last executing test programs: 7.212213579s ago: executing program 1 (id=2313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 6.947083986s ago: executing program 1 (id=2315): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xf, 0x0, &(0x7f0000000240)="1ff517f6fc2504005eafd709c01bb8", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000001c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a001200ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 6.498743879s ago: executing program 0 (id=2316): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x8, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x30, 0x0, 0x20000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/12], 0x50) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[], 0x0}, 0x94) syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10500c00", 0x33fe0}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x8000}, 0x8) r7 = gettid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x11, 0x6, 0x9, 0x0, 0x5, 0x4016, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x2, 0x9}, 0x104040, 0x5, 0xe, 0x3, 0x2, 0xfffffffd, 0x85, 0x0, 0x7, 0x0, 0x1}, r7, 0x5, 0xffffffffffffffff, 0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000500), 0x75, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) socketpair(0x2a, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f000600f6541b00000000f5ff7ffffffffcffbf000879", @ANYRES32=r2, @ANYBLOB="c40a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000100"/28], 0x50) 6.323053783s ago: executing program 1 (id=2318): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7f, @mcast1, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="f4003b25fe8000fe80000000dc8b850f238466cc00007a000000ad6e911b5181847fb40000000000", 0x28}], 0x1}, 0x0) 6.205085016s ago: executing program 0 (id=2320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xba4ee230eabac5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3ab, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x3, 0x80, 0x1, 0x1}, 0x0, 0x1, r3, 0x0) ioctl$TUNGETVNETLE(r3, 0x8955, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000780)=[{0xfffffffffffffffc}], 0x1}, 0x100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x9, 0x5, 0x6, 0x1400, r4, 0x3, '\x00', r5, r0, 0x5, 0x4}, 0x50) close(r0) 6.123012289s ago: executing program 1 (id=2321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB="8c"], 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000880)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, &(0x7f0000002980)=[{&(0x7f00000008c0)}, {&(0x7f0000000900)="04308add0717de32384ff751fdfff17e1813025476d06e4c53173d85bacafed04af916f99d608400d80cbe8364f4e27fd510b2400104c58735beb7bb3536df22f6690acffd37ffbe5e9bdbb722858283fa03", 0x52}, {&(0x7f0000000980)="a23f3c47fdaefe7db35100159c4b0e0222498231bb4872d9d49e88c2fe202e25dab17a09a288605c230a650fee0cb7407bc5a29588b1577c4332d6184e8a587e6451f2f2f980ad4f30e530ed65279bf74dc7c2453fbbcdbdd2925ad9806a8549b30879393063adc84d66db7b9b72299aea0d9a9cd05366ffcc54ba04bf", 0x7d}, {&(0x7f0000001980)="b78bec12f89e38a4b5ff47e812a1f29e38db28d15057f13cb99220dc8aaae29e599868a09f917670226f81af74e574a3b8db6902ac1acc9314b18de6c390bd1b60403085f749c35d83b839a3f76d1f05e6ed08292ca9b1c8f5b03740abd2003e89eff95383a96ec559083802eefcb480d77760fb4c37428f3e1688a7126c7bc7709813cedc698f4d49d5413c6dab055057df741a95e2c769353048a16afe08c8214ce45a24cf70674f4e78101ae681d6660085f62fb8e017d891a68b9cefd39b3b5853b4f987d9f16c3d394ef8adb5236fe82288902ecc9352a4d71091086d5fb3c4a58bd157881d53d185fb6b64418871b070f1e40e1d39d9400e3fe38ec6f66d16e33613a48809f13a478a2fbb15a1bb0b015d4f8666e4f7bb7306d6203fe45ddc9939ab3da0eddc4f085bf63b60768167d3853fd3767fd669a1c616549be7876fcfeedcbffcac961b6f1be168bff2d537ed3498f58d467ed215bb32b8bb113f175cf9a36bb44746bdd3360ca1cc3dfb801ec14a613f90fd5b8baf141306170a8f6217bea7e1b010901ab931f07492a5a2d162c52e678e3ec8ed543ec222d6bfa4328c571b9c9168057a41b7639b684c2124f119a734644acf2388c35be7869bee3643aeeaed17f6fb8710966bec0b9bfab7ef90b0aa5e74f0383d27062a5863ac301f368eac7fe453b9745ca00a8fa836f660d443305cbbdb93841c998a1c3aebb91279456a41443e4ffc4b9bcf41bc10ab6ce76b20cb3cc853951487397af3aefdfbdefdd696ca28a9d92e71188cab2022d8f579fb7380362888c67b85147efba103e9ec9bc3e6b1e43c383fef85f5220ba04243bec90150202ef39ed7777ec14ae5d3d19a4246c5ba275c2557f4ec67e9ad5094a76dd967995ee1ef3f26d56420be52c0d162007f0aff9588b6bff374920e328b3bf6629d76dd4aef0cd5d3d527c8ac898cea47786ce4c15ec708c3c8cd5f3509e392419f462614b8a224584574a79a876d8d6c82d1128578dbbffdfbea827bf07a2c2d7fa29a7d12325da3aec994581ffdf433b52ca5e82d578237d7c7c502fdf8e1b02df4247264692bdb8c901a2f45ab7faa34ecae6a9e6ff01cbfe2e9cb5a5c43d2eacaecec1e360b9910c4a4f4c05c8c0876164c42caaba86315368e29ab90283aa2383be19bd0cb5150abf32f7d964e44063293ed0704f6c5eeec861206257504f4f0c8cbff365d9bd9581f45ca4cb00448db4fe9094092827f1f996c39b592febacb91489c09b4d085a195ebf18184bce2c38f994265c18ea8ea5f92c940a8cba145205430703d2fc3626ece2e37d111d1b958460ae1e10cc10ac0be39d00abd5c339e9d7d6f071f20c170caea512a4f15d652c7e1f59da57706bf09da186be8f832e5258b8fe64f6013a8295da18bbc4838d48bf1a5d80074118ec2bfae3cbc20096b670a0417266a631ee09e8f60e62b6eac870ecdb54d007ea9c264aaf64ecebdaf0952240adf520390d4b871533e5afa6157d92ad20551ff54549e1ed17c40b33e536c230e5593356c1dd52b757cf41694dcec2b780147b1803760da512ad78a4f2d77243ee27e0166cb7d4769b453f13b639a40f26d46453f8a6595897858deefd722833440807bfe9742cf7fbaa793fa026029b5d4f35e960ee76402bbe56b890b1f57e3bc30acd34c2e8d265ab0de7e6043b6665f3b63a4b18df8382231ffadf71e815fa356a7de91587b16d0788490c3f4715b6f09ce120472572b91e873b7410707cb02c5355980db3c18eaf3f7c86edb4b835ae16f453365530329332683c397c678ae283dbd184faaf5b42905cac92f13c8e0f3c99928c431d1002c5182652a3225fbc2a8183030f1177920e04227e4122206cad57e814fe49ed2e1f477738a36cd80cfe5587452935286a9e69c6caaee5ae61c59376915b6dba2701889f9451807059262e1c5e3df85861685f5ed9c6840fdc568ccc028c01a547e3fdd5a99a6da0332eb3900e7f29eff8fa421ba82cbe649770ea4a9286a0a21f3e37495d32c7b0680e68e14a436a808ed79599110151cd2a9b6bfda72a3911b4a79a97d96a0513fb85aa86ffe3dfc81fd81e9b638b003dfc2f0131747ea79d09b09cd2dcda942e1109eba0386f7140d54780df9a6c99674ec25c823c08308ba30144bf9de197b46bd503d746b3664d4e28b6c8da578d239b9e8fbf7e85a6851e8c7a248393732e8a163948479ee80e6d67f19645ac8d79c0281b1f2499bda0fac0606ceb7cb61821972fedc22daa1e60bb57f6818633642925ea818228e50738f144ea670c215c54a3b3ad6f9769d07111da097c6fb6507843b25456fd92e5443c68e4811a7489300553c85327bff744ee097b6846bac2b028740d81fb86fdfb2cef78edd91217a7ee32b7ad49ee6fe3888bf60c14c2dc3b7001deeeff66080923da6d1b54ff89bd410823c22db57e50d86dc44be890e9885f7e40e0487b6545fed580c3a6cf1845ac18755e7c6a52163960c2d57837e3540a7aca16788b2f979de842c518a85c621c071f6b1e7ddb998af748fb04479b6aa6202cb6ca45896d48f838a0e041c28e0977a5372fe2ae0d6798b97b994a63cb7b46807dba47f685a8ec0216c26ca9dd25c018d2f6186cd067474e1193a2543f15fa6632f2503d40d8e78172f91115e7f5076f7c2184379785ade7eba38a2088fe463fe07ca76c9589482cac9ecf727af9c6c553786524f3485ed735a34ad12687fd78b6ad04ee168c55322ed52ec7b115afc926c713e19c54e3ba27d38783ed4b64d4130b0405717c1810479c852c02699c600ce757c7706882a423af64cbd03a1d1aafd3c2fd625eae176ea988c4084bff8cb01a28646f980a7dbd821b66992ff6ab0c0f2e89805d82ce059d289fe1ccebb50d81091a072d26f94426d5d2f7ce09ae39a42032832422c0a2f0184311052d1000969255617be46bb3b12e4de19f3afc13eeccfc6eaa3a65941fc76b6da72b8eefeefb2d4e1688867ea029bb6c29a7fc211371bb7e1526e53fb9480e3932fd4129a94fae560791b1d9001caca477a475e512b6a2b411ba217b5ec21446b2368ddec87b14d4872f8dd92a189f9a9618fb5f11295fe553a53a53fbcb6c785675cf9650cb75a96e82e6c8524947fd9b9731f20bce4ce2d14f5ab6592fdc27a0e8c46b7ceb75175b75848ffded0d6fb4bde35d9fdc9bf3d95d03cea82894d133f270326fdb07eb7bda166e296c48fc8c498178370813915f00e856df99b354cbe793e4ea7f12021c439ed2c879541ff39bdab47389024dd18a324e33b083140ff1dbcbff22810af0f86eb933e9a0929f461d688bfbe854370ca80282d963e9fa1499688e30e325cf6d1fedcbf31b65d86131f77b0e92bb26595d9f270c9bc77349131a9eff1b46656e11e98754b2a4695fa41b6f32bcf75e4042a22ac2aab61c1ceba5d7c0b40a4ccb35bac5b28d9f9d32a44816cf00cdc099364035c3f5b56aaefbe1777e09c73ca1c6de06500a8272ccb8c1f68e1c4e80f005dfd968314cf4fb0353763365d280c92afe4079a8da7de0d93112e970fe6f7812234f706807367a116bc2c4dfe452b082b709795f2cdeacb91d474de19440adf8fb9cf11d5e9c4560488c289478750938cbee5386feb9a00a9ef8ffe08e2a2c9b2b67e48bbdac53a8c20c3af96ac075bde1a30f80bd211a91bf8efc84dfb918571841f7e1ec822c062780f06b706eb4ca3a1de96293d0a510989717c130b88d62bd066be4d8519d7eb3009505bfd21fad8464fa0469d11182c73ac1824f6936011201ca75b7d179603aadc49438dbc9f403c068b449f11830ca62c42f6e34b26f4582212034bb1c228343340d17464717e669e1302f6d66d00f6332fc2efe11d1802604894d7fb3e6620194e413e042c905fc861ca8e17ae0261a18f7778ca23479c054c05b00fbbfa1bc27be082ded514c4bef0afe2021d9228522aa23998d048e8275f1a5a29e3309e8ccf7402727764b34e4eeb8f5ce377c16d90b75b7dfbf81ebca8b27e78e1b877a6e174bf3aebc99186554307b9fb148aea83ec2b7d444560a47d0c4bf915cf18a96e800a9cf8670848ae47e3603944d3fa481ba81571b99c3d14e3e7b649a0b07a929dd8447603b366a8be8742c51e24c02d2d74a146dd134f81e045bbced81e9cbdc8337d7ef44fbb26d150dfed1fc369628db3583cc86dd3452be5e8a80bf0b55f9eedb44903b489d8708a5fd03ad91d5ef237093e63ee305b8a36880717efe8e79618d1ffb68d4d8b8e2ad23cf5594ce9c425432f4f3c8973c38b5cd10b7e6de234432c26d0a3c5de45d9db533d660bce58ea1643d9710319465ad1c0340a08ef9e6d5606b0ade8cf874625b503997f51b88402d074fb36621e3a3f921adbf7cab9c4ee2ddf00b8494f908c0cf2e60fb6c76c415c20c09707c8aba8cfb840d7e8c81834a9b5ddf6964af6168be944f6c3b28aea2cb2361a1e980b3965c2065d42d06b3ca12f9fd5ad007ee860382faf827440a1f62c82fb228284c2cfe6e2d457da35cf7f600e0c5b54f1eed6c7c8e7e9b859b8ee0214cedaeff31041662ec9216979fffbdea704fc823537f1317c6cc96a27c3df1a6973d75d89614a00432a795c1432e184b38e76f89c4fb47bc3070cde2978e220d235a809a6c0d5e7d1a38f7680c5836c55c7ce12d40f697838c163c57f69217ff2b5c82af69b048770a7dd42bc5c94a9778505101dc8d1b76739cade7f8b6e0811f67da782848bd61de8c18fbcb1922f3c5c01f135e942f3bc6a6e4384e836c9e54cbdf95e4c8627b462f038a6415520deb047e9cac93bf80a6b7a2261e87c92dc3d10f174da472975136bc524014ee0008405adf5efb1262f97159e4d6734bfeb47872c785fa0d8de112341ae2b6a87b3d73e293c80d659d066c182577915e0058c18a64d06beee703667f4555220f74bc215bd502c54156176e5ca7eeab9981cbbe8e4397ed7a1ab0f0aa1ae9dc7928011325fa04e806fc17157eefe5a0ff5d4346ebbb46a27d21781cf405ba86c32dbf806f8e894df9951343143cebd8df03f9af2b3fa7c1a592d9760507ac96cd609cb255289c7d6dda5cf99154cfabf83dad30f3c9824dfc19f4fcfe3af7f41fc559d85a779bf7ae52206ace6d3ec00ceb9af208d4d06f4c1609e9eb170aab8d98ec49296d5b289ec3382badb4fe91ac624f8f7a2ba8bfd4501f909e77868992a7bacc4571629dde1a9c7cbefc7f5764a1662a23fed88098c1dfa50d98c7b473477349618b8845187e895d88f820b4c2a1fba9fead20b381730b92fd9b7012ef2d79cd60fbdd9f002e533e8f2de810457116a5b21f7b5ef5a72a3475106201a586dcabb66cc9ab707512d834b42a5ca498ea394b6216f356343184b8dbd7ebb1e012f8960a98a31efb9013929f84aaa8000b5e7fa092afb0e62729daa42ca9c35f53b1d27eaecad97c6f60187145ae4d649e029afb4d4c819071e2cae472e7f731250ccac8b4c9fa3c9ac2df95b929f1332fea72b684fa74c88b27d2dac5658569587c2f49cb67e2d83c4641e1b9129aa8e57ee8932d93afa9311c57737e393924b2908156a8b43657fccd88973e770ab20f85446dca2fffbc96a5788a05924b2a71853d728307cc5f68c3ed4c1c2442c81352ef5643eac05e9d9cd7ed1d82c2adb66a36ab30d044283abdb91c233930b2fe88d4bea0503651651f80df42d6104dc16185110a8dc1ff1884295b83ae0059ff4f634c56d739518746e3277ad2c7d20cccdd036f8c805c9049ba306d35ec0aa1ad6", 0x1000}], 0x4, &(0x7f0000002a00)="a22520f58e7c1941f643167237265d3f5c84483c1c94fc62b8f0dd2057a6c18e58a6d098b025dbed65e87c40c9fe35438a8a5f0c2a09572354a8810b8016b31fb62499ec89a1c8c47a0c38f78fc048e8f880b9f54cea3a4697f1883abd71b610abc4e314dee788673276b4aa775108b7dfc92d261172f766", 0x78, 0x811}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRESDEC=r1, @ANYRESHEX], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0x37, 0x1, 0x1, &(0x7f0000000700)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="030000000400000000000000", @ANYRES32=r3, @ANYBLOB="812a94b05725bc41585c4b75a1c8b35940a9252b6a5ed60e13d410807052609f3769ed16b8b200cb99433dae54cf83ac43ecf15dc8df862a1cbb55ef257b087c326139339887a2d6eccaa8c475258331e1b50a48a3d9b75dc2e5d34c49c430f43300b9bb564b6a1e633816866f3cd30eaf25aa1e4ed6a2c66b2939cc5fb1139f635e4b1922bffef5dc6e40f16a79bd3207f1edd8ec168ee2480b1aa8", @ANYRES64=r9], 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000040)=0x200) socket$kcm(0xa, 0x5, 0x0) 6.074210271s ago: executing program 0 (id=2323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000004000000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c21"], 0xee8a) 5.906937175s ago: executing program 1 (id=2325): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6eaa0000000000007110bb000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000000000000000000000001810e0ffe735ebbb4a0dd37e16fd28c67bd4888d669dfffeb14cbfd17e2bd6a63f1f67b33d8d79835568e32676ab99f0f92dcb716f3739357cf8293b7a2e6512e84a3598278f859ceb105e2ade7b8b6e440190b2f83e953eb229cc112f18af28d3fc65e3df493180d08be3c8eecbe10ce9c6ff40089d93ed475d3bc052e01d4861ee89979724795fc366009340fa7845dc36fdfb87ac2d5a975f68cb51df3d32018183da809d650535546984de02be6563d607d076440ed5b9e94773509f2049941ad81d410881e3dde1dc279992c1260b630d721678b2de0c6e", @ANYRES32=r4, @ANYBLOB="0000000000000000d7030000100000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 5.783166618s ago: executing program 3 (id=2327): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002400810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {&(0x7f0000001440)="f6e14ee68a9118", 0x7}]}, 0x40015) 5.72372163s ago: executing program 3 (id=2328): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x8, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x30, 0x0, 0x20000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/12], 0x50) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[], 0x0}, 0x94) syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10500c00", 0x33fe0}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x8000}, 0x8) r7 = gettid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x11, 0x6, 0x9, 0x0, 0x5, 0x4016, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x2, 0x9}, 0x104040, 0x5, 0xe, 0x3, 0x2, 0xfffffffd, 0x85, 0x0, 0x7, 0x0, 0x1}, r7, 0x5, 0xffffffffffffffff, 0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000500), 0x75, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) socketpair(0x2a, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f000600f6541b00000000f5ff7ffffffffcffbf000879", @ANYRES32=r2, @ANYBLOB="c40a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000100"/28], 0x50) 4.894949473s ago: executing program 1 (id=2331): socket$kcm(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x200002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000818010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f0000000240), &(0x7f0000000600)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r3, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f00000009c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x53ae, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1c, 0x14, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc67, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @jmp={0x5, 0x0, 0xe, 0xd, 0xa, 0x6, 0x10}, @cb_func={0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x4d8, 0xbc, &(0x7f0000000840)=""/188, 0x41000, 0x2, '\x00', r5, @fallback=0x18, r6, 0x8, &(0x7f0000000dc0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000e00)={0x5, 0xc, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc8328500000006000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.039436985s ago: executing program 3 (id=2334): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="185000ffffffff00000000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) 2.971066687s ago: executing program 0 (id=2335): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000080000000c0000000000001204000000030000000000000204000000010000000000000e0200000000000000050000000000000a04000000060000000000000e040000000100000009000000000000010000000054004000005f002e305f30fb1104fce2e4da4e3f5deb633a00"], &(0x7f0000003080)=""/167, 0x74, 0xa7, 0x1, 0x69}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="bc09000000ea00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000040000000300"/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0xffffffffffffff37, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=r2], 0x48}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xffffffffffff8001}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x1000000) 2.805713922s ago: executing program 0 (id=2336): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60600000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 2.724666724s ago: executing program 3 (id=2338): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x5, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x100, 0x2, 0x2, 0x391, r3, 0x8, '\x00', r4, r2, 0x2, 0x3, 0x0, 0x9}, 0x50) socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 2.491086731s ago: executing program 0 (id=2339): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000004e00000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28) socketpair(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000500), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000001, 0x1, r5, 0xffffffff}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) sendmsg$kcm(r4, 0x0, 0x0) socketpair(0x1e, 0x80000, 0xd, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 2.401979833s ago: executing program 3 (id=2340): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)}], 0x1}, 0x60044084) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=[{0xb0, 0x0, 0x7, "0743f9181ff34ad57bde32222cac109c69cdcd22aecdbbfa927a727661063266f6faa662edf05551d42aa0543796b2c81e0720dd17d0c71e1a4b8e7501e749dc9d0239e7c0a14957b5083e47c3f2067f9e77699d9a59783e0363179965ef92e37c3efd106e787d8a8a3d90c5c162d90176f35c49c43c1d1496401dfeb0f7347ac2dce43deaac1413e023b9707c776e4f6a796b00c50b7745943ced3bb4"}, {0x30, 0x0, 0x4, "b71cc98015701df1a14a06da101e38a395be39f28b1e5cccae9708d6"}, {0xc8, 0x107, 0x7, "67fe31de3edd141f0c76bebc733acab75b1eb805a0c13fe84d113c956f151d923a8a9c1517b70706a382f656b2489f8e3eaee06565415a85807004243428cc6375ea1b2516ecabc6b7d5cfff94ea23aa2538c448e9534f1b8aaa248cf0320bbdd14e529faa11aaf30e7e165c1bbf74a2efb15fb837faa215e73736eb1d00b84cdaa4fe9c8fe9baa9af3ec4b9b7b3c36f75748df69d5becfbf2d48e41bbb0c0b7a852a8023223573a37bc7324aa6945e141f3da"}, {0x30, 0x0, 0x6, "f2d4827b9a79c3f76b0c386c93af9725254d0941cc583960584657b878b6"}, {0x10, 0x3a, 0x2}, {0x10, 0x29, 0xe72}], 0x1f8}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900003000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x6, 0x0, &(0x7f0000000100)="e0b9547ed387", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r3], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.313857153s ago: executing program 2 (id=2343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000001100000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 1.09114238s ago: executing program 2 (id=2344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB="8c"], 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000880)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, &(0x7f0000002980)=[{&(0x7f00000008c0)}, {&(0x7f0000000900)="04308add0717de32384ff751fdfff17e1813025476d06e4c53173d85bacafed04af916f99d608400d80cbe8364f4e27fd510b2400104c58735beb7bb3536df22f6690acffd37ffbe5e9bdbb722858283fa03", 0x52}, {&(0x7f0000000980)="a23f3c47fdaefe7db35100159c4b0e0222498231bb4872d9d49e88c2fe202e25dab17a09a288605c230a650fee0cb7407bc5a29588b1577c4332d6184e8a587e6451f2f2f980ad4f30e530ed65279bf74dc7c2453fbbcdbdd2925ad9806a8549b30879393063adc84d66db7b9b72299aea0d9a9cd05366ffcc54ba04bf", 0x7d}, {&(0x7f0000001980)="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", 0x1000}], 0x4, &(0x7f0000002a00)="a22520f58e7c1941f643167237265d3f5c84483c1c94fc62b8f0dd2057a6c18e58a6d098b025dbed65e87c40c9fe35438a8a5f0c2a09572354a8810b8016b31fb62499ec89a1c8c47a0c38f78fc048e8f880b9f54cea3a4697f1883abd71b610abc4e314dee788673276b4aa775108b7dfc92d261172f766", 0x78, 0x811}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRESDEC=r1, @ANYRESHEX], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0x37, 0x1, 0x1, &(0x7f0000000700)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="030000000400000000000000", @ANYRES32=r2, @ANYBLOB="812a94b05725bc41585c4b75a1c8b35940a9252b6a5ed60e13d410807052609f3769ed16b8b200cb99433dae54cf83ac43ecf15dc8df862a1cbb55ef257b087c326139339887a2d6eccaa8c475258331e1b50a48a3d9b75dc2e5d34c49c430f43300b9bb564b6a1e633816866f3cd30eaf25aa1e4ed6a2c66b2939cc5fb1139f635e4b1922bffef5dc6e40f16a79bd3207f1edd8ec168ee2480b1aa8", @ANYRES64=r8], 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x200) socket$kcm(0xa, 0x5, 0x0) 771.639619ms ago: executing program 2 (id=2345): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="185000ffffffff00000000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) 519.487526ms ago: executing program 2 (id=2346): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) (async) recvmsg(0xffffffffffffffff, 0x0, 0x102) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, 0x0, 0x4) socket$kcm(0x29, 0x7, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180), 0x43) 314.912592ms ago: executing program 2 (id=2347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x8, 0x221, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x80, 0x0, 0x0, 0x4, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0xfeffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x1000}) 54.712089ms ago: executing program 2 (id=2348): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x5, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x100, 0x2, 0x2, 0x391, r3, 0x8, '\x00', r4, r2, 0x2, 0x3, 0x0, 0x9}, 0x50) socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=2349): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c00020002", 0x1d}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) kernel console output (not intermixed with test programs): 628636][ T8260] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 225.648245][ T8260] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 229.273852][ T8281] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 230.386374][ T8303] netlink: 'syz.3.791': attribute type 10 has an invalid length. [ 231.004211][ T8310] netlink: 'syz.2.794': attribute type 10 has an invalid length. [ 231.034585][ T8310] netlink: 2 bytes leftover after parsing attributes in process `syz.2.794'. [ 231.057681][ T8310] hsr0: entered promiscuous mode [ 231.093997][ T8310] bridge0: port 3(hsr0) entered blocking state [ 231.112942][ T8310] bridge0: port 3(hsr0) entered disabled state [ 231.133116][ T8310] hsr0: entered allmulticast mode [ 231.145285][ T8310] hsr_slave_0: entered allmulticast mode [ 231.163648][ T8310] hsr_slave_1: entered allmulticast mode [ 231.332741][ T8310] bridge0: port 3(hsr0) entered blocking state [ 231.340221][ T8310] bridge0: port 3(hsr0) entered forwarding state [ 231.426746][ T8326] netlink: 'syz.1.799': attribute type 9 has an invalid length. [ 231.465159][ T8326] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.799'. [ 231.789675][ T8328] netlink: 'syz.1.799': attribute type 9 has an invalid length. [ 231.797721][ T8328] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.799'. [ 232.074179][ T8337] netlink: 'syz.3.802': attribute type 10 has an invalid length. [ 232.088398][ T8337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.802'. [ 232.112419][ T8337] bridge0: port 3(ipvlan1) entered blocking state [ 232.149146][ T8337] bridge0: port 3(ipvlan1) entered disabled state [ 232.157477][ T8344] sctp: [Deprecated]: syz.1.804 (pid 8344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.157477][ T8344] Use struct sctp_sack_info instead [ 232.204320][ T8337] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 233.152299][ T8367] netlink: 132 bytes leftover after parsing attributes in process `syz.3.814'. [ 233.673078][ T8379] syzkaller0: entered promiscuous mode [ 233.696436][ T8379] syzkaller0: entered allmulticast mode [ 236.398499][ T8400] netlink: 'syz.3.824': attribute type 33 has an invalid length. [ 236.423320][ T8400] netlink: 'syz.3.824': attribute type 47 has an invalid length. [ 236.753427][ T8398] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 236.766814][ T8398] netlink: 2 bytes leftover after parsing attributes in process `syz.2.823'. [ 237.613219][ T8425] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.834'. [ 237.725250][ T8425] netlink: 'syz.1.834': attribute type 10 has an invalid length. [ 237.759521][ T8425] veth0_macvtap: left promiscuous mode [ 238.296524][ T8435] netlink: 'syz.0.837': attribute type 33 has an invalid length. [ 238.314863][ T8435] netlink: 152 bytes leftover after parsing attributes in process `syz.0.837'. [ 238.326703][ T8441] netlink: 156 bytes leftover after parsing attributes in process `syz.3.839'. [ 238.356130][ T8441] netlink: 'syz.3.839': attribute type 28 has an invalid length. [ 238.393764][ T8441] netlink: 'syz.3.839': attribute type 29 has an invalid length. [ 238.415164][ T8441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.839'. [ 238.670334][ T8449] netlink: 'syz.2.841': attribute type 27 has an invalid length. [ 238.679107][ T8449] netlink: 'syz.2.841': attribute type 4 has an invalid length. [ 238.686791][ T8449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.841'. [ 239.165306][ T8463] netlink: 'syz.2.845': attribute type 4 has an invalid length. [ 239.213787][ T8463] netlink: 152 bytes leftover after parsing attributes in process `syz.2.845'. [ 239.468550][ T8465] C: renamed from team_slave_0 (while UP) [ 239.506615][ T8467] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.847'. [ 239.516921][ T8467] openvswitch: netlink: Key type 4112 is out of range max 32 [ 239.546773][ T8465] netlink: 116 bytes leftover after parsing attributes in process `syz.1.846'. [ 240.092018][ T8484] netlink: 152 bytes leftover after parsing attributes in process `syz.2.852'. [ 240.518785][ T8499] FAULT_INJECTION: forcing a failure. [ 240.518785][ T8499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.559304][ T8499] CPU: 1 PID: 8499 Comm: syz.1.858 Not tainted syzkaller #0 [ 240.566685][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.576784][ T8499] Call Trace: [ 240.580104][ T8499] [ 240.583073][ T8499] dump_stack_lvl+0x18c/0x250 [ 240.587804][ T8499] ? show_regs_print_info+0x20/0x20 [ 240.593069][ T8499] ? load_image+0x420/0x420 [ 240.597615][ T8499] ? __might_fault+0xaa/0x120 [ 240.602334][ T8499] ? __lock_acquire+0x7d40/0x7d40 [ 240.607422][ T8499] should_fail_ex+0x39d/0x4d0 [ 240.612174][ T8499] _copy_from_iter+0x1d9/0x12e0 [ 240.617076][ T8499] ? slab_post_alloc_hook+0x8a/0x4b0 [ 240.622416][ T8499] ? __virt_addr_valid+0x18c/0x540 [ 240.627585][ T8499] ? __lock_acquire+0x7d40/0x7d40 [ 240.632673][ T8499] ? rcu_is_watching+0x15/0xb0 [ 240.637489][ T8499] ? copyout_mc+0x70/0x70 [ 240.641877][ T8499] ? __virt_addr_valid+0x18c/0x540 [ 240.647056][ T8499] ? __virt_addr_valid+0x18c/0x540 [ 240.651988][ T8501] openvswitch: netlink: Key type 4112 is out of range max 32 [ 240.652197][ T8499] ? __virt_addr_valid+0x469/0x540 [ 240.652230][ T8499] ? __check_object_size+0x506/0xa20 [ 240.652254][ T8499] netlink_sendmsg+0x76b/0xbf0 [ 240.652286][ T8499] ? netlink_getsockopt+0x590/0x590 [ 240.652311][ T8499] ? aa_sock_msg_perm+0x94/0x150 [ 240.685200][ T8499] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 240.690530][ T8499] ? security_socket_sendmsg+0x80/0xa0 [ 240.696044][ T8499] ? netlink_getsockopt+0x590/0x590 [ 240.701293][ T8499] ____sys_sendmsg+0x5ba/0x960 [ 240.706119][ T8499] ? __asan_memset+0x22/0x40 [ 240.710937][ T8499] ? __sys_sendmsg_sock+0x30/0x30 [ 240.716124][ T8499] ? __import_iovec+0x5f2/0x850 [ 240.721045][ T8499] ? import_iovec+0x73/0xa0 [ 240.725595][ T8499] ___sys_sendmsg+0x2a6/0x360 [ 240.730350][ T8499] ? get_pid_task+0x20/0x1e0 [ 240.734994][ T8499] ? __sys_sendmsg+0x2a0/0x2a0 [ 240.739839][ T8499] ? __lock_acquire+0x7d40/0x7d40 [ 240.745022][ T8499] __se_sys_sendmsg+0x1c2/0x2b0 [ 240.749918][ T8499] ? __x64_sys_sendmsg+0x80/0x80 [ 240.754920][ T8499] ? lockdep_hardirqs_on+0x98/0x150 [ 240.760171][ T8499] do_syscall_64+0x55/0xb0 [ 240.764622][ T8499] ? clear_bhb_loop+0x40/0x90 [ 240.769414][ T8499] ? clear_bhb_loop+0x40/0x90 [ 240.774133][ T8499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.780161][ T8499] RIP: 0033:0x7efd2739ce59 [ 240.784705][ T8499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.804361][ T8499] RSP: 002b:00007efd281b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.812826][ T8499] RAX: ffffffffffffffda RBX: 00007efd27615fa0 RCX: 00007efd2739ce59 [ 240.820839][ T8499] RDX: 0000000000040400 RSI: 00002000000003c0 RDI: 0000000000000003 [ 240.828852][ T8499] RBP: 00007efd281b7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.836863][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.844870][ T8499] R13: 00007efd27616038 R14: 00007efd27615fa0 R15: 00007ffcc6896e78 [ 240.852900][ T8499] [ 241.040097][ T8505] team0: Device vxcan1 is of different type [ 243.208615][ T8530] __nla_validate_parse: 2 callbacks suppressed [ 243.208660][ T8530] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.869'. [ 243.250613][ T8530] openvswitch: netlink: Key type 4112 is out of range max 32 [ 244.163396][ T8548] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.874'. [ 244.183097][ T8548] openvswitch: netlink: Key type 4112 is out of range max 32 [ 245.346813][ T8557] validate_nla: 3 callbacks suppressed [ 245.346829][ T8557] netlink: 'syz.0.876': attribute type 4 has an invalid length. [ 245.464787][ T8557] netlink: 152 bytes leftover after parsing attributes in process `syz.0.876'. [ 245.549183][ T8564] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.878'. [ 245.649441][ T8559] tap0: tun_chr_ioctl cmd 1074025677 [ 245.655076][ T8559] tap0: linktype set to 0 [ 246.216245][ T8572] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.882'. [ 246.258366][ T8572] openvswitch: netlink: Key type 4112 is out of range max 32 [ 246.295536][ T8576] netlink: 'syz.3.883': attribute type 2 has an invalid length. [ 246.303472][ T8576] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.883'. [ 250.598512][ T8584] delete_channel: no stack [ 250.790155][ T8591] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.886'. [ 250.830025][ T8591] openvswitch: netlink: Key type 4112 is out of range max 32 [ 251.175417][ T8609] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.894'. [ 251.221365][ T8609] openvswitch: netlink: Key type 4112 is out of range max 32 [ 251.250767][ T8607] netlink: 'syz.1.893': attribute type 4 has an invalid length. [ 251.269235][ T8607] netlink: 152 bytes leftover after parsing attributes in process `syz.1.893'. [ 252.260322][ T8640] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.903'. [ 252.280660][ T8636] tap0: tun_chr_ioctl cmd 1074025677 [ 252.286282][ T8636] tap0: linktype set to 0 [ 252.563133][ T8630] delete_channel: no stack [ 252.789371][ T8645] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.905'. [ 252.833828][ T8645] openvswitch: netlink: Key type 4112 is out of range max 32 [ 254.454101][ T8675] netlink: 'syz.0.915': attribute type 4 has an invalid length. [ 254.476392][ T8675] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.915'. [ 254.558940][ T8682] netlink: 192 bytes leftover after parsing attributes in process `syz.0.915'. [ 255.181761][ T8688] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.918'. [ 255.219996][ T8688] openvswitch: netlink: Key type 4112 is out of range max 32 [ 255.928128][ T8676] delete_channel: no stack [ 256.048893][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.055310][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.236427][ T8700] netlink: 'syz.3.923': attribute type 10 has an invalid length. [ 256.405666][ T8707] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.925'. [ 256.775999][ T8705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.996118][ T8721] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.930'. [ 257.061070][ T8721] openvswitch: netlink: Key type 4112 is out of range max 32 [ 257.459355][ T8731] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.934'. [ 257.673786][ T8742] netlink: 'syz.1.937': attribute type 21 has an invalid length. [ 257.685295][ T8742] netlink: 128 bytes leftover after parsing attributes in process `syz.1.937'. [ 257.699195][ T8742] netlink: 'syz.1.937': attribute type 4 has an invalid length. [ 259.083318][ T8766] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.944'. [ 259.102516][ T8766] openvswitch: netlink: Key type 4112 is out of range max 32 [ 259.505808][ T8772] syzkaller0: entered promiscuous mode [ 259.511452][ T8772] syzkaller0: entered allmulticast mode [ 259.519192][ T8778] netlink: 'syz.2.950': attribute type 10 has an invalid length. [ 259.535769][ T8778] team0: Device nlmon0 is of different type [ 259.986165][ T8795] FAULT_INJECTION: forcing a failure. [ 259.986165][ T8795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.008841][ T8795] CPU: 1 PID: 8795 Comm: syz.2.955 Not tainted syzkaller #0 [ 260.016205][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.026279][ T8795] Call Trace: [ 260.029576][ T8795] [ 260.032511][ T8795] dump_stack_lvl+0x18c/0x250 [ 260.037205][ T8795] ? show_regs_print_info+0x20/0x20 [ 260.042411][ T8795] ? load_image+0x420/0x420 [ 260.046916][ T8795] ? __might_fault+0xaa/0x120 [ 260.051595][ T8795] ? __lock_acquire+0x7d40/0x7d40 [ 260.056716][ T8795] should_fail_ex+0x39d/0x4d0 [ 260.061426][ T8795] _copy_from_iter+0x1d9/0x12e0 [ 260.066286][ T8795] ? slab_post_alloc_hook+0x8a/0x4b0 [ 260.071595][ T8795] ? __virt_addr_valid+0x18c/0x540 [ 260.076812][ T8795] ? __lock_acquire+0x7d40/0x7d40 [ 260.081872][ T8795] ? rcu_is_watching+0x15/0xb0 [ 260.087109][ T8795] ? copyout_mc+0x70/0x70 [ 260.091477][ T8795] ? __virt_addr_valid+0x18c/0x540 [ 260.096628][ T8795] ? __virt_addr_valid+0x18c/0x540 [ 260.101763][ T8795] ? __virt_addr_valid+0x469/0x540 [ 260.106891][ T8795] ? __check_object_size+0x506/0xa20 [ 260.112214][ T8795] netlink_sendmsg+0x76b/0xbf0 [ 260.117019][ T8795] ? netlink_getsockopt+0x590/0x590 [ 260.122237][ T8795] ? aa_sock_msg_perm+0x94/0x150 [ 260.127198][ T8795] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 260.132520][ T8795] ? security_socket_sendmsg+0x80/0xa0 [ 260.138020][ T8795] ? netlink_getsockopt+0x590/0x590 [ 260.143266][ T8795] ____sys_sendmsg+0x5ba/0x960 [ 260.148157][ T8795] ? __asan_memset+0x22/0x40 [ 260.152785][ T8795] ? __sys_sendmsg_sock+0x30/0x30 [ 260.157814][ T8795] ? __import_iovec+0x5f2/0x850 [ 260.162695][ T8795] ? import_iovec+0x73/0xa0 [ 260.167238][ T8795] ___sys_sendmsg+0x2a6/0x360 [ 260.171942][ T8795] ? get_pid_task+0x20/0x1e0 [ 260.176539][ T8795] ? __sys_sendmsg+0x2a0/0x2a0 [ 260.181350][ T8795] ? __lock_acquire+0x7d40/0x7d40 [ 260.186393][ T8795] __se_sys_sendmsg+0x1c2/0x2b0 [ 260.191260][ T8795] ? __x64_sys_sendmsg+0x80/0x80 [ 260.196210][ T8795] ? lockdep_hardirqs_on+0x98/0x150 [ 260.201417][ T8795] do_syscall_64+0x55/0xb0 [ 260.205872][ T8795] ? clear_bhb_loop+0x40/0x90 [ 260.210572][ T8795] ? clear_bhb_loop+0x40/0x90 [ 260.215262][ T8795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.221182][ T8795] RIP: 0033:0x7fa9fef9ce59 [ 260.225623][ T8795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.245255][ T8795] RSP: 002b:00007fa9ffe46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.253674][ T8795] RAX: ffffffffffffffda RBX: 00007fa9ff215fa0 RCX: 00007fa9fef9ce59 [ 260.261646][ T8795] RDX: 0000000000040400 RSI: 00002000000003c0 RDI: 0000000000000003 [ 260.269742][ T8795] RBP: 00007fa9ffe46090 R08: 0000000000000000 R09: 0000000000000000 [ 260.277751][ T8795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.285726][ T8795] R13: 00007fa9ff216038 R14: 00007fa9ff215fa0 R15: 00007fff6f937d28 [ 260.293838][ T8795] [ 260.983523][ T8811] netlink: 'syz.2.959': attribute type 9 has an invalid length. [ 260.992241][ T8811] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.959'. [ 262.386928][ T8820] netlink: 'syz.1.961': attribute type 9 has an invalid length. [ 262.413002][ T8820] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.961'. [ 262.463784][ T8820] netlink: 'syz.1.961': attribute type 8 has an invalid length. [ 263.187241][ T8833] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 263.197442][ T8833] team0: Device nlmon0 is of different type [ 264.361962][ T8854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.369428][ T8854] IPv6: NLM_F_CREATE should be set when creating new route [ 264.639105][ T8859] netlink: 'syz.3.976': attribute type 21 has an invalid length. [ 264.647089][ T8859] netlink: 'syz.3.976': attribute type 30 has an invalid length. [ 265.128575][ T8860] delete_channel: no stack [ 265.151290][ T8849] Driver unsupported XDP return value 0 on prog (id 684) dev N/A, expect packet loss! [ 265.383556][ T8867] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 265.394258][ T8867] team0: Device nlmon0 is of different type [ 266.706646][ T8892] netlink: 'syz.0.987': attribute type 2 has an invalid length. [ 266.727356][ T8892] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.987'. [ 267.045951][ T8903] netlink: 'syz.0.990': attribute type 10 has an invalid length. [ 267.391705][ T8914] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 267.437839][ T8913] netlink: 'syz.2.996': attribute type 10 has an invalid length. [ 267.446507][ T8913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.996'. [ 267.456101][ T8913] team0: entered promiscuous mode [ 267.464869][ T8913] team_slave_0: entered promiscuous mode [ 267.471603][ T8913] team_slave_1: entered promiscuous mode [ 267.479287][ T8913] team0: entered allmulticast mode [ 267.484649][ T8913] team_slave_0: entered allmulticast mode [ 267.491465][ T8913] team_slave_1: entered allmulticast mode [ 267.507895][ T8913] .