last executing test programs: 4.556502097s ago: executing program 1 (id=859): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) (fail_nth: 3) 3.912925938s ago: executing program 1 (id=862): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0xd9, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x8c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x120020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00') gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1, &(0x7f0000000700)=ANY=[], 0xa0}, 0xe53d095caacafea) socket$kcm(0x28, 0x5, 0x0) 3.827796815s ago: executing program 3 (id=864): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) sendmsg$inet(r5, &(0x7f00000012c0)={&(0x7f0000000d00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000e80)="c56270821fea1c5c265c04c73cb73a5c64d58e4e43f9aa637413d211c8768cf126078c49d54e91ec15ea5ab8b5405ba1bc93e76d8c122936fde51ca26ead108b45db6af99ae44b7e29ccecf149d7c364fe81922de352ff49e4ec5e7222557cad219b7727ba95f3f7868dbc3e238b53dce450e1a4bc37aa5c052069ac835bcea6902650a6fb8465e93d11c358a2793e7d40bfc5b1b82925408d658929bf711bda84970220f694e8aad5fb6e613e64dee785142eda0692f8bb05629acb170ad866a6810d97c224d2a49f7ed2ed9e17f43973c41512ceeab51cf36cd5a5ad00122bda449017885d6d9105a12489f1", 0xed}, {&(0x7f0000000f80)="1f55a36238c113c59823d56d0b9ab2c7ed1ea22f773a43c026c14c3a63648fa8b266c306c1d6171d837bbde7d77d87ebe18ddc73cd610f2153add293fbd940fc1d9a774522d69832", 0x48}, {&(0x7f0000001000)="17d1ac5840cf1e7668b9372fdbafc548a5a9c4f62a921b47dfed17c825b66676fdfe84383bacd33a93362faed6f357c67efc9d749c919ee86949b0046a808c9f4b55f92c550f8402439c7a918851d9ac8ca78323e87e0c8393b73b8cbfd756745fa40c4df6d48f69345af88ad2d45b892a64c639806ecd2df48706cd9d7db7997de902db874f224f3854a3658f941500feb8179b83b11473fa0fabe09660", 0x9e}], 0x3, &(0x7f00000010c0)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xd7, 0x3, 0x3, [{@multicast2, 0x2}]}, @ssrr={0x89, 0x7, 0xbe, [@loopback]}, @end, @generic={0x89, 0xa, "2bf3f1da2c962f48"}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x1, [{@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @timestamp_addr={0x44, 0x34, 0xc5, 0x1, 0x1, [{@remote, 0x8}, {@private=0xa010101, 0xa}, {@remote, 0x80000001}, {@loopback, 0x7}, {@loopback, 0x78}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfdb}]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x95, 0x0, 0x2, [0x3401, 0xff, 0x4, 0x90, 0x4000000, 0x80000000]}, @generic={0x89, 0xb, "ac80e0735a1be5f4e7"}, @timestamp={0x44, 0xc, 0x11, 0x0, 0x8, [0x7, 0xfffffff7]}, @timestamp_prespec={0x44, 0x1c, 0xf0, 0x3, 0xb, [{@broadcast, 0x3}, {@local, 0x1}, {@remote, 0x4}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x14, 0xd7, 0x1, 0x7, [{@private=0xa010100, 0x8000}, {@multicast1, 0xfffffbff}]}, @end, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x99, [@private=0xa010102]}, @generic={0x82, 0x9, "b2eeb384f2e095"}, @timestamp_prespec={0x44, 0x2c, 0xd7, 0x3, 0x4, [{@local, 0x95}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@loopback, 0xb00000}, {@broadcast, 0x6}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0x1d8}, 0x240488c0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x6a, &(0x7f0000000140)=""/106, 0x30fbe0a390130786, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x2, 0x3ff}, 0x10, 0x8b14, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[r0, r0, 0xffffffffffffffff, r0, r0], &(0x7f0000000280)=[{0x1, 0x4, 0xd, 0x6}, {0x5, 0x4, 0x3}, {0x0, 0x4, 0x8, 0xc}, {0x4, 0x2, 0x7}, {0x4, 0x5, 0x3, 0xa}, {0x3, 0x4, 0xa, 0x7}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000440)=r7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001440)={r8, 0x58, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001540)={0x8, 0x0}, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x8, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x801}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r13}, &(0x7f0000000340), &(0x7f0000000380)=r14}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r13, &(0x7f0000000280), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xd70a08b17ced7eb3, 0x10, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x5, 0xc, 0x3, 0x6, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001380)='GPL\x00', 0x27, 0x0, 0x0, 0x40f00, 0x9, '\x00', r9, @fallback=0xd, r10, 0x8, &(0x7f00000014c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0xc, 0xffffffff, 0x1f0}, 0x10, r11, 0xffffffffffffffff, 0x1, &(0x7f0000001580)=[r8, r1, r0, r12, r3, r13, r8], &(0x7f00000015c0)=[{0x0, 0x5, 0x7, 0x5}], 0x10, 0x3}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r15, 0x0, 0xf, 0x0, &(0x7f0000000840)="c1dfb080e534d32ed19991327b4871", 0x0, 0xadf4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000880)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x1c, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x40, 0x9, 0x6, 0x3, 0xa}]}, &(0x7f00000004c0)='GPL\x00', 0x3, 0x77, &(0x7f00000007c0)=""/119, 0x41100, 0x18, '\x00', r16, 0x25, r17, 0x8, &(0x7f0000000c00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x3, 0x1, 0xc}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000c80)=[{0x2, 0x5, 0xb, 0x2}, {0x2, 0x2, 0xc, 0xb}, {0x4, 0x1, 0x9, 0xc}, {0x3, 0x1, 0xa, 0x3}, {0x0, 0x5, 0xd, 0xa}, {0x5, 0x5, 0x3, 0x7}, {0x1, 0x5, 0xc, 0x5}], 0x10, 0x9}, 0x94) 2.972838683s ago: executing program 3 (id=868): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x1, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r0, 0x0, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80000, &(0x7f0000001900)="2488ebf4ea95767a1cc8da38201325242c8e9657bbec17e327a848e3381edffa6743831556cca3077a2dae085571e49c6ab1bb40a415a27eaa3705358aab662aa188a9e600ed812a24a53905e6fbd7e18360cba5ab5a1701dfb7a561093eedd6e3a429e71848c7c5788e1baaac0e5508e2a84a14c01deb07adf01b966d9da2e463fbb56c44920befa767f193f4b504b909f702384f207e6e9bd0fd829ee272173b400fcc4cc7cf0bd31266cf9f5527eae407da3656f5693a921d43345c", 0xbd, &(0x7f00000019c0), 0x0, &(0x7f0000001a40)="bcf49ca8b3048c00d81e5968dfc066e525c2c1c63adcba253fdd0cf79694afd6f8680fe9e80179dedc8a93e66730f1f9d31269521cdc22c35fdd5e1ce35e3f9e7c1edc0389c6d32e6c5d4318b275df336eeb620e799208f9") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 2.970052973s ago: executing program 0 (id=869): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, r0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB='\n\x00 \x00'/48]) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000002c0)={0x1, 0x80, 0x9, 0x2, 0x2f, 0x3, 0x0, 0x4, 0x50000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000280)}, 0x100c3, 0x4, 0xffffffc0, 0x6, 0x7, 0x0, 0xfff7, 0x0, 0x80000000}) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x9c) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4, 0x5, 0x1, 0x2, 0x0, 0x4, 0x40850, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x5, 0x7fffffffffffffff}, 0x400, 0x3, 0xa1, 0x1, 0x8, 0xe7, 0x81, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xe, r2, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x7) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 2.913911538s ago: executing program 2 (id=870): close(0xffffffffffffffff) r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80000, &(0x7f0000001900)="2488ebf4ea95767a1cc8da38201325242c8e9657bbec17e327a848e3381edffa6743831556cca3077a2dae085571e49c6ab1bb40a415a27eaa3705358aab662aa188a9e600ed812a24a53905e6fbd7e18360cba5ab5a1701dfb7a561093eedd6e3a429e71848c7c5788e1b", 0x6b, &(0x7f00000019c0), &(0x7f0000001a00), &(0x7f0000001a40)="bcf49ca8b3048c00d81e5968dfc066e525c2c1c63adcba253fdd0cf79694afd6f8680fe9e80179dedc8a93e66730f1f9d31269521cdc22c35fdd5e1ce35e3f9e7c1edc0389c6d32e6c5d4318b275df336eeb620e799208f9") gettid() gettid() ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) gettid() gettid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) perf_event_open$cgroup(&(0x7f0000001ac0)={0x5, 0x80, 0x8, 0x5, 0x6, 0x8, 0x0, 0x9, 0x6220, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1e}, 0x4, 0x4, 0x7, 0x4, 0xd7, 0x4, 0x5, 0x0, 0x400, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.825752345s ago: executing program 1 (id=871): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x120020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1, &(0x7f0000000700)=ANY=[], 0xa0}, 0xe53d095caacafea) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(0xffffffffffffffff, 0x0, 0x0) 2.715596613s ago: executing program 4 (id=872): perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x40000000, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02100000040700000000000000bf400000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c3"], 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$kcm(0x29, 0x6, 0x0) 2.63834415s ago: executing program 3 (id=873): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x22}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff202000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.284701488s ago: executing program 3 (id=874): socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10005d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x4402, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x210000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000f8ffff0004"], 0x0, 0x46, 0x0, 0x0, 0x4}, 0x28) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x25, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047e0ffff00004000632f77fb8035140cac14140c07029f", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000380)=[{0x10, 0x1, 0x1}], 0x10}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.284294148s ago: executing program 0 (id=875): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76389e6a65585578f830e90000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.073485015s ago: executing program 4 (id=876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030200590200000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.00917048s ago: executing program 2 (id=877): close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x1a, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0xff00) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0x67, 0x94, &(0x7f0000000540)="825441535230e3d76c81cb76e15f11ddf6a02a086b7b1e64226eca5e28ae9aeb91b5d371a9528b39ab47a89c8876b7d7d8d18b6737dc59f1af5c2c6d2aa71cc277c5d533c411581f58d4a05fe50786b56680d5a07c8ed11bab347e9a267ffd231ffbc2b3cf466b", &(0x7f0000000640)=""/148, 0x3, 0x0, 0xc8, 0x3a, &(0x7f0000000700)="0f9cddec1c88c7c091d3a34ae10b7d44379a7e77db08bba0d05f4207889cfc151c2191b05a5f2992cedcf56ae5e6eb8e9b5166f0813ba620c9249ace90ee8bd96d17b89a0ad0d29ed3e5a9403b3cdba2ce611016fd5f33a46451425d1788afbf69a45ddd0cb2eb0a64a48e4a94809951bded43bcd0f69e3c5f042dc009a2ea443968ae20cff0a98d2c3a0571461e3d45ed95048bc0f92b75fcb34d0ef6550092fd7ee410578819392d747827c8c8059ca9a19ee7eef1ec32f8fd2e9dfc22da286699c7fe952ab42d", &(0x7f0000000800)="4ba0ce256558b94dd7b57dd13b02d56fcd7a660fb01cde9b940331212ffeb48f97fa4a266b031fb30eaae2b3b3e2dcaf2d113f5090d233a328c4", 0x5, 0x0, 0x80000000}, 0x50) 1.540794197s ago: executing program 0 (id=883): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x1, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r0, 0x0, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80000, &(0x7f0000001900)="2488ebf4ea95767a1cc8da38201325242c8e9657bbec17e327a848e3381edffa6743831556cca3077a2dae085571e49c6ab1bb40a415a27eaa3705358aab662aa188a9e600ed812a24a53905e6fbd7e18360cba5ab5a1701dfb7a561093eedd6e3a429e71848c7c5788e1baaac0e5508e2a84a14c01deb07adf01b966d9da2e463fbb56c44920befa767f193f4b504b909f702384f207e6e9bd0fd829ee272173b400fcc4cc7cf0bd31266cf9f5527eae407da3656f5693a921d43345c", 0xbd, &(0x7f00000019c0), 0x0, &(0x7f0000001a40)="bcf49ca8b3048c00d81e5968dfc066e525c2c1c63adcba253fdd0cf79694afd6f8680fe9e80179dedc8a93e66730f1f9d31269521cdc22c35fdd5e1ce35e3f9e7c1edc0389c6d32e6c5d4318b275df336eeb620e799208f9") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 1.3743799s ago: executing program 2 (id=884): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0xd9, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x8c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x120020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00') gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1, &(0x7f0000000700)=ANY=[], 0xa0}, 0xe53d095caacafea) socket$kcm(0x28, 0x5, 0x0) 1.298347377s ago: executing program 3 (id=885): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x97}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x43, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1f000100000000008000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r3, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0x55, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x4000000}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000200)={'bridge0\x00', @random="0100"}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x7, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x1, 0x1}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @float={0x10, 0x0, 0x0, 0x10, 0x10}, @datasec={0xb, 0x7, 0x0, 0xf, 0x1, [{0x1, 0x3, 0x80000001}, {0x4, 0x4}, {0x4, 0x8000, 0x8}, {0x4, 0x8, 0x7}, {0x5, 0x4, 0x10001}, {0x5, 0x4, 0xc244}, {0x1, 0x8, 0x8}], '7'}, @restrict={0x2, 0x0, 0x0, 0xb, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0xa, 0x3}, {0x8, 0x4}, {0xc, 0x5}, {0xb}, {0x0, 0x4}, {0x4, 0x1}, {0xf, 0x4}]}]}, {0x0, [0x0, 0x61, 0x30, 0x61, 0x30]}}, &(0x7f0000000100)=""/42, 0x10f, 0x2a, 0x0, 0x2, 