9, '\x00', 0x0, @sock_ops}, 0x48) close(r0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES64=0x0], 0x20) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80", 0xb}], 0x1, 0x0, 0x0, 0x39c}, 0x0) socket$kcm(0x21, 0x2, 0x2) 2.337018324s ago: executing program 2 (id=3880): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.880085497s ago: executing program 3 (id=3881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="7a0a00ff0000000071103f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x400, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x2, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4040, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1018, &(0x7f0000004b00)=""/4120, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1a}, 0x94) 1.878450637s ago: executing program 4 (id=3882): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000280)}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x86, 0x86, 0x3, [@ptr={0xf}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @datasec={0x5, 0x7, 0x0, 0xf, 0x2, [{0x4, 0x89, 0x18}, {0x3, 0x7f, 0x8}, {0x4, 0x7, 0x3}, {0x5, 0xad85, 0x32ab}, {0x4, 0x2, 0x9}, {0x4, 0x400, 0x7fe}, {0x4, 0x7fff, 0x4}], "b283"}, @restrict={0x9, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f]}}, &(0x7f00000004c0)=""/165, 0xa3, 0xa5, 0x1, 0x3, 0xe9fbc03e36f50857}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x7, 0x0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@generic={0x8, 0x9, 0x9, 0x81, 0xf86}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000680)='GPL\x00', 0x3d99, 0x19, &(0x7f00000006c0)=""/25, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xe, 0xebeb, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f00000007c0)=[{0x1, 0x1, 0x10, 0x9}, {0x4, 0x3, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x3}, {0x0, 0x2, 0xe, 0x2}, {0x3, 0x3, 0x1, 0x8}, {0x0, 0x5, 0x4, 0xa}], 0x10, 0x3}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%-5lx \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@generic={0x81, 0x8, 0x6, 0x74, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x68, &(0x7f0000000100)=""/104, 0x41000, 0x42, '\x00', 0x0, @fallback=0x26, r1, 0x8, &(0x7f0000000340)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x10, 0x3, 0x7}, 0x10, r2, r3, 0xfffffffffffffe40, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r5, r6, 0xffffffffffffffff, r7], 0x0, 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&\'\'\t|\t') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000b80)=r8, 0x4) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000008000000950000000000000069106000100000009500000000000000"], &(0x7f0000000fc0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x41100, 0xa}, 0x94) 1.735838814s ago: executing program 2 (id=3883): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x107806, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)='\x00', 0x1}], 0x1}, 0x480d0) close(r2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000850000001800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000340)={r3, r0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xe3, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000540), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x2e) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 1.665415057s ago: executing program 0 (id=3884): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.644002948s ago: executing program 4 (id=3885): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000037c23c8cd0bcbbb70000000000000000000095f7ab898996d3d576ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0, 0xa7c, r2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dffffff"}) 1.593660171s ago: executing program 1 (id=3886): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb1}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5, 0x300}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 1.525326585s ago: executing program 0 (id=3887): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x59) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'geneve0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/230, 0xe6}, {0x0}, {&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f00000017c0)=""/146, 0x92}], 0x5}, 0x10122) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x1102, 0x0, 0xc2ba, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$kcm(0x11, 0x2, 0x300) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, 0x0, 0x8) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x2, 0x2, 0x3}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="437819aa51e3704acbc83d0f2b6f6c9fe4a1d118b8c06f9a6eb5ac", 0x1b}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="6000000000000000010100000800000091fa6b575284662c2defa0f1952c095ca95c67169a51b7550bacee26ffb4916b799669a9d78f013e6eb34ff29ed3511be5f77b941322be3e037e5b248b8a88dc0eec24231645a5ea1a89c91809a1b500a8000000000000003a00000009000000704d268b98d1c8761523e43171ac1479b788bc6ac8b3570165763b85ec9802662398538dcc9899aeae81d296da3a559b7b80ef69840f5f879c8813e4a20cbf5530780c4e0e6b867a12bac55fde3085afcb1ef260bcfa84d4d5c8bd5314b86dfc1f229e443b7c04dad695bf670213238051c282a413b0040ff8e83ddaa947094e6519dc37bdd35c52e92803e0ea8ec3b1c30000000000000000010000000000000c01000009000000888f2a9f157c92138a88393b8d444a5c52f7d621759d339073ca9f63c5053dd20e1af12c4788f6ce8f8fbd22202838dfbbbfbf092f5e6a9462d8fd3b26285abb53b26487e183aeb3c52f43f407c3660deada8e66cb9f65fc810bbe77f157ceca103a5100f890e6fee58862dc4b310d06287745f4bba8f24818ab8b042cd04ae51136ea51163f4d251019564d777e5c1ac7a8b3e80f5f0180eedc91dfdcc5ffb250b1c4649d09baadafc15fe82d485a3d9eb785005ef55645ce596820e705383cc0d7f6e162750d2b278afaf0a049bcb53557925a6080c8ddbb21f706848b40f5ed52a8176e76ec34d7f79f9aaf000000280000000000000018010000040000003773b612ad400831eb7ffe51352682fc595b908a00000000e80000000000000017010000597f00004c39e02f47e8c54e0046b43b667006d90dc17e3a66aeaa5769a9887458542333d86a5a12ceb4602b160d669694f99ff5837d3fa1f349227bdc1fd3e3c69b1c890d62c92bf4b58d7c7716ca75befbf7ffda4395259a43a741f079769de96212d5656bf46f395ec2ae1435dcbc0000000086ddefe991680a0895ea61993d9b1d4503d7739ae85d3cdb01b4f5226ae9cdda7bdc6e3ebe382f914a83cc0d8e9e3426711671ac1be1dda021de350bea810000007099ea3177f3dae2fc56178441a1cd5af87df9d456a954bba5b5065dd6cf28a743000000000000"], 0x318}, 0x8800) r7 = syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYRES16=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 1.41692467s ago: executing program 4 (id=3888): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10000000, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000a40)="2e395a3dfb67cf42f498e7138875d771f6c533a61e1648bba1652c13df3e57505c2c0cf3ca75f60742265de1a29275dc939efc6d5f697fc9562b24c381a9b179bb5bf8299f1fe02da503055b9e065760b4b93a633e5fc218c7d06d487508f2b5ed9494c68d9754ad07d852fe7b908025a5386304d8183ac19f28f0894cfe3aab9b662ae1ea519eaeb5e961f5336ed1f0aff91da8389ecc3d82") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYBLOB="d62663962c9a4bd80f824cbc8ed83b5455e9cbed2b2c57588f09261710cc97fb9400fa0173f72345c328845f7d3fff344a2eb6d9bbeae19223f90c8d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000040085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x5, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) recvmsg(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x21}, 0x80) 1.41318531s ago: executing program 1 (id=3889): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x41}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x4000}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.20538376s ago: executing program 1 (id=3890): r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x801c581f, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x0, 0x0, 0x10, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0xf29}, 0x8dc0, 0x1, 0x7, 0x3, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x151000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'veth0_macvtap\x00', 0x16000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000500)={0x1, &(0x7f0000000200)=[{0xf, 0x80, 0x80, 0x6a}]}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0xfff, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r4, 0x58, &(0x7f0000000580)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000950000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 836.526428ms ago: executing program 3 (id=3891): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04002f020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20004000) 715.639594ms ago: executing program 2 (id=3892): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) socketpair(0x22, 0x4, 0x101, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 715.275755ms ago: executing program 3 (id=3893): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 576.833011ms ago: executing program 3 (id=3894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x4, 0xfffffffc, 0xa}], 0x10, 0x1861}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x88, 0x64, &(0x7f00000009c0)=r4, 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 481.448436ms ago: executing program 0 (id=3895): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x3c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 457.692017ms ago: executing program 1 (id=3896): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xd, 0x1, 0x134}, 0x10, 0x14d3d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x4, 0x5, 0x10, 0xb}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@fallback=r0, 0x0, 0x1, 0x400, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x1b, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @ldst={0x2, 0x3, 0x0, 0x5, 0x2, 0x6, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0xad7aae6e70298295, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x8, 0xa9, &(0x7f0000000b80)=""/169, 0x41100, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x4, 0x80, 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000cc0)=[{0x3, 0x1, 0x10, 0x7}, {0x1, 0x1, 0xe, 0x3}, {0x1, 0x4, 0xe, 0x6}, {0x4, 0x2, 0xc, 0x9}], 0x10, 0x2a3e}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@cgroup, r1, 0x18, 0x0, 0x0, @void, @value=r3, @void, @void, r2}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000019e905181000000ff00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018200000", @ANYRES32, @ANYBLOB="0000000003000000850000008e00000018000000f200000000000000050000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x7, 0x10000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[{0x2, 0x5, 0x3, 0xc}], 0x10, 0x100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x4, r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061117800000000001800000000cd000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 416.127069ms ago: executing program 0 (id=3897): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 315.585564ms ago: executing program 4 (id=3898): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000037c23c8cd0bcbbb70000000000000000000095f7ab898996d3d576ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0, 0xa7c, r2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dffffff"}) 269.721496ms ago: executing program 2 (id=3908): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x1000000c8, 0x80001, 0x1, 0x5, 0xfffffffd, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81004d8800fe08000e40000200875a65969ff57b00ff020000000000400000000000000001e2607e15004dab"], 0xfdef) 268.927496ms ago: executing program 0 (id=3899): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x3}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000001040)="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", 0xff0}, {&(0x7f00000001c0)="540eab67fcb830060fcac18abe83cacdd0987db33fe8774bbd833c0cc740a6c58d169d8604720e44483277", 0x2b}, {&(0x7f0000000200)="13692e2541a8a7276a2deca74d8911da4de81134df56e9892db68a3d3712f5d1ddf408a1dbb4deb7a30e1cb3ce43a94e90a9676c8709b86d1a955f948339920744b71f3067be60015db38ffb5a5309b529d914c8b15de5cca071a4349351e7be4e4b2deb0d5fe31877e7cdffc5bd248583d7029f100ee66c303b9a63f4a0e7244febce2c88358c086d1120099d4014facb7c606986742241ba63b7e474bd0480adc878270053a39ec65b310aec7b174a7cbc4fd969d576fb96a57a5775d6cce1807869e91e9e894beae74c95c4c4b9", 0xcf}, {&(0x7f0000000300)="32ec450a41668b41196f8b305119042d0976a7e41e2ca99102ddc88242fa7dcac7c9c97fff5a64c221d282acd10c38b32bd8cfff4dc796e7c3c709470ce63f90d853dea64f11c1ae826fac0eb313995d8ddc884bac970f82c414af1d88496c2dba726578", 0x64}], 0x4, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff9c3}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff6e}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x48}, 0x804) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x9000000}]}]}}, &(0x7f0000000540)=""/232, 0x32, 0xe8, 0x1}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x2400000, 0x2d000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="39000000140081ae10003c000500018311001f9de60cbda816dc9f2c90c3c79f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3", 0x39}], 0x1}, 0x0) 268.697236ms ago: executing program 1 (id=3900): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000000c0)=r1, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e785600", 0x5}, {&(0x7f0000000440)="739135680a1d6fb520a135d74fcb507ba32aad7141e7c84382b075f75900bfba6841728e5b4c8a67abb35cf32dabf4feff1183ecaeead6a4c72e99892e55e2159959e12d4c06b8bb0e3b92a227bcddfc9de9b16bac13757c6dfa3c8764ea3fea50e0664cf70a842c69d3e914d4fc", 0x6e}], 0x2, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20, 0x2000000}, 0x4840) 246.432837ms ago: executing program 3 (id=3901): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0xff00}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [@printk={@x, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {}, {0x25}}], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 158.072312ms ago: executing program 4 (id=3902): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r3 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r3, 0x110, 0x2, &(0x7f0000000140), 0x16) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000140)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000006053582c137153e370248078000f01700d1bd", 0x33fe0}, {&(0x7f0000000c80)="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"}], 0x7}, 0x0) 65.427586ms ago: executing program 2 (id=3903): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x107806, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)='\x00', 0x1}], 0x1}, 0x480d0) close(r1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000850000001800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000340)={r2, r0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xe3, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000540), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x2e) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 64.988786ms ago: executing program 1 (id=3904): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 3 (id=3905): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20004000) (fail_nth: 11) kernel console output (not intermixed with test programs): ice bridge_slave_1 entered promiscuous mode [ 372.205436][T12342] netlink: 'syz.3.2902': attribute type 10 has an invalid length. [ 372.217002][T12342] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.248874][T12301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.328530][T12301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.452543][T12301] team0: Port device team_slave_0 added [ 372.509417][T12301] team0: Port device team_slave_1 added [ 372.597857][T12301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.617018][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.671084][T12301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.705983][ T75] device 0 left promiscuous mode [ 372.737844][T12301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.744827][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.806444][T12301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.997445][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 373.093697][T12301] device hsr_slave_0 entered promiscuous mode [ 373.126070][T12301] device hsr_slave_1 entered promiscuous mode [ 373.161106][T12301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.177691][T12301] Cannot create hsr debugfs directory [ 373.193541][T12374] netlink: 'syz.1.2914': attribute type 10 has an invalid length. [ 373.273754][T12379] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2913'. [ 373.303744][T12372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2913'. [ 373.341565][T12372] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2913'. [ 373.567236][T12385] netlink: 'syz.0.2916': attribute type 10 has an invalid length. [ 373.775219][T12391] netlink: 'syz.1.2917': attribute type 10 has an