`: (slave team0): Releasing backup interface [ 267.620217][ T8913] bridge0: port 4(team0) entered blocking state [ 267.634203][ T8913] bridge0: port 4(team0) entered disabled state [ 267.793504][ T8913] syz.2.996 (8913) used greatest stack depth: 16584 bytes left [ 269.284815][ T8963] syz.1.1013: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 269.301744][ T8963] CPU: 1 PID: 8963 Comm: syz.1.1013 Not tainted syzkaller #0 [ 269.309206][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.319296][ T8963] Call Trace: [ 269.322610][ T8963] [ 269.325590][ T8963] dump_stack_lvl+0x18c/0x250 [ 269.330313][ T8963] ? show_regs_print_info+0x20/0x20 [ 269.335549][ T8963] ? load_image+0x420/0x420 [ 269.340106][ T8963] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 269.346554][ T8963] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 269.353091][ T8963] warn_alloc+0x246/0x340 [ 269.357482][ T8963] ? stack_trace_save+0xaa/0x100 [ 269.362455][ T8963] ? zone_watermark_ok_safe+0x230/0x230 [ 269.368059][ T8963] ? kasan_set_track+0x5f/0x70 [ 269.372869][ T8963] ? kasan_set_track+0x4e/0x70 [ 269.377663][ T8963] ? __kasan_kmalloc+0x8f/0xa0 [ 269.382459][ T8963] ? xsk_init_queue+0xad/0x100 [ 269.387278][ T8963] ? xsk_setsockopt+0x4e5/0x760 [ 269.392162][ T8963] ? do_sock_setsockopt+0x175/0x1a0 [ 269.397402][ T8963] ? __x64_sys_setsockopt+0x182/0x200 [ 269.402866][ T8963] __vmalloc_node_range+0x126/0x1330 [ 269.408252][ T8963] ? free_vm_area+0x50/0x50 [ 269.412832][ T8963] vmalloc_user+0x74/0x80 [ 269.417244][ T8963] ? xskq_create+0xbf/0x170 [ 269.421777][ T8963] xskq_create+0xbf/0x170 [ 269.426116][ T8963] xsk_init_queue+0xad/0x100 [ 269.430731][ T8963] xsk_setsockopt+0x4e5/0x760 [ 269.435417][ T8963] ? xsk_poll+0x680/0x680 [ 269.439751][ T8963] ? __fget_files+0x28/0x4b0 [ 269.444429][ T8963] ? __fget_files+0x28/0x4b0 [ 269.449186][ T8963] ? aa_sock_opt_perm+0x74/0x100 [ 269.454149][ T8963] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 269.459854][ T8963] ? security_socket_setsockopt+0x7e/0xa0 [ 269.465648][ T8963] ? xsk_poll+0x680/0x680 [ 269.470012][ T8963] do_sock_setsockopt+0x175/0x1a0 [ 269.475098][ T8963] ? __fdget+0x180/0x210 [ 269.479379][ T8963] __x64_sys_setsockopt+0x182/0x200 [ 269.484599][ T8963] do_syscall_64+0x55/0xb0 [ 269.489052][ T8963] ? clear_bhb_loop+0x40/0x90 [ 269.493750][ T8963] ? clear_bhb_loop+0x40/0x90 [ 269.498458][ T8963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.504413][ T8963] RIP: 0033:0x7efd2739ce59 [ 269.508861][ T8963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.528677][ T8963] RSP: 002b:00007efd281b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.537158][ T8963] RAX: ffffffffffffffda RBX: 00007efd27615fa0 RCX: 00007efd2739ce59 [ 269.545145][ T8963] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 269.553141][ T8963] RBP: 00007efd27432d6f R08: 0000000000000004 R09: 0000000000000000 [ 269.561129][ T8963] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 269.569204][ T8963] R13: 00007efd27616038 R14: 00007efd27615fa0 R15: 00007ffcc6896e78 [ 269.577218][ T8963] [ 269.626179][ T8963] Mem-Info: [ 269.630151][ T8963] active_anon:5711 inactive_anon:0 isolated_anon:0 [ 269.630151][ T8963] active_file:16940 inactive_file:40022 isolated_file:0 [ 269.630151][ T8963] unevictable:768 dirty:103 writeback:0 [ 269.630151][ T8963] slab_reclaimable:10062 slab_unreclaimable:93735 [ 269.630151][ T8963] mapped:24293 shmem:1361 pagetables:618 [ 269.630151][ T8963] sec_pagetables:0 bounce:0 [ 269.630151][ T8963] kernel_misc_reclaimable:0 [ 269.630151][ T8963] free:1342167 free_pcp:14340 free_cma:0 [ 269.695122][ T8963] Node 0 active_anon:22844kB inactive_anon:0kB active_file:67760kB inactive_file:159888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97172kB dirty:412kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10892kB pagetables:2372kB sec_pagetables:0kB all_unreclaimable? no [ 269.774590][ T8963] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 269.828148][ T8963] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.888077][ T8963] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 269.894372][ T8963] Node 0 DMA32 free:1459368kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22808kB inactive_anon:0kB active_file:67760kB inactive_file:159056kB unevictable:1536kB writepending:412kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:37340kB local_pcp:20168kB free_cma:0kB [ 269.951910][ T8963] lowmem_reserve[]: 0 0 0 0 0 [ 269.956803][ T8963] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.995452][ T8963] lowmem_reserve[]: 0 0 0 0 0 [ 270.005727][ T8963] Node 1 Normal free:3892368kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21280kB local_pcp:9632kB free_cma:0kB [ 270.093045][ T8963] lowmem_reserve[]: 0 0 0 0 0 [ 270.098017][ T8963] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.133342][ T8963] Node 0 DMA32: 764*4kB (M) 1299*8kB (UM) 900*16kB (UME) 572*32kB (UME) 338*64kB (UME) 60*128kB (UME) 16*256kB (ME) 11*512kB (UM) 14*1024kB (ME) 7*2048kB (UME) 328*4096kB (M) = 1457352kB [ 270.158945][ T8963] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 270.192499][ T8963] Node 1 Normal: 256*4kB (UME) 62*8kB (UME) 54*16kB (UME) 102*32kB (UME) 32*64kB (UME) 9*128kB (UME) 2*256kB (UM) 0*512kB 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3892368kB [ 270.242673][ T8963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.311742][ T8963] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.332738][ T8963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.353343][ T8977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.363511][ T8963] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.413733][ T8963] 58323 total pagecache pages [ 270.428070][ T8963] 0 pages in swap cache [ 270.438323][ T8963] Free swap = 124996kB [ 270.458555][ T8963] Total swap = 124996kB [ 270.462791][ T8963] 2097051 pages RAM [ 270.476889][ T8963] 0 pages HighMem/MovableOnly [ 270.501986][ T8963] 416933 pages reserved [ 270.506232][ T8963] 0 pages cma reserved [ 270.635542][ T8987] sctp: [Deprecated]: syz.3.1022 (pid 8987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.635542][ T8987] Use struct sctp_sack_info instead [ 270.701191][ T8988] netlink: 'syz.0.1021': attribute type 10 has an invalid length. [ 270.734080][ T8988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1021'. [ 270.744395][ T8988] bridge0: port 3(ipvlan1) entered blocking state [ 270.752666][ T8988] bridge0: port 3(ipvlan1) entered disabled state [ 270.760426][ T8988] ipvlan1: entered allmulticast mode [ 270.765912][ T8988] veth0_vlan: entered allmulticast mode [ 270.787648][ T8988] ipvlan1: left allmulticast mode [ 270.793480][ T8988] veth0_vlan: left allmulticast mode [ 270.800026][ T8988] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 271.945792][ T9015] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1031'. [ 271.971987][ T9015] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1031'. [ 272.012288][ T9016] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1031'. [ 272.064031][ T9014] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1031'. [ 272.207686][ T9022] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1035'. [ 272.336098][ T9026] syzkaller0: entered promiscuous mode [ 272.341941][ T9026] syzkaller0: entered allmulticast mode [ 273.195300][ T9039] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1040'. [ 273.234970][ T9039] openvswitch: netlink: Key type 4112 is out of range max 32 [ 275.017254][ T9046] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 275.050555][ T9046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1042'. [ 275.089277][ T9046] team0: entered promiscuous mode [ 275.094676][ T9046] team_slave_0: entered promiscuous mode [ 275.123665][ T9046] team_slave_1: entered promiscuous mode [ 275.167577][ T9046] team0: entered allmulticast mode [ 275.208541][ T9046] team_slave_0: entered allmulticast mode [ 275.241135][ T9046] team_slave_1: entered allmulticast mode [ 275.341230][ T9046] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.544170][ T9046] .`: (slave team0): Releasing backup interface [ 276.205121][ T9046] bridge0: port 3(team0) entered blocking state [ 276.248392][ T9046] bridge0: port 3(team0) entered disabled state [ 276.505139][ T9046] syz.0.1042 (9046) used greatest stack depth: 16552 bytes left [ 276.941380][ T9062] netlink: 'syz.0.1047': attribute type 33 has an invalid length. [ 276.968417][ T9062] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1047'. [ 277.797790][ T9072] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1050'. [ 277.813809][ T9072] openvswitch: netlink: Key type 4112 is out of range max 32 [ 278.659770][ T9092] netlink: 'syz.0.1058': attribute type 10 has an invalid length. [ 278.699248][ T9092] nlmon0: entered promiscuous mode [ 278.704705][ T9092] nlmon0: entered allmulticast mode [ 278.723813][ T9092] team0: Device nlmon0 is of different type [ 278.741203][ T9094] netlink: 'syz.2.1059': attribute type 4 has an invalid length. [ 278.879060][ T9101] FAULT_INJECTION: forcing a failure. [ 278.879060][ T9101] name failslab, interval 1, probability 0, space 0, times 0 [ 278.908187][ T9101] CPU: 0 PID: 9101 Comm: syz.3.1062 Not tainted syzkaller #0 [ 278.915655][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.925740][ T9101] Call Trace: [ 278.929034][ T9101] [ 278.931976][ T9101] dump_stack_lvl+0x18c/0x250 [ 278.936690][ T9101] ? show_regs_print_info+0x20/0x20 [ 278.941911][ T9101] ? load_image+0x420/0x420 [ 278.946426][ T9101] ? __might_sleep+0xe0/0xe0 [ 278.951033][ T9101] ? __lock_acquire+0x7d40/0x7d40 [ 278.956078][ T9101] should_fail_ex+0x39d/0x4d0 [ 278.960779][ T9101] should_failslab+0x9/0x20 [ 278.965302][ T9101] slab_pre_alloc_hook+0x59/0x310 [ 278.970367][ T9101] ? rtnl_newlink+0x10d/0x20a0 [ 278.975170][ T9101] __kmem_cache_alloc_node+0x53/0x250 [ 278.980577][ T9101] ? rtnl_newlink+0x10d/0x20a0 [ 278.985390][ T9101] kmalloc_trace+0x2a/0xe0 [ 278.989831][ T9101] ? rtnl_setlink+0x4e0/0x4e0 [ 278.994542][ T9101] rtnl_newlink+0x10d/0x20a0 [ 278.999168][ T9101] ? __mutex_trylock_common+0x159/0x260 [ 279.004723][ T9101] ? rtnl_setlink+0x4e0/0x4e0 [ 279.009413][ T9101] ? trace_raw_output_contention_end+0xd0/0xd0 [ 279.015671][ T9101] ? rcu_is_watching+0x15/0xb0 [ 279.020452][ T9101] ? trace_contention_end+0x39/0xe0 [ 279.025665][ T9101] ? __mutex_lock+0x315/0xcc0 [ 279.030359][ T9101] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 279.035485][ T9101] ? mutex_lock_nested+0x20/0x20 [ 279.040535][ T9101] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 279.045661][ T9101] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 279.050789][ T9101] ? rtnl_setlink+0x4e0/0x4e0 [ 279.055563][ T9101] rtnetlink_rcv_msg+0x869/0xfa0 [ 279.060542][ T9101] ? rtnetlink_bind+0x80/0x80 [ 279.065229][ T9101] ? mark_lock+0x94/0x320 [ 279.069596][ T9101] ? __lock_acquire+0x1273/0x7d40 [ 279.074632][ T9101] ? __kernel_text_address+0xd/0x30 [ 279.079850][ T9101] ? mark_lock+0x94/0x320 [ 279.084200][ T9101] ? mark_lock+0x94/0x320 [ 279.088553][ T9101] ? __lock_acquire+0x1273/0x7d40 [ 279.093602][ T9101] ? kmalloc_reserve+0x95/0x240 [ 279.098489][ T9101] ? verify_lock_unused+0x140/0x140 [ 279.103699][ T9101] ? verify_lock_unused+0x140/0x140 [ 279.108925][ T9101] netlink_rcv_skb+0x241/0x4d0 [ 279.113705][ T9101] ? rtnetlink_bind+0x80/0x80 [ 279.118406][ T9101] ? netlink_ack+0x1180/0x1180 [ 279.123192][ T9101] ? __lock_acquire+0x7d40/0x7d40 [ 279.128241][ T9101] ? net_generic+0x1e/0x240 [ 279.132814][ T9101] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.138046][ T9101] netlink_unicast+0x751/0x8d0 [ 279.142834][ T9101] netlink_sendmsg+0x8d0/0xbf0 [ 279.147616][ T9101] ? netlink_getsockopt+0x590/0x590 [ 279.152830][ T9101] ? aa_sock_msg_perm+0x94/0x150 [ 279.157791][ T9101] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 279.163097][ T9101] ? security_socket_sendmsg+0x80/0xa0 [ 279.168586][ T9101] ? netlink_getsockopt+0x590/0x590 [ 279.173807][ T9101] ____sys_sendmsg+0x5ba/0x960 [ 279.178590][ T9101] ? __asan_memset+0x22/0x40 [ 279.183195][ T9101] ? __sys_sendmsg_sock+0x30/0x30 [ 279.188239][ T9101] ? __import_iovec+0x5f2/0x850 [ 279.193106][ T9101] ? import_iovec+0x73/0xa0 [ 279.197621][ T9101] ___sys_sendmsg+0x2a6/0x360 [ 279.202396][ T9101] ? get_pid_task+0x20/0x1e0 [ 279.207009][ T9101] ? __sys_sendmsg+0x2a0/0x2a0 [ 279.211803][ T9101] ? __lock_acquire+0x7d40/0x7d40 [ 279.216949][ T9101] __se_sys_sendmsg+0x1c2/0x2b0 [ 279.221819][ T9101] ? __x64_sys_sendmsg+0x80/0x80 [ 279.226783][ T9101] ? lockdep_hardirqs_on+0x98/0x150 [ 279.232017][ T9101] do_syscall_64+0x55/0xb0 [ 279.236447][ T9101] ? clear_bhb_loop+0x40/0x90 [ 279.241141][ T9101] ? clear_bhb_loop+0x40/0x90 [ 279.245830][ T9101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.251745][ T9101] RIP: 0033:0x7ff13fd9ce59 [ 279.256178][ T9101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.275798][ T9101] RSP: 002b:00007ff140c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.284225][ T9101] RAX: ffffffffffffffda RBX: 00007ff140015fa0 RCX: 00007ff13fd9ce59 [ 279.292215][ T9101] RDX: 0000000000040400 RSI: 00002000000003c0 RDI: 0000000000000003 [ 279.300211][ T9101] RBP: 00007ff140c47090 R08: 0000000000000000 R09: 0000000000000000 [ 279.308196][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.316207][ T9101] R13: 00007ff140016038 R14: 00007ff140015fa0 R15: 00007fff9d2417c8 [ 279.324210][ T9101] [ 279.689113][ T9116] netlink: 'syz.1.1067': attribute type 10 has an invalid length. [ 279.716586][ T9111] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1061'. [ 279.729895][ T9116] team0: Device nlmon0 is of different type [ 279.747816][ T9111] openvswitch: netlink: Key type 4112 is out of range max 32 [ 280.177308][ T9132] netlink: 'syz.0.1070': attribute type 10 has an invalid length. [ 280.265160][ T9132] FAULT_INJECTION: forcing a failure. [ 280.265160][ T9132] name failslab, interval 1, probability 0, space 0, times 0 [ 280.347288][ T9132] CPU: 0 PID: 9132 Comm: syz.0.1070 Not tainted syzkaller #0 [ 280.354765][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.364868][ T9132] Call Trace: [ 280.368189][ T9132] [ 280.371153][ T9132] dump_stack_lvl+0x18c/0x250 [ 280.375885][ T9132] ? show_regs_print_info+0x20/0x20 [ 280.381129][ T9132] ? load_image+0x420/0x420 [ 280.385727][ T9132] ? __might_sleep+0xe0/0xe0 [ 280.390368][ T9132] ? __lock_acquire+0x7d40/0x7d40 [ 280.395429][ T9132] ? netdev_has_upper_dev+0x3b6/0x470 [ 280.400849][ T9132] should_fail_ex+0x39d/0x4d0 [ 280.405586][ T9132] should_failslab+0x9/0x20 [ 280.410140][ T9132] slab_pre_alloc_hook+0x59/0x310 [ 280.415217][ T9132] ? team_add_slave+0x2ce/0x29a0 [ 280.420197][ T9132] ? team_add_slave+0x2ce/0x29a0 [ 280.425172][ T9132] __kmem_cache_alloc_node+0x53/0x250 [ 280.430614][ T9132] ? team_add_slave+0x2ce/0x29a0 [ 280.435593][ T9132] __kmalloc+0xa4/0x230 [ 280.439798][ T9132] team_add_slave+0x2ce/0x29a0 [ 280.444615][ T9132] ? __local_bh_enable_ip+0x13a/0x1c0 [ 280.450040][ T9132] ? _local_bh_enable+0xa0/0xa0 [ 280.454942][ T9132] ? __dev_change_flags+0x6a0/0x6a0 [ 280.460179][ T9132] ? __dev_change_flags+0x4d4/0x6a0 [ 280.465415][ T9132] ? team_netpoll_cleanup+0xf0/0xf0 [ 280.470774][ T9132] ? vprintk_emit+0x53d/0x610 [ 280.475500][ T9132] ? dev_get_flags+0x1c0/0x1c0 [ 280.480309][ T9132] ? printk_sprint+0x460/0x460 [ 280.485121][ T9132] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 280.491059][ T9132] ? _raw_spin_unlock+0x40/0x40 [ 280.495958][ T9132] ? mutex_is_locked+0x12/0x40 [ 280.500765][ T9132] do_setlink+0xdfe/0x4130 [ 280.505231][ T9132] ? arch_stack_walk+0x160/0x190 [ 280.510225][ T9132] ? load_image+0x420/0x420 [ 280.514773][ T9132] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 280.520978][ T9132] ? stack_trace_save+0xaa/0x100 [ 280.525975][ T9132] ? __nla_validate_parse+0x2522/0x2ea0 [ 280.531595][ T9132] ? __nla_validate+0x50/0x50 [ 280.536372][ T9132] ? validate_linkmsg+0x719/0x910 [ 280.541460][ T9132] rtnl_newlink+0x17da/0x20a0 [ 280.546200][ T9132] ? rtnl_newlink+0x511/0x20a0 [ 280.551015][ T9132] ? rtnl_setlink+0x4e0/0x4e0 [ 280.555733][ T9132] ? trace_raw_output_contention_end+0xd0/0xd0 [ 280.561936][ T9132] ? rcu_is_watching+0x15/0xb0 [ 280.566755][ T9132] ? trace_contention_end+0x39/0xe0 [ 280.572012][ T9132] ? __mutex_lock+0x315/0xcc0 [ 280.576757][ T9132] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 280.581895][ T9132] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 280.587018][ T9132] ? rtnl_setlink+0x4e0/0x4e0 [ 280.591714][ T9132] rtnetlink_rcv_msg+0x869/0xfa0 [ 280.596676][ T9132] ? rtnetlink_bind+0x80/0x80 [ 280.601385][ T9132] ? mark_lock+0x94/0x320 [ 280.605778][ T9132] ? __lock_acquire+0x1273/0x7d40 [ 280.610832][ T9132] ? __kernel_text_address+0xd/0x30 [ 280.616055][ T9132] ? mark_lock+0x94/0x320 [ 280.620404][ T9132] ? mark_lock+0x94/0x320 [ 280.624753][ T9132] ? __lock_acquire+0x1273/0x7d40 [ 280.629800][ T9132] ? kmalloc_reserve+0x95/0x240 [ 280.634690][ T9132] ? verify_lock_unused+0x140/0x140 [ 280.639908][ T9132] ? verify_lock_unused+0x140/0x140 [ 280.645134][ T9132] netlink_rcv_skb+0x241/0x4d0 [ 280.649913][ T9132] ? rtnetlink_bind+0x80/0x80 [ 280.654695][ T9132] ? netlink_ack+0x1180/0x1180 [ 280.659481][ T9132] ? __lock_acquire+0x7d40/0x7d40 [ 280.664529][ T9132] ? net_generic+0x1e/0x240 [ 280.669060][ T9132] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.674288][ T9132] netlink_unicast+0x751/0x8d0 [ 280.679075][ T9132] netlink_sendmsg+0x8d0/0xbf0 [ 280.683897][ T9132] ? netlink_getsockopt+0x590/0x590 [ 280.689111][ T9132] ? aa_sock_msg_perm+0x94/0x150 [ 280.694068][ T9132] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 280.699367][ T9132] ? security_socket_sendmsg+0x80/0xa0 [ 280.704838][ T9132] ? netlink_getsockopt+0x590/0x590 [ 280.710049][ T9132] ____sys_sendmsg+0x5ba/0x960 [ 280.714939][ T9132] ? __asan_memset+0x22/0x40 [ 280.719548][ T9132] ? __sys_sendmsg_sock+0x30/0x30 [ 280.724583][ T9132] ? __import_iovec+0x5f2/0x850 [ 280.729454][ T9132] ? import_iovec+0x73/0xa0 [ 280.733971][ T9132] ___sys_sendmsg+0x2a6/0x360 [ 280.738752][ T9132] ? get_pid_task+0x20/0x1e0 [ 280.743363][ T9132] ? __sys_sendmsg+0x2a0/0x2a0 [ 280.748166][ T9132] ? __lock_acquire+0x7d40/0x7d40 [ 280.753224][ T9132] __se_sys_sendmsg+0x1c2/0x2b0 [ 280.758093][ T9132] ? __x64_sys_sendmsg+0x80/0x80 [ 280.763055][ T9132] ? lockdep_hardirqs_on+0x98/0x150 [ 280.768301][ T9132] do_syscall_64+0x55/0xb0 [ 280.772815][ T9132] ? clear_bhb_loop+0x40/0x90 [ 280.777498][ T9132] ? clear_bhb_loop+0x40/0x90 [ 280.782180][ T9132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.788089][ T9132] RIP: 0033:0x7f7afe79ce59 [ 280.792517][ T9132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.812140][ T9132] RSP: 002b:00007f7aff615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.820568][ T9132] RAX: ffffffffffffffda RBX: 00007f7afea15fa0 RCX: 00007f7afe79ce59 [ 280.828552][ T9132] RDX: 0000000000040400 RSI: 00002000000003c0 RDI: 0000000000000003 [ 280.836531][ T9132] RBP: 00007f7aff615090 R08: 0000000000000000 R09: 0000000000000000 [ 280.844513][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.852512][ T9132] R13: 00007f7afea16038 R14: 00007f7afea15fa0 R15: 00007ffd01428518 [ 280.860515][ T9132] [ 281.201122][ T9143] netlink: 'syz.3.1074': attribute type 10 has an invalid length. [ 281.251692][ T9143] team0: Device nlmon0 is of different type [ 281.296188][ T9140] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1072'. [ 281.468351][ T9140] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 281.535353][ T9145] netlink: 'syz.2.1073': attribute type 10 has an invalid length. [ 281.629401][ T9147] netlink: 'syz.1.1075': attribute type 29 has an invalid length. [ 281.641158][ T9145] nlmon0: entered promiscuous mode [ 281.652594][ T9145] nlmon0: entered allmulticast mode [ 281.662085][ T9145] team0: Device nlmon0 is of different type [ 281.719911][ T9151] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1075'. [ 281.730977][ T9153] netlink: 'syz.3.1077': attribute type 4 has an invalid length. [ 281.741249][ T9153] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1077'. [ 281.751554][ T9153] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 281.774855][ T9147] netlink: 'syz.1.1075': attribute type 29 has an invalid length. [ 282.132087][ T9159] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1079'. [ 282.143946][ T9159] openvswitch: netlink: Key type 4112 is out of range max 32 [ 282.628766][ T9165] validate_nla: 3 callbacks suppressed [ 282.628786][ T9165] netlink: 'syz.0.1081': attribute type 10 has an invalid length. [ 282.681844][ T9165] hsr_slave_0: left promiscuous mode [ 282.723299][ T9165] hsr_slave_1: left promiscuous mode [ 283.786871][ T9191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.794267][ T9191] IPv6: NLM_F_CREATE should be set when creating new route [ 283.940012][ T9191] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 283.948620][ T9191] syzkaller1: linktype set to 769 [ 283.963996][ T9193] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1089'. [ 283.977705][ T9193] openvswitch: netlink: Key type 4112 is out of range max 32 [ 284.068765][ T9188] delete_channel: no stack [ 284.400887][ T9199] netlink: 'syz.1.1093': attribute type 29 has an invalid length. [ 284.421006][ T9199] netlink: 'syz.1.1093': attribute type 29 has an invalid length. [ 284.435301][ T9202] netlink: 'syz.1.1093': attribute type 29 has an invalid length. [ 284.593478][ T9202] netlink: 'syz.1.1093': attribute type 1 has an invalid length. [ 284.618581][ T9202] netlink: 'syz.1.1093': attribute type 3 has an invalid length. [ 284.648660][ T9202] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1093'. [ 285.631566][ T9212] netlink: 'syz.1.1097': attribute type 2 has an invalid length. [ 285.639897][ T9212] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1097'. [ 285.904993][ T9216] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1099'. [ 285.916858][ T9216] openvswitch: netlink: Key type 4112 is out of range max 32 [ 286.755033][ T9240] netlink: 'syz.3.1103': attribute type 10 has an invalid length. [ 287.120291][ T9250] delete_channel: no stack [ 287.436028][ T9253] delete_channel: no stack [ 288.121068][ T9272] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1115'. [ 288.132576][ T9272] openvswitch: netlink: Key type 4112 is out of range max 32 [ 288.401817][ T9287] netlink: 'syz.3.1119': attribute type 29 has an invalid length. [ 288.413672][ T9287] netlink: 'syz.3.1119': attribute type 29 has an invalid length. [ 288.440576][ T9287] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1119'. [ 288.466593][ T9287] netlink: 'syz.3.1119': attribute type 29 has an invalid length. [ 288.492487][ T9287] netlink: 'syz.3.1119': attribute type 29 has an invalid length. [ 288.587769][ T9287] netlink: 'syz.3.1119': attribute type 29 has an invalid length. [ 291.429785][ T9308] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1125'. [ 291.466321][ T9308] openvswitch: netlink: Key type 4112 is out of range max 32 [ 291.866854][ T9313] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1127'. [ 291.903030][ T9313] openvswitch: netlink: Key type 4112 is out of range max 32 [ 292.369305][ T9336] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1134'. [ 292.395772][ T9336] openvswitch: netlink: Key type 4112 is out of range max 32 [ 293.112101][ T9351] netlink: 'syz.2.1139': attribute type 29 has an invalid length. [ 293.128378][ T9351] netlink: 'syz.2.1139': attribute type 29 has an invalid length. [ 293.183064][ T9351] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1139'. [ 293.230468][ T9351] netlink: 'syz.2.1139': attribute type 29 has an invalid length. [ 293.275381][ T9351] netlink: 'syz.2.1139': attribute type 29 has an invalid length. [ 293.291951][ T9351] netlink: 'syz.2.1139': attribute type 29 has an invalid length. [ 293.672911][ T9365] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1145'. [ 293.814917][ T9365] netlink: 'syz.3.1145': attribute type 10 has an invalid length. [ 294.536764][ T9378] netlink: 'syz.2.1150': attribute type 10 has an invalid length. [ 294.584958][ T9378] veth0_vlan: left promiscuous mode [ 294.634191][ T9378] veth0_vlan: entered promiscuous mode [ 294.690441][ T9378] team0: Device veth0_vlan failed to register rx_handler [ 295.121153][ T9384] netlink: 'syz.0.1151': attribute type 19 has an invalid length. [ 295.129352][ T9384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1151'. [ 295.161270][ T9391] netlink: 'syz.3.1155': attribute type 33 has an invalid length. [ 295.176138][ T9391] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1155'. [ 295.940501][ T9401] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1157'. [ 295.995253][ T9401] openvswitch: netlink: Key type 4112 is out of range max 32 [ 296.196700][ T9413] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1160'. [ 296.270401][ T9413] openvswitch: netlink: Key type 4112 is out of range max 32 [ 296.491916][ T9415] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1162'. [ 296.508654][ T9415] openvswitch: netlink: Key type 4112 is out of range max 32 [ 298.310743][ T9448] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1172'. [ 298.360580][ T9448] openvswitch: netlink: Key type 4112 is out of range max 32 [ 298.811698][ T9458] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1175'. [ 298.879128][ T9458] openvswitch: netlink: Key type 4112 is out of range max 32 [ 299.228958][ T9473] netlink: 'syz.2.1180': attribute type 4 has an invalid length. [ 299.240402][ T9473] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1180'. [ 299.376025][ T9477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1182'. [ 299.859098][ T9488] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 299.880847][ T9488] FAULT_INJECTION: forcing a failure. [ 299.880847][ T9488] name failslab, interval 1, probability 0, space 0, times 0 [ 299.896724][ T9488] CPU: 1 PID: 9488 Comm: syz.2.1186 Not tainted syzkaller #0 [ 299.904165][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.914248][ T9488] Call Trace: [ 299.917595][ T9488] [ 299.920548][ T9488] dump_stack_lvl+0x18c/0x250 [ 299.925249][ T9488] ? show_regs_print_info+0x20/0x20 [ 299.930463][ T9488] ? load_image+0x420/0x420 [ 299.935000][ T9488] ? __might_sleep+0xe0/0xe0 [ 299.939613][ T9488] ? __lock_acquire+0x7d40/0x7d40 [ 299.944672][ T9488] ? netdev_has_upper_dev+0x3b6/0x470 [ 299.950064][ T9488] should_fail_ex+0x39d/0x4d0 [ 299.954769][ T9488] should_failslab+0x9/0x20 [ 299.959291][ T9488] slab_pre_alloc_hook+0x59/0x310 [ 299.964339][ T9488] ? team_add_slave+0x2ce/0x29a0 [ 299.969289][ T9488] ? team_add_slave+0x2ce/0x29a0 [ 299.974238][ T9488] __kmem_cache_alloc_node+0x53/0x250 [ 299.979643][ T9488] ? team_add_slave+0x2ce/0x29a0 [ 299.984590][ T9488] __kmalloc+0xa4/0x230 [ 299.988775][ T9488] team_add_slave+0x2ce/0x29a0 [ 299.993554][ T9488] ? __local_bh_enable_ip+0x13a/0x1c0 [ 299.998945][ T9488] ? _local_bh_enable+0xa0/0xa0 [ 300.003813][ T9488] ? __dev_change_flags+0x6a0/0x6a0 [ 300.009024][ T9488] ? __dev_change_flags+0x4d4/0x6a0 [ 300.014235][ T9488] ? team_netpoll_cleanup+0xf0/0xf0 [ 300.019473][ T9488] ? vprintk_emit+0x53d/0x610 [ 300.024165][ T9488] ? dev_get_flags+0x1c0/0x1c0 [ 300.028961][ T9488] ? printk_sprint+0x460/0x460 [ 300.033766][ T9488] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 300.039679][ T9488] ? _raw_spin_unlock+0x40/0x40 [ 300.044548][ T9488] ? mutex_is_locked+0x12/0x40 [ 300.049420][ T9488] do_setlink+0xdfe/0x4130 [ 300.053859][ T9488] ? arch_stack_walk+0x160/0x190 [ 300.058814][ T9488] ? load_image+0x420/0x420 [ 300.063330][ T9488] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 300.069499][ T9488] ? stack_trace_save+0xaa/0x100 [ 300.074458][ T9488] ? __nla_validate_parse+0x2522/0x2ea0 [ 300.080037][ T9488] ? __nla_validate+0x50/0x50 [ 300.084751][ T9488] ? validate_linkmsg+0x719/0x910 [ 300.089792][ T9488] rtnl_newlink+0x17da/0x20a0 [ 300.094494][ T9488] ? rtnl_newlink+0x511/0x20a0 [ 300.099283][ T9488] ? rtnl_setlink+0x4e0/0x4e0 [ 300.103994][ T9488] ? trace_raw_output_contention_end+0xd0/0xd0 [ 300.110171][ T9488] ? rcu_is_watching+0x15/0xb0 [ 300.114949][ T9488] ? trace_contention_end+0x39/0xe0 [ 300.120168][ T9488] ? __mutex_lock+0x315/0xcc0 [ 300.124881][ T9488] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 300.130008][ T9488] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 300.135131][ T9488] ? rtnl_setlink+0x4e0/0x4e0 [ 300.139821][ T9488] rtnetlink_rcv_msg+0x869/0xfa0 [ 300.144779][ T9488] ? rtnetlink_bind+0x80/0x80 [ 300.149471][ T9488] ? mark_lock+0x94/0x320 [ 300.153816][ T9488] ? __lock_acquire+0x1273/0x7d40 [ 300.158857][ T9488] ? __kernel_text_address+0xd/0x30 [ 300.164076][ T9488] ? mark_lock+0x94/0x320 [ 300.168428][ T9488] ? mark_lock+0x94/0x320 [ 300.172773][ T9488] ? __lock_acquire+0x1273/0x7d40 [ 300.177824][ T9488] ? kmalloc_reserve+0x95/0x240 [ 300.182708][ T9488] ? verify_lock_unused+0x140/0x140 [ 300.187920][ T9488] ? verify_lock_unused+0x140/0x140 [ 300.193147][ T9488] netlink_rcv_skb+0x241/0x4d0 [ 300.197933][ T9488] ? rtnetlink_bind+0x80/0x80 [ 300.202644][ T9488] ? netlink_ack+0x1180/0x1180 [ 300.207431][ T9488] ? __lock_acquire+0x7d40/0x7d40 [ 300.212469][ T9488] ? net_generic+0x1e/0x240 [ 300.216993][ T9488] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.222207][ T9488] netlink_unicast+0x751/0x8d0 [ 300.227016][ T9488] netlink_sendmsg+0x8d0/0xbf0 [ 300.231820][ T9488] ? netlink_getsockopt+0x590/0x590 [ 300.237033][ T9488] ? aa_sock_msg_perm+0x94/0x150 [ 300.241988][ T9488] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 300.247313][ T9488] ? security_socket_sendmsg+0x80/0xa0 [ 300.252805][ T9488] ? netlink_getsockopt+0x590/0x590 [ 300.258017][ T9488] ____sys_sendmsg+0x5ba/0x960 [ 300.262802][ T9488] ? __asan_memset+0x22/0x40 [ 300.267406][ T9488] ? __sys_sendmsg_sock+0x30/0x30 [ 300.272442][ T9488] ? __import_iovec+0x5f2/0x850 [ 300.277333][ T9488] ? import_iovec+0x73/0xa0 [ 300.281855][ T9488] ___sys_sendmsg+0x2a6/0x360 [ 300.286581][ T9488] ? get_pid_task+0x20/0x1e0 [ 300.291216][ T9488] ? __sys_sendmsg+0x2a0/0x2a0 [ 300.296013][ T9488] ? __lock_acquire+0x7d40/0x7d40 [ 300.301074][ T9488] __se_sys_sendmsg+0x1c2/0x2b0 [ 300.305948][ T9488] ? __x64_sys_sendmsg+0x80/0x80 [ 300.311001][ T9488] ? lockdep_hardirqs_on+0x98/0x150 [ 300.316220][ T9488] do_syscall_64+0x55/0xb0 [ 300.320662][ T9488] ? clear_bhb_loop+0x40/0x90 [ 300.325350][ T9488] ? clear_bhb_loop+0x40/0x90 [ 300.330035][ T9488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.335964][ T9488] RIP: 0033:0x7fa9fef9ce59 [ 300.340391][ T9488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.360006][ T9488] RSP: 002b:00007fa9ffe46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.368453][ T9488] RAX: ffffffffffffffda RBX: 00007fa9ff215fa0 RCX: 00007fa9fef9ce59 [ 300.376437][ T9488] RDX: 0000000000040400 RSI: 00002000000003c0 RDI: 0000000000000003 [ 300.384443][ T9488] RBP: 00007fa9ffe46090 R08: 0000000000000000 R09: 0000000000000000 [ 300.392441][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.400512][ T9488] R13: 00007fa9ff216038 R14: 00007fa9ff215fa0 R15: 00007fff6f937d28 [ 300.408519][ T9488] [ 301.147824][ T9512] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 301.156349][ T9512] FAULT_INJECTION: forcing a failure. [ 301.156349][ T9512] name failslab, interval 1, probability 0, space 0, times 0 [ 301.170812][ T9512] CPU: 1 PID: 9512 Comm: syz.1.1194 Not tainted syzkaller #0 [ 301.178236][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.188331][ T9512] Call Trace: [ 301.191644][ T9512] [ 301.194604][ T9512] dump_stack_lvl+0x18c/0x250 [ 301.199328][ T9512] ? show_regs_print_info+0x20/0x20 [ 301.204603][ T9512] ? load_image+0x420/0x420 [ 301.209152][ T9512] ? __might_sleep+0xe0/0xe0 [ 301.213903][ T9512] ? __lock_acquire+0x7d40/0x7d40 [ 301.218991][ T9512] should_fail_ex+0x39d/0x4d0 [ 301.223730][ T9512] should_failslab+0x9/0x20 [ 301.228324][ T9512] slab_pre_alloc_hook+0x59/0x310 [ 301.233515][ T9512] kmem_cache_alloc_node+0x60/0x320 [ 301.238859][ T9512] ? __alloc_skb+0x103/0x2c0 [ 301.243500][ T9512] __alloc_skb+0x103/0x2c0 [ 301.247984][ T9512] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 301.253323][ T9512] ? __dev_open+0x38b/0x430 [ 301.257884][ T9512] rtmsg_ifinfo+0x8c/0x1a0 [ 301.262362][ T9512] dev_open+0xed/0x190 [ 301.266473][ T9512] ? netdev_notify_peers+0x180/0x180 [ 301.271806][ T9512] ? team_add_slave+0x2ce/0x29a0 [ 301.276804][ T9512] ? rcu_is_watching+0x15/0xb0 [ 301.281716][ T9512] ? team_add_slave+0x2ce/0x29a0 [ 301.286782][ T9512] ? __kmalloc+0xe2/0x230 [ 301.291136][ T9512] team_add_slave+0x75f/0x29a0 [ 301.295941][ T9512] ? __dev_change_flags+0x6a0/0x6a0 [ 301.301252][ T9512] ? __dev_change_flags+0x4d4/0x6a0 [ 301.306466][ T9512] ? team_netpoll_cleanup+0xf0/0xf0 [ 301.311683][ T9512] ? vprintk_emit+0x53d/0x610 [ 301.316389][ T9512] ? dev_get_flags+0x1c0/0x1c0 [ 301.321182][ T9512] ? printk_sprint+0x460/0x460 [ 301.325984][ T9512] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 301.331906][ T9512] ? _raw_spin_unlock+0x40/0x40 [ 301.336782][ T9512] ? mutex_is_locked+0x12/0x40 [ 301.341568][ T9512] do_setlink+0xdfe/0x4130 [ 301.346000][ T9512] ? arch_stack_walk+0x160/0x190 [ 301.350951][ T9512] ? load_image+0x420/0x420 [ 301.355482][ T9512] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 301.361648][ T9512] ? stack_trace_save+0xaa/0x100 [ 301.366610][ T9512] ? __nla_validate_parse+0x2522/0x2ea0 [ 301.372198][ T9512] ? __nla_validate+0x50/0x50 [ 301.376912][ T9512] ? validate_linkmsg+0x719/0x910 [ 301.381956][ T9512] rtnl_newlink+0x17da/0x20a0 [ 301.386674][ T9512] ? rtnl_newlink+0x511/0x20a0 [ 301.391473][ T9512] ? rtnl_setlink+0x4e0/0x4e0 [ 301.396159][ T9512] ? trace_raw_output_contention_end+0xd0/0xd0 [ 301.402325][ T9512] ? rcu_is_watching+0x15/0xb0 [ 301.407107][ T9512] ? trace_contention_end+0x39/0xe0 [ 301.412321][ T9512] ? __mutex_lock+0x315/0xcc0 [ 301.417063][ T9512] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 301.422277][ T9512] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 301.427422][ T9512] ? rtnl_setlink+0x4e0/0x4e0 [ 301.432111][ T9512] rtnetlink_rcv_msg+0x869/0xfa0 [ 301.437086][ T9512] ? rtnetlink_bind+0x80/0x80 [ 301.441874][ T9512] ? mark_lock+0x94/0x320 [ 301.446220][ T9512] ? __lock_acquire+0x1273/0x7d40 [ 301.451360][ T9512] ? __kernel_text_address+0xd/0x30 [ 301.456584][ T9512] ? mark_lock+0x94/0x320 [ 301.461101][ T9512] ? mark_lock+0x94/0x320 [ 301.465600][ T9512] ? __lock_acquire+0x1273/0x7d40 [ 301.470671][ T9512] ? kmalloc_reserve+0x95/0x240 [ 301.475640][ T9512] ? verify_lock_unused+0x140/0x140 [ 301.480871][ T9512] ? verify_lock_unused+0x140/0x140 [ 301.486107][ T9512] netlink_rcv_skb+0x241/0x4d0 [ 301.490890][ T9512] ? rtnetlink_bind+0x80/0x80 [ 301.495582][ T9512] ? netlink_ack+0x1180/0x1180 [ 301.500366][ T9512] ? __lock_acquire+0x7d40/0x7d40 [ 301.505487][ T9512] ? net_generic+0x1e/0x240 [ 301.510009][ T9512] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.515226][ T9512] netlink_unicast+0x751/0x8d0 [ 301.520032][ T9512] netlink_sendmsg+0x8d0/0xbf0 [ 301.524843][ T9512] ? netlink_getsockopt+0x590/0x590 [ 301.530069][ T9512] ? aa_sock_msg_perm+0x94/0x150 [ 301.535118][ T9512] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 301.540417][ T9512] ? security_socket_sendmsg+0x80/0xa0 [ 301.545884][ T9512] ? netlink_getsockopt+0x590/0x590 [ 301.551476][ T9512] ____sys_sendmsg+0x5ba/0x960 [ 301.556259][ T9512] ? __asan_memset+0x22/0x40 [ 301.560862][ T9512] ? __sys_sendmsg_sock+0x30/0x30 [ 301.565899][ T9512] ? __import_iovec+0x5f2/0x850 [ 301.570858][ T9512] ? import_iovec+0x73/0xa0 [ 301.575395][ T9512] ___sys_sendmsg+0x2a6/0x360 [ 301.580090][ T9512] ? get_pid_task+0x20/0x1e0 [ 301.584710][ T9512] ? __sys_sendmsg+0x2a0/0x2a0 [ 301.589507][ T9512] ? __lock_acquire+0x7d40/0x7d40 [ 301.594570][ T9512] __se_sys_sendmsg+0x1c2/0x2b0 [ 301.599436][ T9512] ? __x64_sys_sendmsg+0x80/0x80 [ 301.604398][ T9512] ? lockdep_hardirqs_on+0x98/0x150 [ 301.609621][ T9512] do_syscall_64+0x55/0xb0 [ 301.614050][ T9512] ? clear_bhb_loop+0x40/0x90 [ 301.618734][ T9512] ? clear_bhb_loop+0x40/0x90 [ 301.623425][ T9512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.629354][ T9512] RIP: 0033:0x7efd2739ce59 [ 301.633800][ T9512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.653516][ T9512] RSP: 002b:00007efd281b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.661946][ T9512] RAX: ffffffffffffffda RBX: 00007efd27615fa0 RCX: 00007efd2739ce59 [ 301.669955][ T9512] RDX: 0000000000040400 RSI: 00002000000003c0 RDI: 0000000000000003 [ 301.677942][ T9512] RBP: 00007efd281b7090 R08: 0000000000000000 R09: 0000000000000000 [ 301.685940][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.693917][ T9512] R13: 00007efd27616038 R14: 00007efd27615fa0 R15: 00007ffcc6896e78 [ 301.701917][ T9512] [ 301.741259][ T9512] team0: Device nlmon0 is of different type [ 301.908159][ T9522] netlink: 'syz.3.1198': attribute type 10 has an invalid length. [ 301.945267][ T9522] team0: Device nlmon0 is of different type [ 302.183801][ T9531] netlink: 'syz.2.1202': attribute type 4 has an invalid length. [ 302.228073][ T9531] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1202'. [ 302.246680][ T9531] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 302.551909][ T9540] netlink: 'syz.2.1204': attribute type 10 has an invalid length. [ 302.571821][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.618379][ T9540] bridge_slave_1: left allmulticast mode [ 302.636135][ T9540] bridge_slave_1: left promiscuous mode [ 302.645198][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.675967][ T9540] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 302.699110][ T9546] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 302.893919][ T9546] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.932965][ T9546] bridge_slave_1: left allmulticast mode [ 302.966811][ T9546] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.242203][ T9546] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 303.266228][ T9548] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 303.286479][ T9548] team0: Device nlmon0 is of different type [ 303.315034][ T9558] netlink: 'syz.2.1209': attribute type 21 has an invalid length. [ 303.338429][ T9558] netlink: 'syz.2.1209': attribute type 30 has an invalid length. [ 304.146097][ T9582] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1218'. [ 304.262832][ T9586] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1219'. [ 304.317409][ T9586] validate_nla: 5 callbacks suppressed [ 304.317446][ T9586] netlink: 'syz.0.1219': attribute type 29 has an invalid length. [ 304.390974][ T9590] netlink: 'syz.3.1222': attribute type 46 has an invalid length. [ 304.429109][ T9590] netlink: 'syz.3.1222': attribute type 46 has an invalid length. [ 304.550258][ T9591] netlink: 'syz.2.1221': attribute type 4 has an invalid length. [ 304.601952][ T9591] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1221'. [ 305.101139][ T9597] netlink: 'syz.0.1224': attribute type 10 has an invalid length. [ 305.221725][ T9597] veth0_vlan: left promiscuous mode [ 305.264446][ T9597] veth0_vlan: entered promiscuous mode [ 305.288441][ T9597] team0: Device veth0_vlan failed to register rx_handler [ 305.603419][ T9606] netlink: 'syz.2.1228': attribute type 9 has an invalid length. [ 305.635813][ T9606] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1228'. [ 305.717814][ T9609] netlink: 'syz.1.1229': attribute type 29 has an invalid length. [ 305.722649][ T9611] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1229'. [ 305.768959][ T9609] netlink: 'syz.1.1229': attribute type 29 has an invalid length. [ 305.791481][ T9609] netlink: 'syz.1.1229': attribute type 29 has an invalid length. [ 305.841554][ T9609] netlink: 'syz.1.1229': attribute type 29 has an invalid length. [ 306.596949][ T9621] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1233'. [ 306.898883][ T9629] team0: Port device ..