0x10000}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x34, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r9}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r11, &(0x7f0000000500)="105679750700000000000000e18592bb1a0f5170454a6c81792541d2985af37bdfaa66c01e760e00e12c8ec6507f2914deb6", &(0x7f0000000540)=""/188}, 0x20) r12 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x37}], 0x10}, 0x97) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x22) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x2}, 0xc) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x1}, 0xc) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x2, 0x10}, 0xc) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb522, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xfffffffe, 0x2, 0xd, 0x40, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x3}, 0x50) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000001540)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x0, 0x20000376, &(0x7f00000014c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYRES16=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x12, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x44a58}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, @alu={0x4, 0x1, 0x0, 0x7, 0x8, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x30, '\x00', r5, 0x25, r7, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x4, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r11, r13, r14, r15, r16, r17, r18, r19], &(0x7f0000000640)=[{0x4, 0x3, 0xc, 0xa}, {0x4, 0x5, 0x6, 0x5}], 0x10, 0x6}, 0x94) 1.291326177s ago: executing program 4 (id=886): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr\nD'], 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x12) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000180)="a861f9fdb3ae3d1127cc024b44dd937fe301bbfd518e93f28f5d124d041ad3eefa7cd6adb9f54cd29625906e90061fa530", 0x31}, {&(0x7f0000000a80)="389e730278e0327590ce755b8880227c566d36ef16549450bb16e01865c16795dcf2e3d27223df62bf138a7afd10405386f9e4bcd5d1a79b988a4c05348d29c2e28e0cdd52908189241c570ffbb4c458c26e7523a956f55e174f1f37b96c4c594fefe4deab2a51d7ad66e0737f4e96f683cdef7bd1f0e199b24b", 0x7a}], 0x2}, 0x24000880) 1.173065977s ago: executing program 0 (id=887): close(0xffffffffffffffff) r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80000, &(0x7f0000001900)="2488ebf4ea95767a1cc8da38201325242c8e9657bbec17e327a848e3381edffa6743831556cca3077a2dae085571e49c6ab1bb40a415a27eaa3705358aab662aa188a9e600ed812a24a53905e6fbd7e18360cba5ab5a1701dfb7a561093eedd6e3a429e71848c7c5788e1baa", 0x6c, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)="bcf49ca8b3048c00d81e5968dfc066e525c2c1c63adcba253fdd0cf79694afd6f8680fe9e80179dedc8a93e66730f1f9d31269521cdc22c35fdd5e1ce35e3f9e7c1edc0389c6d32e6c5d4318b275df336eeb620e799208f9") gettid() gettid() ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) gettid() gettid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) perf_event_open$cgroup(&(0x7f0000001ac0)={0x5, 0x80, 0x8, 0x5, 0x6, 0x8, 0x0, 0x9, 0x6220, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1e}, 0x4, 0x4, 0x7, 0x4, 0xd7, 0x4, 0x5, 0x0, 0x400, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 932.811266ms ago: executing program 3 (id=888): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x22}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (fail_nth: 13) 922.356637ms ago: executing program 4 (id=889): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f8d90000004f0c0400010000000062d95800000000000101871edd0000a69d35a2ff7f4708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a0300", 0x4c}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000002c0)={r0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/4091, 0xffb}], 0x2}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000340)) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="18020000ffffffff000000000000000085000000870000009500000000000500c5895ff824420b1042b4ed7dbf7ca784a5bdca9336d8c07091ad69d200420c656b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x22, 0xa, 0x26, &(0x7f00000006c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r11}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 403.657368ms ago: executing program 1 (id=890): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76389e6a65585578f830e90000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 220.778113ms ago: executing program 0 (id=891): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x120020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0xfffffffffffffffe, 0xfffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1, &(0x7f0000000700)=ANY=[], 0xa0}, 0xe53d095caacafea) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(0xffffffffffffffff, 0x0, 0x0) 169.306907ms ago: executing program 2 (id=892): close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x1a, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0xff00) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8 1 [ 270.301681][ T4301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.312983][ T4301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.320419][ T4301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.347304][ T4315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.356351][ T4315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.365338][ T4315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.374667][ T4315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.376463][ T4313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.381885][ T4315] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.390711][ T4313] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.397939][ T4315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.405956][ T4313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.411351][ T4315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.419305][ T4313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.425971][ T4316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.434122][ T4313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.440456][ T4316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.455341][ T4316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.457438][ T4313] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.463383][ T4316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.471356][ T4313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.478405][ T4316] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.485889][ T4313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.529144][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.537638][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.537726][ T4316] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.559928][ T4316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.565585][ T4317] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.592487][ T4317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.946688][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 271.088711][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 271.099786][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 271.179731][ T4312] chnl_net:caif_netlink_parms(): no params data found [ 271.204577][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.215504][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.226673][ T4305] device bridge_slave_0 entered promiscuous mode [ 271.260246][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.269813][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.280548][ T4305] device bridge_slave_1 entered promiscuous mode [ 271.345893][ T4306] chnl_net:caif_netlink_parms(): no params data found [ 271.365899][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.378624][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.386066][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.396121][ T4300] device bridge_slave_0 entered promiscuous mode [ 271.416529][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.429895][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.437310][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.445923][ T4300] device bridge_slave_1 entered promiscuous mode [ 271.475627][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.484318][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.494013][ T4304] device bridge_slave_0 entered promiscuous mode [ 271.527695][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.546556][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.553999][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.562856][ T4304] device bridge_slave_1 entered promiscuous mode [ 271.579029][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.587475][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.598445][ T4312] device bridge_slave_0 entered promiscuous mode [ 271.607815][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.630408][ T4305] team0: Port device team_slave_0 added [ 271.636938][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.645103][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.653761][ T4312] device bridge_slave_1 entered promiscuous mode [ 271.681158][ T4305] team0: Port device team_slave_1 added [ 271.717504][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.748172][ T4300] team0: Port device team_slave_0 added [ 271.764933][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.775926][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.783935][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.811050][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.825703][ T4312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.838991][ T4300] team0: Port device team_slave_1 added [ 271.861893][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.869205][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.896030][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.919100][ T4312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.928746][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.936446][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.944479][ T4306] device bridge_slave_0 entered promiscuous mode [ 271.988790][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.996542][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.005423][ T4306] device bridge_slave_1 entered promiscuous mode [ 272.015819][ T4304] team0: Port device team_slave_0 added [ 272.024116][ T4304] team0: Port device team_slave_1 added [ 272.039638][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.047049][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.077448][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.130377][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.137493][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.164693][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.179296][ T4312] team0: Port device team_slave_0 added [ 272.202105][ T4306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.219904][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.227354][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.254245][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.267807][ T4312] team0: Port device team_slave_1 added [ 272.274680][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.281839][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.308407][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.330481][ T4306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.343295][ T4305] device hsr_slave_0 entered promiscuous mode [ 272.350627][ T4305] device hsr_slave_1 entered promiscuous mode [ 272.408010][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.415407][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.442877][ T4312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.457636][ T4300] device hsr_slave_0 entered promiscuous mode [ 272.465233][ T4300] device hsr_slave_1 entered promiscuous mode [ 272.472956][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.481210][ T4300] Cannot create hsr debugfs directory [ 272.499988][ T4306] team0: Port device team_slave_0 added [ 272.507068][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.514660][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.541958][ T4312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.562557][ T4306] team0: Port device team_slave_1 added [ 272.592876][ T4317] Bluetooth: hci3: command 0x0409 tx timeout [ 272.599297][ T4317] Bluetooth: hci0: command 0x0409 tx timeout [ 272.601087][ T4309] Bluetooth: hci2: command 0x0409 tx timeout [ 272.606157][ T4307] Bluetooth: hci1: command 0x0409 tx timeout [ 272.638500][ T4304] device hsr_slave_0 entered promiscuous mode [ 272.645344][ T4304] device hsr_slave_1 entered promiscuous mode [ 272.653118][ T4304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.660807][ T4304] Cannot create hsr debugfs directory [ 272.677617][ T4307] Bluetooth: hci4: command 0x0409 tx timeout [ 272.696312][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.703705][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.731739][ T4306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.765198][ T4312] device hsr_slave_0 entered promiscuous mode [ 272.772840][ T4312] device hsr_slave_1 entered promiscuous mode [ 272.779617][ T4312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.787604][ T4312] Cannot create hsr debugfs directory [ 