invalid length. [ 374.152228][T12399] netlink: 'syz.0.2919': attribute type 10 has an invalid length. [ 374.188977][T12404] device bridge_slave_1 left promiscuous mode [ 374.195398][T12404] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.253589][T12404] device bridge_slave_0 left promiscuous mode [ 374.283335][T12404] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.415243][T12404] bond0: (slave bridge0): Releasing backup interface [ 374.808188][T12424] netlink: 'syz.3.2926': attribute type 10 has an invalid length. [ 374.832532][T12424] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.865119][T12424] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.895586][T12424] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.926695][T12424] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.076493][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 375.092300][T12436] sctp: [Deprecated]: syz.3.2926 (pid 12436) Use of int in maxseg socket option. [ 375.092300][T12436] Use struct sctp_assoc_value instead [ 375.342585][T12445] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 375.562065][T12301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.599887][T12301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.677853][T12301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.863403][T12301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.031827][T12465] netlink: 'syz.4.2934': attribute type 3 has an invalid length. [ 376.046348][T12465] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2934'. [ 376.116035][ T75] device hsr_slave_0 left promiscuous mode [ 376.131335][ T75] device hsr_slave_1 left promiscuous mode [ 376.204751][ T75] device bridge_slave_1 left promiscuous mode [ 376.234343][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.256073][ T75] device bridge_slave_0 left promiscuous mode [ 376.283742][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.333181][ T75] device veth1_macvtap left promiscuous mode [ 376.340090][ T75] device veth0_macvtap left promiscuous mode [ 376.455272][T12479] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2940'. [ 376.666974][ T75] team0 (unregistering): Port device geneve1 removed [ 376.696905][T12488] sctp: [Deprecated]: syz.4.2941 (pid 12488) Use of int in maxseg socket option. [ 376.696905][T12488] Use struct sctp_assoc_value instead [ 376.989178][ T75] team0 (unregistering): Port device team_slave_1 removed [ 377.032264][ T75] team0 (unregistering): Port device team_slave_0 removed [ 377.169082][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 377.320838][ T75] team0 (unregistering): Port device dummy0 removed [ 377.446555][T12475] netlink: 'syz.1.2938': attribute type 10 has an invalid length. [ 377.464083][T12483] netlink: 'syz.4.2941': attribute type 10 has an invalid length. [ 377.563117][T12301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.595061][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.607853][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.671889][T12301] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.794366][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.824916][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.857952][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.865179][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.921130][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.956699][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.986062][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.994712][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.085265][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.093002][T12506] netlink: 'syz.0.2948': attribute type 3 has an invalid length. [ 378.101200][T12506] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2948'. [ 378.150201][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.186163][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.212307][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.247557][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.268217][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.287785][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.322138][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.362966][T12301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.392493][T12301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.423433][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.443558][T12519] syz.4.2954[12519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.443667][T12519] syz.4.2954[12519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.447446][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.514810][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.534170][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.543047][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.598569][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.604909][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.731143][T12530] netlink: 'syz.3.2958': attribute type 10 has an invalid length. [ 378.764486][T12530] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.065839][T12540] netlink: 'syz.1.2960': attribute type 10 has an invalid length. [ 379.173385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.187529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.199048][T12545] netlink: 'syz.3.2962': attribute type 3 has an invalid length. [ 379.209737][T12545] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2962'. [ 379.224502][T12301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.246681][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 379.271386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.281882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.310558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.332198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.373884][T12301] device veth0_vlan entered promiscuous mode [ 379.383320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.402080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.422107][T12301] device veth1_vlan entered promiscuous mode [ 379.463582][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 379.477886][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 379.486222][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.501490][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.528378][T12301] device veth0_macvtap entered promiscuous mode [ 379.547900][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.579903][T12301] device veth1_macvtap entered promiscuous mode [ 379.601569][T12301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.617656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.633064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.657410][T12301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.678066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.716214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.754676][T12301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.807693][T12301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.827726][T12301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.864607][T12301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.890741][T12557] netlink: 'syz.4.2967': attribute type 10 has an invalid length. [ 380.052588][T12574] FAULT_INJECTION: forcing a failure. [ 380.052588][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.071491][T12574] CPU: 1 PID: 12574 Comm: syz.1.2973 Not tainted syzkaller #0 [ 380.078999][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.089076][T12574] Call Trace: [ 380.092381][T12574] [ 380.095324][T12574] dump_stack_lvl+0x188/0x24e [ 380.100031][T12574] ? show_regs_print_info+0x12/0x12 [ 380.105269][T12574] ? load_image+0x400/0x400 [ 380.109825][T12574] ? __lock_acquire+0x7d10/0x7d10 [ 380.114869][T12574] should_fail_ex+0x399/0x4d0 [ 380.119586][T12574] _copy_from_user+0x2c/0x170 [ 380.124300][T12574] generic_map_update_batch+0x4a1/0x810 [ 380.129888][T12574] ? rcu_read_unlock+0xa0/0xa0 [ 380.134675][T12574] ? __fdget+0x17c/0x200 [ 380.138940][T12574] ? rcu_read_unlock+0xa0/0xa0 [ 380.143725][T12574] bpf_map_do_batch+0x466/0x600 [ 380.148617][T12574] __sys_bpf+0x6f7/0x780 [ 380.152884][T12574] ? bpf_link_show_fdinfo+0x380/0x380 [ 380.158298][T12574] ? lock_chain_count+0x20/0x20 [ 380.159088][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.163163][T12574] __x64_sys_bpf+0x78/0x90 [ 380.175380][T12574] do_syscall_64+0x4c/0xa0 [ 380.179825][T12574] ? clear_bhb_loop+0x60/0xb0 [ 380.184524][T12574] ? clear_bhb_loop+0x60/0xb0 [ 380.189230][T12574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.195151][T12574] RIP: 0033:0x7f8295f9c799 [ 380.199589][T12574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.208175][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.219195][T12574] RSP: 002b:00007f82941f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.219222][T12574] RAX: ffffffffffffffda RBX: 00007f8296215fa0 RCX: 00007f8295f9c799 [ 380.219233][T12574] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 380.219243][T12574] RBP: 00007f82941f6090 R08: 0000000000000000 R09: 0000000000000000 [ 380.219254][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.219264][T12574] R13: 00007f8296216038 R14: 00007f8296215fa0 R15: 00007ffde50e9528 [ 380.219288][T12574] [ 380.235116][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.257214][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.295282][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.332066][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.609722][T12589] netlink: 'syz.4.2975': attribute type 10 has an invalid length. [ 381.174580][T12600] netlink: 'syz.0.2980': attribute type 39 has an invalid length. [ 381.224978][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.238410][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.251633][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.259988][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.267860][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 381.276020][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.417834][T12613] netlink: 'syz.2.2986': attribute type 10 has an invalid length. [ 381.520600][T12613] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.563026][T12613] bond0: (slave team0): Enslaving as an active interface with an up link [ 381.733618][T12621] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.929767][T12606] chnl_net:caif_netlink_parms(): no params data found [ 382.232118][T12606] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.260366][T12606] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.300436][T12606] device bridge_slave_0 entered promiscuous mode [ 382.342405][T12606] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.379397][T12606] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.398292][T12606] device bridge_slave_1 entered promiscuous mode [ 382.459490][T12606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.485888][T12606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.559453][T12606] team0: Port device team_slave_0 added [ 382.599710][T12606] team0: Port device team_slave_1 added [ 382.682325][T12659] validate_nla: 2 callbacks suppressed [ 382.682343][T12659] netlink: 'syz.4.2999': attribute type 21 has an invalid length. [ 382.696174][T12659] netlink: 'syz.4.2999': attribute type 6 has an invalid length. [ 382.704833][T12659] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2999'. [ 382.729567][T12606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.746656][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.785433][T12606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.024833][T12606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.032231][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.058840][T12606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.173464][T12665] tipc: Started in network mode [ 383.190015][T12665] tipc: Node identity 9215a268, cluster identity 4711 [ 383.206793][T12665] tipc: Node number set to 2450891368 [ 383.245506][T12606] device hsr_slave_0 entered promiscuous mode [ 383.258627][T12606] device hsr_slave_1 entered promiscuous mode [ 383.274370][T12670] netlink: 'syz.2.3005': attribute type 10 has an invalid length. [ 383.316748][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 383.330666][T12671] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3004'. [ 383.422424][T12673] netlink: 'syz.0.3006': attribute type 10 has an invalid length. [ 383.541551][T12676] netlink: 'syz.4.3007': attribute type 10 has an invalid length. [ 383.713509][T12606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.987989][T12606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.182913][T12606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.362758][T12606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.489048][T12696] netlink: 'syz.0.3015': attribute type 10 has an invalid length. [ 384.741047][T12707] netlink: 'syz.4.3019': attribute type 10 has an invalid length. [ 384.831125][T12706] netlink: 'syz.3.3021': attribute type 39 has an invalid length. [ 384.929020][T12606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.955732][T12606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.967418][T12606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.981636][T12606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.204617][T12606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.248063][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.287383][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.339503][T12606] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.370049][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.396917][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 385.405518][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.435545][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.442775][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.459621][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.483480][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.502328][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.513616][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.520810][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.534418][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.549364][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 385.583839][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 385.601411][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.623438][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.651199][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 385.665883][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 385.706640][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.715957][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.725529][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.738289][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.749838][T12606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 386.008750][T12739] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3032'. [ 386.112772][T12741] netlink: 'syz.2.3033': attribute type 10 has an invalid length. [ 386.261130][T12748] netlink: 'syz.0.3043': attribute type 39 has an invalid length. [ 386.303004][T12750] tipc: Started in network mode [ 386.316893][T12750] tipc: Node identity 9215a268, cluster identity 4711 [ 386.324021][T12750] tipc: Node number set to 2450891368 [ 386.526354][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.544371][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.599075][T12606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.653685][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 386.679103][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.760658][T12766] FAULT_INJECTION: forcing a failure. [ 386.760658][T12766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.788584][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.805123][T12766] CPU: 1 PID: 12766 Comm: syz.3.3041 Not tainted syzkaller #0 [ 386.805610][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.812617][T12766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.812629][T12766] Call Trace: [ 386.812635][T12766] [ 386.812642][T12766] dump_stack_lvl+0x188/0x24e [ 386.812672][T12766] ? show_regs_print_info+0x12/0x12 [ 386.812693][T12766] ? load_image+0x400/0x400 [ 386.812717][T12766] ? __lock_acquire+0x7d10/0x7d10 [ 386.812744][T12766] should_fail_ex+0x399/0x4d0 [ 386.812766][T12766] _copy_from_user+0x2c/0x170 [ 386.812788][T12766] iovec_from_user+0x143/0x360 [ 386.840031][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.841515][T12766] __import_iovec+0x6d/0x500 [ 