ãc¤± added [ 307.164724][ T9635] delete_channel: no stack [ 307.594613][ T9647] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1243'. [ 307.631128][ T9647] openvswitch: netlink: Key type 4112 is out of range max 32 [ 307.902055][ T9657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1245'. [ 308.252992][ T9656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1246'. [ 309.026456][ T9686] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1256'. [ 309.078013][ T9686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1256'. [ 309.151412][ T9684] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1255'. [ 309.162493][ T9684] openvswitch: netlink: Key type 4112 is out of range max 32 [ 310.073742][ T9705] validate_nla: 19 callbacks suppressed [ 310.073781][ T9705] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 310.171494][ T9705] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 310.285259][ T9709] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 310.300994][ T9710] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 310.768910][ T9715] netlink: 'syz.1.1271': attribute type 29 has an invalid length. [ 310.785987][ T9713] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1263'. [ 310.809784][ T9715] netlink: 'syz.1.1271': attribute type 29 has an invalid length. [ 310.809835][ T9713] openvswitch: netlink: Key type 4112 is out of range max 32 [ 310.836509][ T9716] netlink: 'syz.1.1271': attribute type 29 has an invalid length. [ 310.845957][ T9718] netlink: 'syz.1.1271': attribute type 29 has an invalid length. [ 311.448736][ T9727] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1267'. [ 311.469802][ T9727] openvswitch: netlink: Key type 4112 is out of range max 32 [ 312.185815][ T9731] netlink: 'syz.3.1268': attribute type 2 has an invalid length. [ 312.316701][ T9733] netlink: 'syz.3.1268': attribute type 29 has an invalid length. [ 312.344071][ T9733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1268'. [ 312.810558][ T9751] sctp: [Deprecated]: syz.2.1274 (pid 9751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.810558][ T9751] Use struct sctp_sack_info instead [ 312.849340][ T9747] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1275'. [ 312.861912][ T9747] openvswitch: netlink: Key type 4112 is out of range max 32 [ 312.959311][ T9757] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1277'. [ 313.189669][ T9760] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1278'. [ 313.222927][ T9760] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1278'. [ 313.380757][ T9764] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1280'. [ 313.424183][ T9764] openvswitch: netlink: Key type 4112 is out of range max 32 [ 313.751777][ T9773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1282'. [ 314.946528][ T9786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1285'. [ 315.520817][ T9799] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1290'. [ 315.531729][ T9799] openvswitch: netlink: Key type 4112 is out of range max 32 [ 315.747200][ T9807] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1294'. [ 315.831547][ T9807] validate_nla: 12 callbacks suppressed [ 315.831568][ T9807] netlink: 'syz.0.1294': attribute type 10 has an invalid length. [ 316.752879][ T9836] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1303'. [ 316.773055][ T9836] openvswitch: netlink: Key type 4112 is out of range max 32 [ 317.480951][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.487424][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.836482][ T9861] netlink: 'syz.2.1309': attribute type 28 has an invalid length. [ 317.844883][ T9861] netlink: 'syz.2.1309': attribute type 29 has an invalid length. [ 318.622826][ T9875] __nla_validate_parse: 2 callbacks suppressed [ 318.622894][ T9875] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1314'. [ 318.640400][ T9875] openvswitch: netlink: Key type 4112 is out of range max 32 [ 318.940801][ T9885] netlink: 'syz.1.1319': attribute type 10 has an invalid length. [ 318.951129][ T9885] team0: Device nlmon0 is of different type [ 319.144904][ T9891] netlink: 'syz.1.1322': attribute type 4 has an invalid length. [ 319.158254][ T9891] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1322'. [ 319.569522][ T9897] __sock_release: fasync list not empty! [ 319.598777][ T9904] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1326'. [ 319.610141][ T9904] openvswitch: netlink: Key type 4112 is out of range max 32 [ 324.836330][ T9930] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1335'. [ 324.878287][ T9930] openvswitch: netlink: Key type 4112 is out of range max 32 [ 325.031033][ T9938] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 325.039572][ T9938] FAULT_INJECTION: forcing a failure. [ 325.039572][ T9938] name failslab, interval 1, probability 0, space 0, times 0 [ 325.052666][ T9938] CPU: 1 PID: 9938 Comm: syz.0.1338 Not tainted syzkaller #0 [ 325.060524][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.070627][ T9938] Call Trace: [ 325.073940][ T9938] [ 325.076898][ T9938] dump_stack_lvl+0x18c/0x250 [ 325.081633][ T9938] ? show_regs_print_info+0x20/0x20 [ 325.086881][ T9938] ? load_image+0x420/0x420 [ 325.091436][ T9938] ? __might_sleep+0xe0/0xe0 [ 325.096065][ T9938] ? __lock_acquire+0x7d40/0x7d40 [ 325.101130][ T9938] should_fail_ex+0x39d/0x4d0 [ 325.105861][ T9938] should_failslab+0x9/0x20 [ 325.110408][ T9938] slab_pre_alloc_hook+0x59/0x310 [ 325.115494][ T9938] kmem_cache_alloc_node+0x60/0x320 [ 325.120740][ T9938] ? __alloc_skb+0x103/0x2c0 [ 325.125388][ T9938] __alloc_skb+0x103/0x2c0 [ 325.129845][ T9938] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 325.135147][ T9938] ? __dev_open+0x38b/0x430 [ 325.139675][ T9938] rtmsg_ifinfo+0x8c/0x1a0 [ 325.144106][ T9938] dev_open+0xed/0x190 [ 325.148192][ T9938] ? netdev_notify_peers+0x180/0x180 [ 325.153494][ T9938] ? team_add_slave+0x2ce/0x29a0 [ 325.158449][ T9938] ? rcu_is_watching+0x15/0xb0 [ 325.163229][ T9938] ? team_add_slave+0x2ce/0x29a0 [ 325.168181][ T9938] ? __kmalloc+0xe2/0x230 [ 325.172532][ T9938] team_add_slave+0x75f/0x29a0 [ 325.177334][ T9938] ? __dev_change_flags+0x6a0/0x6a0 [ 325.182539][ T9938] ? __dev_change_flags+0x4d4/0x6a0 [ 325.187743][ T9938] ? team_netpoll_cleanup+0xf0/0xf0 [ 325.192951][ T9938] ? vprintk_emit+0x53d/0x610 [ 325.197641][ T9938] ? dev_get_flags+0x1c0/0x1c0 [ 325.202413][ T9938] ? printk_sprint+0x460/0x460 [ 325.207218][ T9938] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 325.213150][ T9938] ? _raw_spin_unlock+0x40/0x40 [ 325.218046][ T9938] ? mutex_is_locked+0x12/0x40 [ 325.222856][ T9938] do_setlink+0xdfe/0x4130 [ 325.227300][ T9938] ? arch_stack_walk+0x160/0x190 [ 325.232271][ T9938] ? load_image+0x420/0x420 [ 325.236792][ T9938] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 325.242963][ T9938] ? stack_trace_save+0xaa/0x100 [ 325.247923][ T9938] ? __nla_validate_parse+0x2522/0x2ea0 [ 325.253498][ T9938] ? __nla_validate+0x50/0x50 [ 325.258218][ T9938] ? validate_linkmsg+0x719/0x910 [ 325.263280][ T9938] rtnl_newlink+0x17da/0x20a0 [ 325.267985][ T9938] ? rtnl_newlink+0x511/0x20a0 [ 325.272791][ T9938] ? rtnl_setlink+0x4e0/0x4e0 [ 325.277501][ T9938] ? __rwlock_init+0x150/0x150 [ 325.282284][ T9938] ? do_raw_spin_unlock+0x121/0x230 [ 325.287497][ T9938] ? __mutex_lock+0x956/0xcc0 [ 325.292274][ T9938] ? __mutex_lock+0x4f9/0xcc0 [ 325.296979][ T9938] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 325.302106][ T9938] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 325.307239][ T9938] ? rtnl_setlink+0x4e0/0x4e0 [ 325.312014][ T9938] rtnetlink_rcv_msg+0x869/0xfa0 [ 325.316972][ T9938] ? rtnetlink_bind+0x80/0x80 [ 325.321659][ T9938] ? mark_lock+0x94/0x320 [ 325.326005][ T9938] ? __lock_acquire+0x1273/0x7d40 [ 325.331043][ T9938] ? __kernel_text_address+0xd/0x30 [ 325.336312][ T9938] ? mark_lock+0x94/0x320 [ 325.340705][ T9938] ? mark_lock+0x94/0x320 [ 325.345066][ T9938] ? __lock_acquire+0x1273/0x7d40 [ 325.350121][ T9938] ? kmalloc_reserve+0x95/0x240 [ 325.354986][ T9938] ? verify_lock_unused+0x140/0x140 [ 325.360202][ T9938] ? verify_lock_unused+0x140/0x140 [ 325.365432][ T9938] netlink_rcv_skb+0x241/0x4d0 [ 325.370232][ T9938] ? rtnetlink_bind+0x80/0x80 [ 325.374930][ T9938] ? netlink_ack+0x1180/0x1180 [ 325.379720][ T9938] ? __lock_acquire+0x7d40/0x7d40 [ 325.384762][ T9938] ? net_generic+0x1e/0x240 [ 325.389281][ T9938] ? netlink_deliver_tap+0x2e/0x1b0 [ 325.394495][ T9938] netlink_unicast+0x751/0x8d0 [ 325.399281][ T9938] netlink_sendmsg+0x8d0/0xbf0 [ 325.404094][ T9938] ? netlink_getsockopt+0x590/0x590 [ 325.409330][ T9938] ? aa_sock_msg_perm+0x94/0x150 [ 325.414298][ T9938] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 325.419601][ T9938] ? security_socket_sendmsg+0x80/0xa0 [ 325.425095][ T9938] ? netlink_getsockopt+0x590/0x590 [ 325.430310][ T9938] ____sys_sendmsg+0x5ba/0x960 [ 325.435092][ T9938] ? __asan_memset+0x22/0x40 [ 325.439700][ T9938] ? __sys_sendmsg_sock+0x30/0x30 [ 325.444733][ T9938] ? __import_iovec+0x5f2/0x850 [ 325.449602][ T9938] ? import_iovec+0x73/0xa0 [ 325.454145][ T9938] ___sys_sendmsg+0x2a6/0x360 [ 325.458840][ T9938] ? get_pid_task+0x20/0x1e0 [ 325.463450][ T9938] ? __sys_sendmsg+0x2a0/0x2a0 [ 325.468274][ T9938] ? __lock_acquire+0x7d40/0x7d40 [ 325.473354][ T9938] __se_sys_sendmsg+0x1c2/0x2b0 [ 325.478240][ T9938] ? __x64_sys_sendmsg+0x80/0x80 [ 325.483210][ T9938] ? lockdep_hardirqs_on+0x98/0x150 [ 325.488456][ T9938] do_syscall_64+0x55/0xb0 [ 325.492908][ T9938] ? clear_bhb_loop+0x40/0x90 [ 325.497591][ T9938] ? clear_bhb_loop+0x40/0x90 [ 325.502279][ T9938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.508193][ T9938] RIP: 0033:0x7f7afe79ce59 [ 325.512624][ T9938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.532243][ T9938] RSP: 002b:00007f7aff615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.540672][ T9938] RAX: ffffffffffffffda RBX: 00007f7afea15fa0 RCX: 00007f7afe79ce59 [ 325.548706][ T9938] RDX: 0000000000040400 RSI: 00002000000003c0 RDI: 0000000000000003 [ 325.556810][ T9938] RBP: 00007f7aff615090 R08: 0000000000000000 R09: 0000000000000000 [ 325.564802][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.572786][ T9938] R13: 00007f7afea16038 R14: 00007f7afea15fa0 R15: 00007ffd01428518 [ 325.580872][ T9938] [ 325.616313][ T9938] team0: Device nlmon0 is of different type [ 326.114709][ T9954] netlink: 'syz.1.1344': attribute type 4 has an invalid length. [ 326.123686][ T9954] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1344'. [ 326.143909][ T9954] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 326.626700][ T9966] netlink: 'syz.2.1347': attribute type 29 has an invalid length. [ 326.689884][ T9963] __sock_release: fasync list not empty! [ 326.738578][ T9966] netlink: 'syz.2.1347': attribute type 29 has an invalid length. [ 326.751440][ T9969] netlink: 'syz.2.1347': attribute type 29 has an invalid length. [ 326.762703][ T9970] netlink: 'syz.2.1347': attribute type 29 has an invalid length. [ 327.081567][ T9974] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1349'. [ 327.126456][ T9974] openvswitch: netlink: Key type 4112 is out of range max 32 [ 327.249769][ T9979] netlink: 'syz.0.1351': attribute type 1 has an invalid length. [ 327.504242][ T9988] netlink: 'syz.2.1355': attribute type 21 has an invalid length. [ 327.554221][ T9988] netlink: 'syz.2.1355': attribute type 30 has an invalid length. [ 327.630466][ T9986] netlink: 'syz.0.1354': attribute type 10 has an invalid length. [ 327.649300][ T9986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1354'. [ 327.702478][ T9986] batman_adv: batadv0: Adding interface: virt_wifi0 [ 327.726466][ T9986] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.753921][ T9986] batman_adv: batadv0: Interface activated: virt_wifi0 [ 328.983486][T10005] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1361'. [ 329.005397][T10005] openvswitch: netlink: Key type 4112 is out of range max 32 [ 329.336804][T10017] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1364'. [ 329.613074][T10012] team0: Port device geneve1 added [ 330.101085][T10036] delete_channel: no stack [ 330.774067][T10055] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1377'. [ 330.825930][T10055] openvswitch: netlink: Key type 4112 is out of range max 32 [ 332.415102][T10099] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1391'. [ 332.430093][T10099] openvswitch: netlink: Key type 4112 is out of range max 32 [ 334.599701][T10142] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1406'. [ 334.664173][T10142] openvswitch: netlink: Key type 4112 is out of range max 32 [ 335.171648][T10153] validate_nla: 2 callbacks suppressed [ 335.171671][T10153] netlink: 'syz.1.1411': attribute type 25 has an invalid length. [ 335.318926][T10153] netlink: 'syz.1.1411': attribute type 28 has an invalid length. [ 336.070186][T10173] sctp: [Deprecated]: syz.1.1415 (pid 10173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.070186][T10173] Use struct sctp_sack_info instead [ 337.172617][T10184] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1419'. [ 337.228950][T10184] openvswitch: netlink: Key type 4112 is out of range max 32 [ 339.949135][T10224] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 340.044220][T10224] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.1430'. [ 340.065512][T10226] netlink: 'syz.1.1429': attribute type 33 has an invalid length. [ 340.074340][T10227] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 340.082316][T10226] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1429'. [ 340.094458][T10227] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.1430'. [ 340.117781][T10229] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1432'. [ 340.144545][T10229] openvswitch: netlink: Key type 4112 is out of range max 32 [ 344.611577][T10272] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1443'. [ 344.697912][T10272] openvswitch: netlink: Key type 4112 is out of range max 32 [ 347.291752][T10303] netlink: 'syz.0.1455': attribute type 21 has an invalid length. [ 349.863975][T10349] sctp: [Deprecated]: syz.1.1464 (pid 10349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.863975][T10349] Use struct sctp_sack_info instead [ 349.992407][T10346] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1466'. [ 350.014856][T10346] openvswitch: netlink: Key type 4112 is out of range max 32 [ 350.278696][T10355] netlink: 'syz.3.1468': attribute type 4 has an invalid length. [ 350.287022][T10355] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1468'. [ 350.750418][T10363] netlink: 'syz.2.1471': attribute type 21 has an invalid length. [ 351.592201][T10379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.599609][T10379] IPv6: NLM_F_CREATE should be set when creating new route [ 351.851833][T10378] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 351.871264][T10378] syzkaller1: linktype set to 769 [ 352.388304][T10386] netlink: 'syz.2.1477': attribute type 2 has an invalid length. [ 352.437643][T10386] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1477'. [ 353.595864][T10403] netlink: 'syz.1.1484': attribute type 29 has an invalid length. [ 353.616077][T10404] delete_channel: no stack [ 353.622526][T10403] netlink: 'syz.1.1484': attribute type 29 has an invalid length. [ 353.655792][T10407] netlink: 'syz.1.1484': attribute type 29 has an invalid length. [ 353.705426][T10409] netlink: 'syz.1.1484': attribute type 29 has an invalid length. [ 354.023508][T10412] netlink: 'syz.3.1486': attribute type 21 has an invalid length. [ 356.944741][T10460] netlink: 'syz.1.1506': attribute type 39 has an invalid length. [ 357.169233][T10459] netlink: 'syz.3.1497': attribute type 29 has an invalid length. [ 357.833759][T10459] netlink: 'syz.3.1497': attribute type 29 has an invalid length. [ 358.884683][T10502] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 358.911737][T10502] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 358.932334][T10507] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 358.942977][T10506] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1516'. [ 358.972371][T10502] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 358.981731][T10506] netlink: 'syz.3.1516': attribute type 28 has an invalid length. [ 358.998376][T10506] netlink: 'syz.3.1516': attribute type 29 has an invalid length. [ 359.048554][T10506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1516'. [ 359.865320][T10531] netlink: 'syz.2.1524': attribute type 10 has an invalid length. [ 359.874415][T10531] bridge0: port 4(team0) entered disabled state [ 359.934863][T10531] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.954729][T10531] .