272.810273][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.817740][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.844509][ T4306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.961050][ T4306] device hsr_slave_0 entered promiscuous mode [ 272.968282][ T4306] device hsr_slave_1 entered promiscuous mode [ 272.975628][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.986638][ T4306] Cannot create hsr debugfs directory [ 273.236195][ T4305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 273.252709][ T4305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 273.264007][ T4305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 273.273644][ T4305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.308474][ T4304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.318470][ T4304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.337891][ T4304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.348237][ T4304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.430267][ T4300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.456449][ T4300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.481097][ T4300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.495988][ T4300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.571203][ T4312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.597174][ T4312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.609668][ T4312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.625904][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.657938][ T4312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.678275][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.696464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.706582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.724272][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.743832][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.758187][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.767757][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.777929][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.787914][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.797933][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.805889][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.833849][ T4306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.849904][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.861041][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.870693][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.881104][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.889091][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.898008][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.908524][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.917687][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.927165][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.935062][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.947953][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.957281][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.966576][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.975986][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.983254][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.991390][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.011335][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.021803][ T4306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 274.032994][ T4306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 274.056062][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.066999][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.076939][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.086869][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.096946][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.108244][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.117608][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.126797][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.136530][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.145050][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.164124][ T4306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.187341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.196134][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.205097][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.215756][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.227590][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.257263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.268793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.278571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.289363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.315639][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.326727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.339508][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.356388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.366989][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.377742][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.385134][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.397990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.418314][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.430837][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.464719][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.482160][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.494438][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.507520][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.515514][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.526871][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.537187][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.574022][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.600711][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.623340][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.648365][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.659741][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.672660][ T4307] Bluetooth: hci0: command 0x041b tx timeout [ 274.672786][ T4317] Bluetooth: hci1: command 0x041b tx timeout [ 274.679383][ T4307] Bluetooth: hci2: command 0x041b tx timeout [ 274.687444][ T4317] Bluetooth: hci3: command 0x041b tx timeout [ 274.726619][ T4312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.762363][ T4317] Bluetooth: hci4: command 0x041b tx timeout [ 274.783031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.799203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.811902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.828487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.851538][ T4312] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.865810][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.903837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.923644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.949404][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.984429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.007661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.026794][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.034286][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.049156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.068440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.096182][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.103790][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.119310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.137730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.151424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.172879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.183803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.193353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.203787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.213697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.230368][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.250923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.267007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.279495][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.286879][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.300011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.309621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.325351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.338029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.351226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.361161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.385068][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.398677][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.406481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.414768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.422762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.430549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.440319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.452846][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.460337][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.471415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.480334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.533418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.545473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.555160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.564257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.575057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.586310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.601411][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.629176][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.659202][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.671814][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.692573][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.705032][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.728138][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.739825][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.766474][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.802893][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.823302][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.851763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.866794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.878959][ T4305] device veth0_vlan entered promiscuous mode [ 275.916241][ T4305] device veth1_vlan entered promiscuous mode [ 275.928062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.941609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.951584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.965638][ T4306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.981313][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.996377][ T4312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.023468][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.036077][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.047570][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.057420][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.067466][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.138583][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.156980][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.173540][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.184313][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.200328][ T4305] device veth0_macvtap entered promiscuous mode [ 276.228349][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.240493][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.250160][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.260076][ T4300] device veth0_vlan entered promiscuous mode [ 276.268950][ T4305] device veth1_macvtap entered promiscuous mode [ 276.283838][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.293687][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.303243][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.317511][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.327067][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.340210][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.370156][ T4312] device veth0_vlan entered promiscuous mode [ 276.384239][ T4300] device veth1_vlan entered promiscuous mode [ 276.421698][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.443929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.453879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.463008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.482897][ T4312] device veth1_vlan entered promiscuous mode [ 276.492129][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.501121][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.514662][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.525479][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.536584][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.578357][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.586978][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.599672][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.609635][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.618061][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.631201][ T4305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.641132][ T4305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.651187][ T4305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.661620][ T4305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.679178][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.707320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.718386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.728205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.739222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.749609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.760747][ T4317] Bluetooth: hci3: command 0x040f tx timeout [ 276.761632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.767707][ T4317] Bluetooth: hci2: command 0x040f tx timeout [ 276.767742][ T4317] Bluetooth: hci1: command 0x040f tx timeout [ 276.767806][ T4317] Bluetooth: hci0: command 0x040f tx timeout [ 276.798251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.807198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.818650][ T4300] device veth0_macvtap entered promiscuous mode [ 276.830803][ T4312] device veth0_macvtap entered promiscuous mode [ 276.833207][ T4307] Bluetooth: hci4: command 0x040f tx timeout [ 276.856288][ T4304] device veth0_vlan entered promiscuous mode [ 276.875235][ T4300] device veth1_macvtap entered promiscuous mode [ 276.899838][ T4312] device veth1_macvtap entered promiscuous mode [ 276.916625][ T4304] device veth1_vlan entered promiscuous mode [ 276.947022][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.961507][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.974592][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.986869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.997817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.006212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.015697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.024057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.033970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.044372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.053860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.093068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.117034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.129166][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.140464][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.156289][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.168526][ T4300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.178223][ T4300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.187911][ T4300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.197801][ T4300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.215914][ T4304] device veth0_macvtap entered promiscuous mode [ 277.230975][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.241242][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.250923][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.261136][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.274639][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.310946][ T4304] device veth1_macvtap entered promiscuous mode [ 277.333690][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.345461][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.355638][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.367935][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.380182][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.415649][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.422117][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.434609][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.443641][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.444446][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.460460][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.469152][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.478038][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.487090][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.498971][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.510166][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.520930][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.532814][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.546260][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.572429][ T4306] device veth0_vlan entered promiscuous mode [ 277.580646][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.593771][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.623804][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.624847][ T4312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.643153][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.652691][ T4312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.661526][ T4312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.670836][ T4312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.683304][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.695732][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.706246][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.719660][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.730847][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.742209][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.756390][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.781471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.794328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.804636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.824857][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.836988][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.848381][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.861257][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.872051][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.884287][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.896374][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.932502][ T4306] device veth1_vlan entered promiscuous mode [ 277.949525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.961545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.977683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.993500][ T4304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.003656][ T4304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.013496][ T4304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.023000][ T4304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.177343][ T4306] device veth0_macvtap entered promiscuous mode [ 278.183534][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.195942][ T4306] device veth1_macvtap entered promiscuous mode [ 278.206867][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.255120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.267015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.276898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.287251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.295666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.311103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.312988][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.329820][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.331929][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.349250][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.360133][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.371361][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.384184][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.395226][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.405181][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.415995][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.428457][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.450865][ T4415] IPv6: Can't replace route, no match found [ 278.467814][ T4416] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 278.479972][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.489411][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.501166][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.520515][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.534595][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.538265][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.547677][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.563814][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.576430][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.587456][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.598744][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.604581][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.620314][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.634705][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.651172][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.667783][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.680135][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.717142][ T4306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.734999][ T4306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.747762][ T4306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.759296][ T4306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.797702][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.807935][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.832914][ T4307] Bluetooth: hci0: command 0x0419 tx timeout [ 278.841127][ T4317] Bluetooth: hci1: command 0x0419 tx timeout [ 278.841143][ T4316] Bluetooth: hci2: command 0x0419 tx timeout [ 278.841175][ T4316] Bluetooth: hci3: command 0x0419 tx timeout [ 278.860935][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.885840][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.894426][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.912610][ T4316] Bluetooth: hci4: command 0x0419 tx timeout [ 278.939971][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.970685][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.009623][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.042769][ C0] hrtimer: interrupt took 61366 ns [ 279.085241][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.114047][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.143272][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.194303][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.299785][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.320766][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.350689][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.721212][ T4435] netlink: 'syz.4.7': attribute type 13 has an invalid length. [ 279.767410][ T4435] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.7'. [ 280.989231][ T4462] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 280.996189][ T4462] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 281.065638][ T4465] netlink: 'syz.3.17': attribute type 13 has an invalid length. [ 281.081921][ T4462] netlink: 'syz.4.16': attribute type 3 has an invalid length. [ 281.095721][ T4465] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.17'. [ 281.105991][ T4462] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16'. [ 281.415846][ T4468] netlink: 'syz.3.18': attribute type 4 has an invalid length. [ 281.450218][ T4468] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 281.461618][ T4468] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.18'. [ 281.927129][ T4479] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22'. [ 281.996814][ T4482] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 282.005056][ T4482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'. [ 282.061091][ T4482] batman_adv: batadv0: Adding interface: virt_wifi0 [ 282.083087][ T4482] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.121253][ T4482] batman_adv: batadv0: Interface activated: virt_wifi0 [ 283.171762][ T4526] Illegal XDP return value 4294967294 on prog (id 19) dev N/A, expect packet loss! [ 283.849534][ T4558] syz.2.59[4558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.849659][ T4558] syz.2.59[4558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.269970][ T4610] IPv6: Can't replace route, no match found [ 286.296051][ T4611] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 286.796196][ T4632] netlink: 'syz.2.91': attribute type 13 has an invalid length. [ 286.805561][ T4632] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.91'. [ 287.365452][ T4652] IPv6: Can't replace route, no match found [ 287.375844][ T4652] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 288.254062][ T4669] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 288.260965][ T4669] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 288.338838][ T4670] netlink: 'syz.4.103': attribute type 3 has an invalid length. [ 288.382581][ T4670] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.103'. [ 289.017883][ T4689] IPv6: Can't replace route, no match found [ 289.049303][ T4687] netlink: 'syz.4.109': attribute type 13 has an invalid length. [ 289.062247][ T4687] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.109'. [ 289.089232][ T4689] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 290.190944][ T4723] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.198489][ T4723] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.240603][ T4724] netlink: 'syz.2.122': attribute type 3 