386.841544][T12766] ? __might_fault+0xa6/0x120 [ 386.848188][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.851297][T12766] import_iovec+0x6f/0xa0 [ 386.871484][T12606] device veth0_vlan entered promiscuous mode [ 386.877575][T12766] ___sys_recvmsg+0x4b6/0x590 [ 386.877608][T12766] ? __sys_recvmsg+0x290/0x290 [ 386.877634][T12766] ? common_file_perm+0x171/0x1c0 [ 386.894063][T12766] ? __fget_files+0x43d/0x4b0 [ 386.894105][T12766] __x64_sys_recvmsg+0x205/0x2e0 [ 386.894135][T12766] ? ___sys_recvmsg+0x590/0x590 [ 386.894171][T12766] ? lockdep_hardirqs_on+0x94/0x140 [ 386.905587][T12606] device veth1_vlan entered promiscuous mode [ 386.909136][T12766] do_syscall_64+0x4c/0xa0 [ 386.909165][T12766] ? clear_bhb_loop+0x60/0xb0 [ 386.909184][T12766] ? clear_bhb_loop+0x60/0xb0 [ 386.909204][T12766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.918966][T12766] RIP: 0033:0x7f5bfb39c799 [ 386.918990][T12766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.919011][T12766] RSP: 002b:00007f5bfc2da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 386.919030][T12766] RAX: ffffffffffffffda RBX: 00007f5bfb615fa0 RCX: 00007f5bfb39c799 [ 386.919042][T12766] RDX: 0000000000002000 RSI: 0000200000001280 RDI: 0000000000000003 [ 386.919054][T12766] RBP: 00007f5bfc2da090 R08: 0000000000000000 R09: 0000000000000000 [ 386.919066][T12766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.919077][T12766] R13: 00007f5bfb616038 R14: 00007f5bfb615fa0 R15: 00007ffe8f30e928 [ 386.919102][T12766] [ 387.040395][T12606] device veth0_macvtap entered promiscuous mode [ 387.063732][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.080867][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.115227][T12606] device veth1_macvtap entered promiscuous mode [ 387.160451][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.174721][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.208619][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.220060][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.237646][T12606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.249669][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.273058][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.353046][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.367733][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.383004][T12606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.391447][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.420754][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.476571][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 387.564059][T12606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.599396][T12606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.611277][T12606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.620516][T12606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.642846][T12788] syz.3.3048 (12788) used obsolete PPPIOCDETACH ioctl [ 387.767874][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.780030][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.791627][T12787] validate_nla: 3 callbacks suppressed [ 387.791681][T12787] netlink: 'syz.2.3049': attribute type 39 has an invalid length. [ 387.853498][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 387.914916][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.934669][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.962968][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 388.064586][ T4278] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 388.321157][T12808] netlink: 'syz.4.3055': attribute type 10 has an invalid length. [ 388.329769][T12808] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3055'. [ 388.934285][T12815] sock: sock_timestamping_bind_phc: sock not bind to device [ 388.976576][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.989351][T12809] netlink: 'syz.4.3055': attribute type 10 has an invalid length. [ 389.005271][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.029400][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.044741][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 389.054931][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 389.062939][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 389.285251][T12823] netlink: 'syz.0.3059': attribute type 10 has an invalid length. [ 389.512381][T12816] chnl_net:caif_netlink_parms(): no params data found [ 389.556769][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 389.592941][T12830] netlink: 'syz.1.3062': attribute type 39 has an invalid length. [ 389.782529][T12835] netlink: 'syz.0.3064': attribute type 39 has an invalid length. [ 389.804786][T12816] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.812968][T12841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3065'. [ 389.878635][T12816] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.935245][T12816] device bridge_slave_0 entered promiscuous mode [ 389.947789][T12816] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.955339][T12816] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.992861][T12816] device bridge_slave_1 entered promiscuous mode [ 390.024021][T12841] netlink: 'syz.1.3065': attribute type 39 has an invalid length. [ 390.294265][T12816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.338354][T12816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.358931][T12861] netlink: 'syz.0.3072': attribute type 39 has an invalid length. [ 390.405188][T12816] team0: Port device team_slave_0 added [ 390.429576][T12816] team0: Port device team_slave_1 added [ 390.444906][T12863] netlink: 'syz.4.3073': attribute type 39 has an invalid length. [ 390.533760][T12867] netlink: 'syz.2.3074': attribute type 10 has an invalid length. [ 390.575444][T12816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.593488][T12816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.622096][T12816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.677929][T12816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.695228][T12816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.771012][T12816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.835710][T12816] device hsr_slave_0 entered promiscuous mode [ 390.844138][T12816] device hsr_slave_1 entered promiscuous mode [ 390.851512][T12816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.860524][T12816] Cannot create hsr debugfs directory [ 391.157032][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 391.632496][T12903] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3089'. [ 392.210861][T12816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 392.244960][T12816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 392.273735][T12816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 392.353302][T12816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.621351][T12816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.722712][T12816] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.758769][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.787367][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.850267][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.863586][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.905306][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.912548][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.952090][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.985395][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.995264][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.002609][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.029532][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.044116][T12938] validate_nla: 7 callbacks suppressed [ 393.044154][T12938] netlink: 'syz.1.3103': attribute type 39 has an invalid length. [ 393.073993][T12945] netlink: 'syz.2.3104': attribute type 10 has an invalid length. [ 393.101973][T12945] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3104'. [ 393.236696][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 393.251807][T12952] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3109'. [ 393.485967][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.494341][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.513188][T12948] netlink: 'syz.2.3104': attribute type 10 has an invalid length. [ 393.550549][T12948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.561142][T12948] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 393.572483][T12954] netlink: 'syz.1.3110': attribute type 10 has an invalid length. [ 393.610659][T12954] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.632348][T12954] bond0: (slave team0): Enslaving as an active interface with an up link [ 393.645527][T12955] netlink: 'syz.4.3109': attribute type 39 has an invalid length. [ 393.807353][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.818239][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.827816][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 393.840760][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 393.852132][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 393.893480][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 393.902391][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 393.922708][T12816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.940493][T12816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 393.996238][T12963] device syzkaller0 entered promiscuous mode [ 394.003860][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 394.018892][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 394.059495][ T4293] device 0 left promiscuous mode [ 394.880349][T12985] sctp: [Deprecated]: syz.0.3119 (pid 12985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.880349][T12985] Use struct sctp_sack_info instead [ 394.965137][T12991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3120'. [ 395.332161][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 397.192618][T13003] netlink: 'syz.2.3126': attribute type 10 has an invalid length. [ 397.396727][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 397.454512][T12816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.464215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.476972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.578059][T13010] netlink: 'syz.1.3129': attribute type 39 has an invalid length. [ 397.614755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.636319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.839293][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.883092][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.903804][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.920725][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.985031][T12816] device veth0_vlan entered promiscuous mode [ 398.103317][T12816] device veth1_vlan entered promiscuous mode [ 398.560681][T13035] netlink: 'syz.1.3139': attribute type 10 has an invalid length. [ 398.575177][T13037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3140'. [ 398.587163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.607305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.764941][T12816] device veth0_macvtap entered promiscuous mode [ 398.826243][ T4293] device bridge_slave_1 left promiscuous mode [ 398.835245][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.850674][ T4293] device bridge_slave_0 left promiscuous mode [ 398.858149][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.884694][ T4293] device veth1_macvtap left promiscuous mode [ 399.320734][ T4293] team0 (unregistering): Port device geneve1 removed [ 399.848899][ T4293] team0 (unregistering): Port device team_slave_1 removed [ 400.197436][ T4293] team0 (unregistering): Port device dummy0 removed [ 400.313277][T12816] device veth1_macvtap entered promiscuous mode [ 400.320948][T13047] netlink: 'syz.1.3144': attribute type 10 has an invalid length. [ 400.334549][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 400.343156][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.351417][T13057] netlink: 'syz.2.3149': attribute type 10 has an invalid length. [ 400.416247][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.431595][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.441955][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.452527][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.467203][T12816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.474935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.489839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.505087][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.527392][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.546354][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.564026][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.582274][T12816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.594950][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.657611][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.712621][T12816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.756689][T12816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.765454][T12816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.841429][T12816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.038166][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.046039][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.087538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 401.121958][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.133880][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.154677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 403.234098][T13105] netlink: 'syz.3.3056': attribute type 10 has an invalid length. [ 403.407028][T13105] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.440426][T13105] bond0: (slave team0): Enslaving as an active interface with an up link [ 403.658723][T13113] netlink: 'syz.0.3169': attribute type 10 has an invalid length. [ 403.901071][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 403.926949][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 403.942879][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 403.953996][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 403.963290][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 403.975598][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.032888][ T4328] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.050155][T13128] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3173'. [ 404.109183][T13128] netlink: 'syz.3.3173': attribute type 10 has an invalid length. [ 404.125428][T13130] netlink: 'syz.2.3175': attribute type 29 has an invalid length. [ 404.318928][T13128] team0: Device wg1 is of different type [ 404.447751][ T4328] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.482947][T13130] netlink: 'syz.2.3175': attribute type 29 has an invalid length. [ 404.514556][T13137] netlink: 'syz.2.3175': attribute type 1 has an invalid length. [ 404.662130][ T4328] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.716664][T13134] netlink: 'syz.2.3175': attribute type 29 has an invalid length. [ 404.924896][T13135] netlink: 'syz.2.3175': attribute type 29 has an invalid length. [ 404.952633][T13153] netlink: 'syz.1.3183': attribute type 10 has an invalid length. [ 404.979113][ T4328] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.352161][T13164] netlink: 'syz.0.3186': attribute type 10 has an invalid length. [ 405.550266][T13177] device bridge_slave_1 left promiscuous mode [ 405.585013][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.617508][T13180] netlink: 'syz.3.3191': attribute type 29 has an invalid length. [ 405.625384][T13180] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3191'. [ 405.646930][T13177] device bridge_slave_0 left promiscuous mode [ 405.653168][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.794463][ T4328] tipc: Left network mode [ 405.829409][T13123] chnl_net:caif_netlink_parms(): no params data found [ 406.036498][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 406.046369][ T4328] device ip6gretap0 left promiscuous mode [ 406.083609][ T4328] : port 1(ip6gretap0) entered disabled state [ 406.670901][T13123] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.703439][T13215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3199'. [ 406.740212][T13123] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.801175][T13123] device bridge_slave_0 entered promiscuous mode [ 406.885020][T13209] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.3199'. [ 406.992022][T13123] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.000985][T13123] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.040190][T13123] device bridge_slave_1 