`: (slave team0): Enslaving as an active interface with an up link [ 360.339112][T10552] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1532'. [ 360.502914][T10552] netlink: 'syz.0.1532': attribute type 10 has an invalid length. [ 361.445495][T10576] sctp: [Deprecated]: syz.2.1538 (pid 10576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.445495][T10576] Use struct sctp_sack_info instead [ 364.407427][T10628] netlink: 'syz.1.1556': attribute type 10 has an invalid length. [ 364.470451][T10628] team0: Device nlmon0 is of different type [ 364.601379][T10633] netlink: 'syz.2.1558': attribute type 4 has an invalid length. [ 364.638815][T10633] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1558'. [ 365.853046][T10656] netlink: 'syz.2.1567': attribute type 29 has an invalid length. [ 365.901356][T10656] netlink: 'syz.2.1567': attribute type 29 has an invalid length. [ 365.959378][T10657] netlink: 'syz.2.1567': attribute type 29 has an invalid length. [ 365.979680][T10656] netlink: 'syz.2.1567': attribute type 29 has an invalid length. [ 366.615006][T10664] netlink: 'syz.2.1569': attribute type 4 has an invalid length. [ 366.628204][T10664] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1569'. [ 366.647723][T10664] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 366.856888][T10668] netlink: 'syz.1.1572': attribute type 21 has an invalid length. [ 367.309823][T10679] netlink: 'syz.1.1574': attribute type 10 has an invalid length. [ 367.368366][T10679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1574'. [ 367.535664][T10679] batman_adv: batadv0: Adding interface: veth0_vlan [ 367.564151][T10679] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.621364][T10679] batman_adv: batadv0: Interface activated: veth0_vlan [ 367.622133][T10684] netlink: 'syz.2.1577': attribute type 29 has an invalid length. [ 367.958479][T10691] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1578'. [ 368.904126][T10714] team0: Device nlmon0 is of different type [ 369.743776][T10731] validate_nla: 8 callbacks suppressed [ 369.743794][T10731] netlink: 'syz.2.1591': attribute type 2 has an invalid length. [ 369.762051][T10731] netlink: 'syz.2.1591': attribute type 8 has an invalid length. [ 369.782586][T10731] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1591'. [ 369.896880][T10732] netlink: 'syz.3.1593': attribute type 10 has an invalid length. [ 369.933465][T10732] team0: Device nlmon0 is of different type [ 370.564756][T10744] netlink: 'syz.3.1597': attribute type 29 has an invalid length. [ 370.584711][T10744] netlink: 'syz.3.1597': attribute type 29 has an invalid length. [ 370.603699][T10744] netlink: 'syz.3.1597': attribute type 29 has an invalid length. [ 370.622538][T10744] netlink: 'syz.3.1597': attribute type 29 has an invalid length. [ 371.862157][T10764] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1604'. [ 371.916418][T10764] openvswitch: netlink: Key type 4112 is out of range max 32 [ 373.051436][T10753] delete_channel: no stack [ 373.326857][T10778] netlink: 'syz.2.1608': attribute type 29 has an invalid length. [ 373.347570][T10776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.354983][T10776] IPv6: NLM_F_CREATE should be set when creating new route [ 373.416867][T10778] netlink: 'syz.2.1608': attribute type 29 has an invalid length. [ 373.433004][T10781] netlink: 'syz.2.1608': attribute type 29 has an invalid length. [ 373.616345][T10775] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 373.723487][T10775] syzkaller1: linktype set to 769 [ 374.036500][T10785] delete_channel: no stack [ 374.861067][T10793] validate_nla: 1 callbacks suppressed [ 374.861129][T10793] netlink: 'syz.3.1613': attribute type 10 has an invalid length. [ 374.870885][T10798] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1615'. [ 374.901264][T10793] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1613'. [ 374.902532][T10798] openvswitch: netlink: Key type 4112 is out of range max 32 [ 374.937419][T10793] bridge0: port 3(hsr0) entered blocking state [ 375.041786][T10793] bridge0: port 3(hsr0) entered disabled state [ 375.084653][T10793] hsr0: entered allmulticast mode [ 375.142248][T10793] hsr_slave_0: entered allmulticast mode [ 375.386684][T10793] hsr_slave_1: entered allmulticast mode [ 375.599378][T10793] bridge0: port 3(hsr0) entered blocking state [ 375.606921][T10793] bridge0: port 3(hsr0) entered forwarding state [ 376.766978][T10836] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1627'. [ 376.815039][T10836] openvswitch: netlink: Key type 4112 is out of range max 32 [ 377.176965][T10849] delete_channel: no stack [ 377.274538][T10849] delete_channel: no stack [ 377.346303][T10850] netlink: 'syz.2.1628': attribute type 10 has an invalid length. [ 377.355606][T10850] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1628'. [ 378.123001][T10876] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1641'. [ 378.137041][T10876] openvswitch: netlink: Key type 4112 is out of range max 32 [ 378.164109][T10878] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1642'. [ 378.226655][T10878] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.269472][T10878] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.408399][T10878] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 378.430815][T10878] .` (unregistering): Released all slaves [ 378.691863][T10893] netlink: 'syz.3.1644': attribute type 10 has an invalid length. [ 378.912100][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.918997][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.387288][T10911] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1653'. [ 379.688639][T10918] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1654'. [ 379.719532][T10918] openvswitch: netlink: Key type 4112 is out of range max 32 [ 379.767979][T10920] netlink: 'syz.3.1656': attribute type 4 has an invalid length. [ 379.778252][T10920] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1656'. [ 380.194779][T10930] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1658'. [ 380.294726][T10930] netlink: 'syz.0.1658': attribute type 10 has an invalid length. [ 380.529916][T10936] netlink: 'syz.1.1661': attribute type 49 has an invalid length. [ 380.609353][T10936] netlink: 'syz.1.1661': attribute type 49 has an invalid length. [ 380.680997][T10907] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.902970][T10951] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1666'. [ 383.939302][T10951] openvswitch: netlink: Key type 4112 is out of range max 32 [ 384.247200][T10957] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1668'. [ 384.280716][T10957] netlink: 'syz.1.1668': attribute type 28 has an invalid length. [ 384.298027][T10957] netlink: 'syz.1.1668': attribute type 29 has an invalid length. [ 384.304048][T10959] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1669'. [ 384.315788][T10957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1668'. [ 384.346512][T10959] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1669'. [ 385.075805][T10975] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 385.098750][T10975] netlink: 'syz.3.1674': attribute type 3 has an invalid length. [ 385.106700][T10975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1674'. [ 385.128328][T10975] netlink: 'syz.3.1674': attribute type 4 has an invalid length. [ 385.136164][T10975] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1674'. [ 385.153662][T10975] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1674'. [ 386.531458][T10986] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1677'. [ 386.549114][T10986] openvswitch: netlink: Key type 4112 is out of range max 32 [ 386.774132][T10996] netlink: 'syz.2.1681': attribute type 9 has an invalid length. [ 386.782572][T10996] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1681'. [ 386.884139][T10997] netlink: 'syz.2.1681': attribute type 9 has an invalid length. [ 386.895898][T10997] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1681'. [ 387.147293][T11000] netlink: 'syz.2.1681': attribute type 9 has an invalid length. [ 387.189302][T11000] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1681'. [ 387.402725][T11009] netlink: 'syz.2.1684': attribute type 4 has an invalid length. [ 387.414762][T11009] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1684'. [ 387.586495][T11015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.594399][T11015] IPv6: NLM_F_CREATE should be set when creating new route [ 387.602736][T11015] IPv6: NLM_F_CREATE should be set when creating new route [ 387.610947][T11015] IPv6: NLM_F_CREATE should be set when creating new route [ 387.781071][T11015] netlink: 'syz.2.1686': attribute type 9 has an invalid length. [ 387.790791][T11015] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1686'. [ 388.292802][T11026] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1690'. [ 388.337852][T11026] openvswitch: netlink: Key type 4112 is out of range max 32 [ 388.501991][T11022] netlink: 'syz.2.1686': attribute type 9 has an invalid length. [ 388.524867][T11022] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1686'. [ 388.667095][T11043] netlink: 'syz.3.1695': attribute type 29 has an invalid length. [ 388.684086][T11043] netlink: 'syz.3.1695': attribute type 29 has an invalid length. [ 388.701642][T11043] netlink: 'syz.3.1695': attribute type 29 has an invalid length. [ 388.712377][T11043] netlink: 'syz.3.1695': attribute type 29 has an invalid length. [ 389.427549][T11070] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1703'. [ 389.451841][T11070] openvswitch: netlink: Key type 4112 is out of range max 32 [ 389.651530][T11072] syzkaller0: entered promiscuous mode [ 389.657227][T11072] syzkaller0: entered allmulticast mode [ 391.473484][T11077] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1707'. [ 391.715360][T11090] FAULT_INJECTION: forcing a failure. [ 391.715360][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 391.733434][T11090] CPU: 0 PID: 11090 Comm: syz.1.1713 Not tainted syzkaller #0 [ 391.740991][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.751277][T11090] Call Trace: [ 391.754603][T11090] [ 391.757570][T11090] dump_stack_lvl+0x18c/0x250 [ 391.762461][T11090] ? show_regs_print_info+0x20/0x20 [ 391.767705][T11090] ? load_image+0x420/0x420 [ 391.772287][T11090] ? __lock_acquire+0x7d40/0x7d40 [ 391.777417][T11090] ? __lock_acquire+0x1273/0x7d40 [ 391.782475][T11090] should_fail_ex+0x39d/0x4d0 [ 391.787216][T11090] should_failslab+0x9/0x20 [ 391.791760][T11090] slab_pre_alloc_hook+0x59/0x310 [ 391.796833][T11090] ? fib_create_info+0xa61/0x2460 [ 391.801918][T11090] ? fib_create_info+0xa61/0x2460 [ 391.806958][T11090] __kmem_cache_alloc_node+0x53/0x250 [ 391.812354][T11090] ? fib_create_info+0xa61/0x2460 [ 391.817389][T11090] __kmalloc+0xa4/0x230 [ 391.821564][T11090] fib_create_info+0xa61/0x2460 [ 391.826431][T11090] ? verify_lock_unused+0x140/0x140 [ 391.831661][T11090] fib_table_insert+0xc6/0x1b20 [ 391.836528][T11090] ? l3mdev_fib_table+0x18/0x160 [ 391.841506][T11090] ? mark_lock+0x94/0x320 [ 391.845853][T11090] ? l3mdev_fib_table+0x18/0x160 [ 391.850817][T11090] ? fib_new_table+0x10a/0x2d0 [ 391.855595][T11090] fib_magic+0x2e5/0x3c0 [ 391.859869][T11090] ? fib_add_ifaddr+0x5e0/0x5e0 [ 391.864766][T11090] ? lockdep_rtnl_is_held+0x26/0x30 [ 391.870049][T11090] ? ip_mc_up+0x283/0x300 [ 391.874396][T11090] fib_add_ifaddr+0x144/0x5e0 [ 391.879093][T11090] fib_netdev_event+0x389/0x490 [ 391.883961][T11090] notifier_call_chain+0x197/0x380 [ 391.889121][T11090] dev_open+0x110/0x190 [ 391.893332][T11090] ? netdev_notify_peers+0x180/0x180 [ 391.898634][T11090] ? rcu_is_watching+0x15/0xb0 [ 391.903416][T11090] ? team_add_slave+0x2ce/0x29a0 [ 391.908402][T11090] ? __kmalloc+0xe2/0x230 [ 391.912749][T11090] team_add_slave+0x75f/0x29a0 [ 391.917546][T11090] ? __dev_change_flags+0x6a0/0x6a0 [ 391.922764][T11090] ? __dev_change_flags+0x4d4/0x6a0 [ 391.927973][T11090] ? team_netpoll_cleanup+0xf0/0xf0 [ 391.933206][T11090] ? dev_get_flags+0x1c0/0x1c0 [ 391.937983][T11090] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 391.943959][T11090] ? lockdep_hardirqs_on+0x98/0x150 [ 391.949191][T11090] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 391.955143][T11090] ? _raw_spin_unlock+0x40/0x40 [ 391.960034][T11090] ? mutex_is_locked+0x12/0x40 [ 391.964817][T11090] do_setlink+0xdfe/0x4130 [ 391.969260][T11090] ? arch_stack_walk+0x160/0x190 [ 391.974238][T11090] ? radix_tree_cpu_dead+0x160/0x160 [ 391.979646][T11090] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 391.985816][T11090] ? stack_trace_save+0xaa/0x100 [ 391.990816][T11090] ? __nla_validate_parse+0x2522/0x2ea0 [ 391.996413][T11090] ? __nla_validate+0x50/0x50 [ 392.001159][T11090] ? validate_linkmsg+0x719/0x910 [ 392.006257][T11090] rtnl_newlink+0x17da/0x20a0 [ 392.011078][T11090] ? rtnl_newlink+0x511/0x20a0 [ 392.015882][T11090] ? rtnl_setlink+0x4e0/0x4e0 [ 392.020581][T11090] ? trace_raw_output_contention_end+0xd0/0xd0 [ 392.026763][T11090] ? rcu_is_watching+0x15/0xb0 [ 392.031566][T11090] ? trace_contention_end+0x39/0xe0 [ 392.036776][T11090] ? __mutex_lock+0x315/0xcc0 [ 392.041578][T11090] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 392.046710][T11090] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 392.051834][T11090] ? rtnl_setlink+0x4e0/0x4e0 [ 392.056523][T11090] rtnetlink_rcv_msg+0x869/0xfa0 [ 392.061487][T11090] ? rtnetlink_bind+0x80/0x80 [ 392.066178][T11090] ? mark_lock+0x94/0x320 [ 392.070541][T11090] ? __lock_acquire+0x1273/0x7d40 [ 392.075581][T11090] ? __kernel_text_address+0xd/0x30 [ 392.080808][T11090] ? mark_lock+0x94/0x320 [ 392.085151][T11090] ? mark_lock+0x94/0x320 [ 392.089495][T11090] ? __lock_acquire+0x1273/0x7d40 [ 392.094547][T11090] ? kmalloc_reserve+0x95/0x240 [ 392.099474][T11090] ? verify_lock_unused+0x140/0x140 [ 392.104687][T11090] ? verify_lock_unused+0x140/0x140 [ 392.110092][T11090] netlink_rcv_skb+0x241/0x4d0 [ 392.114952][T11090] ? rtnetlink_bind+0x80/0x80 [ 392.119670][T11090] ? netlink_ack+0x1180/0x1180 [ 392.124468][T11090] ? __lock_acquire+0x7d40/0x7d40 [ 392.129520][T11090] ? net_generic+0x1e/0x240 [ 392.134045][T11090] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.139271][T11090] netlink_unicast+0x751/0x8d0 [ 392.144057][T11090] netlink_sendmsg+0x8d0/0xbf0 [ 392.148842][T11090] ? netlink_getsockopt+0x590/0x590 [ 392.154058][T11090] ? aa_sock_msg_perm+0x94/0x150 [ 392.159056][T11090] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 392.164453][T11090] ? security_socket_sendmsg+0x80/0xa0 [ 392.169941][T11090] ? netlink_getsockopt+0x590/0x590 [ 392.175167][T11090] ____sys_sendmsg+0x5ba/0x960 [ 392.179957][T11090] ? __asan_memset+0x22/0x40 [ 392.184562][T11090] ? __sys_sendmsg_sock+0x30/0x30 [ 392.189610][T11090] ? __import_iovec+0x5f2/0x850 [ 392.194499][T11090] ? import_iovec+0x73/0xa0 [ 392.199025][T11090] ___sys_sendmsg+0x2a6/0x360 [ 392.203714][T11090] ? get_pid_task+0x20/0x1e0 [ 392.208336][T11090] ? __sys_sendmsg+0x2a0/0x2a0 [ 392.213153][T11090] ? __lock_acquire+0x7d40/0x7d40 [ 392.218214][T11090] __se_sys_sendmsg+0x1c2/0x2b0 [ 392.223078][T11090] ? __x64_sys_sendmsg+0x80/0x80 [ 392.228042][T11090] ? lockdep_hardirqs_on+0x98/0x150 [ 392.233279][T11090] do_syscall_64+0x55/0xb0 [ 392.237709][T11090] ? clear_bhb_loop+0x40/0x90 [ 392.242813][T11090] ? clear_bhb_loop+0x40/0x90 [ 392.247588][T11090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.253634][T11090] RIP: 0033:0x7efd2739ce59 [ 392.258067][T11090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.277689][T11090] RSP: 002b:00007efd281b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.286137][T11090] RAX: ffffffffffffffda RBX: 00007efd27615fa0 RCX: 00007efd2739ce59 [ 392.294224][T11090] RDX: 0000000000040400 RSI: 00002000000003c0 RDI: 0000000000000003 [ 392.302211][T11090] RBP: 00007efd281b7090 R08: 0000000000000000 R09: 0000000000000000 [ 392.310210][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.318189][T11090] R13: 00007efd27616038 R14: 00007efd27615fa0 R15: 00007ffcc6896e78 [ 392.326284][T11090] [ 392.377205][T11090] team0: Device nlmon0 is of different type [ 392.487456][T11096] validate_nla: 6 callbacks suppressed [ 392.487474][T11096] netlink: 'syz.0.1714': attribute type 29 has an invalid length. [ 394.667563][T11092] netlink: 'syz.3.1712': attribute type 10 has an invalid length. [ 394.797772][T11092] team0: Device nlmon0 is of different type [ 394.922350][T11096] netlink: 'syz.0.1714': attribute type 29 has an invalid length. [ 394.951506][T11101] netlink: 'syz.1.1715': attribute type 10 has an invalid length. [ 394.966864][T11101] team0: Device nlmon0 is of different type [ 395.352464][T11110] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1716'. [ 395.384708][T11110] openvswitch: netlink: Key type 4112 is out of range max 32 [ 396.024027][T11130] netlink: 'syz.1.1726': attribute type 29 has an invalid length. [ 396.054495][T11130] netlink: 'syz.1.1726': attribute type 29 has an invalid length. [ 396.106563][T11133] netlink: 'syz.1.1726': attribute type 29 has an invalid length. [ 396.160233][T11130] netlink: 'syz.1.1726': attribute type 29 has an invalid length. [ 396.541232][T11138] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1728'. [ 396.552826][T11138] openvswitch: netlink: Key type 4112 is out of range max 32 [ 397.001397][T11157] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1733'. [ 398.149892][T11178] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1741'. [ 398.180616][T11178] openvswitch: netlink: Key type 4112 is out of range max 32 [ 398.426516][T11184] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 399.346488][T11208] netlink: 'syz.0.1751': attribute type 10 has an invalid length. [ 399.388572][T11208] bridge0: port 3(team0) entered disabled state [ 399.420700][T11210] netlink: set zone limit has 8 unknown bytes [ 399.489159][T11208] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.514813][T11208] .`: (slave team0): Enslaving as an active interface with an up link [ 399.979353][T11218] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1756'. [ 400.047935][T11218] openvswitch: netlink: Key type 4112 is out of range max 32 [ 400.226159][T11230] netlink: 'syz.3.1758': attribute type 10 has an invalid length. [ 401.204544][T11248] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1766'. [ 401.227180][T11248] openvswitch: netlink: Key type 4112 is out of range max 32 [ 402.555804][T11285] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1778'. [ 402.567549][T11285] openvswitch: netlink: Key type 4112 is out of range max 32 [ 402.633297][T11286] netlink: 'syz.0.1777': attribute type 10 has an invalid length. [ 402.642064][T11286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1777'. [ 402.662051][T11286] bridge0: port 3(ipvlan1) entered blocking state [ 402.674683][T11286] bridge0: port 3(ipvlan1) entered disabled state [ 402.686532][T11286] ipvlan1: entered allmulticast mode [ 402.695516][T11286] veth0_vlan: entered allmulticast mode [ 402.719690][T11286] ipvlan1: left allmulticast mode [ 402.735503][T11286] veth0_vlan: left allmulticast mode [ 402.744348][T11286] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 402.897062][T11293] netlink: 'syz.3.1780': attribute type 33 has an invalid length. [ 402.906012][T11293] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1780'. [ 402.915170][T11293] .`: renamed from ` (while UP) [ 403.113751][T11297] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1782'. [ 403.124581][T11297] netlink: 'syz.3.1782': attribute type 28 has an invalid length. [ 403.132750][T11297] netlink: 'syz.3.1782': attribute type 29 has an invalid length. [ 403.143892][T11297] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1782'. [ 403.273798][T11299] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 403.284633][T11299] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1783'. [ 403.677657][T11309] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1787'. [ 403.690012][T11309] openvswitch: netlink: Key type 4112 is out of range max 32 [ 404.295781][T11324] netlink: 'syz.2.1792': attribute type 10 has an invalid length. [ 404.325605][T11324] geneve1: entered promiscuous mode [ 404.331936][T11324] geneve1: entered allmulticast mode [ 404.349692][T11324] team0: Port device geneve1 added [ 406.755038][T11389] Â: renamed from pim6reg1 [ 407.715650][T11410] netlink: 'syz.2.1822': attribute type 4 has an invalid length. [ 407.725883][T11410] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1822'. [ 408.770821][T11440] netlink: 'syz.2.1835': attribute type 21 has an invalid length. [ 408.782877][T11436] delete_channel: no stack [ 408.789170][T11440] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1835'. [ 408.827323][T11440] netlink: 'syz.2.1835': attribute type 11 has an invalid length. [ 408.839948][T11440] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1835'. [ 408.880178][T11440] netlink: 'syz.2.1835': attribute type 39 has an invalid length. [ 408.985644][T11446] netlink: 'syz.0.1837': attribute type 10 has an invalid length. [ 408.999418][T11446] team0: Device nlmon0 is of different type [ 412.662833][T11518] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1864'. [ 412.678045][T11518] openvswitch: netlink: Key type 4112 is out of range max 32 [ 414.948968][T11545] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1875'. [ 415.117613][T11545] netlink: 'syz.2.1875': attribute type 10 has an invalid length. [ 415.377337][T11554] syzkaller0: entered promiscuous mode [ 415.394895][T11554] syzkaller0: entered allmulticast mode [ 417.395400][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'. [ 417.409365][T11564] netlink: 'syz.3.1880': attribute type 10 has an invalid length. [ 421.942723][T11625] netlink: 'syz.3.1900': attribute type 3 has an invalid length. [ 421.962718][T11629] sctp: [Deprecated]: syz.2.1899 (pid 11629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.962718][T11629] Use struct sctp_sack_info instead [ 422.002067][T11625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1900'. [ 422.103367][T11625] netlink: 'syz.3.1900': attribute type 3 has an invalid length. [ 422.146883][T11625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1900'. [ 422.510073][T11639] netlink: 'syz.3.1902': attribute type 10 has an invalid length. [ 422.528249][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1902'. [ 422.556067][T11639] bridge0: port 4(ipvlan1) entered blocking state [ 422.566338][T11639] bridge0: port 4(ipvlan1) entered disabled state [ 422.593682][T11639] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 424.060145][T11685] netlink: 'syz.1.1921': attribute type 6 has an invalid length. [ 424.098621][T11685] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1921'. [ 424.223965][T11694] netlink: 'syz.3.1924': attribute type 4 has an invalid length. [ 424.241350][T11694] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1924'. [ 424.264333][T11694] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 424.997890][T11718] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1931'. [ 425.041755][T11718] netlink: 'syz.0.1931': attribute type 28 has an invalid length. [ 425.075880][T11718] netlink: 'syz.0.1931': attribute type 29 has an invalid length. [ 425.147092][T11718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1931'. [ 425.786463][T11737] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1936'. [ 430.447310][T11775] netlink: 'syz.2.1949': attribute type 21 has an invalid length. [ 430.480606][T11775] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 430.526854][T11775] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1949'. [ 431.220976][T11783] syzkaller0: entered promiscuous mode [ 431.231256][T11783] syzkaller0: entered allmulticast mode [ 431.256368][T11793] netlink: 'syz.1.1954': attribute type 5 has an invalid length. [ 431.274860][T11792] netlink: 'syz.1.1954': attribute type 5 has an invalid length. [ 432.552965][T11815] delete_channel: no stack [ 435.411386][T11822] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1965'. [ 436.225695][T11844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.233144][T11844] IPv6: NLM_F_CREATE should be set when creating new route [ 436.467060][T11849] netlink: 'syz.3.1973': attribute type 9 has an invalid length. [ 436.498133][T11849] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1973'. [ 436.524407][T11842] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 436.560568][T11842] syzkaller1: linktype set to 769 [ 436.781232][T11852] netlink: 'syz.3.1973': attribute type 9 has an invalid length. [ 436.876815][T11852] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1973'. [ 437.737708][T11870] netlink: 'syz.2.1981': attribute type 10 has an invalid length. [ 439.126236][T11879] netlink: 'syz.1.1983': attribute type 10 has an invalid length. [ 440.081149][T11897] netlink: 'syz.1.1989': attribute type 9 has an invalid length. [ 440.118151][T11897] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1989'. [ 440.353531][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.361568][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.396234][T11899] netlink: 'syz.1.1989': attribute type 9 has an invalid length. [ 440.440353][T11899] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1989'. [ 441.077681][T11910] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1993'. [ 441.089341][T11910] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 441.103563][T11910] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 441.277493][T11908] netlink: 'syz.3.1992': attribute type 33 has an invalid length. [ 441.293297][T11910] netlink: 'syz.1.1993': attribute type 4 has an invalid length. [ 441.308508][T11910] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1993'. [ 441.318822][T11908] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1992'. [ 442.029102][T11915] netlink: 'syz.3.1995': attribute type 4 has an invalid length. [ 442.037004][T11915] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1995'. [ 442.228477][T11920] sctp: [Deprecated]: syz.1.1997 (pid 11920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.228477][T11920] Use struct sctp_sack_info instead [ 442.805209][T11934] netlink: 'syz.2.2001': attribute type 10 has an invalid length. [ 442.813490][T11934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2001'. [ 442.825921][T11934] bridge0: port 2(ipvlan1) entered blocking state [ 442.833405][T11934] bridge0: port 2(ipvlan1) entered disabled state [ 442.851721][T11934] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 443.184015][T11942] netlink: 'syz.0.2003': attribute type 9 has an invalid length. [ 443.198999][T11942] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2003'. [ 443.287947][T11943] netlink: 'syz.0.2003': attribute type 9 has an invalid length. [ 443.296049][T11943] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2003'. [ 444.038451][T11961] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2011'. [ 444.062288][T11961] openvswitch: netlink: Key type 4112 is out of range max 32 [ 444.306574][T11971] netlink: 'syz.2.2014': attribute type 4 has an invalid length. [ 444.314898][T11971] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2014'. [ 444.326162][T11971] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 445.922969][T12015] netlink: 'syz.3.2027': attribute type 4 has an invalid length. [ 445.949161][T12015] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2027'. [ 446.064701][T12027] netlink: 'syz.2.2029': attribute type 28 has an invalid length. [ 446.082946][T12027] netlink: 'syz.2.2029': attribute type 29 has an invalid length. [ 446.116407][T12027] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2029'. [ 446.368578][T12024] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2029'. [ 446.482526][T12033] netlink: 'syz.0.2028': attribute type 2 has an invalid length. [ 446.490874][T12033] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2028'. [ 447.251197][T12059] netlink: 'syz.0.2038': attribute type 21 has an invalid length. [ 447.274415][T12059] netlink: 'syz.0.2038': attribute type 1 has an invalid length. [ 447.285433][T12059] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2038'. [ 447.881085][T12078] delete_channel: no stack [ 448.135579][T12085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.142980][T12085] IPv6: NLM_F_CREATE should be set when creating new route [ 448.266897][T12087] netlink: 'syz.1.2048': attribute type 9 has an invalid length. [ 448.302299][T12087] netlink: 156568 bytes leftover after parsing attributes in process `syz.1.2048'. [ 448.343471][T12086] netlink: 'syz.1.2048': attribute type 9 has an invalid length. [ 448.379722][T12086] netlink: 194424 bytes leftover after parsing attributes in process `syz.1.2048'. [ 448.793992][T12096] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2052'. [ 448.813194][T12096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2052'. [ 448.851176][T12096] netlink: 'syz.0.2052': attribute type 21 has an invalid length. [ 448.859582][T12096] netlink: 'syz.0.2052': attribute type 1 has an invalid length. [ 448.892434][T12096] netlink: 'syz.0.2052': attribute type 10 has an invalid length. [ 448.903099][T12096] team0: Device nlmon0 is of different type [ 450.066804][T12121] netlink: 'syz.2.2060': attribute type 9 has an invalid length. [ 450.079326][T12121] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2060'. [ 450.228149][T12127] netlink: 'syz.2.2060': attribute type 9 has an invalid length. [ 450.257966][T12127] netlink: 198696 bytes leftover after parsing attributes in process `syz.2.2060'. [ 451.704108][T12147] syzkaller0: entered promiscuous mode [ 451.714367][T12147] syzkaller0: entered allmulticast mode [ 454.222648][T12163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.230038][T12163] IPv6: NLM_F_CREATE should be set when creating new route [ 454.264892][T12167] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 454.277231][T12167] syzkaller1: linktype set to 769 [ 455.138801][T12187] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2080'. [ 455.157595][T12187] openvswitch: netlink: Key type 4112 is out of range max 32 [ 456.902473][T12225] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2094'. [ 456.938158][T12225] openvswitch: netlink: Key type 4112 is out of range max 32 [ 457.518819][T12237] netlink: 'syz.1.2098': attribute type 33 has an invalid length. [ 457.552894][T12237] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2098'. [ 457.592544][T12240] netlink: 'syz.3.2099': attribute type 4 has an invalid length. [ 457.600697][T12240] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2099'. [ 457.715952][T12243] sctp: [Deprecated]: syz.0.2100 (pid 12243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.715952][T12243] Use struct sctp_sack_info instead [ 458.086421][T12254] netlink: 'syz.2.2103': attribute type 10 has an invalid length. [ 458.140177][T12254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2103'. [ 458.204390][T12254] bridge0: port 2(ipvlan1) entered blocking state [ 458.231650][T12254] bridge0: port 2(ipvlan1) entered disabled state [ 458.294288][T12254] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 458.797702][T12265] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2108'. [ 458.816890][T12265] openvswitch: netlink: Key type 4112 is out of range max 32 [ 460.052843][T12296] netlink: 'syz.1.2119': attribute type 4 has an invalid length. [ 460.077970][T12296] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2119'. [ 460.104105][T12296] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 460.511314][T12305] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2123'. [ 460.528950][T12307] netlink: 'syz.1.2124': attribute type 39 has an invalid length. [ 460.547356][T12305] openvswitch: netlink: Key type 4112 is out of range max 32 [ 461.821975][T12332] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 462.033492][T12332] bridge0: port 3(hsr0) entered disabled state [ 462.246706][T12332] bridge0: port 3(hsr0) entered blocking state [ 462.255121][T12332] bridge0: port 3(hsr0) entered forwarding state [ 462.396423][T12332] team0: Device hsr_slave_0 failed to register rx_handler [ 462.609199][T12344] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2136'. [ 462.628076][T12344] openvswitch: netlink: Key type 4112 is out of range max 32 [ 462.735686][T12332] bridge0: port 3(hsr0) entered disabled state [ 462.902405][T12351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2138'. [ 462.955228][T12355] netlink: 'syz.1.2139': attribute type 10 has an invalid length. [ 462.965192][T12355] team0: Device nlmon0 is of different type [ 463.400667][T12358] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2140'. [ 463.587358][T12361] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2140'. [ 464.318425][T12359] delete_channel: no stack [ 464.649568][T12376] netlink: 'syz.1.2146': attribute type 10 has an invalid length. [ 464.797305][T12376] team0: Device hsr_slave_0 failed to register rx_handler [ 465.272197][T12383] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2148'. [ 465.288554][T12383] openvswitch: netlink: Key type 4112 is out of range max 32 [ 465.651093][T12390] netlink: 'syz.1.2151': attribute type 10 has an invalid length. [ 465.695476][T12390] veth1_macvtap: left promiscuous mode [ 466.990700][T12420] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2160'. [ 467.025985][T12420] openvswitch: netlink: Key type 4112 is out of range max 32 [ 468.357270][T12442] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2166'. [ 468.413053][T12440] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2168'. [ 468.605813][T12440] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2168'. [ 469.105215][T12453] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2172'. [ 469.128674][T12453] openvswitch: netlink: Key type 4112 is out of range max 32 [ 469.418279][T12463] netlink: 'syz.2.2174': attribute type 17 has an invalid length. [ 469.427448][T12463] netlink: 'syz.2.2174': attribute type 16 has an invalid length. [ 469.436178][T12463] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2174'. [ 471.310160][T12505] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2185'. [ 471.360270][T12505] openvswitch: netlink: Key type 4112 is out of range max 32 [ 471.728788][T12521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.736111][T12521] IPv6: NLM_F_CREATE should be set when creating new route [ 471.743525][T12521] IPv6: NLM_F_CREATE should be set when creating new route [ 471.750861][T12521] IPv6: NLM_F_CREATE should be set when creating new route [ 471.971379][T12526] netlink: 'syz.0.2192': attribute type 10 has an invalid length. [ 472.300237][T12526] veth1_macvtap: left promiscuous mode [ 472.621577][T12533] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 472.632991][T12533] syzkaller1: linktype set to 769 [ 473.230445][T12543] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2198'. [ 473.273768][T12543] openvswitch: netlink: Key type 4112 is out of range max 32 [ 473.666041][T12552] netlink: 'syz.0.2208': attribute type 10 has an invalid length. [ 474.231064][T12561] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2204'. [ 474.674140][T12575] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2210'. [ 474.685121][T12575] openvswitch: netlink: Key type 4112 is out of range max 32 [ 475.458030][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'. [ 475.501958][T12597] netlink: 'syz.0.2215': attribute type 29 has an invalid length. [ 475.513965][T12597] netlink: 'syz.0.2215': attribute type 29 has an invalid length. [ 475.545265][T12589] netlink: 'syz.0.2215': attribute type 29 has an invalid length. [ 475.565288][T12589] netlink: 'syz.0.2215': attribute type 29 has an invalid length. [ 475.861742][T12601] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2220'. [ 475.902524][T12601] openvswitch: netlink: Key type 4112 is out of range max 32 [ 475.991549][T12604] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2219'. [ 476.780669][T12620] netlink: 'syz.3.2223': attribute type 33 has an invalid length. [ 476.810311][T12620] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2223'. [ 477.190259][T12632] sctp: [Deprecated]: syz.1.2226 (pid 12632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.190259][T12632] Use struct sctp_sack_info instead [ 477.343428][T12636] netlink: 'syz.2.2229': attribute type 10 has an invalid length. [ 477.377134][T12636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2229'. [ 477.399295][T12636] bridge0: port 2(ipvlan1) entered blocking state [ 477.413660][T12636] bridge0: port 2(ipvlan1) entered disabled state [ 477.439362][T12636] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 