entered promiscuous mode [ 407.351215][T13123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.400329][T13123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.571034][T13123] team0: Port device team_slave_0 added [ 407.609505][T13123] team0: Port device team_slave_1 added [ 407.857565][T13123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.864981][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.983734][T13123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.091622][T13123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.117043][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.126485][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 408.225904][T13123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.431938][T13123] device hsr_slave_0 entered promiscuous mode [ 408.537154][T13123] device hsr_slave_1 entered promiscuous mode [ 408.553126][T13123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.613479][T13123] Cannot create hsr debugfs directory [ 408.889590][T13268] FAULT_INJECTION: forcing a failure. [ 408.889590][T13268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.987823][T13268] CPU: 0 PID: 13268 Comm: syz.1.3217 Not tainted syzkaller #0 [ 408.995341][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.005419][T13268] Call Trace: [ 409.008715][T13268] [ 409.011662][T13268] dump_stack_lvl+0x188/0x24e [ 409.016371][T13268] ? show_regs_print_info+0x12/0x12 [ 409.021592][T13268] ? load_image+0x400/0x400 [ 409.026119][T13268] ? __lock_acquire+0x7d10/0x7d10 [ 409.031170][T13268] should_fail_ex+0x399/0x4d0 [ 409.035875][T13268] _copy_from_user+0x2c/0x170 [ 409.040584][T13268] ___sys_sendmsg+0x1c3/0x360 [ 409.045299][T13268] ? __sys_sendmsg+0x290/0x290 [ 409.050118][T13268] ? __lock_acquire+0x7d10/0x7d10 [ 409.055198][T13268] __se_sys_sendmsg+0x1bb/0x2a0 [ 409.060073][T13268] ? __x64_sys_sendmsg+0x80/0x80 [ 409.065043][T13268] ? lockdep_hardirqs_on+0x94/0x140 [ 409.070255][T13268] do_syscall_64+0x4c/0xa0 [ 409.074685][T13268] ? clear_bhb_loop+0x60/0xb0 [ 409.079376][T13268] ? clear_bhb_loop+0x60/0xb0 [ 409.084070][T13268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.089983][T13268] RIP: 0033:0x7fb89679c799 [ 409.094413][T13268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.114049][T13268] RSP: 002b:00007fb8975c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.122497][T13268] RAX: ffffffffffffffda RBX: 00007fb896a15fa0 RCX: 00007fb89679c799 [ 409.130490][T13268] RDX: 0000000000040810 RSI: 00002000000000c0 RDI: 0000000000000003 [ 409.138483][T13268] RBP: 00007fb8975c2090 R08: 0000000000000000 R09: 0000000000000000 [ 409.146473][T13268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.154454][T13268] R13: 00007fb896a16038 R14: 00007fb896a15fa0 R15: 00007ffd8ce4f238 [ 409.162460][T13268] [ 409.408654][T13270] validate_nla: 3 callbacks suppressed [ 409.408691][T13270] netlink: 'syz.0.3218': attribute type 10 has an invalid length. [ 409.481332][ T4328] device hsr_slave_0 left promiscuous mode [ 409.498779][ T4328] device hsr_slave_1 left promiscuous mode [ 409.558626][ T4328] device veth1_macvtap left promiscuous mode [ 409.583982][ T4328] device veth0_macvtap left promiscuous mode [ 409.652060][T13285] netlink: 'syz.3.3222': attribute type 3 has an invalid length. [ 409.660745][T13286] netlink: 'syz.3.3222': attribute type 3 has an invalid length. [ 409.668695][T13285] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 409.677062][T13286] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 409.897624][ T4328] team0 (unregistering): Port device geneve1 removed [ 409.930523][ T4328] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 410.206772][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 410.273268][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 410.360222][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.592172][ T4328] team0 (unregistering): Port device dummy0 removed [ 410.620582][ T4328] bond0 (unregistering): (slave team0): Releasing backup interface [ 410.655816][ T4328] bond0 (unregistering): Released all slaves [ 410.699105][T13288] netlink: 'syz.3.3222': attribute type 27 has an invalid length. [ 410.699698][T13285] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 410.723289][T13285] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 410.742560][T13285] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 410.787152][T13288] bond0: (slave bond_slave_0): Releasing backup interface [ 410.840880][T13286] netlink: 'syz.3.3222': attribute type 27 has an invalid length. [ 412.277360][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 414.261662][T13307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.293029][T13307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.312169][T13307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.319875][T13307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.342559][T13328] FAULT_INJECTION: forcing a failure. [ 414.342559][T13328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.362492][T13328] CPU: 1 PID: 13328 Comm: syz.0.3230 Not tainted syzkaller #0 [ 414.370016][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.380087][T13328] Call Trace: [ 414.383370][T13328] [ 414.386293][T13328] dump_stack_lvl+0x188/0x24e [ 414.390966][T13328] ? show_regs_print_info+0x12/0x12 [ 414.396169][T13328] ? load_image+0x400/0x400 [ 414.400689][T13328] ? __lock_acquire+0x7d10/0x7d10 [ 414.405705][T13328] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 414.411956][T13328] should_fail_ex+0x399/0x4d0 [ 414.416646][T13328] _copy_from_user+0x2c/0x170 [ 414.421332][T13328] __sys_bpf+0x2ea/0x780 [ 414.425575][T13328] ? bpf_link_show_fdinfo+0x380/0x380 [ 414.430946][T13328] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 414.437200][T13328] __x64_sys_bpf+0x78/0x90 [ 414.441619][T13328] do_syscall_64+0x4c/0xa0 [ 414.446029][T13328] ? clear_bhb_loop+0x60/0xb0 [ 414.450690][T13328] ? clear_bhb_loop+0x60/0xb0 [ 414.455442][T13328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.461338][T13328] RIP: 0033:0x7f4147d9c799 [ 414.465758][T13328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.485445][T13328] RSP: 002b:00007f4148c84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.493863][T13328] RAX: ffffffffffffffda RBX: 00007f4148015fa0 RCX: 00007f4147d9c799 [ 414.501830][T13328] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 414.509806][T13328] RBP: 00007f4148c84090 R08: 0000000000000000 R09: 0000000000000000 [ 414.517880][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.525845][T13328] R13: 00007f4148016038 R14: 00007f4148015fa0 R15: 00007ffdbbdcf3b8 [ 414.533823][T13328] [ 414.983827][T13340] netlink: 'syz.1.3234': attribute type 10 has an invalid length. [ 415.036011][T13123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.123690][T13123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.178266][T13123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.251951][T13123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 415.549239][T13123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.600290][T13361] netlink: 'syz.1.3241': attribute type 10 has an invalid length. [ 416.227202][T13361] team0: Port device dummy0 added [ 416.259599][T13123] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.275502][T13366] netlink: 'syz.1.3241': attribute type 10 has an invalid length. [ 416.285810][T13370] netlink: 'syz.2.3242': attribute type 13 has an invalid length. [ 416.298203][T13370] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3242'. [ 416.311499][T13370] erspan0: refused to change device tx_queue_len [ 416.320608][T13370] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 416.352577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 416.363032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.416558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 416.452486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.509592][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.516786][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.563207][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 416.585457][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.625171][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.632672][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.670135][T13388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3247'. [ 416.689190][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.702532][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 416.728206][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 416.793470][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 416.818624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 416.849521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 416.899930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.938151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 416.973391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.003851][T13402] netlink: 'syz.0.3251': attribute type 10 has an invalid length. [ 417.021240][T13123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.045465][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.059989][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 417.090556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 417.117548][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.142243][T13409] sctp: [Deprecated]: syz.2.3252 (pid 13409) Use of int in maxseg socket option. [ 417.142243][T13409] Use struct sctp_assoc_value instead [ 417.166861][T13405] netlink: 'syz.2.3252': attribute type 10 has an invalid length. [ 417.221362][T13405] team0: Port device geneve1 added [ 417.228046][T13408] netlink: 'syz.3.3253': attribute type 21 has an invalid length. [ 419.545439][T13123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.603879][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 419.622730][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 419.769656][T13454] netlink: 'syz.2.3262': attribute type 27 has an invalid length. [ 419.838011][T13454] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3262'. [ 420.151487][T13469] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3264'. [ 420.313403][T13476] netlink: 'syz.1.3264': attribute type 16 has an invalid length. [ 420.348583][T13476] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3264'. [ 420.448419][T13480] netlink: 'syz.0.3267': attribute type 10 has an invalid length. [ 420.678109][T13485] netlink: 'syz.2.3268': attribute type 10 has an invalid length. [ 420.841986][T13489] netlink: 'syz.1.3269': attribute type 10 has an invalid length. [ 421.217819][T13499] device syzkaller0 entered promiscuous mode [ 421.297043][T13507] FAULT_INJECTION: forcing a failure. [ 421.297043][T13507] name failslab, interval 1, probability 0, space 0, times 0 [ 421.324015][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 421.344741][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.396979][T13507] CPU: 0 PID: 13507 Comm: syz.3.3275 Not tainted syzkaller #0 [ 421.404503][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.414599][T13507] Call Trace: [ 421.417899][T13507] [ 421.420845][T13507] dump_stack_lvl+0x188/0x24e [ 421.425577][T13507] ? show_regs_print_info+0x12/0x12 [ 421.430811][T13507] ? load_image+0x400/0x400 [ 421.435337][T13507] ? __might_sleep+0xd0/0xd0 [ 421.439951][T13507] ? __lock_acquire+0x7d10/0x7d10 [ 421.445010][T13507] should_fail_ex+0x399/0x4d0 [ 421.449724][T13507] should_failslab+0x5/0x20 [ 421.454255][T13507] slab_pre_alloc_hook+0x59/0x310 [ 421.459321][T13507] kmem_cache_alloc_node+0x5a/0x320 [ 421.464549][T13507] ? __dev_queue_xmit+0x26b/0x37c0 [ 421.469685][T13507] ? __alloc_skb+0xfc/0x7e0 [ 421.474220][T13507] __alloc_skb+0xfc/0x7e0 [ 421.478611][T13507] netlink_ack+0x372/0x1170 [ 421.483153][T13507] ? perf_trace_lock+0xf8/0x390 [ 421.488033][T13507] ? __copy_skb_header+0x3ba/0x4f0 [ 421.493349][T13507] ? netlink_dump+0xd00/0xd00 [ 421.498059][T13507] ? __skb_clone+0x480/0x790 [ 421.502691][T13507] netlink_rcv_skb+0x280/0x450 [ 421.507483][T13507] ? rtnetlink_bind+0x80/0x80 [ 421.512192][T13507] ? netlink_ack+0x1170/0x1170 [ 421.516992][T13507] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.522221][T13507] netlink_unicast+0x74d/0x8d0 [ 421.527027][T13507] netlink_sendmsg+0x8ad/0xbd0 [ 421.531828][T13507] ? netlink_getsockopt+0x550/0x550 [ 421.537052][T13507] ? aa_sock_msg_perm+0x94/0x150 [ 421.542018][T13507] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 421.547329][T13507] ? security_socket_sendmsg+0x7c/0xa0 [ 421.552820][T13507] ? netlink_getsockopt+0x550/0x550 [ 421.558024][T13507] ____sys_sendmsg+0x5be/0x970 [ 421.562799][T13507] ? __sys_sendmsg_sock+0x30/0x30 [ 421.567817][T13507] ? __import_iovec+0x315/0x500 [ 421.572662][T13507] ? import_iovec+0x6f/0xa0 [ 421.577190][T13507] ___sys_sendmsg+0x2a2/0x360 [ 421.581868][T13507] ? __sys_sendmsg+0x290/0x290 [ 421.586649][T13507] ? __lock_acquire+0x7d10/0x7d10 [ 421.591683][T13507] __se_sys_sendmsg+0x1bb/0x2a0 [ 421.596617][T13507] ? ct_nmi_exit+0x145/0x1c0 [ 421.601203][T13507] ? __x64_sys_sendmsg+0x80/0x80 [ 421.606144][T13507] ? lockdep_hardirqs_on+0x94/0x140 [ 421.611332][T13507] do_syscall_64+0x4c/0xa0 [ 421.615740][T13507] ? clear_bhb_loop+0x60/0xb0 [ 421.620410][T13507] ? clear_bhb_loop+0x60/0xb0 [ 421.625081][T13507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.630966][T13507] RIP: 0033:0x7f8e4279c799 [ 421.635371][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.655055][T13507] RSP: 002b:00007f8e435f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.663458][T13507] RAX: ffffffffffffffda RBX: 00007f8e42a15fa0 RCX: 00007f8e4279c799 [ 421.671422][T13507] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 421.679382][T13507] RBP: 00007f8e435f6090 R08: 0000000000000000 R09: 0000000000000000 [ 421.687343][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.695302][T13507] R13: 00007f8e42a16038 R14: 00007f8e42a15fa0 R15: 00007ffd12db8578 [ 421.703275][T13507] [ 424.602976][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.612360][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.624783][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.632793][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.644238][T13123] device veth0_vlan entered promiscuous mode [ 424.651007][T13541] netlink: 'syz.3.3282': attribute type 10 has an invalid length. [ 424.696207][T13123] device veth1_vlan entered promiscuous mode [ 424.782233][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 424.815037][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.849508][T13123] device veth0_macvtap entered promiscuous mode [ 424.972776][T13123] device veth1_macvtap entered promiscuous mode [ 425.011080][T13556] netlink: 'syz.3.3286': attribute type 10 has an invalid length. [ 425.123384][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.168264][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.189698][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.200312][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.211967][T13123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.044983][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 427.053156][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 427.061331][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 427.070059][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.082742][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.093648][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.103997][T13123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.121038][T13123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.133859][T13123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.150071][T13567] netlink: 'syz.1.3290': attribute type 21 has an invalid length. [ 427.159060][T13567] netlink: 'syz.1.3290': attribute type 6 has an invalid length. [ 427.167320][T13567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3290'. [ 427.238223][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 427.257952][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 427.299393][T13123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.316785][T13123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.338671][T13123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.355217][T13123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.360712][T13579] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3294'. [ 427.384657][T13580] netlink: 'syz.1.3293': attribute type 10 has an invalid length. [ 427.609189][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.640046][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.686066][T13586] netlink: 'syz.3.3296': attribute type 10 has an invalid length. [ 