477.905302][T12647] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2234'. [ 479.060311][T12675] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2245'. [ 479.384008][T12680] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2246'. [ 479.438260][T12680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.759900][T12688] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 481.218281][T12707] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2255'. [ 481.528632][T12717] netlink: 'syz.2.2257': attribute type 4 has an invalid length. [ 481.537008][T12717] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2257'. [ 482.325847][T12730] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2261'. [ 482.378166][T12730] openvswitch: netlink: Key type 4112 is out of range max 32 [ 482.916759][T12751] netlink: 'syz.0.2267': attribute type 21 has an invalid length. [ 482.924845][T12751] netlink: 'syz.0.2267': attribute type 21 has an invalid length. [ 482.933626][T12751] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 482.946168][T12751] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2267'. [ 483.518626][ T5087] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 483.834576][T12779] netlink: 'syz.2.2275': attribute type 10 has an invalid length. [ 483.950610][T12779] team0: Device nlmon0 is of different type [ 485.223211][T12804] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2286'. [ 485.257121][T12804] openvswitch: netlink: Key type 4112 is out of range max 32 [ 485.670640][T12815] sit0: entered allmulticast mode [ 485.823663][T12818] sit0: entered promiscuous mode [ 486.300380][T12832] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2297'. [ 486.326915][T12832] netlink: 'syz.3.2297': attribute type 28 has an invalid length. [ 486.350824][T12832] netlink: 'syz.3.2297': attribute type 29 has an invalid length. [ 486.360995][T12832] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2297'. [ 486.371028][T12836] netlink: 'syz.0.2296': attribute type 11 has an invalid length. [ 487.233548][T12845] netlink: 'syz.1.2300': attribute type 29 has an invalid length. [ 487.278856][T12845] netlink: 'syz.1.2300': attribute type 29 has an invalid length. [ 487.305644][T12846] netlink: 'syz.1.2300': attribute type 29 has an invalid length. [ 487.502255][T12850] sit0: entered promiscuous mode [ 487.781365][T12852] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2303'. [ 487.935693][T12852] netlink: 'syz.1.2303': attribute type 10 has an invalid length. [ 488.532941][T12865] netlink: 'syz.1.2310': attribute type 29 has an invalid length. [ 488.544594][T12865] netlink: 'syz.1.2310': attribute type 29 has an invalid length. [ 488.557112][T12865] netlink: 'syz.1.2310': attribute type 29 has an invalid length. [ 488.837024][T12869] sit0: entered allmulticast mode [ 488.968840][T12873] sit0: entered promiscuous mode [ 489.149864][T12878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 489.157171][T12878] IPv6: NLM_F_CREATE should be set when creating new route [ 489.417954][T12886] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2316'. [ 489.438435][T12886] openvswitch: netlink: Key type 4112 is out of range max 32 [ 490.095726][T12904] syzkaller0: entered promiscuous mode [ 490.103157][T12904] syzkaller0: entered allmulticast mode [ 490.344654][T12918] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2328'. [ 490.360096][T12918] openvswitch: netlink: Key type 4112 is out of range max 32 [ 490.555706][T12922] netlink: 'syz.2.2330': attribute type 3 has an invalid length. [ 490.564462][T12922] netlink: 'syz.2.2330': attribute type 6 has an invalid length. [ 490.573532][T12922] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.2330'. [ 491.745050][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.754062][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.780720][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.798932][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.814298][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 491.830487][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.862355][ T8223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.924424][T12930] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2335'. [ 492.980268][ T8223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.138012][ T8223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.203623][T12936] netlink: 'syz.0.2336': attribute type 4 has an invalid length. [ 493.212281][T12938] netlink: 'syz.2.2337': attribute type 1 has an invalid length. [ 493.224728][T12936] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2336'. [ 493.249290][T12938] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2337'. [ 493.258358][T12936] .``: renamed from .` [ 493.284176][ T8223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.302126][T12942] netlink: 'syz.3.2338': attribute type 10 has an invalid length. [ 493.355479][T12942] team0: Port device wlan1 added [ 493.616711][T12951] netlink: 'syz.2.2341': attribute type 29 has an invalid length. [ 493.638273][T12926] chnl_net:caif_netlink_parms(): no params data found [ 493.659768][T12951] netlink: 'syz.2.2341': attribute type 29 has an invalid length. [ 493.792957][T12953] netlink: 'syz.2.2341': attribute type 29 has an invalid length. [ 493.814516][T12951] netlink: 'syz.2.2341': attribute type 29 has an invalid length. [ 493.951292][ T51] Bluetooth: hci1: command tx timeout [ 494.202176][T12962] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2342'. [ 494.246005][T12962] openvswitch: netlink: Key type 4112 is out of range max 32 [ 494.290562][T12926] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.320101][T12926] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.359046][T12926] bridge_slave_0: entered allmulticast mode [ 494.391813][T12926] bridge_slave_0: entered promiscuous mode [ 494.548354][T12926] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.555662][T12926] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.565236][T12926] bridge_slave_1: entered allmulticast mode [ 494.585133][T12926] bridge_slave_1: entered promiscuous mode [ 494.761807][T12926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.791344][T12926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.871932][T12926] team0: Port device team_slave_0 added [ 494.926422][T12926] team0: Port device team_slave_1 added [ 494.993456][T12926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.001460][T12926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.028457][T12926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.113169][T12926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.120281][T12926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.149269][T12926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.287486][T12926] hsr_slave_0: entered promiscuous mode [ 495.295084][T12926] hsr_slave_1: entered promiscuous mode [ 495.304605][T12926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.325295][T12926] Cannot create hsr debugfs directory [ 495.917640][ T8223] [ 495.920048][ T8223] ====================================================== [ 495.927095][ T8223] WARNING: possible circular locking dependency detected [ 495.934152][ T8223] syzkaller #0 Not tainted [ 495.938636][ T8223] ------------------------------------------------------ [ 495.945708][ T8223] kworker/u4:18/8223 is trying to acquire lock: [ 495.951979][ T8223] ffff88802f764d80 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 495.961606][ T8223] [ 495.961606][ T8223] but task is already holding lock: [ 495.968986][ T8223] ffff88805ce70768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 495.979458][ T8223] [ 495.979458][ T8223] which lock already depends on the new lock. [ 495.979458][ T8223] [ 495.989864][ T8223] [ 495.989864][ T8223] the existing dependency chain (in reverse order) is: [ 495.998901][ T8223] [ 495.998901][ T8223] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 496.006640][ T8223] __mutex_lock+0x136/0xcc0 [ 496.011678][ T8223] ieee80211_open+0x144/0x200 [ 496.016881][ T8223] __dev_open+0x2cb/0x430 [ 496.021761][ T8223] dev_open+0xab/0x190 [ 496.026377][ T8223] team_add_slave+0x75f/0x29a0 [ 496.031690][ T8223] do_setlink+0xdfe/0x4130 [ 496.036635][ T8223] rtnl_newlink+0x17da/0x20a0 [ 496.041842][ T8223] rtnetlink_rcv_msg+0x869/0xfa0 [ 496.047306][ T8223] netlink_rcv_skb+0x241/0x4d0 [ 496.052603][ T8223] netlink_unicast+0x751/0x8d0 [ 496.057891][ T8223] netlink_sendmsg+0x8d0/0xbf0 [ 496.063176][ T8223] ____sys_sendmsg+0x5ba/0x960 [ 496.068466][ T8223] ___sys_sendmsg+0x2a6/0x360 [ 496.073678][ T8223] __se_sys_sendmsg+0x1c2/0x2b0 [ 496.079054][ T8223] do_syscall_64+0x55/0xb0 [ 496.084019][ T8223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.090451][ T8223] [ 496.090451][ T8223] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 496.098630][ T8223] __lock_acquire+0x2df1/0x7d40 [ 496.104016][ T8223] lock_acquire+0x19e/0x420 [ 496.109043][ T8223] __mutex_lock+0x136/0xcc0 [ 496.114072][ T8223] team_del_slave+0x32/0x1c0 [ 496.119188][ T8223] team_device_event+0x28d/0xa20 [ 496.124676][ T8223] notifier_call_chain+0x197/0x380 [ 496.130316][ T8223] unregister_netdevice_many_notify+0x100d/0x1900 [ 496.137259][ T8223] unregister_netdevice_queue+0x32c/0x370 [ 496.143597][ T8223] _cfg80211_unregister_wdev+0x16b/0x580 [ 496.149832][ T8223] ieee80211_remove_interfaces+0x49e/0x690 [ 496.156185][ T8223] ieee80211_unregister_hw+0x5d/0x2a0 [ 496.162141][ T8223] mac80211_hwsim_del_radio+0x289/0x480 [ 496.168246][ T8223] hwsim_exit_net+0x58d/0x650 [ 496.173454][ T8223] cleanup_net+0x70a/0xbb0 [ 496.178393][ T8223] process_scheduled_works+0xa5d/0x15d0 [ 496.184467][ T8223] worker_thread+0xa55/0xfc0 [ 496.189582][ T8223] kthread+0x2fa/0x390 [ 496.194172][ T8223] ret_from_fork+0x48/0x80 [ 496.199116][ T8223] ret_from_fork_asm+0x11/0x20 [ 496.204432][ T8223] [ 496.204432][ T8223] other info that might help us debug this: [ 496.204432][ T8223] [ 496.214662][ T8223] Possible unsafe locking scenario: [ 496.214662][ T8223] [ 496.222110][ T8223] CPU0 CPU1 [ 496.227473][ T8223] ---- ---- [ 496.232838][ T8223] lock(&rdev->wiphy.mtx); [ 496.237362][ T8223] lock(team->team_lock_key#2); [ 496.244832][ T8223] lock(&rdev->wiphy.mtx); [ 496.251860][ T8223] lock(team->team_lock_key#2); [ 496.256808][ T8223] [ 496.256808][ T8223] *** DEADLOCK *** [ 496.256808][ T8223] [ 496.264956][ T8223] 5 locks held by kworker/u4:18/8223: [ 496.270333][ T8223] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 496.281247][ T8223] #1: ffffc900191efd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 496.291814][ T8223] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 496.301318][ T8223] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 496.311166][ T8223] #4: ffff88805ce70768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 496.321963][ T8223] [ 496.321963][ T8223] stack backtrace: [ 496.327857][ T8223] CPU: 1 PID: 8223 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 496.335493][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 496.345587][ T8223] Workqueue: netns cleanup_net [ 496.350391][ T8223] Call Trace: [ 496.353860][ T8223] [ 496.356804][ T8223] dump_stack_lvl+0x18c/0x250 [ 496.361506][ T8223] ? load_image+0x420/0x420 [ 496.366050][ T8223] ? show_regs_print_info+0x20/0x20 [ 496.371263][ T8223] ? print_circular_bug+0x12b/0x1a0 [ 496.376490][ T8223] check_noncircular+0x2fc/0x400 [ 496.381471][ T8223] ? print_deadlock_bug+0x5d0/0x5d0 [ 496.386832][ T8223] ? lockdep_lock+0x195/0x230 [ 496.391554][ T8223] ? __lock_acquire+0x1273/0x7d40 [ 496.396606][ T8223] ? _find_first_zero_bit+0xd3/0x100 [ 496.401918][ T8223] __lock_acquire+0x2df1/0x7d40 [ 496.406807][ T8223] ? verify_lock_unused+0x140/0x140 [ 496.412055][ T8223] ? verify_lock_unused+0x140/0x140 [ 496.417286][ T8223] lock_acquire+0x19e/0x420 [ 496.421818][ T8223] ? team_del_slave+0x32/0x1c0 [ 496.426596][ T8223] ? __might_sleep+0xe0/0xe0 [ 496.431199][ T8223] ? read_lock_is_recursive+0x20/0x20 [ 496.436584][ T8223] __mutex_lock+0x136/0xcc0 [ 496.441139][ T8223] ? team_del_slave+0x32/0x1c0 [ 496.445934][ T8223] ? __lock_acquire+0x7d40/0x7d40 [ 496.450983][ T8223] ? rcu_is_watching+0x15/0xb0 [ 496.455792][ T8223] ? trace_contention_end+0x39/0xe0 [ 496.460996][ T8223] ? __mutex_lock+0x315/0xcc0 [ 496.465686][ T8223] ? team_del_slave+0x32/0x1c0 [ 496.470472][ T8223] ? mutex_lock_nested+0x20/0x20 [ 496.475560][ T8223] ? bond_netdev_event+0xeb/0xf20 [ 496.480622][ T8223] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 496.486292][ T8223] team_del_slave+0x32/0x1c0 [ 496.490895][ T8223] team_device_event+0x28d/0xa20 [ 496.495845][ T8223] notifier_call_chain+0x197/0x380 [ 496.500971][ T8223] unregister_netdevice_many_notify+0x100d/0x1900 [ 496.507398][ T8223] ? lock_chain_count+0x20/0x20 [ 496.512284][ T8223] ? unregister_netdevice_many+0x20/0x20 [ 496.517933][ T8223] ? kernfs_remove_by_name_ns+0x117/0x150 [ 496.523701][ T8223] ? __lock_acquire+0x7d40/0x7d40 [ 496.528737][ T8223] unregister_netdevice_queue+0x32c/0x370 [ 496.534482][ T8223] ? list_netdevice+0x730/0x730 [ 496.539342][ T8223] ? kernfs_remove_by_name_ns+0x117/0x150 [ 496.545073][ T8223] _cfg80211_unregister_wdev+0x16b/0x580 [ 496.550719][ T8223] ieee80211_remove_interfaces+0x49e/0x690 [ 496.556541][ T8223] ? ieee80211_do_stop+0x1e20/0x1e20 [ 496.561842][ T8223] ? rcu_is_watching+0x15/0xb0 [ 496.566637][ T8223] ieee80211_unregister_hw+0x5d/0x2a0 [ 496.572019][ T8223] mac80211_hwsim_del_radio+0x289/0x480 [ 496.577580][ T8223] ? rhashtable_remove_fast+0xc00/0xc00 [ 496.583138][ T8223] hwsim_exit_net+0x58d/0x650 [ 496.587838][ T8223] ? hwsim_init_net+0x90/0x90 [ 496.592564][ T8223] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 496.598455][ T8223] cleanup_net+0x70a/0xbb0 [ 496.602879][ T8223] ? ops_free_list+0x3b0/0x3b0 [ 496.607674][ T8223] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.612884][ T8223] ? process_scheduled_works+0x96f/0x15d0 [ 496.618616][ T8223] ? process_scheduled_works+0x96f/0x15d0 [ 496.624342][ T8223] process_scheduled_works+0xa5d/0x15d0 [ 496.629908][ T8223] ? worker_attach_to_pool+0x380/0x380 [ 496.635391][ T8223] ? assign_work+0x3d2/0x5d0 [ 496.639991][ T8223] worker_thread+0xa55/0xfc0 [ 496.644601][ T8223] kthread+0x2fa/0x390 [ 496.648679][ T8223] ? pr_cont_work+0x560/0x560 [ 496.653365][ T8223] ? kthread_blkcg+0xd0/0xd0 [ 496.657967][ T8223] ret_from_fork+0x48/0x80 [ 496.662398][ T8223] ? kthread_blkcg+0xd0/0xd0 [ 496.667000][ T8223] ret_from_fork_asm+0x11/0x20 [ 496.671785][ T8223] [ 496.690431][ T51] Bluetooth: hci1: command tx timeout [ 496.734142][ T8223] team0: Port device ..ãc¤± removed [ 496.759757][T13001] netlink: 'syz.2.2348': attribute type 10 has an invalid length. [ 496.792103][T13001] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 496.808873][T13001] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 496.851422][T13001] wlan1: mtu less than device minimum [ 496.959709][ T8223] hsr_slave_0: left promiscuous mode [ 496.977254][ T8223] hsr_slave_1: left promiscuous mode [ 496.985080][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.993024][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.004729][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.012225][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.020261][ T8223] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 497.027336][ T8223] batman_adv: batadv0: Removing interface: veth0_vlan [ 497.034979][ T8223] bridge_slave_0: left allmulticast mode [ 497.040853][ T8223] bridge_slave_0: left promiscuous mode [ 497.046659][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.056639][ T8223] veth1_vlan: left promiscuous mode [ 497.062026][ T8223] veth0_vlan: left promiscuous mode [ 497.164432][ T8223] team0 (unregistering): Port device geneve1 removed [ 497.338587][ T8223] team0 (unregistering): Port device team_slave_1 removed [ 497.368836][ T8223] team0 (unregistering): Port device C removed [ 497.906270][T12926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 497.917332][T12926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 497.938428][T12926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 497.950828][T12926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 498.050983][T12926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.069118][T12926] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.083944][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.091145][ T8223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.105378][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.112564][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.331868][T12926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.392083][T12926] veth0_vlan: entered promiscuous mode [ 498.406209][T12926] veth1_vlan: entered promiscuous mode [ 498.442173][T12926] veth0_macvtap: entered promiscuous mode [ 498.453559][T12926] veth1_macvtap: entered promiscuous mode [ 498.477218][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.490076][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.500230][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.512403][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.522548][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.535417][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.546650][T12926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.563918][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.576265][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.592063][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.602588][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.614068][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.624574][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.637227][T12926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.664702][T12926] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.674088][T12926] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.683020][T12926] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.691929][T12926] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.748276][ T51] Bluetooth: hci1: command tx timeout [ 498.758961][T12926] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 498.792458][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.798985][T12926] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 498.807702][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.841118][ T8220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.850559][ T8220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.828285][ T51] Bluetooth: hci1: command tx timeout [ 501.790897][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.797243][ T1289] ieee802154 phy1 wpan1: encryption failed: -22