427.697623][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 427.779635][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.798633][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.808671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 427.999032][T13594] netlink: 'syz.2.3300': attribute type 10 has an invalid length. [ 428.274387][T13605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.296863][T13605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.353204][T13605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.372077][T13605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.551683][T13609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3306'. [ 428.571733][T13609] device caif0 entered promiscuous mode [ 428.589297][T13611] netlink: 'syz.4.3304': attribute type 21 has an invalid length. [ 428.642402][T13611] netlink: 'syz.4.3304': attribute type 6 has an invalid length. [ 428.735059][T13611] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3304'. [ 428.855980][T13619] netlink: 'syz.2.3309': attribute type 10 has an invalid length. [ 429.447236][T13628] netlink: 'syz.3.3312': attribute type 10 has an invalid length. [ 429.787542][ T4328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.882168][T13638] netlink: 'syz.4.3315': attribute type 10 has an invalid length. [ 429.984328][T13638] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.005657][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.016348][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.025592][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.036460][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.044937][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 430.052487][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.084294][T13638] bond0: (slave team0): Enslaving as an active interface with an up link [ 430.119681][ T4328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.269776][ T4328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.273944][T13653] FAULT_INJECTION: forcing a failure. [ 430.273944][T13653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.304740][T13653] CPU: 1 PID: 13653 Comm: syz.2.3319 Not tainted syzkaller #0 [ 430.312268][T13653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 430.322339][T13653] Call Trace: [ 430.322356][T13653] [ 430.322366][T13653] dump_stack_lvl+0x188/0x24e [ 430.322404][T13653] ? show_regs_print_info+0x12/0x12 [ 430.322431][T13653] ? load_image+0x400/0x400 [ 430.322459][T13653] ? __lock_acquire+0x7d10/0x7d10 [ 430.322487][T13653] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 430.353775][T13653] should_fail_ex+0x399/0x4d0 [ 430.358469][T13653] _copy_from_user+0x2c/0x170 [ 430.363157][T13653] ___sys_sendmsg+0x1c3/0x360 [ 430.367869][T13653] ? __sys_sendmsg+0x290/0x290 [ 430.372663][T13653] ? __lock_acquire+0x7d10/0x7d10 [ 430.377730][T13653] __se_sys_sendmsg+0x1bb/0x2a0 [ 430.382585][T13653] ? __x64_sys_sendmsg+0x80/0x80 [ 430.387544][T13653] ? lockdep_hardirqs_on+0x94/0x140 [ 430.392755][T13653] do_syscall_64+0x4c/0xa0 [ 430.397172][T13653] ? clear_bhb_loop+0x60/0xb0 [ 430.401850][T13653] ? clear_bhb_loop+0x60/0xb0 [ 430.406620][T13653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.412513][T13653] RIP: 0033:0x7f526bb9c799 [ 430.416932][T13653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.436538][T13653] RSP: 002b:00007f526c971028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.444960][T13653] RAX: ffffffffffffffda RBX: 00007f526be15fa0 RCX: 00007f526bb9c799 [ 430.452941][T13653] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 430.460939][T13653] RBP: 00007f526c971090 R08: 0000000000000000 R09: 0000000000000000 [ 430.468938][T13653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.476904][T13653] R13: 00007f526be16038 R14: 00007f526be15fa0 R15: 00007fff82ae7548 [ 430.484903][T13653] [ 430.702445][T13660] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3321'. [ 430.798018][T13646] chnl_net:caif_netlink_parms(): no params data found [ 430.903193][ T4328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.176255][T13675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.186034][T13675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.247701][T13675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.255628][T13675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.736285][T13681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3326'. [ 431.877100][T13646] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.906659][T13646] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.976865][T13646] device bridge_slave_0 entered promiscuous mode [ 432.007628][T13646] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.120319][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 432.196769][T13646] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.239754][T13646] device bridge_slave_1 entered promiscuous mode [ 432.390840][ T4328] device 0 left promiscuous mode [ 432.458483][T13646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.504469][T13646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.564969][ T4328] tipc: Left network mode [ 433.090380][T13646] team0: Port device team_slave_0 added [ 433.199818][T13703] validate_nla: 4 callbacks suppressed [ 433.199837][T13703] netlink: 'syz.2.3332': attribute type 10 has an invalid length. [ 433.308562][T13646] team0: Port device team_slave_1 added [ 434.018199][T13646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.025222][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.121941][T13646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.196797][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 434.392680][T13646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.405060][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.477218][T13646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.530001][T13729] netlink: 'syz.2.3348': attribute type 10 has an invalid length. [ 434.608246][T13646] device hsr_slave_0 entered promiscuous mode [ 434.615373][T13646] device hsr_slave_1 entered promiscuous mode [ 434.643943][T13646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.651925][T13646] Cannot create hsr debugfs directory [ 434.784534][ T4282] Bluetooth: hci4: unexpected event 0x16 length: 15 > 6 [ 434.987634][T13747] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3345'. [ 435.046072][T13747] device caif0 entered promiscuous mode [ 435.152102][T13754] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3346'. [ 435.388069][T13763] netlink: 'syz.4.3351': attribute type 12 has an invalid length. [ 435.422191][T13763] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3351'. [ 435.583907][T13768] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3352'. [ 435.829454][T13781] netlink: 'syz.3.3356': attribute type 10 has an invalid length. [ 436.116690][ T4328] device hsr_slave_0 left promiscuous mode [ 436.127305][ T4328] device bridge_slave_1 left promiscuous mode [ 436.156837][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.169223][ T4328] device bridge_slave_0 left promiscuous mode [ 436.191122][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.222020][T13796] FAULT_INJECTION: forcing a failure. [ 436.222020][T13796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.252175][ T4328] device veth1_macvtap left promiscuous mode [ 436.259002][T13796] CPU: 0 PID: 13796 Comm: syz.4.3360 Not tainted syzkaller #0 [ 436.266498][T13796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.276581][T13796] Call Trace: [ 436.279872][T13796] [ 436.282811][T13796] dump_stack_lvl+0x188/0x24e [ 436.287523][T13796] ? show_regs_print_info+0x12/0x12 [ 436.292753][T13796] ? load_image+0x400/0x400 [ 436.297284][T13796] ? __lock_acquire+0x7d10/0x7d10 [ 436.302317][T13796] should_fail_ex+0x399/0x4d0 [ 436.306991][T13796] _copy_from_user+0x2c/0x170 [ 436.311665][T13796] perf_copy_attr+0x174/0x850 [ 436.316363][T13796] __se_sys_perf_event_open+0xf5/0x1ec0 [ 436.321942][T13796] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 436.327595][T13796] ? syscall_enter_from_user_mode+0x2a/0x80 [ 436.333483][T13796] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 436.339216][T13796] do_syscall_64+0x4c/0xa0 [ 436.343653][T13796] ? clear_bhb_loop+0x60/0xb0 [ 436.348329][T13796] ? clear_bhb_loop+0x60/0xb0 [ 436.353008][T13796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.358910][T13796] RIP: 0033:0x7f513859c799 [ 436.363406][T13796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.383006][T13796] RSP: 002b:00007f5139388028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 436.391413][T13796] RAX: ffffffffffffffda RBX: 00007f5138815fa0 RCX: 00007f513859c799 [ 436.399376][T13796] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000080 [ 436.407346][T13796] RBP: 00007f5139388090 R08: 0000000000000008 R09: 0000000000000000 [ 436.415308][T13796] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 436.423271][T13796] R13: 00007f5138816038 R14: 00007f5138815fa0 R15: 00007fffd9075cb8 [ 436.431246][T13796] [ 436.441031][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 436.633549][ T4328] team0 (unregistering): Port device geneve1 removed [ 436.661744][ T4328] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 436.924155][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 436.973212][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 437.018930][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.286345][ T4328] team0 (unregistering): Port device dummy0 removed [ 437.310465][ T4328] bond0 (unregistering): (slave team0): Releasing backup interface [ 437.344770][ T4328] bond0 (unregistering): Released all slaves [ 437.444275][T13793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3359'. [ 437.459008][T13803] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3363'. [ 437.468591][T13803] device caif0 entered promiscuous mode [ 437.474485][T13805] netlink: 'syz.3.3372': attribute type 10 has an invalid length. [ 437.594739][T13646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 437.629753][T13646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 437.680277][T13646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 437.738213][T13646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.118295][T13646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.153462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 438.189893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 438.232495][T13646] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.301216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 438.331607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 438.372558][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.379760][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.413055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 438.445364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 438.495490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 438.516831][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 438.600495][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.607694][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.662935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 438.698634][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 438.726601][T13838] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3375'. [ 438.763055][T13845] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3377'. [ 438.805355][T13845] device caif0 entered promiscuous mode [ 438.835501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 438.932096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 439.242525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 439.267312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 439.343545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 439.363322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 439.425643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 439.608060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 439.760671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 439.949117][T13866] netlink: 'syz.2.3380': attribute type 10 has an invalid length. [ 440.060593][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.067044][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.147179][T13898] netlink: 'syz.4.3388': attribute type 10 has an invalid length. [ 442.234478][T13900] netlink: 'syz.1.3389': attribute type 10 has an invalid length. [ 442.450641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.476332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.563449][T13646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.709487][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 442.758329][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.090954][T13927] netlink: 'syz.1.3395': attribute type 10 has an invalid length. [ 443.120014][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 443.142417][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.204446][T13932] netlink: 'syz.3.3397': attribute type 10 has an invalid length. [ 443.297594][T13646] device veth0_vlan entered promiscuous mode [ 443.314959][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.330320][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.533529][ T4282] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 443.597522][T13646] device veth1_vlan entered promiscuous mode [ 443.656793][ T4328] device bridge_slave_1 left promiscuous mode [ 443.663812][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.688048][ T4328] device bridge_slave_0 left promiscuous mode [ 443.694506][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.773602][ T4328] device veth1_macvtap left promiscuous mode [ 443.806347][ T4328] device veth1_vlan left promiscuous mode [ 443.950685][T13950] sctp: [Deprecated]: syz.3.3401 (pid 13950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.950685][T13950] Use struct sctp_sack_info instead [ 444.257260][ T4328] team0 (unregistering): Port device geneve1 removed [ 444.342516][ T4328] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 444.858369][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 444.902111][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 444.949761][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.290269][ T4328] team0 (unregistering): Port device dummy0 removed [ 445.327784][ T4328] team0 (unregistering): Port device bond0 removed [ 445.372392][ T4328] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 445.381535][ T4328] bond0 (unregistering): Released all slaves [ 445.511243][T13961] netlink: 'syz.3.3405': attribute type 10 has an invalid length. [ 445.613999][T13971] netlink: 'syz.2.3407': attribute type 10 has an invalid length. [ 445.683818][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 445.733216][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 445.777982][T13646] device veth0_macvtap entered promiscuous mode [ 445.810864][T13646] device veth1_macvtap entered promiscuous mode [ 445.890387][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.908401][ T4282] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 445.909860][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.946184][T13646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.966353][T13646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.982942][T13646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.994859][T13646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.003135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.013645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.023381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.034325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.054350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.077634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 446.105134][T13646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.126336][T13646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.159288][T13646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.190876][T13646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.400706][T13997] netlink: 'syz.1.3412': attribute type 10 has an invalid length. [ 446.436748][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.456799][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.534021][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 446.563581][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.580205][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.597214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 446.869882][T14015] netlink: 'syz.4.3418': attribute type 39 has an invalid length. [ 447.031877][T14020] netlink: 'syz.3.3419': attribute type 10 has an invalid length. [ 447.085057][ T4282] Bluetooth: hci5: unexpected event 0x0b length: 15 > 11 [ 447.144517][T14024] netlink: 'syz.0.3422': attribute type 10 has an invalid length. [ 447.229004][T14024] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.284531][T14024] bond0: (slave team0): Enslaving as an active interface with an up link [ 447.307471][T14031] netlink: 'syz.1.3423': attribute type 10 has an invalid length. [ 447.610530][T14042] netlink: 'syz.3.3428': attribute type 13 has an invalid length. [ 447.664503][T14042] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3428'. [ 447.710112][T14045] netlink: 'syz.3.3428': attribute type 10 has an invalid length. [ 447.805162][T14045] team0: Port device netdevsim0 added [ 447.882290][T14048] device aaaaaaaaaaaaaaa entered promiscuous mode [ 448.610040][ T4282] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 448.618128][T14066] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3437'. [ 448.663821][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.685414][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.707795][T14066] device batadv_slave_1 entered promiscuous mode [ 448.999939][T14074] netlink: 'syz.3.3438': attribute type 10 has an invalid length. [ 449.857530][ T4282] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 450.169993][T14114] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3455'. [ 450.572548][T14112] validate_nla: 4 callbacks suppressed [ 450.572573][T14112] netlink: 'syz.0.3454': attribute type 10 has an invalid length. [ 450.600378][T14122] netlink: 'syz.3.3455': attribute type 10 has an invalid length. [ 450.618713][T14126] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 451.760794][T14146] netlink: 'syz.0.3467': attribute type 21 has an invalid length. [ 451.782058][T14146] netlink: 'syz.0.3467': attribute type 1 has an invalid length. [ 451.930593][T14147] tap0: tun_chr_ioctl cmd 1074025677 [ 451.936116][T14147] tap0: linktype set to 823 [ 451.946820][T14147] netlink: 'syz.0.3467': attribute type 10 has an invalid length. [ 451.955092][T14147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3467'. [ 451.969854][T14147] device team0 entered promiscuous mode [ 451.984709][T14147] device team_slave_0 entered promiscuous mode [ 452.026852][T14147] device team_slave_1 entered promiscuous mode [ 452.035097][T14147] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.045112][T14147] bond0: (slave team0): Releasing backup interface [ 452.079347][T14147] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 452.424092][T14159] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3471'. [ 452.572918][T14158] device aaaaaaaaaaaaaaa entered promiscuous mode [ 452.828091][T14172] netlink: 'syz.2.3472': attribute type 39 has an invalid length. [ 453.128633][T14183] netlink: 'syz.4.3477': attribute type 4 has an invalid length. [ 453.154466][T14183] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3477'. [ 453.692208][T14183] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 453.738924][T14196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3482'. [ 453.774738][T14200] netlink: 'syz.1.3484': attribute type 39 has an invalid length. [ 454.215297][T14215] netlink: 'syz.4.3490': attribute type 39 has an invalid length. [ 455.043502][T14261] netlink: 'syz.1.3508': attribute type 39 has an invalid length. [ 455.185641][ T4282] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 455.238740][T14274] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3514'. [ 455.484472][T14279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3517'. [ 455.540026][T14284] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3519'. [ 455.636179][T14288] validate_nla: 1 callbacks suppressed [ 455.636223][T14288] netlink: 'syz.0.3521': attribute type 2 has an invalid length. [ 455.658812][T14288] netlink: 'syz.0.3521': attribute type 3 has an invalid length. [ 455.685883][T14288] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3521'. [ 456.110827][T14311] netlink: 'syz.1.3525': attribute type 21 has an invalid length. [ 456.180724][T14311] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3525'. [ 456.227738][T14311] netlink: 'syz.1.3525': attribute type 4 has an invalid length. [ 456.235610][T14311] netlink: 'syz.1.3525': attribute type 5 has an invalid length. [ 456.244363][T14311] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3525'. [ 456.264208][T14317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3529'. [ 456.360691][T14317] device caif0 entered promiscuous mode [ 456.573079][T14324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3531'. [ 456.694859][T14328] netlink: 'syz.4.3533': attribute type 21 has an invalid length. [ 456.734845][T14328] netlink: 'syz.4.3533': attribute type 1 has an invalid length. [ 456.874296][T14328] tap0: tun_chr_ioctl cmd 1074025677 [ 456.896755][T14328] tap0: linktype set to 823 [ 456.949698][T14328] netlink: 'syz.4.3533': attribute type 10 has an invalid length. [ 456.977445][T14328] device team0 entered promiscuous mode [ 457.014012][T14328] device team_slave_0 entered promiscuous mode [ 457.043916][T14328] device team_slave_1 entered promiscuous mode [ 457.067935][T14328] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.189596][T14328] bond0: (slave team0): Releasing backup interface [ 457.236742][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 457.319614][T14328] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 457.715742][T14352] netlink: 'syz.0.3540': attribute type 10 has an invalid length. [ 457.754055][T14352] device team0 left promiscuous mode [ 457.782948][T14352] device team_slave_0 left promiscuous mode [ 457.809901][T14352] device team_slave_1 left promiscuous mode [ 457.866040][T14352] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.933537][T14352] bond0: (slave team0): Enslaving as an active interface with an up link [ 458.042833][T14359] netlink: 'syz.1.3545': attribute type 39 has an invalid length. [ 459.195267][T14399] __nla_validate_parse: 3 callbacks suppressed [ 459.195305][T14399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3561'. [ 459.489991][T14407] device team0 left promiscuous mode [ 459.495350][T14407] device team_slave_0 left promiscuous mode [ 459.517666][T14407] device team_slave_1 left promiscuous mode [ 459.619167][T14407] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.627706][T14407] bond0: (slave team0): Enslaving as an active interface with an up link [ 459.666532][T14411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3566'. [ 459.993214][T14427] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3572'. [ 460.445322][T14442] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3579'. [ 460.517242][T14442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.640004][T14444] validate_nla: 11 callbacks suppressed [ 460.640021][T14444] netlink: 'syz.4.3576': attribute type 39 has an invalid length. [ 460.989654][T14444] device hsr_slave_1 left promiscuous mode [ 461.041880][T14451] netlink: 'syz.1.3591': attribute type 39 has an invalid length. [ 461.064287][T14457] netlink: 'syz.2.3583': attribute type 10 has an invalid length. [ 461.117385][T14456] netlink: 'syz.0.3582': attribute type 10 has an invalid length. [ 461.295615][T14460] netlink: 'syz.3.3584': attribute type 19 has an invalid length. [ 461.304978][T14460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3584'. [ 461.455028][T14467] netlink: 'syz.1.3585': attribute type 2 has an invalid length. [ 461.489238][T14467] netlink: 'syz.1.3585': attribute type 1 has an invalid length. [ 461.687220][T14479] netlink: 'syz.4.3590': attribute type 10 has an invalid length. [ 461.979562][T14483] netlink: 'syz.1.3593': attribute type 10 has an invalid length. [ 461.985792][T14481] delete_channel: no stack [ 462.391113][T14495] netlink: 'syz.0.3596': attribute type 39 has an invalid length. [ 462.603416][T14503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3599'. [ 462.714769][T14510] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3602'. [ 462.824208][T14513] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3603'. [ 462.986234][T14515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3605'. [ 463.050168][T14517] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3604'. [ 463.074280][T14517] team0: Device wg1 is up. Set it down before adding it as a team port [ 464.351539][T14562] bond0: (slave team0): Error: Slave device does not support XDP [ 464.467620][T14571] __nla_validate_parse: 2 callbacks suppressed [ 464.467684][T14571] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3624'. [ 464.469287][T14570] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3625'. [ 464.509525][T14571] IPv6: Can't replace route, no match found [ 465.005667][T14585] FAULT_INJECTION: forcing a failure. [ 465.005667][T14585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.035541][T14585] CPU: 0 PID: 14585 Comm: syz.0.3641 Not tainted syzkaller #0 [ 465.043064][T14585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.053142][T14585] Call Trace: [ 465.056433][T14585] [ 465.059374][T14585] dump_stack_lvl+0x188/0x24e [ 465.064063][T14585] ? show_regs_print_info+0x12/0x12 [ 465.069265][T14585] ? load_image+0x400/0x400 [ 465.073765][T14585] ? __lock_acquire+0x7d10/0x7d10 [ 465.078797][T14585] should_fail_ex+0x399/0x4d0 [ 465.083467][T14585] _copy_from_user+0x2c/0x170 [ 465.088150][T14585] __copy_msghdr+0x3b7/0x580 [ 465.092745][T14585] ___sys_sendmsg+0x210/0x360 [ 465.097441][T14585] ? __sys_sendmsg+0x290/0x290 [ 465.102244][T14585] ? __lock_acquire+0x7d10/0x7d10 [ 465.107297][T14585] __se_sys_sendmsg+0x1bb/0x2a0 [ 465.112150][T14585] ? __x64_sys_sendmsg+0x80/0x80 [ 465.117097][T14585] ? lockdep_hardirqs_on+0x94/0x140 [ 465.122318][T14585] do_syscall_64+0x4c/0xa0 [ 465.126743][T14585] ? clear_bhb_loop+0x60/0xb0 [ 465.131421][T14585] ? clear_bhb_loop+0x60/0xb0 [ 465.136099][T14585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.141989][T14585] RIP: 0033:0x7fdb5519c799 [ 465.146402][T14585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.166006][T14585] RSP: 002b:00007fdb5600e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.174413][T14585] RAX: ffffffffffffffda RBX: 00007fdb55415fa0 RCX: 00007fdb5519c799 [ 465.182378][T14585] RDX: 0000000000040810 RSI: 00002000000000c0 RDI: 0000000000000003 [ 465.190439][T14585] RBP: 00007fdb5600e090 R08: 0000000000000000 R09: 0000000000000000 [ 465.198491][T14585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.206457][T14585] R13: 00007fdb55416038 R14: 00007fdb55415fa0 R15: 00007ffd20ad48d8 [ 465.214451][T14585] [ 465.235560][T14589] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3633'. [ 465.694597][T14602] validate_nla: 13 callbacks suppressed [ 465.694644][T14602] netlink: 'syz.1.3638': attribute type 39 has an invalid length. [ 465.981998][T14604] netlink: 'syz.2.3640': attribute type 6 has an invalid length. [ 466.717802][T14645] netlink: 'syz.3.3654': attribute type 39 has an invalid length. [ 467.332630][T14663] netlink: 'syz.2.3661': attribute type 10 has an invalid length. [ 467.617249][T14669] FAULT_INJECTION: forcing a failure. [ 467.617249][T14669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.636734][T14669] CPU: 1 PID: 14669 Comm: syz.0.3662 Not tainted syzkaller #0 [ 467.644247][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.654471][T14669] Call Trace: [ 467.657764][T14669] [ 467.660717][T14669] dump_stack_lvl+0x188/0x24e [ 467.665431][T14669] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 467.671796][T14669] ? show_regs_print_info+0x12/0x12 [ 467.677025][T14669] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 467.683220][T14669] should_fail_ex+0x399/0x4d0 [ 467.687928][T14669] strncpy_from_user+0x32/0x350 [ 467.692806][T14669] bpf_prog_load+0x1f3/0x1560 [ 467.697504][T14669] ? lock_acquire+0x225/0x4a0 [ 467.702206][T14669] ? map_freeze+0x390/0x390 [ 467.706727][T14669] ? __might_fault+0xa6/0x120 [ 467.711443][T14669] ? __might_fault+0xa6/0x120 [ 467.716310][T14669] ? __might_fault+0xc2/0x120 [ 467.720999][T14669] ? __might_fault+0xa6/0x120 [ 467.725776][T14669] ? bpf_lsm_bpf+0x5/0x10 [ 467.730122][T14669] ? security_bpf+0x7a/0xa0 [ 467.734641][T14669] __sys_bpf+0x5b8/0x780 [ 467.738904][T14669] ? bpf_link_show_fdinfo+0x380/0x380 [ 467.744317][T14669] ? lock_chain_count+0x20/0x20 [ 467.749217][T14669] __x64_sys_bpf+0x78/0x90 [ 467.753654][T14669] do_syscall_64+0x4c/0xa0 [ 467.758098][T14669] ? clear_bhb_loop+0x60/0xb0 [ 467.762790][T14669] ? clear_bhb_loop+0x60/0xb0 [ 467.767486][T14669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.773406][T14669] RIP: 0033:0x7fdb5519c799 [ 467.777828][T14669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.797451][T14669] RSP: 002b:00007fdb55fed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.805884][T14669] RAX: ffffffffffffffda RBX: 00007fdb55416090 RCX: 00007fdb5519c799 [ 467.813871][T14669] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 467.821856][T14669] RBP: 00007fdb55fed090 R08: 0000000000000000 R09: 0000000000000000 [ 467.829840][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.837822][T14669] R13: 00007fdb55416128 R14: 00007fdb55416090 R15: 00007ffd20ad48d8 [ 467.845820][T14669] [ 470.301488][T14677] netlink: 'syz.0.3665': attribute type 12 has an invalid length. [ 470.310650][T14677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3665'. [ 470.964801][T14682] netlink: 'syz.4.3668': attribute type 39 has an invalid length. [ 471.133059][T14691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.170155][T14693] netlink: 'syz.3.3671': attribute type 27 has an invalid length. [ 471.182029][T14691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.191422][T14693] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3671'. [ 471.212073][T14691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.222680][T14691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.368347][T14691] bond0: (slave batadv0): Releasing backup interface [ 471.564958][T14695] netlink: 'syz.2.3681': attribute type 21 has an invalid length. [ 471.598260][T14695] netlink: 'syz.2.3681': attribute type 6 has an invalid length. [ 471.652219][T14695] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3681'. [ 471.709833][T14701] netlink: 'syz.4.3673': attribute type 10 has an invalid length. [ 471.888801][T14701] team0: Port device geneve1 added [ 471.977479][T14716] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3679'. [ 472.101909][T14721] netlink: 'syz.3.3682': attribute type 3 has an invalid length. [ 472.156566][T14721] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3682'. [ 472.493503][T14737] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3687'. [ 472.515513][T14735] netlink: 'syz.4.3689': attribute type 27 has an invalid length. [ 472.538099][T14733] netlink: 'syz.1.3688': attribute type 10 has an invalid length. [ 472.548952][T14735] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3689'. [ 472.721999][T14748] netlink: 'syz.2.3692': attribute type 10 has an invalid length. [ 472.945079][T14753] netlink: 'syz.0.3694': attribute type 10 has an invalid length. [ 473.130765][T14753] team0: Port device geneve1 added [ 473.168577][T14763] sctp: [Deprecated]: syz.0.3694 (pid 14763) Use of int in maxseg socket option. [ 473.168577][T14763] Use struct sctp_assoc_value instead [ 473.188272][T14760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3696'. [ 473.436912][T14772] team0: Port device netdevsim0 removed [ 473.467964][T14769] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3702'. [ 473.714556][T14784] device syzkaller0 entered promiscuous mode [ 475.742809][T14802] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3714'. [ 475.752900][T14803] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3712'. [ 476.091766][T14803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.107710][T14803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.121837][T14803] bond0 (unregistering): (slave team0): Releasing backup interface [ 476.131007][T14803] bond0 (unregistering): Released all slaves [ 476.153602][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3717'. [ 476.164225][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3717'. [ 476.176649][T14814] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3717'. [ 476.185917][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3717'. [ 476.198890][T14814] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3717'. [ 476.211998][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3717'. [ 476.223724][T14814] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3717'. [ 476.565212][T14829] validate_nla: 5 callbacks suppressed [ 476.565230][T14829] netlink: 'syz.3.3720': attribute type 3 has an invalid length. [ 476.673597][T14829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3720'. [ 476.781396][T14832] netlink: 'syz.1.3723': attribute type 10 has an invalid length. [ 476.819886][T14834] netlink: 'syz.4.3724': attribute type 10 has an invalid length. [ 477.641062][T14849] netlink: 'syz.3.3729': attribute type 39 has an invalid length. [ 477.944611][T14866] netlink: 'syz.3.3736': attribute type 10 has an invalid length. [ 478.440266][T14888] FAULT_INJECTION: forcing a failure. [ 478.440266][T14888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.466591][T14888] CPU: 1 PID: 14888 Comm: syz.3.3745 Not tainted syzkaller #0 [ 478.474117][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.484205][T14888] Call Trace: [ 478.487522][T14888] [ 478.490484][T14888] dump_stack_lvl+0x188/0x24e [ 478.495213][T14888] ? show_regs_print_info+0x12/0x12 [ 478.500453][T14888] ? load_image+0x400/0x400 [ 478.505012][T14888] ? __lock_acquire+0x7d10/0x7d10 [ 478.510091][T14888] should_fail_ex+0x399/0x4d0 [ 478.514814][T14888] _copy_from_user+0x2c/0x170 [ 478.519535][T14888] __copy_msghdr+0x3b7/0x580 [ 478.524172][T14888] ___sys_sendmsg+0x210/0x360 [ 478.528895][T14888] ? __sys_sendmsg+0x290/0x290 [ 478.533730][T14888] ? __lock_acquire+0x7d10/0x7d10 [ 478.538834][T14888] __se_sys_sendmsg+0x1bb/0x2a0 [ 478.543720][T14888] ? __x64_sys_sendmsg+0x80/0x80 [ 478.548729][T14888] ? lockdep_hardirqs_on+0x94/0x140 [ 478.553962][T14888] do_syscall_64+0x4c/0xa0 [ 478.558417][T14888] ? clear_bhb_loop+0x60/0xb0 [ 478.563128][T14888] ? clear_bhb_loop+0x60/0xb0 [ 478.567844][T14888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.573771][T14888] RIP: 0033:0x7f8e4279c799 [ 478.578219][T14888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.597855][T14888] RSP: 002b:00007f8e435f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.606299][T14888] RAX: ffffffffffffffda RBX: 00007f8e42a15fa0 RCX: 00007f8e4279c799 [ 478.614273][T14888] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 478.622244][T14888] RBP: 00007f8e435f6090 R08: 0000000000000000 R09: 0000000000000000 [ 478.630225][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.638197][T14888] R13: 00007f8e42a16038 R14: 00007f8e42a15fa0 R15: 00007ffd12db8578 [ 478.646191][T14888] [ 478.708830][T14892] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 478.835962][T14891] netlink: 'syz.4.3747': attribute type 39 has an invalid length. [ 480.293477][T14924] netlink: 'syz.4.3756': attribute type 10 has an invalid length. [ 480.326560][T14925] device wlan1 entered promiscuous mode [ 480.376814][T14925] netlink: 'syz.0.3758': attribute type 29 has an invalid length. [ 480.439151][T14925] netlink: 'syz.0.3758': attribute type 29 has an invalid length. [ 480.476847][T14929] netlink: 'syz.0.3758': attribute type 29 has an invalid length. [ 481.051966][T14961] __nla_validate_parse: 5 callbacks suppressed [ 481.052006][T14961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3773'. [ 481.151289][T14965] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3774'. [ 481.725951][T14981] FAULT_INJECTION: forcing a failure. [ 481.725951][T14981] name failslab, interval 1, probability 0, space 0, times 0 [ 481.740293][T14981] CPU: 1 PID: 14981 Comm: syz.1.3781 Not tainted syzkaller #0 [ 481.747791][T14981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.757878][T14981] Call Trace: [ 481.761175][T14981] [ 481.764122][T14981] dump_stack_lvl+0x188/0x24e [ 481.768826][T14981] ? show_regs_print_info+0x12/0x12 [ 481.774060][T14981] ? load_image+0x400/0x400 [ 481.778596][T14981] ? __might_sleep+0xd0/0xd0 [ 481.783216][T14981] ? __lock_acquire+0x7d10/0x7d10 [ 481.788284][T14981] should_fail_ex+0x399/0x4d0 [ 481.792989][T14981] should_failslab+0x5/0x20 [ 481.795749][T14984] validate_nla: 4 callbacks suppressed [ 481.795782][T14984] netlink: 'syz.4.3782': attribute type 10 has an invalid length. [ 481.797500][T14981] slab_pre_alloc_hook+0x59/0x310 [ 481.797530][T14981] kmem_cache_alloc_node+0x5a/0x320 [ 481.797547][T14981] ? perf_event_alloc+0x154/0x21b0 [ 481.797574][T14981] perf_event_alloc+0x154/0x21b0 [ 481.797600][T14981] ? _raw_spin_unlock+0x24/0x40 [ 481.797618][T14981] ? alloc_fd+0x58f/0x630 [ 481.797638][T14981] ? find_lively_task_by_vpid+0x19/0x290 [ 481.797657][T14981] ? find_lively_task_by_vpid+0x19/0x290 [ 481.797680][T14981] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 481.797711][T14981] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 481.797748][T14981] ? lockdep_hardirqs_on+0x94/0x140 [ 481.797765][T14981] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 481.797791][T14981] do_syscall_64+0x4c/0xa0 [ 481.797811][T14981] ? clear_bhb_loop+0x60/0xb0 [ 481.797830][T14981] ? clear_bhb_loop+0x60/0xb0 [ 481.797851][T14981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.797871][T14981] RIP: 0033:0x7fb89679c799 [ 481.797889][T14981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.797904][T14981] RSP: 002b:00007fb8975c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 481.797924][T14981] RAX: ffffffffffffffda RBX: 00007fb896a15fa0 RCX: 00007fb89679c799 [ 481.797937][T14981] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000080 [ 481.797950][T14981] RBP: 00007fb8975c2090 R08: 0000000000000008 R09: 0000000000000000 [ 481.797962][T14981] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 481.797974][T14981] R13: 00007fb896a16038 R14: 00007fb896a15fa0 R15: 00007ffd8ce4f238 [ 481.798000][T14981] [ 482.204070][T14992] netlink: 'syz.0.3785': attribute type 10 has an invalid length. [ 482.290208][T14998] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3787'. [ 482.592395][T15012] netlink: 'syz.0.3791': attribute type 10 has an invalid length. [ 483.084052][T15033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3801'. [ 483.209835][T15038] netlink: 2639 bytes leftover after parsing attributes in process `syz.2.3803'. [ 483.222582][T15037] netlink: 'syz.3.3802': attribute type 10 has an invalid length. [ 483.314221][T15038] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3803'. [ 483.383997][T15038] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 483.636204][T15049] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3808'. [ 483.672406][T15049] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 483.758425][T15059] FAULT_INJECTION: forcing a failure. [ 483.758425][T15059] name failslab, interval 1, probability 0, space 0, times 0 [ 483.780188][T15059] CPU: 0 PID: 15059 Comm: syz.1.3811 Not tainted syzkaller #0 [ 483.787741][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.797817][T15059] Call Trace: [ 483.801107][T15059] [ 483.804046][T15059] dump_stack_lvl+0x188/0x24e [ 483.808754][T15059] ? show_regs_print_info+0x12/0x12 [ 483.813984][T15059] ? load_image+0x400/0x400 [ 483.818525][T15059] ? verify_lock_unused+0x140/0x140 [ 483.823760][T15059] should_fail_ex+0x399/0x4d0 [ 483.828473][T15059] should_failslab+0x5/0x20 [ 483.833015][T15059] slab_pre_alloc_hook+0x59/0x310 [ 483.838074][T15059] kmem_cache_alloc+0x56/0x2f0 [ 483.842878][T15059] ? skb_clone+0x1e7/0x370 [ 483.847337][T15059] skb_clone+0x1e7/0x370 [ 483.851614][T15059] __netlink_deliver_tap+0x3ed/0x800 [ 483.856942][T15059] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.862176][T15059] netlink_deliver_tap+0x19c/0x1b0 [ 483.867318][T15059] netlink_unicast+0x728/0x8d0 [ 483.872122][T15059] netlink_sendmsg+0x8ad/0xbd0 [ 483.876924][T15059] ? netlink_getsockopt+0x550/0x550 [ 483.882185][T15059] ? aa_sock_msg_perm+0x94/0x150 [ 483.887150][T15059] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 483.892543][T15059] ? security_socket_sendmsg+0x7c/0xa0 [ 483.898038][T15059] ? netlink_getsockopt+0x550/0x550 [ 483.903271][T15059] ____sys_sendmsg+0x5be/0x970 [ 483.908078][T15059] ? __sys_sendmsg_sock+0x30/0x30 [ 483.913741][T15059] ? __import_iovec+0x315/0x500 [ 483.918626][T15059] ? import_iovec+0x6f/0xa0 [ 483.923143][T15059] ___sys_sendmsg+0x2a2/0x360 [ 483.927948][T15059] ? __sys_sendmsg+0x290/0x290 [ 483.932735][T15059] ? __lock_acquire+0x7d10/0x7d10 [ 483.937949][T15059] __se_sys_sendmsg+0x1bb/0x2a0 [ 483.942983][T15059] ? __x64_sys_sendmsg+0x80/0x80 [ 483.947932][T15059] ? lockdep_hardirqs_on+0x94/0x140 [ 483.953299][T15059] do_syscall_64+0x4c/0xa0 [ 483.957708][T15059] ? clear_bhb_loop+0x60/0xb0 [ 483.962376][T15059] ? clear_bhb_loop+0x60/0xb0 [ 483.967044][T15059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.972946][T15059] RIP: 0033:0x7fb89679c799 [ 483.977352][T15059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.996954][T15059] RSP: 002b:00007fb8975c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.005364][T15059] RAX: ffffffffffffffda RBX: 00007fb896a15fa0 RCX: 00007fb89679c799 [ 484.013327][T15059] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 484.021290][T15059] RBP: 00007fb8975c2090 R08: 0000000000000000 R09: 0000000000000000 [ 484.029259][T15059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.037222][T15059] R13: 00007fb896a16038 R14: 00007fb896a15fa0 R15: 00007ffd8ce4f238 [ 484.045202][T15059] [ 484.260062][T15074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3816'. [ 484.307180][T15078] netlink: 'syz.1.3818': attribute type 10 has an invalid length. [ 484.316218][T15078] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.323747][T15078] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.384226][T15078] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.391482][T15078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.399046][T15078] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.406203][T15078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.423512][T15078] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 484.434006][T15082] netlink: 'syz.0.3819': attribute type 39 has an invalid length. [ 484.483511][T15084] netlink: 'syz.2.3820': attribute type 10 has an invalid length. [ 484.824531][T15098] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3824'. [ 484.854381][T15098] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 485.087452][T15106] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3831'. [ 485.246670][T15113] netlink: 'syz.0.3834': attribute type 10 has an invalid length. [ 485.321118][T15108] netlink: 'syz.1.3833': attribute type 39 has an invalid length. [ 485.997538][T15147] netlink: 'syz.0.3850': attribute type 10 has an invalid length. [ 486.463772][T15167] FAULT_INJECTION: forcing a failure. [ 486.463772][T15167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.499594][T15167] CPU: 0 PID: 15167 Comm: syz.3.3857 Not tainted syzkaller #0 [ 486.507122][T15167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.517212][T15167] Call Trace: [ 486.520544][T15167] [ 486.523492][T15167] dump_stack_lvl+0x188/0x24e [ 486.528204][T15167] ? show_regs_print_info+0x12/0x12 [ 486.533514][T15167] ? load_image+0x400/0x400 [ 486.538041][T15167] ? __lock_acquire+0x7d10/0x7d10 [ 486.543091][T15167] ? snprintf+0xe5/0x140 [ 486.547340][T15167] should_fail_ex+0x399/0x4d0 [ 486.552020][T15167] _copy_to_user+0x2c/0x130 [ 486.556531][T15167] simple_read_from_buffer+0xe3/0x150 [ 486.561922][T15167] proc_fail_nth_read+0x1a6/0x220 [ 486.566947][T15167] ? proc_fault_inject_write+0x310/0x310 [ 486.572579][T15167] ? fsnotify_perm+0x248/0x550 [ 486.577340][T15167] ? proc_fault_inject_write+0x310/0x310 [ 486.582968][T15167] vfs_read+0x2de/0xa00 [ 486.587125][T15167] ? kernel_read+0x1e0/0x1e0 [ 486.591721][T15167] ? __fget_files+0x28/0x4b0 [ 486.596329][T15167] ? __fget_files+0x28/0x4b0 [ 486.600963][T15167] ? __fget_files+0x43d/0x4b0 [ 486.605655][T15167] ? __fdget_pos+0x2ae/0x360 [ 486.610245][T15167] ? ksys_read+0x71/0x250 [ 486.614595][T15167] ksys_read+0x14c/0x250 [ 486.618838][T15167] ? vfs_write+0xa30/0xa30 [ 486.623251][T15167] ? lockdep_hardirqs_on+0x94/0x140 [ 486.628446][T15167] do_syscall_64+0x4c/0xa0 [ 486.632900][T15167] ? clear_bhb_loop+0x60/0xb0 [ 486.637578][T15167] ? clear_bhb_loop+0x60/0xb0 [ 486.642250][T15167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.648143][T15167] RIP: 0033:0x7f8e4275cfce [ 486.652551][T15167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 486.672166][T15167] RSP: 002b:00007f8e435f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 486.680664][T15167] RAX: ffffffffffffffda RBX: 00007f8e435f66c0 RCX: 00007f8e4275cfce [ 486.688630][T15167] RDX: 000000000000000f RSI: 00007f8e435f60a0 RDI: 0000000000000004 [ 486.696592][T15167] RBP: 00007f8e435f6090 R08: 0000000000000000 R09: 0000000000000000 [ 486.704558][T15167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.712519][T15167] R13: 00007f8e42a16038 R14: 00007f8e42a15fa0 R15: 00007ffd12db8578 [ 486.720507][T15167] [ 487.250259][T15185] validate_nla: 1 callbacks suppressed [ 487.250276][T15185] netlink: 'syz.4.3863': attribute type 39 has an invalid length. [ 487.667957][T15197] FAULT_INJECTION: forcing a failure. [ 487.667957][T15197] name failslab, interval 1, probability 0, space 0, times 0 [ 487.689124][T15197] CPU: 1 PID: 15197 Comm: syz.0.3865 Not tainted syzkaller #0 [ 487.696637][T15197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.706722][T15197] Call Trace: [ 487.710010][T15197] [ 487.712945][T15197] dump_stack_lvl+0x188/0x24e [ 487.717644][T15197] ? show_regs_print_info+0x12/0x12 [ 487.722882][T15197] ? load_image+0x400/0x400 [ 487.727412][T15197] ? __might_sleep+0xd0/0xd0 [ 487.732025][T15197] ? __lock_acquire+0x7d10/0x7d10 [ 487.737082][T15197] should_fail_ex+0x399/0x4d0 [ 487.741781][T15197] should_failslab+0x5/0x20 [ 487.746312][T15197] slab_pre_alloc_hook+0x59/0x310 [ 487.751365][T15197] ? lockdep_hardirqs_on+0x94/0x140 [ 487.756589][T15197] kmem_cache_alloc+0x56/0x2f0 [ 487.761382][T15197] ? getname_flags+0xb7/0x500 [ 487.766078][T15197] getname_flags+0xb7/0x500 [ 487.770602][T15197] do_sys_openat2+0xdd/0x4b0 [ 487.775212][T15197] ? do_sys_open+0xe0/0xe0 [ 487.779636][T15197] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 487.785793][T15197] __x64_sys_openat+0x135/0x160 [ 487.790644][T15197] do_syscall_64+0x4c/0xa0 [ 487.795058][T15197] ? clear_bhb_loop+0x60/0xb0 [ 487.799741][T15197] ? clear_bhb_loop+0x60/0xb0 [ 487.804415][T15197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.810305][T15197] RIP: 0033:0x7fdb5519c799 [ 487.814715][T15197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.834353][T15197] RSP: 002b:00007fdb5600e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 487.842767][T15197] RAX: ffffffffffffffda RBX: 00007fdb55415fa0 RCX: 00007fdb5519c799 [ 487.850735][T15197] RDX: 0000000000200002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 487.858704][T15197] RBP: 00007fdb5600e090 R08: 0000000000000000 R09: 0000000000000000 [ 487.866668][T15197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.874639][T15197] R13: 00007fdb55416038 R14: 00007fdb55415fa0 R15: 00007ffd20ad48d8 [ 487.882616][T15197] [ 488.049354][T15205] netlink: 'syz.2.3869': attribute type 10 has an invalid length. [ 488.215739][T15211] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 488.369934][T15222] netlink: 'syz.3.3875': attribute type 10 has an invalid length. [ 488.408624][T15222] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3875'. [ 488.442353][T15230] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.3878'. [ 488.481140][T15230] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3878'. [ 488.534115][T15230] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 488.569091][T15230] CPU: 1 PID: 15230 Comm: syz.1.3878 Not tainted syzkaller #0 [ 488.576623][T15230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.586702][T15230] Call Trace: [ 488.590000][T15230] [ 488.592947][T15230] dump_stack_lvl+0x188/0x24e [ 488.597652][T15230] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 488.603848][T15230] ? show_regs_print_info+0x12/0x12 [ 488.609076][T15230] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 488.615283][T15230] sysfs_warn_dup+0x8a/0xa0 [ 488.619825][T15230] sysfs_do_create_link_sd+0xc0/0x110 [ 488.625245][T15230] device_add+0x7ed/0xfb0 [ 488.629628][T15230] wiphy_register+0x1d9f/0x2ac0 [ 488.634528][T15230] ? cfg80211_event_work+0x40/0x40 [ 488.639671][T15230] ? minstrel_ht_alloc+0x894/0xa20 [ 488.644837][T15230] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 488.650951][T15230] ieee80211_register_hw+0x2d00/0x39f0 [ 488.656474][T15230] ? ieee80211_register_hw+0xee1/0x39f0 [ 488.662095][T15230] ? ieee80211_register_hw+0xee1/0x39f0 [ 488.667692][T15230] ? ieee80211_tasklet_handler+0x20/0x20 [ 488.673386][T15230] ? memset+0x1e/0x40 [ 488.677399][T15230] ? __hrtimer_init+0x186/0x270 [ 488.682277][T15230] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 488.688048][T15230] hwsim_new_radio_nl+0xafa/0xce0 [ 488.693128][T15230] genl_family_rcv_msg_doit+0x22a/0x330 [ 488.698695][T15230] ? end_current_label_crit_section+0x170/0x170 [ 488.704942][T15230] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 488.710839][T15230] ? bpf_lsm_capable+0x5/0x10 [ 488.715514][T15230] ? security_capable+0x85/0xb0 [ 488.720367][T15230] genl_rcv_msg+0x604/0x790 [ 488.724877][T15230] ? genl_bind+0x360/0x360 [ 488.729288][T15230] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 488.735635][T15230] netlink_rcv_skb+0x1fb/0x450 [ 488.740403][T15230] ? genl_bind+0x360/0x360 [ 488.744817][T15230] ? netlink_ack+0x1170/0x1170 [ 488.749586][T15230] ? down_read+0x1a8/0x2d0 [ 488.754014][T15230] genl_rcv+0x24/0x40 [ 488.758000][T15230] netlink_unicast+0x74d/0x8d0 [ 488.762779][T15230] netlink_sendmsg+0x8ad/0xbd0 [ 488.767555][T15230] ? netlink_getsockopt+0x550/0x550 [ 488.772757][T15230] ? aa_sock_msg_perm+0x94/0x150 [ 488.777696][T15230] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 488.782978][T15230] ? security_socket_sendmsg+0x7c/0xa0 [ 488.788438][T15230] ? netlink_getsockopt+0x550/0x550 [ 488.793637][T15230] ____sys_sendmsg+0x5be/0x970 [ 488.798411][T15230] ? __sys_sendmsg_sock+0x30/0x30 [ 488.803433][T15230] ? __import_iovec+0x315/0x500 [ 488.808288][T15230] ? import_iovec+0x6f/0xa0 [ 488.812787][T15230] ___sys_sendmsg+0x2a2/0x360 [ 488.817469][T15230] ? __sys_sendmsg+0x290/0x290 [ 488.822249][T15230] ? ktime_get_real_ts64+0x440/0x440 [ 488.827552][T15230] __se_sys_sendmsg+0x1bb/0x2a0 [ 488.832399][T15230] ? ct_nmi_exit+0x145/0x1c0 [ 488.836985][T15230] ? __x64_sys_sendmsg+0x80/0x80 [ 488.841939][T15230] ? lockdep_hardirqs_on+0x94/0x140 [ 488.847136][T15230] do_syscall_64+0x4c/0xa0 [ 488.851553][T15230] ? clear_bhb_loop+0x60/0xb0 [ 488.856226][T15230] ? clear_bhb_loop+0x60/0xb0 [ 488.860899][T15230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.866791][T15230] RIP: 0033:0x7fb89679c799 [ 488.871201][T15230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.890804][T15230] RSP: 002b:00007fb8975c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.899213][T15230] RAX: ffffffffffffffda RBX: 00007fb896a15fa0 RCX: 00007fb89679c799 [ 488.907196][T15230] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 488.915189][T15230] RBP: 00007fb896832c99 R08: 0000000000000000 R09: 0000000000000000 [ 488.923160][T15230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.931123][T15230] R13: 00007fb896a16038 R14: 00007fb896a15fa0 R15: 00007ffd8ce4f238 [ 488.939105][T15230] [ 489.325398][T15250] netlink: 'syz.2.3883': attribute type 39 has an invalid length. [ 489.459222][T15255] netlink: 'syz.0.3887': attribute type 39 has an invalid length. [ 489.965546][T15255] device hsr_slave_1 left promiscuous mode [ 490.031002][T15264] netlink: 'syz.4.3888': attribute type 10 has an invalid length. [ 490.062230][T15264] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 490.083547][T15267] netlink: 'syz.1.3890': attribute type 10 has an invalid length. [ 490.117409][T15267] bond0: (slave team0): Releasing backup interface [ 490.180387][T15267] team0 (unregistering): Port device team_slave_0 removed [ 490.205019][T15267] team0 (unregistering): Port device team_slave_1 removed [ 490.238311][T15267] team0 (unregistering): Port device dummy0 removed [ 490.292289][T15273] netlink: 'syz.2.3892': attribute type 10 has an invalid length. [ 490.300363][T15273] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3892'. [ 490.731273][T15291] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.3899'. [ 490.785362][T15295] netlink: 'syz.4.3902': attribute type 4 has an invalid length. [ 490.794044][T15291] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3899'. [ 490.808580][T15295] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3902'. [ 490.841884][T15291] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 490.881814][T15291] CPU: 0 PID: 15291 Comm: syz.0.3899 Not tainted syzkaller #0 [ 490.889340][T15291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.899425][T15291] Call Trace: [ 490.902692][T15291] [ 490.905623][T15291] dump_stack_lvl+0x188/0x24e [ 490.910303][T15291] ? show_regs_print_info+0x12/0x12 [ 490.915508][T15291] ? load_image+0x400/0x400 [ 490.920012][T15291] sysfs_warn_dup+0x8a/0xa0 [ 490.924511][T15291] sysfs_do_create_link_sd+0xc0/0x110 [ 490.929882][T15291] device_add+0x7ed/0xfb0 [ 490.934229][T15291] wiphy_register+0x1d9f/0x2ac0 [ 490.939098][T15291] ? cfg80211_event_work+0x40/0x40 [ 490.944210][T15291] ? minstrel_ht_alloc+0x894/0xa20 [ 490.949343][T15291] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 490.955453][T15291] ieee80211_register_hw+0x2d00/0x39f0 [ 490.960952][T15291] ? lockdep_hardirqs_on+0x94/0x140 [ 490.966188][T15291] ? ieee80211_register_hw+0xee1/0x39f0 [ 490.971768][T15291] ? ieee80211_register_hw+0xee1/0x39f0 [ 490.977380][T15291] ? ieee80211_tasklet_handler+0x20/0x20 [ 490.983156][T15291] ? memset+0x1e/0x40 [ 490.987149][T15291] ? __hrtimer_init+0x186/0x270 [ 490.992101][T15291] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 490.997949][T15291] hwsim_new_radio_nl+0xafa/0xce0 [ 491.003060][T15291] genl_family_rcv_msg_doit+0x22a/0x330 [ 491.008618][T15291] ? end_current_label_crit_section+0x170/0x170 [ 491.014869][T15291] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 491.020902][T15291] ? bpf_lsm_capable+0x5/0x10 [ 491.025597][T15291] ? security_capable+0x85/0xb0 [ 491.030457][T15291] genl_rcv_msg+0x604/0x790 [ 491.034972][T15291] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 491.041163][T15291] ? genl_bind+0x360/0x360 [ 491.045664][T15291] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 491.052006][T15291] netlink_rcv_skb+0x1fb/0x450 [ 491.056774][T15291] ? genl_bind+0x360/0x360 [ 491.061201][T15291] ? netlink_ack+0x1170/0x1170 [ 491.065976][T15291] ? down_read+0x1a8/0x2d0 [ 491.070418][T15291] genl_rcv+0x24/0x40 [ 491.074413][T15291] netlink_unicast+0x74d/0x8d0 [ 491.079199][T15291] netlink_sendmsg+0x8ad/0xbd0 [ 491.083988][T15291] ? netlink_getsockopt+0x550/0x550 [ 491.089201][T15291] ? aa_sock_msg_perm+0x94/0x150 [ 491.094145][T15291] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 491.099444][T15291] ? security_socket_sendmsg+0x7c/0xa0 [ 491.104908][T15291] ? netlink_getsockopt+0x550/0x550 [ 491.110160][T15291] ____sys_sendmsg+0x5be/0x970 [ 491.114933][T15291] ? __sys_sendmsg_sock+0x30/0x30 [ 491.119950][T15291] ? __import_iovec+0x315/0x500 [ 491.124802][T15291] ? import_iovec+0x6f/0xa0 [ 491.129301][T15291] ___sys_sendmsg+0x2a2/0x360 [ 491.133984][T15291] ? __sys_sendmsg+0x290/0x290 [ 491.138777][T15291] __se_sys_sendmsg+0x1bb/0x2a0 [ 491.143641][T15291] ? ct_nmi_exit+0x145/0x1c0 [ 491.148259][T15291] ? __x64_sys_sendmsg+0x80/0x80 [ 491.153225][T15291] ? lockdep_hardirqs_on+0x94/0x140 [ 491.158422][T15291] do_syscall_64+0x4c/0xa0 [ 491.162844][T15291] ? clear_bhb_loop+0x60/0xb0 [ 491.167512][T15291] ? clear_bhb_loop+0x60/0xb0 [ 491.172181][T15291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.178069][T15291] RIP: 0033:0x7fdb5519c799 [ 491.182498][T15291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.202200][T15291] RSP: 002b:00007fdb5600e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.210616][T15291] RAX: ffffffffffffffda RBX: 00007fdb55415fa0 RCX: 00007fdb5519c799 [ 491.218584][T15291] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 491.226550][T15291] RBP: 00007fdb55232c99 R08: 0000000000000000 R09: 0000000000000000 [ 491.234513][T15291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.238412][ T4278] ------------[ cut here ]------------ [ 491.242468][T15291] R13: 00007fdb55416038 R14: 00007fdb55415fa0 R15: 00007ffd20ad48d8 [ 491.242507][T15291] [ 491.248208][ T4278] WARNING: CPU: 1 PID: 4278 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 491.269002][ T4278] Modules linked in: [ 491.272929][ T4278] CPU: 1 PID: 4278 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 491.280541][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.290658][ T4278] Workqueue: hci5 hci_conn_timeout [ 491.295827][ T4278] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 491.301542][ T4278] Code: 1f 8e e8 24 11 9f f8 48 8b 35 05 8b eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 ff 1f f8 e8 01 26 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 491.321236][ T4278] RSP: 0018:ffffc90003e17c08 EFLAGS: 00010293 [ 491.321584][T15302] FAULT_INJECTION: forcing a failure. [ 491.321584][T15302] name failslab, interval 1, probability 0, space 0, times 0 [ 491.327368][ T4278] RAX: ffffffff89344caf RBX: ffff88807ae12330 RCX: ffff88802d100000 [ 491.327387][ T4278] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 491.327400][ T4278] RBP: 00000000ffffffff R08: ffff88807ae12013 R09: 1ffff1100f5c2402 [ 491.327414][ T4278] R10: dffffc0000000000 R11: ffffed100f5c2403 R12: dffffc0000000000 [ 491.327429][ T4278] R13: dffffc0000000000 R14: ffff88807ae12000 R15: ffff88807ae12010 [ 491.327444][ T4278] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 491.327463][ T4278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.327478][ T4278] CR2: 00007f526bbe9e80 CR3: 000000005cbfb000 CR4: 00000000003506e0 [ 491.327495][ T4278] DR0: 0000000000000000 DR1: 0000000000008d24 DR2: 0000000000000000 [ 491.327509][ T4278] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 491.327522][ T4278] Call Trace: [ 491.327530][ T4278] [ 491.327542][ T4278] ? process_one_work+0x7b0/0x1160 [ 491.327569][ T4278] process_one_work+0x8a2/0x1160 [ 491.340461][T15304] netlink: 'syz.2.3903': attribute type 39 has an invalid length. [ 491.348308][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 491.348359][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 491.348382][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 491.348402][ T4278] ? kthread_data+0x4b/0xc0 [ 491.348433][ T4278] worker_thread+0xaa2/0x1270 [ 491.399438][T15302] CPU: 0 PID: 15302 Comm: syz.3.3905 Not tainted syzkaller #0 [ 491.404102][ T4278] kthread+0x29d/0x330 [ 491.411981][T15302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.411994][T15302] Call Trace: [ 491.412002][T15302] [ 491.412010][T15302] dump_stack_lvl+0x188/0x24e [ 491.412039][T15302] ? show_regs_print_info+0x12/0x12 [ 491.420029][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 491.423278][T15302] ? load_image+0x400/0x400 [ 491.426191][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 491.431281][T15302] ? __might_sleep+0xd0/0xd0 [ 491.431300][T15302] ? __lock_acquire+0x7d10/0x7d10 [ 491.436231][ T4278] ret_from_fork+0x1f/0x30 [ 491.444009][T15302] should_fail_ex+0x399/0x4d0 [ 491.444035][T15302] should_failslab+0x5/0x20 [ 491.449687][ T4278] [ 491.454640][T15302] slab_pre_alloc_hook+0x59/0x310 [ 491.460201][ T4278] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 491.464647][T15302] ? __request_module+0x338/0xa00 [ 491.464672][T15302] __kmem_cache_alloc_node+0x4f/0x260 [ 491.464694][T15302] ? __request_module+0x338/0xa00 [ 491.464713][T15302] __kmalloc_node_track_caller+0x9e/0x230 [ 491.464740][T15302] kstrdup+0x37/0x70 [ 491.464762][T15302] __request_module+0x338/0xa00 [ 491.464791][T15302] ? copy_regset_to_user+0x1e0/0x1e0 [ 491.464830][T15302] ? __kmem_cache_alloc_node+0x140/0x260 [ 491.464848][T15302] ? netlink_dump+0x1ee/0xd00 [ 491.464867][T15302] ? rcu_is_watching+0x11/0xa0 [ 491.464888][T15302] ? netlink_dump+0x1ee/0xd00 [ 491.464910][T15302] __inet_diag_dump+0x173/0x380 [ 491.464936][T15302] netlink_dump+0x6a3/0xd00 [ 491.464968][T15302] ? netlink_lookup+0x200/0x200 [ 491.464993][T15302] ? __inet_diag_dump_start+0x805/0x970 [ 491.465017][T15302] __netlink_dump_start+0x537/0x6f0 [ 491.465047][T15302] inet_diag_handler_cmd+0x1d3/0x2b0 [ 491.465067][T15302] ? inet_diag_unregister+0xb0/0xb0 [ 491.465087][T15302] ? do_raw_spin_lock+0x128/0x2f0 [ 491.465101][T15302] ? inet_diag_handler_get_info+0xba0/0xba0 [ 491.465117][T15302] ? inet_diag_dump_start+0x20/0x20 [ 491.465132][T15302] ? inet_diag_dump+0x50/0x50 [ 491.465150][T15302] ? sock_diag_lock_handler+0x19/0x280 [ 491.465166][T15302] ? sock_diag_lock_handler+0x19/0x280 [ 491.465182][T15302] ? inet_diag_unregister+0xb0/0xb0 [ 491.465201][T15302] sock_diag_rcv_msg+0x3cc/0x5f0 [ 491.465221][T15302] netlink_rcv_skb+0x1fb/0x450 [ 491.465241][T15302] ? sock_diag_bind+0xa0/0xa0 [ 491.465259][T15302] ? netlink_ack+0x1170/0x1170 [ 491.465288][T15302] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.465311][T15302] sock_diag_rcv+0x26/0x40 [ 491.465326][T15302] netlink_unicast+0x74d/0x8d0 [ 491.465357][T15302] netlink_sendmsg+0x8ad/0xbd0 [ 491.465386][T15302] ? netlink_getsockopt+0x550/0x550 [ 491.465409][T15302] ? aa_sock_msg_perm+0x94/0x150 [ 491.465428][T15302] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 491.465444][T15302] ? security_socket_sendmsg+0x7c/0xa0 [ 491.465467][T15302] ? netlink_getsockopt+0x550/0x550 [ 491.465487][T15302] ____sys_sendmsg+0x5be/0x970 [ 491.465517][T15302] ? __sys_sendmsg_sock+0x30/0x30 [ 491.465536][T15302] ? __import_iovec+0x315/0x500 [ 491.465560][T15302] ? import_iovec+0x6f/0xa0 [ 491.465580][T15302] ___sys_sendmsg+0x2a2/0x360 [ 491.465606][T15302] ? __sys_sendmsg+0x290/0x290 [ 491.465647][T15302] ? __lock_acquire+0x7d10/0x7d10 [ 491.465691][T15302] __se_sys_sendmsg+0x1bb/0x2a0 [ 491.465710][T15302] ? ct_nmi_exit+0x145/0x1c0 [ 491.465728][T15302] ? __x64_sys_sendmsg+0x80/0x80 [ 491.465763][T15302] ? lockdep_hardirqs_on+0x94/0x140 [ 491.465782][T15302] do_syscall_64+0x4c/0xa0 [ 491.465801][T15302] ? clear_bhb_loop+0x60/0xb0 [ 491.465818][T15302] ? clear_bhb_loop+0x60/0xb0 [ 491.465837][T15302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.465855][T15302] RIP: 0033:0x7f8e4279c799 [ 491.465872][T15302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.465885][T15302] RSP: 002b:00007f8e435f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.465901][T15302] RAX: ffffffffffffffda RBX: 00007f8e42a15fa0 RCX: 00007f8e4279c799 [ 491.465913][T15302] RDX: 0000000020004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 491.465923][T15302] RBP: 00007f8e435f6090 R08: 0000000000000000 R09: 0000000000000000 [ 491.465933][T15302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.465943][T15302] R13: 00007f8e42a16038 R14: 00007f8e42a15fa0 R15: 00007ffd12db8578 [ 491.465969][T15302] [ 491.465976][ T4278] CPU: 1 PID: 4278 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 491.906835][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.916886][ T4278] Workqueue: hci5 hci_conn_timeout [ 491.922001][ T4278] Call Trace: [ 491.925273][ T4278] [ 491.928198][ T4278] dump_stack_lvl+0x188/0x24e [ 491.932904][ T4278] ? memcpy+0x3c/0x60 [ 491.936884][ T4278] ? show_regs_print_info+0x12/0x12 [ 491.942093][ T4278] ? load_image+0x400/0x400 [ 491.946602][ T4278] panic+0x2e5/0x730 [ 491.950497][ T4278] ? bpf_jit_dump+0xd0/0xd0 [ 491.955003][ T4278] ? ret_from_fork+0x1f/0x30 [ 491.959601][ T4278] __warn+0x2f8/0x4f0 [ 491.963581][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 491.968624][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 491.973660][ T4278] report_bug+0x2ba/0x4f0 [ 491.978007][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 491.983060][ T4278] handle_bug+0x3a/0x70 [ 491.987233][ T4278] exc_invalid_op+0x16/0x40 [ 491.991771][ T4278] asm_exc_invalid_op+0x16/0x20 [ 491.996633][ T4278] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 492.002297][ T4278] Code: 1f 8e e8 24 11 9f f8 48 8b 35 05 8b eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 ff 1f f8 e8 01 26 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 492.022110][ T4278] RSP: 0018:ffffc90003e17c08 EFLAGS: 00010293 [ 492.028196][ T4278] RAX: ffffffff89344caf RBX: ffff88807ae12330 RCX: ffff88802d100000 [ 492.036197][ T4278] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 492.044174][ T4278] RBP: 00000000ffffffff R08: ffff88807ae12013 R09: 1ffff1100f5c2402 [ 492.052139][ T4278] R10: dffffc0000000000 R11: ffffed100f5c2403 R12: dffffc0000000000 [ 492.060104][ T4278] R13: dffffc0000000000 R14: ffff88807ae12000 R15: ffff88807ae12010 [ 492.068077][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 492.073108][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 492.078123][ T4278] ? process_one_work+0x7b0/0x1160 [ 492.083233][ T4278] process_one_work+0x8a2/0x1160 [ 492.088181][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 492.093812][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 492.098868][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 492.104436][ T4278] ? kthread_data+0x4b/0xc0 [ 492.108954][ T4278] worker_thread+0xaa2/0x1270 [ 492.113654][ T4278] kthread+0x29d/0x330 [ 492.117717][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 492.122731][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 492.127314][ T4278] ret_from_fork+0x1f/0x30 [ 492.131737][ T4278] [ 492.135111][ T4278] Kernel Offset: disabled [ 492.139481][ T4278] Rebooting in 86400 seconds..