has an invalid length. [ 290.293069][ T4724] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.122'. [ 290.626423][ T4726] IPv6: Can't replace route, no match found [ 290.688457][ T4726] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 290.939678][ T4735] netlink: 'syz.0.127': attribute type 13 has an invalid length. [ 290.972365][ T4735] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.127'. [ 291.759679][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 291.834453][ T4752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.948942][ T4752] syz.2.133 (4752) used greatest stack depth: 19648 bytes left [ 292.021506][ T4770] IPv6: Can't replace route, no match found [ 292.057083][ T4770] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 292.610570][ T4785] netlink: 'syz.4.146': attribute type 13 has an invalid length. [ 292.670333][ T4785] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.146'. [ 293.282904][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 293.364995][ T4805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.391769][ T4808] IPv6: Can't replace route, no match found [ 293.448848][ T4808] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 294.061750][ T4834] netlink: 'syz.3.163': attribute type 13 has an invalid length. [ 294.077101][ T4834] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.163'. [ 294.906290][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 294.928923][ T4852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.105889][ T4857] IPv6: Can't replace route, no match found [ 295.135290][ T4857] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 295.311030][ T4867] netlink: 'syz.4.174': attribute type 13 has an invalid length. [ 295.323958][ T4867] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.174'. [ 295.378595][ T4871] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 295.385287][ T4871] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 295.418479][ T4871] netlink: 'syz.1.175': attribute type 3 has an invalid length. [ 295.450265][ T4871] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.175'. [ 296.301097][ T4900] IPv6: Can't replace route, no match found [ 296.320169][ T4900] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 296.564808][ T4902] netlink: 'syz.3.186': attribute type 13 has an invalid length. [ 296.576475][ T4902] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.186'. [ 296.971352][ T4913] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.978030][ T4913] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 297.007790][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 297.070512][ T4913] netlink: 'syz.0.190': attribute type 3 has an invalid length. [ 297.102659][ T4913] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.190'. [ 297.117086][ T4914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.940800][ T4936] IPv6: Can't replace route, no match found [ 297.985827][ T4936] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 298.005228][ T4942] netlink: 'syz.3.200': attribute type 13 has an invalid length. [ 298.017329][ T4942] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.200'. [ 298.799659][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 298.815001][ T4966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.188722][ T4974] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 299.195601][ T4974] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 299.335176][ T4974] netlink: 'syz.2.210': attribute type 3 has an invalid length. [ 299.382315][ T4974] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.210'. [ 299.546118][ T4979] IPv6: Can't replace route, no match found [ 299.578311][ T4979] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.730056][ T4987] netlink: 'syz.4.214': attribute type 13 has an invalid length. [ 299.817371][ T4987] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.214'. [ 300.901061][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 300.950175][ T5021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.365382][ T5028] IPv6: Can't replace route, no match found [ 301.385323][ T5028] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 302.090850][ T5036] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.097751][ T5036] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 302.187726][ T5036] netlink: 'syz.0.229': attribute type 3 has an invalid length. [ 302.232250][ T5036] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.229'. [ 302.349166][ T5041] netlink: 'syz.4.231': attribute type 13 has an invalid length. [ 302.385557][ T5041] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.231'. [ 302.776528][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 302.808392][ T5061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.879276][ T5066] IPv6: Can't replace route, no match found [ 302.896554][ T5066] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 303.636203][ T5075] FAULT_INJECTION: forcing a failure. [ 303.636203][ T5075] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 303.657868][ T5075] CPU: 1 PID: 5075 Comm: syz.0.243 Not tainted 6.1.148-syzkaller #0 [ 303.666353][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.676531][ T5075] Call Trace: [ 303.680253][ T5075] [ 303.683360][ T5075] dump_stack_lvl+0x168/0x22e [ 303.688716][ T5075] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 303.695333][ T5075] ? show_regs_print_info+0x12/0x12 [ 303.701023][ T5075] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 303.707850][ T5075] should_fail_ex+0x399/0x4d0 [ 303.712660][ T5075] _copy_from_user+0x2c/0x170 [ 303.717465][ T5075] ___sys_sendmsg+0x155/0x290 [ 303.722333][ T5075] ? __sys_sendmsg+0x270/0x270 [ 303.727622][ T5075] ? __fdget+0x17c/0x200 [ 303.732171][ T5075] __se_sys_sendmsg+0x19e/0x270 [ 303.737548][ T5075] ? rcu_is_watching+0x11/0xa0 [ 303.742617][ T5075] ? __x64_sys_sendmsg+0x80/0x80 [ 303.748153][ T5075] do_syscall_64+0x4c/0xa0 [ 303.752989][ T5075] ? clear_bhb_loop+0x60/0xb0 [ 303.758762][ T5075] ? clear_bhb_loop+0x60/0xb0 [ 303.763884][ T5075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.770518][ T5075] RIP: 0033:0x7fc0e7d8ebe9 [ 303.775313][ T5075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.797575][ T5075] RSP: 002b:00007fc0e8c69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.807265][ T5075] RAX: ffffffffffffffda RBX: 00007fc0e7fb5fa0 RCX: 00007fc0e7d8ebe9 [ 303.815976][ T5075] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 303.824597][ T5075] RBP: 00007fc0e8c69090 R08: 0000000000000000 R09: 0000000000000000 [ 303.833904][ T5075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.843740][ T5075] R13: 00007fc0e7fb6038 R14: 00007fc0e7fb5fa0 R15: 00007ffcd0d4c638 [ 303.852633][ T5075] [ 304.084827][ T5088] netlink: 'syz.4.247': attribute type 13 has an invalid length. [ 304.112730][ T5088] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.247'. [ 304.374786][ T5099] IPv6: Can't replace route, no match found [ 304.406413][ T5099] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 304.465667][ T5101] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 304.474134][ T5101] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 304.527151][ T5104] netlink: 'syz.4.252': attribute type 3 has an invalid length. [ 304.659021][ T5104] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.252'. [ 304.987781][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 305.008809][ T5114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.054265][ T5145] IPv6: Can't replace route, no match found [ 306.066737][ T5146] netlink: 'syz.1.266': attribute type 13 has an invalid length. [ 306.078877][ T5146] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.266'. [ 306.104297][ T5145] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 306.344749][ T5154] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.351334][ T5154] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 306.419942][ T5154] netlink: 'syz.1.270': attribute type 3 has an invalid length. [ 306.485252][ T5154] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.270'. [ 306.924849][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 306.978873][ T5169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.852125][ T5190] netlink: 'syz.4.281': attribute type 13 has an invalid length. [ 307.871169][ T5190] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.281'. [ 307.894227][ T5193] IPv6: Can't replace route, no match found [ 307.904210][ T5193] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 307.938968][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 308.466750][ T5211] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 308.473982][ T5211] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 308.543643][ T5211] netlink: 'syz.4.287': attribute type 3 has an invalid length. [ 308.588814][ T5211] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.287'. [ 308.899301][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 308.939340][ T5223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.294524][ T5235] netlink: 'syz.3.296': attribute type 13 has an invalid length. [ 309.350308][ T5235] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.296'. [ 309.429087][ T5241] IPv6: Can't replace route, no match found [ 309.443117][ T5237] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 309.545768][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 310.397297][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 310.451415][ T5269] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 310.455870][ T5264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.458756][ T5269] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 310.977016][ T5280] netlink: 'syz.3.311': attribute type 13 has an invalid length. [ 311.011016][ T5280] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.311'. [ 311.039447][ T5282] IPv6: Can't replace route, no match found [ 311.097579][ T5282] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 311.211158][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 311.951636][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 311.999157][ T5307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.374015][ T5318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 312.381111][ T5318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 312.587012][ T5327] netlink: 'syz.3.326': attribute type 13 has an invalid length. [ 312.599142][ T5327] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.326'. [ 312.648834][ T5332] IPv6: Can't replace route, no match found [ 312.660709][ T5332] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 312.716712][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 313.617247][ T5358] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 313.624431][ T5358] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 313.749784][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 313.798144][ T5364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.842995][ T5366] FAULT_INJECTION: forcing a failure. [ 313.842995][ T5366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.940053][ T5366] CPU: 1 PID: 5366 Comm: syz.4.339 Not tainted 6.1.148-syzkaller #0 [ 313.948667][ T5366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.959169][ T5366] Call Trace: [ 313.963061][ T5366] [ 313.966769][ T5366] dump_stack_lvl+0x168/0x22e [ 313.971456][ T5366] ? show_regs_print_info+0x12/0x12 [ 313.976659][ T5366] ? load_image+0x3b0/0x3b0 [ 313.981295][ T5366] ? __lock_acquire+0x7c50/0x7c50 [ 313.986318][ T5366] ? apparmor_capable+0x106/0x190 [ 313.991616][ T5366] should_fail_ex+0x399/0x4d0 [ 313.996589][ T5366] _copy_from_user+0x2c/0x170 [ 314.001282][ T5366] __sys_bpf+0x265/0x6d0 [ 314.005931][ T5366] ? bpf_link_show_fdinfo+0x340/0x340 [ 314.012328][ T5366] ? lock_chain_count+0x20/0x20 [ 314.017367][ T5366] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 314.023529][ T5366] __x64_sys_bpf+0x78/0x90 [ 314.028144][ T5366] do_syscall_64+0x4c/0xa0 [ 314.032672][ T5366] ? clear_bhb_loop+0x60/0xb0 [ 314.037403][ T5366] ? clear_bhb_loop+0x60/0xb0 [ 314.052122][ T5366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.058364][ T5366] RIP: 0033:0x7fea6858ebe9 [ 314.063094][ T5366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.083933][ T5366] RSP: 002b:00007fea6937d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.092431][ T5366] RAX: ffffffffffffffda RBX: 00007fea687b5fa0 RCX: 00007fea6858ebe9 [ 314.101170][ T5366] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 314.110121][ T5366] RBP: 00007fea6937d090 R08: 0000000000000000 R09: 0000000000000000 [ 314.118207][ T5366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.126808][ T5366] R13: 00007fea687b6038 R14: 00007fea687b5fa0 R15: 00007ffe40ec6b38 [ 314.135095][ T5366] [ 314.442325][ T5371] netlink: 'syz.4.341': attribute type 13 has an invalid length. [ 314.451220][ T5371] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.341'. [ 314.529731][ T5373] IPv6: Can't replace route, no match found [ 314.551962][ T5377] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 314.635747][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 315.087707][ T5398] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 315.363874][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 315.679047][ T5417] netlink: 'syz.2.357': attribute type 13 has an invalid length. [ 315.699434][ T5417] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.357'. [ 315.926872][ T5420] IPv6: Can't replace route, no match found [ 315.960494][ T5420] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 316.026133][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 316.466226][ T5436] net_ratelimit: 2 callbacks suppressed [ 316.466243][ T5436] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 316.479440][ T5436] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 316.959546][ T5447] netlink: 'syz.4.367': attribute type 3 has an invalid length. [ 317.262885][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 317.309117][ T5462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.331964][ T5465] netlink: 'syz.2.373': attribute type 13 has an invalid length. [ 317.352922][ T5465] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.373'. [ 317.448846][ T5467] IPv6: Can't replace route, no match found [ 317.465691][ T5467] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 317.490188][ T5467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 317.646584][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.655012][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.883340][ T5479] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 317.890151][ T5479] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 318.039844][ T5484] netlink: 10 bytes leftover after parsing attributes in process `syz.3.381'. [ 318.581091][ T5504] IPv6: Can't replace route, no match found [ 318.621516][ T5504] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 318.689977][ T5505] netlink: 'syz.0.387': attribute type 13 has an invalid length. [ 318.832817][ T5505] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.387'. [ 318.880544][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 319.468992][ T5528] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.475667][ T5528] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.668586][ T5534] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 319.700723][ T5534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.820694][ T5536] device sit0 entered promiscuous mode [ 320.243900][ T5547] IPv6: Can't replace route, no match found [ 320.298684][ T5553] netlink: 'syz.2.404': attribute type 13 has an invalid length. [ 320.322301][ T5553] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.404'. [ 320.400512][ T5554] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 320.577153][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 320.975456][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 320.996285][ T5572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.058280][ T5575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 321.370645][ T5579] netlink: 60 bytes leftover after parsing attributes in process `syz.2.411'. [ 321.976996][ T5596] netlink: 'syz.0.417': attribute type 13 has an invalid length. [ 322.014083][ T5596] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.417'. [ 322.352029][ T5606] IPv6: Can't replace route, no match found [ 322.409378][ T5606] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 322.492717][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 322.881704][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 322.915382][ T5624] net_ratelimit: 1 callbacks suppressed [ 322.915399][ T5624] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 322.927957][ T5624] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 322.954535][ T5625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.779306][ T5643] netlink: 'syz.2.433': attribute type 13 has an invalid length. [ 323.808935][ T5643] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.433'. [ 323.852195][ T5645] netlink: 184 bytes leftover after parsing attributes in process `syz.1.434'. [ 324.174098][ T5657] IPv6: Can't replace route, no match found [ 324.184497][ T5657] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 324.284061][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 324.543126][ T5671] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.549785][ T5671] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 324.781144][ T5675] netlink: 'syz.0.442': attribute type 13 has an invalid length. [ 324.805945][ T5675] netlink: 'syz.0.442': attribute type 58 has an invalid length. [ 324.844647][ T5675] netlink: 152 bytes leftover after parsing attributes in process `syz.0.442'. [ 324.937912][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 325.021753][ T5679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.324028][ T5688] netlink: 'syz.1.446': attribute type 13 has an invalid length. [ 325.342224][ T5688] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.446'. [ 325.649592][ T5696] netlink: 'syz.1.449': attribute type 10 has an invalid length. [ 325.693501][ T5696] netlink: 55 bytes leftover after parsing attributes in process `syz.1.449'. [ 326.545481][ T5712] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 326.552146][ T5712] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 326.758593][ T5700] IPv6: Can't replace route, no match found [ 326.773058][ T5701] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 326.793971][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 327.194708][ T5729] netlink: 'syz.3.459': attribute type 13 has an invalid length. [ 327.322602][ T5729] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.459'. [ 327.451298][ T5735] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 327.465654][ T5735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.381380][ T5760] IPv6: Can't replace route, no match found [ 328.419970][ T5760] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 328.498291][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 328.991390][ T5784] netlink: 'syz.3.476': attribute type 13 has an invalid length. [ 329.044317][ T5784] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.476'. [ 329.391061][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 329.656707][ T5793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.955782][ T5799] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.484'. [ 329.961921][ T5800] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.482'. [ 330.243612][ T5811] IPv6: Can't replace route, no match found [ 330.281811][ T5806] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 330.368205][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 330.669537][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 331.012409][ T5833] netlink: 'syz.2.496': attribute type 13 has an invalid length. [ 331.059350][ T5833] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.496'. [ 331.136631][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 331.229343][ T5837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.548027][ T5841] sctp: [Deprecated]: syz.3.498 (pid 5841) Use of int in maxseg socket option. [ 331.548027][ T5841] Use struct sctp_assoc_value instead [ 331.790513][ T5841] netlink: 'syz.3.498': attribute type 15 has an invalid length. [ 331.844741][ T5841] netlink: 'syz.3.498': attribute type 5 has an invalid length. [ 331.872871][ T5852] syz.3.498 uses obsolete (PF_INET,SOCK_PACKET) [ 331.874726][ T5841] netlink: 144 bytes leftover after parsing attributes in process `syz.3.498'. [ 332.270995][ T5859] IPv6: Can't replace route, no match found [ 332.336313][ T5861] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 332.384152][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 332.485064][ T5870] FAULT_INJECTION: forcing a failure. [ 332.485064][ T5870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.534966][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 332.535212][ T5870] CPU: 1 PID: 5870 Comm: syz.4.509 Not tainted 6.1.148-syzkaller #0 [ 332.550558][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.560739][ T5870] Call Trace: [ 332.564132][ T5870] [ 332.567304][ T5870] dump_stack_lvl+0x168/0x22e [ 332.572071][ T5870] ? show_regs_print_info+0x12/0x12 [ 332.577403][ T5870] ? load_image+0x3b0/0x3b0 [ 332.581936][ T5870] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 332.588314][ T5870] should_fail_ex+0x399/0x4d0 [ 332.593118][ T5870] _copy_from_user+0x2c/0x170 [ 332.597829][ T5870] __sys_bpf+0x265/0x6d0 [ 332.602108][ T5870] ? bpf_link_show_fdinfo+0x340/0x340 [ 332.607621][ T5870] ? lock_chain_count+0x20/0x20 [ 332.612608][ T5870] __x64_sys_bpf+0x78/0x90 [ 332.613563][ T5872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.617173][ T5870] do_syscall_64+0x4c/0xa0 [ 332.617200][ T5870] ? clear_bhb_loop+0x60/0xb0 [ 332.617215][ T5870] ? clear_bhb_loop+0x60/0xb0 [ 332.617229][ T5870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.652068][ T5870] RIP: 0033:0x7fea6858ebe9 [ 332.656511][ T5870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.676355][ T5870] RSP: 002b:00007fea6937d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.685069][ T5870] RAX: ffffffffffffffda RBX: 00007fea687b5fa0 RCX: 00007fea6858ebe9 [ 332.693245][ T5870] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 332.701528][ T5870] RBP: 00007fea6937d090 R08: 0000000000000000 R09: 0000000000000000 [ 332.709525][ T5870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.717641][ T5870] R13: 00007fea687b6038 R14: 00007fea687b5fa0 R15: 00007ffe40ec6b38 [ 332.726176][ T5870] [ 332.983279][ T5877] netlink: 'syz.4.511': attribute type 13 has an invalid length. [ 333.032396][ T5877] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.511'. [ 334.049913][ T5901] netlink: 'syz.3.520': attribute type 29 has an invalid length. [ 334.092663][ T5901] netlink: 'syz.3.520': attribute type 29 has an invalid length. [ 334.134463][ T5906] netlink: 'syz.3.520': attribute type 29 has an invalid length. [ 334.327230][ T5910] IPv6: Can't replace route, no match found [ 334.347995][ T5910] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 334.444942][ T5915] netlink: 'syz.4.524': attribute type 13 has an invalid length. [ 334.488693][ T5920] netlink: 'syz.1.525': attribute type 29 has an invalid length. [ 334.502134][ T5915] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.524'. [ 334.544174][ T5918] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 334.595853][ T5918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.659118][ T5920] netlink: 'syz.1.525': attribute type 29 has an invalid length. [ 334.677440][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 334.689176][ T5924] FAULT_INJECTION: forcing a failure. [ 334.689176][ T5924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.722335][ T5924] CPU: 0 PID: 5924 Comm: syz.1.525 Not tainted 6.1.148-syzkaller #0 [ 334.735333][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.747596][ T5924] Call Trace: [ 334.751597][ T5924] [ 334.755078][ T5924] dump_stack_lvl+0x168/0x22e [ 334.761094][ T5924] ? show_regs_print_info+0x12/0x12 [ 334.767289][ T5924] ? load_image+0x3b0/0x3b0 [ 334.772455][ T5924] ? __might_fault+0xa6/0x120 [ 334.778824][ T5924] should_fail_ex+0x399/0x4d0 [ 334.784731][ T5924] copyout+0x1b/0x120 [ 334.789907][ T5924] _copy_to_iter+0x48f/0x1030 [ 334.795697][ T5924] ? iov_iter_init+0x1f0/0x1f0 [ 334.801112][ T5924] ? __virt_addr_valid+0x188/0x540 [ 334.807143][ T5924] ? __virt_addr_valid+0x465/0x540 [ 334.812661][ T5924] ? __phys_addr_symbol+0x2b/0x70 [ 334.818122][ T5924] ? __check_object_size+0x500/0xa40 [ 334.823992][ T5924] __skb_datagram_iter+0xde/0x740 [ 334.829137][ T5924] ? skb_copy_datagram_iter+0x290/0x290 [ 334.835168][ T5924] skb_copy_datagram_iter+0xd7/0x290 [ 334.840847][ T5924] netlink_recvmsg+0x2bd/0xd90 [ 334.846275][ T5924] ? netlink_sendmsg+0xbc0/0xbc0 [ 334.851595][ T5924] ? aa_sk_perm+0x7e5/0x920 [ 334.856673][ T5924] ? aa_af_perm+0x2b0/0x2b0 [ 334.861579][ T5924] ? __might_fault+0xa6/0x120 [ 334.868196][ T5924] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 334.874054][ T5924] ? security_socket_recvmsg+0x85/0xb0 [ 334.880145][ T5924] ? netlink_sendmsg+0xbc0/0xbc0 [ 334.885573][ T5924] ____sys_recvmsg+0x292/0x580 [ 334.891015][ T5924] ? __sys_recvmsg_sock+0x40/0x40 [ 334.896448][ T5924] ? import_iovec+0x6f/0xa0 [ 334.902077][ T5924] ___sys_recvmsg+0x1b2/0x510 [ 334.907499][ T5924] ? __sys_recvmsg+0x270/0x270 [ 334.912417][ T5924] ? common_file_perm+0x171/0x1c0 [ 334.917711][ T5924] ? __fget_files+0x44a/0x4d0 [ 334.922634][ T5924] ? __fdget+0x17c/0x200 [ 334.927669][ T5924] __x64_sys_recvmsg+0x1eb/0x2b0 [ 334.933893][ T5924] ? ___sys_recvmsg+0x510/0x510 [ 334.939057][ T5924] ? lockdep_hardirqs_on+0x94/0x140 [ 334.944467][ T5924] do_syscall_64+0x4c/0xa0 [ 334.949194][ T5924] ? clear_bhb_loop+0x60/0xb0 [ 334.954091][ T5924] ? clear_bhb_loop+0x60/0xb0 [ 334.959933][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.966125][ T5924] RIP: 0033:0x7f5e95b8ebe9 [ 334.970664][ T5924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.992327][ T5924] RSP: 002b:00007f5e96a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 335.001039][ T5924] RAX: ffffffffffffffda RBX: 00007f5e95db6090 RCX: 00007f5e95b8ebe9 [ 335.009497][ T5924] RDX: 0000000040012100 RSI: 0000200000000640 RDI: 0000000000000003 [ 335.017498][ T5924] RBP: 00007f5e96a97090 R08: 0000000000000000 R09: 0000000000000000 [ 335.026280][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.035055][ T5924] R13: 00007f5e95db6128 R14: 00007f5e95db6090 R15: 00007fffdd52bfc8 [ 335.043253][ T5924] [ 335.448308][ T5939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.532'. [ 335.881427][ T5954] IPv6: Can't replace route, no match found [ 335.893145][ T5954] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 335.940088][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 335.970455][ T5957] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.536'. [ 336.637429][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 336.753493][ T5976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.558388][ T5987] IPv6: Can't replace route, no match found [ 337.596348][ T5987] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 337.626835][ T5992] validate_nla: 6 callbacks suppressed [ 337.626891][ T5992] netlink: 'syz.2.551': attribute type 13 has an invalid length. [ 337.671116][ T5992] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.551'. [ 337.736519][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 338.256049][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 338.361316][ T6016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.453398][ T6021] netlink: 'syz.1.561': attribute type 4 has an invalid length. [ 338.469636][ T6021] netlink: 152 bytes leftover after parsing attributes in process `syz.1.561'. [ 338.593945][ T6021] netlink: 6 bytes leftover after parsing attributes in process `syz.1.561'. [ 338.677746][ T6021] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 339.331181][ T6047] netlink: 'syz.1.568': attribute type 13 has an invalid length. [ 339.350828][ T6047] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.568'. [ 339.524605][ T6050] IPv6: Can't replace route, no match found [ 339.563382][ T6050] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.648042][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 339.735942][ T4316] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 340.064962][ T6068] netlink: 'syz.4.575': attribute type 25 has an invalid length. [ 340.133373][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 340.180286][ T6068] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.575'. [ 340.214537][ T6070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.525612][ T6081] netlink: 'syz.3.581': attribute type 13 has an invalid length. [ 340.599485][ T6081] __nla_validate_parse: 1 callbacks suppressed [ 340.599550][ T6081] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.581'. [ 340.985784][ T6091] netlink: 'syz.3.583': attribute type 9 has an invalid length. [ 341.246158][ T6103] IPv6: Can't replace route, no match found [ 341.286891][ T6103] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 341.358347][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 341.422860][ T6113] FAULT_INJECTION: forcing a failure. [ 341.422860][ T6113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.446266][ T6113] CPU: 1 PID: 6113 Comm: syz.3.591 Not tainted 6.1.148-syzkaller #0 [ 341.454534][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.464719][ T6113] Call Trace: [ 341.468216][ T6113] [ 341.471179][ T6113] dump_stack_lvl+0x168/0x22e [ 341.475980][ T6113] ? show_regs_print_info+0x12/0x12 [ 341.481396][ T6113] ? load_image+0x3b0/0x3b0 [ 341.486110][ T6113] ? __lock_acquire+0x7c50/0x7c50 [ 341.491527][ T6113] should_fail_ex+0x399/0x4d0 [ 341.496241][ T6113] _copy_from_user+0x2c/0x170 [ 341.501061][ T6113] __sys_bpf+0x265/0x6d0 [ 341.505869][ T6113] ? bpf_link_show_fdinfo+0x340/0x340 [ 341.511295][ T6113] ? lock_chain_count+0x20/0x20 [ 341.516204][ T6113] __x64_sys_bpf+0x78/0x90 [ 341.520747][ T6113] do_syscall_64+0x4c/0xa0 [ 341.525552][ T6113] ? clear_bhb_loop+0x60/0xb0 [ 341.530615][ T6113] ? clear_bhb_loop+0x60/0xb0 [ 341.535535][ T6113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.541605][ T6113] RIP: 0033:0x7fdd5ed8ebe9 [ 341.546137][ T6113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.565945][ T6113] RSP: 002b:00007fdd5fb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.575181][ T6113] RAX: ffffffffffffffda RBX: 00007fdd5efb5fa0 RCX: 00007fdd5ed8ebe9 [ 341.583796][ T6113] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 341.592156][ T6113] RBP: 00007fdd5fb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 341.601292][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.609905][ T6113] R13: 00007fdd5efb6038 R14: 00007fdd5efb5fa0 R15: 00007ffe9e606ee8 [ 341.618356][ T6113] [ 341.980630][ T6123] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.593'. [ 342.044118][ T6128] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 342.087278][ T6128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.894702][ T6143] netlink: 'syz.4.601': attribute type 4 has an invalid length. [ 342.926971][ T6143] netlink: 152 bytes leftover after parsing attributes in process `syz.4.601'. [ 342.987939][ T6143] netlink: 6 bytes leftover after parsing attributes in process `syz.4.601'. [ 343.014045][ T6143] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.031800][ T6148] IPv6: Can't replace route, no match found [ 343.058373][ T6147] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 343.088734][ T6151] netlink: 'syz.1.604': attribute type 7 has an invalid length. [ 343.128826][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 343.170240][ T6151] netlink: 'syz.1.604': attribute type 4 has an invalid length. [ 343.179197][ T6151] netlink: 152 bytes leftover after parsing attributes in process `syz.1.604'. [ 343.190031][ T6151] netlink: 6 bytes leftover after parsing attributes in process `syz.1.604'. [ 343.279747][ T6151] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.541842][ T6161] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.608'. [ 343.973321][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 344.060991][ T6176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.311078][ T6187] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 344.352342][ T6187] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.616'. [ 344.378926][ T75] tipc: Subscription rejected, illegal request [ 344.794241][ T6196] IPv6: Can't replace route, no match found [ 344.843513][ T6196] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 344.942296][ T6198] FAULT_INJECTION: forcing a failure. [ 344.942296][ T6198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.986787][ T6198] CPU: 0 PID: 6198 Comm: syz.3.620 Not tainted 6.1.148-syzkaller #0 [ 344.995448][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.006409][ T6198] Call Trace: [ 345.009720][ T6198] [ 345.012764][ T6198] dump_stack_lvl+0x168/0x22e [ 345.017512][ T6198] ? show_regs_print_info+0x12/0x12 [ 345.023193][ T6198] ? load_image+0x3b0/0x3b0 [ 345.028347][ T6198] ? __lock_acquire+0x7c50/0x7c50 [ 345.033508][ T6198] ? __rcu_read_unlock+0x78/0xd0 [ 345.038579][ T6198] should_fail_ex+0x399/0x4d0 [ 345.043367][ T6198] _copy_to_user+0x2c/0x130 [ 345.047990][ T6198] bpf_test_finish+0x48e/0x600 [ 345.053121][ T6198] ? convert___skb_to_skb+0x580/0x580 [ 345.058812][ T6198] ? convert_skb_to___skb+0x420/0x420 [ 345.064854][ T6198] ? bpf_test_init+0x134/0x150 [ 345.070799][ T6198] bpf_prog_test_run_xdp+0x782/0xe50 [ 345.077103][ T6198] ? dev_put+0x80/0x80 [ 345.081428][ T6198] ? dev_put+0x80/0x80 [ 345.085632][ T6198] bpf_prog_test_run+0x31e/0x390 [ 345.091030][ T6198] __sys_bpf+0x593/0x6d0 [ 345.095771][ T6198] ? bpf_link_show_fdinfo+0x340/0x340 [ 345.101382][ T6198] ? lock_chain_count+0x20/0x20 [ 345.106363][ T6198] __x64_sys_bpf+0x78/0x90 [ 345.110812][ T6198] do_syscall_64+0x4c/0xa0 [ 345.116049][ T6198] ? clear_bhb_loop+0x60/0xb0 [ 345.121099][ T6198] ? clear_bhb_loop+0x60/0xb0 [ 345.126242][ T6198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.132173][ T6198] RIP: 0033:0x7fdd5ed8ebe9 [ 345.136621][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.158192][ T6198] RSP: 002b:00007fdd5fb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.167546][ T6198] RAX: ffffffffffffffda RBX: 00007fdd5efb5fa0 RCX: 00007fdd5ed8ebe9 [ 345.176432][ T6198] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 345.185131][ T6198] RBP: 00007fdd5fb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 345.195180][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.204832][ T6198] R13: 00007fdd5efb6038 R14: 00007fdd5efb5fa0 R15: 00007ffe9e606ee8 [ 345.213510][ T6198] [ 345.861766][ T6234] FAULT_INJECTION: forcing a failure. [ 345.861766][ T6234] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 345.875605][ T6234] CPU: 1 PID: 6234 Comm: syz.0.631 Not tainted 6.1.148-syzkaller #0 [ 345.884404][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.894845][ T6234] Call Trace: [ 345.898147][ T6234] [ 345.901281][ T6234] dump_stack_lvl+0x168/0x22e [ 345.906171][ T6234] ? show_regs_print_info+0x12/0x12 [ 345.911438][ T6234] ? load_image+0x3b0/0x3b0 [ 345.916158][ T6234] ? __schedule+0x10f4/0x40b0 [ 345.920910][ T6234] ? kasan_set_track+0x4b/0x70 [ 345.925984][ T6234] should_fail_ex+0x399/0x4d0 [ 345.930725][ T6234] prepare_alloc_pages+0x1e2/0x5f0 [ 345.936060][ T6234] __alloc_pages+0x123/0x4e0 [ 345.940782][ T6234] ? zone_statistics+0x170/0x170 [ 345.945785][ T6234] alloc_pages_node+0xf5/0x150 [ 345.951343][ T6234] ? skb_attempt_defer_free+0x410/0x410 [ 345.957515][ T6234] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 345.963882][ T6234] ? __local_bh_disable_ip+0xee/0x190 [ 345.969299][ T6234] __napi_alloc_skb+0x351/0x530 [ 345.974323][ T6234] napi_get_frags+0x68/0x140 [ 345.978971][ T6234] ? napi_get_frags_check+0x20/0x90 [ 345.984561][ T6234] napi_get_frags_check+0x35/0x90 [ 345.989732][ T6234] netif_napi_add_weight+0x9c0/0xdb0 [ 345.995078][ T6234] gro_cells_init+0x199/0x250 [ 345.999970][ T6234] ip6gre_tunnel_init_common+0x2a8/0x900 [ 346.006076][ T6234] ip6gre_tunnel_init+0x19/0x140 [ 346.011148][ T6234] register_netdevice+0x65b/0x1aa0 [ 346.016384][ T6234] ? __kmem_cache_alloc_node+0x140/0x260 [ 346.022406][ T6234] ? kvmalloc_node+0x6c/0x180 [ 346.027209][ T6234] ? netif_stacked_transfer_operstate+0x200/0x200 [ 346.033670][ T6234] ? memset+0x1e/0x40 [ 346.038312][ T6234] ? memcpy+0x3c/0x60 [ 346.044360][ T6234] ip6gre_tunnel_locate+0x301/0x5c0 [ 346.051803][ T6234] ? ip6gre_tnl_change+0x920/0x920 [ 346.057615][ T6234] ? memcpy+0x3c/0x60 [ 346.062058][ T6234] ? ip6gre_tnl_parm_from_user+0x30c/0x520 [ 346.068604][ T6234] ip6gre_tunnel_siocdevprivate+0x541/0x6a0 [ 346.075469][ T6234] ? ip6gre_tunnel_init+0x140/0x140 [ 346.081773][ T6234] ? full_name_hash+0x8e/0xe0 [ 346.086584][ T6234] dev_ifsioc+0xb92/0xe90 [ 346.091212][ T6234] ? dev_ioctl+0xea0/0xea0 [ 346.095847][ T6234] ? mutex_lock_nested+0x10/0x10 [ 346.100911][ T6234] ? __lock_acquire+0x7c50/0x7c50 [ 346.106176][ T6234] ? full_name_hash+0x8e/0xe0 [ 346.110989][ T6234] ? dev_load+0x1d/0x1e0 [ 346.115399][ T6234] ? dev_load+0x1d/0x1e0 [ 346.119777][ T6234] dev_ioctl+0x612/0xea0 [ 346.124220][ T6234] ? get_user_ifreq+0xc7/0x170 [ 346.130108][ T6234] sock_ioctl+0x67b/0x6e0 [ 346.135926][ T6234] ? sock_poll+0x3f0/0x3f0 [ 346.140957][ T6234] ? bpf_lsm_file_ioctl+0x5/0x10 [ 346.147290][ T6234] ? security_file_ioctl+0x7c/0xa0 [ 346.153065][ T6234] ? sock_poll+0x3f0/0x3f0 [ 346.158159][ T6234] __se_sys_ioctl+0xfa/0x170 [ 346.163414][ T6234] do_syscall_64+0x4c/0xa0 [ 346.168745][ T6234] ? clear_bhb_loop+0x60/0xb0 [ 346.173854][ T6234] ? clear_bhb_loop+0x60/0xb0 [ 346.178799][ T6234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.185696][ T6234] RIP: 0033:0x7fc0e7d8ebe9 [ 346.190386][ T6234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.211573][ T6234] RSP: 002b:00007fc0e8c69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.221579][ T6234] RAX: ffffffffffffffda RBX: 00007fc0e7fb5fa0 RCX: 00007fc0e7d8ebe9 [ 346.230674][ T6234] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 346.239223][ T6234] RBP: 00007fc0e8c69090 R08: 0000000000000000 R09: 0000000000000000 [ 346.247649][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.256536][ T6234] R13: 00007fc0e7fb6038 R14: 00007fc0e7fb5fa0 R15: 00007ffcd0d4c638 [ 346.264728][ T6234] [ 346.322121][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 346.364248][ T6235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.489733][ T6239] IPv6: Can't replace route, no match found [ 346.516484][ T6242] __nla_validate_parse: 2 callbacks suppressed [ 346.516503][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 346.899282][ T6260] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.638'. [ 347.608877][ T6285] netlink: 'syz.2.645': attribute type 3 has an invalid length. [ 347.632399][ T6285] netlink: 9814 bytes leftover after parsing attributes in process `syz.2.645'. [ 347.666640][ T6284] netlink: 'syz.2.645': attribute type 10 has an invalid length. [ 347.703046][ T6284] netlink: 2 bytes leftover after parsing attributes in process `syz.2.645'. [ 347.732772][ T6284] device bond0 entered promiscuous mode [ 347.750279][ T6284] device bond_slave_0 entered promiscuous mode [ 347.762855][ T6284] device bond_slave_1 entered promiscuous mode [ 347.811787][ T6284] bridge0: port 3(bond0) entered blocking state [ 347.846798][ T6284] bridge0: port 3(bond0) entered disabled state [ 347.889692][ T6284] bridge0: port 3(bond0) entered blocking state [ 347.897791][ T6284] bridge0: port 3(bond0) entered forwarding state [ 347.920102][ T6290] IPv6: Can't replace route, no match found [ 347.972758][ T6291] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 348.045035][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 348.080658][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 348.148418][ T6298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.485536][ T6310] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.652'. [ 349.388859][ T6334] IPv6: Can't replace route, no match found [ 349.441393][ T6334] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 349.535388][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 349.783248][ T6346] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.665'. [ 349.877141][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 349.924651][ T6352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.060057][ T6357] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 350.066896][ T6357] FAULT_INJECTION: forcing a failure. [ 350.066896][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 350.081921][ T6357] CPU: 0 PID: 6357 Comm: syz.3.668 Not tainted 6.1.148-syzkaller #0 [ 350.090017][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.100354][ T6357] Call Trace: [ 350.103882][ T6357] [ 350.106834][ T6357] dump_stack_lvl+0x168/0x22e [ 350.111545][ T6357] ? show_regs_print_info+0x12/0x12 [ 350.116958][ T6357] ? load_image+0x3b0/0x3b0 [ 350.121604][ T6357] ? _prb_read_valid+0x98b/0xa10 [ 350.126777][ T6357] should_fail_ex+0x399/0x4d0 [ 350.131577][ T6357] should_failslab+0x5/0x20 [ 350.136999][ T6357] slab_pre_alloc_hook+0x59/0x310 [ 350.142373][ T6357] ? skb_network_protocol+0x505/0x750 [ 350.148551][ T6357] kmem_cache_alloc+0x56/0x2f0 [ 350.154135][ T6357] ? skb_clone+0x1e7/0x370 [ 350.160314][ T6357] skb_clone+0x1e7/0x370 [ 350.166699][ T6357] ? dev_queue_xmit_nit+0x20e/0xbb0 [ 350.172099][ T6357] dev_queue_xmit_nit+0x249/0xbb0 [ 350.177959][ T6357] ? dev_queue_xmit_nit+0x29/0xbb0 [ 350.183283][ T6357] dev_hard_start_xmit+0x154/0x870 [ 350.188707][ T6357] __dev_queue_xmit+0x1bf1/0x3760 [ 350.195241][ T6357] ? __dev_queue_xmit+0x26f/0x3760 [ 350.201204][ T6357] ? netdev_core_pick_tx+0x340/0x340 [ 350.207652][ T6357] ? netdev_err+0x107/0x152 [ 350.212624][ T6357] ? memset+0x1e/0x40 [ 350.217019][ T6357] ? netdev_info+0x14e/0x14e [ 350.221750][ T6357] hsr_forward_skb+0x12f4/0x20d0 [ 350.227412][ T6357] ? hsr_forward_skb+0x98/0x20d0 [ 350.232618][ T6357] ? prp_fill_frame_info+0x6f0/0x6f0 [ 350.237923][ T6357] ? do_raw_spin_lock+0x11d/0x280 [ 350.243046][ T6357] ? __rwlock_init+0x140/0x140 [ 350.247836][ T6357] ? __lock_acquire+0x7c50/0x7c50 [ 350.253410][ T6357] ? hsr_dev_xmit+0x12e/0x200 [ 350.258464][ T6357] hsr_dev_xmit+0x139/0x200 [ 350.263240][ T6357] dev_hard_start_xmit+0x262/0x870 [ 350.268571][ T6357] __dev_queue_xmit+0x1bf1/0x3760 [ 350.273717][ T6357] ? __dev_queue_xmit+0x26f/0x3760 [ 350.279071][ T6357] ? netdev_core_pick_tx+0x340/0x340 [ 350.284557][ T6357] ? packet_parse_headers+0x7b5/0xac0 [ 350.290110][ T6357] ? packet_parse_headers+0x855/0xac0 [ 350.295692][ T6357] ? __virt_addr_valid+0x188/0x540 [ 350.300871][ T6357] ? __check_object_size+0x500/0xa40 [ 350.306621][ T6357] ? skb_setup_tx_timestamp+0x1e0/0x1e0 [ 350.312727][ T6357] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 350.318911][ T6357] ? skb_put+0x117/0x210 [ 350.323349][ T6357] packet_sendmsg+0x3be8/0x4ea0 [ 350.328317][ T6357] ? __might_sleep+0xd0/0xd0 [ 350.333643][ T6357] ? aa_sk_perm+0x7e5/0x920 [ 350.338623][ T6357] ? packet_getsockopt+0x950/0x950 [ 350.344053][ T6357] ? aa_sock_msg_perm+0x94/0x150 [ 350.349567][ T6357] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 350.355431][ T6357] ? security_socket_sendmsg+0x7c/0xa0 [ 350.361183][ T6357] ? packet_getsockopt+0x950/0x950 [ 350.366675][ T6357] ____sys_sendmsg+0x59b/0x970 [ 350.371655][ T6357] ? __sys_sendmsg_sock+0x30/0x30 [ 350.376685][ T6357] ? __import_iovec+0x315/0x500 [ 350.381740][ T6357] ? import_iovec+0x6f/0xa0 [ 350.386501][ T6357] ___sys_sendmsg+0x21c/0x290 [ 350.391274][ T6357] ? __sys_sendmsg+0x270/0x270 [ 350.396528][ T6357] ? __lock_acquire+0x7c50/0x7c50 [ 350.401684][ T6357] ? __fdget+0x17c/0x200 [ 350.406212][ T6357] __se_sys_sendmsg+0x19e/0x270 [ 350.411161][ T6357] ? __x64_sys_sendmsg+0x80/0x80 [ 350.416226][ T6357] ? lockdep_hardirqs_on+0x94/0x140 [ 350.421505][ T6357] do_syscall_64+0x4c/0xa0 [ 350.425944][ T6357] ? clear_bhb_loop+0x60/0xb0 [ 350.430909][ T6357] ? clear_bhb_loop+0x60/0xb0 [ 350.435604][ T6357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.441785][ T6357] RIP: 0033:0x7fdd5ed8ebe9 [ 350.446297][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.467394][ T6357] RSP: 002b:00007fdd5fb7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.476180][ T6357] RAX: ffffffffffffffda RBX: 00007fdd5efb5fa0 RCX: 00007fdd5ed8ebe9 [ 350.484518][ T6357] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 350.493553][ T6357] RBP: 00007fdd5fb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 350.502545][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.510749][ T6357] R13: 00007fdd5efb6038 R14: 00007fdd5efb5fa0 R15: 00007ffe9e606ee8 [ 350.519255][ T6357] [ 350.522594][ T6357] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 351.445811][ T6383] IPv6: Can't replace route, no match found [ 351.499325][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 351.863730][ T6396] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.681'. [ 351.938668][ T6406] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 351.999910][ T6406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.185342][ T6406] Zero length message leads to an empty skb [ 352.544405][ T6419] FAULT_INJECTION: forcing a failure. [ 352.544405][ T6419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.591121][ T6419] CPU: 1 PID: 6419 Comm: syz.1.688 Not tainted 6.1.148-syzkaller #0 [ 352.599178][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.609387][ T6419] Call Trace: [ 352.612868][ T6419] [ 352.615821][ T6419] dump_stack_lvl+0x168/0x22e [ 352.620608][ T6419] ? show_regs_print_info+0x12/0x12 [ 352.626003][ T6419] ? load_image+0x3b0/0x3b0 [ 352.630723][ T6419] ? __lock_acquire+0x7c50/0x7c50 [ 352.635947][ T6419] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 352.642325][ T6419] should_fail_ex+0x399/0x4d0 [ 352.647266][ T6419] _copy_from_user+0x2c/0x170 [ 352.652160][ T6419] __sys_bpf+0x265/0x6d0 [ 352.656529][ T6419] ? bpf_link_show_fdinfo+0x340/0x340 [ 352.662297][ T6419] ? lock_chain_count+0x20/0x20 [ 352.667569][ T6419] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 352.673942][ T6419] __x64_sys_bpf+0x78/0x90 [ 352.678794][ T6419] do_syscall_64+0x4c/0xa0 [ 352.683458][ T6419] ? clear_bhb_loop+0x60/0xb0 [ 352.688596][ T6419] ? clear_bhb_loop+0x60/0xb0 [ 352.694354][ T6419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.700995][ T6419] RIP: 0033:0x7f5e95b8ebe9 [ 352.706485][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.727692][ T6419] RSP: 002b:00007f5e96ab8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.736990][ T6419] RAX: ffffffffffffffda RBX: 00007f5e95db5fa0 RCX: 00007f5e95b8ebe9 [ 352.746296][ T6419] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 352.755465][ T6419] RBP: 00007f5e96ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 352.763970][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.772749][ T6419] R13: 00007f5e95db6038 R14: 00007f5e95db5fa0 R15: 00007fffdd52bfc8 [ 352.781731][ T6419] [ 353.096400][ T6431] IPv6: Can't replace route, no match found [ 353.126391][ T6431] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 353.268982][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'. [ 353.580249][ T6446] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.697'. [ 353.822773][ T6453] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 353.829269][ T6453] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 353.915545][ T6459] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 353.960443][ T6459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.241437][ T6469] netlink: 463 bytes leftover after parsing attributes in process `syz.3.705'. [ 354.849827][ T6480] netlink: 132 bytes leftover after parsing attributes in process `syz.3.708'. [ 354.897144][ T6483] IPv6: Can't replace route, no match found [ 354.976937][ T6484] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 355.080156][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 355.125068][ T6488] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.712'. [ 355.439170][ T6497] FAULT_INJECTION: forcing a failure. [ 355.439170][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 355.476028][ T6497] CPU: 0 PID: 6497 Comm: syz.3.717 Not tainted 6.1.148-syzkaller #0 [ 355.484081][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.495318][ T6497] Call Trace: [ 355.498806][ T6497] [ 355.501859][ T6497] dump_stack_lvl+0x168/0x22e [ 355.506573][ T6497] ? show_regs_print_info+0x12/0x12 [ 355.511800][ T6497] ? load_image+0x3b0/0x3b0 [ 355.516680][ T6497] ? __might_sleep+0xd0/0xd0 [ 355.521613][ T6497] ? __lock_acquire+0x7c50/0x7c50 [ 355.527637][ T6497] should_fail_ex+0x399/0x4d0 [ 355.532527][ T6497] should_failslab+0x5/0x20 [ 355.537594][ T6497] slab_pre_alloc_hook+0x59/0x310 [ 355.542925][ T6497] kmem_cache_alloc+0x56/0x2f0 [ 355.547817][ T6497] ? __alloc_file+0x25/0x230 [ 355.552614][ T6497] __alloc_file+0x25/0x230 [ 355.557459][ T6497] alloc_empty_file+0x90/0x180 [ 355.562353][ T6497] path_openat+0xfc/0x2e70 [ 355.566972][ T6497] ? trace_call_bpf+0xbf/0x680 [ 355.571937][ T6497] ? trace_call_bpf+0x5a7/0x680 [ 355.576816][ T6497] ? trace_call_bpf+0xbf/0x680 [ 355.581708][ T6497] ? verify_lock_unused+0x140/0x140 [ 355.587486][ T6497] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 355.593675][ T6497] ? do_sys_openat2+0xcf/0x490 [ 355.598515][ T6497] ? do_syscall_64+0x4c/0xa0 [ 355.603397][ T6497] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.609610][ T6497] ? verify_lock_unused+0x140/0x140 [ 355.614931][ T6497] ? do_filp_open+0x3c0/0x3c0 [ 355.619850][ T6497] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 355.626265][ T6497] ? perf_trace_preemptirq_template+0x287/0x330 [ 355.632558][ T6497] ? mark_lock+0x94/0x320 [ 355.637061][ T6497] do_filp_open+0x1c1/0x3c0 [ 355.641609][ T6497] ? vfs_tmpfile+0x480/0x480 [ 355.646697][ T6497] ? _raw_spin_unlock+0x24/0x40 [ 355.651889][ T6497] ? alloc_fd+0x58f/0x630 [ 355.654326][ T6507] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.718'. [ 355.656365][ T6497] do_sys_openat2+0x142/0x490 [ 355.656398][ T6497] ? do_sys_open+0xe0/0xe0 [ 355.656419][ T6497] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 355.683346][ T6497] __x64_sys_openat+0x135/0x160 [ 355.689046][ T6497] do_syscall_64+0x4c/0xa0 [ 355.694521][ T6497] ? clear_bhb_loop+0x60/0xb0 [ 355.700209][ T6497] ? clear_bhb_loop+0x60/0xb0 [ 355.705017][ T6497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.711183][ T6497] RIP: 0033:0x7fdd5ed8ebe9 [ 355.715899][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.736573][ T6497] RSP: 002b:00007fdd5fb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 355.745544][ T6497] RAX: ffffffffffffffda RBX: 00007fdd5efb5fa0 RCX: 00007fdd5ed8ebe9 [ 355.754704][ T6497] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 355.763074][ T6497] RBP: 00007fdd5fb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 355.771203][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.779683][ T6497] R13: 00007fdd5efb6038 R14: 00007fdd5efb5fa0 R15: 00007ffe9e606ee8 [ 355.787787][ T6497] [ 356.275091][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 356.486784][ T6513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.760365][ T6530] IPv6: Can't replace route, no match found [ 356.785842][ T6530] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.842996][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 356.902801][ T6535] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.728'. [ 357.247551][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.272409][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.293909][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.325536][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.878296][ T6563] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 357.899172][ T6563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.988922][ T6571] FAULT_INJECTION: forcing a failure. [ 357.988922][ T6571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.071039][ T6571] CPU: 1 PID: 6571 Comm: syz.2.740 Not tainted 6.1.148-syzkaller #0 [ 358.079446][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.089695][ T6571] Call Trace: [ 358.093261][ T6571] [ 358.096190][ T6571] dump_stack_lvl+0x168/0x22e [ 358.100954][ T6571] ? show_regs_print_info+0x12/0x12 [ 358.106157][ T6571] ? load_image+0x3b0/0x3b0 [ 358.110776][ T6571] ? __lock_acquire+0x7c50/0x7c50 [ 358.115936][ T6571] ? aa_sk_perm+0x920/0x920 [ 358.120563][ T6571] should_fail_ex+0x399/0x4d0 [ 358.125888][ T6571] _copy_from_user+0x2c/0x170 [ 358.131124][ T6571] sk_setsockopt+0x28f/0x2720 [ 358.136316][ T6571] ? __fget_files+0x28/0x4d0 [ 358.140904][ T6571] ? sockopt_capable+0x60/0x60 [ 358.145871][ T6571] ? __lock_acquire+0x7c50/0x7c50 [ 358.151003][ T6571] ? aa_sk_perm+0x7e5/0x920 [ 358.155598][ T6571] ? aa_af_perm+0x2b0/0x2b0 [ 358.160103][ T6571] ? __fget_files+0x44a/0x4d0 [ 358.164864][ T6571] ? aa_sock_opt_perm+0x74/0x100 [ 358.169799][ T6571] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 358.175483][ T6571] ? security_socket_setsockopt+0x7a/0xa0 [ 358.181305][ T6571] __sys_setsockopt+0x2f6/0x3d0 [ 358.186396][ T6571] __x64_sys_setsockopt+0xb1/0xc0 [ 358.191458][ T6571] do_syscall_64+0x4c/0xa0 [ 358.195986][ T6571] ? clear_bhb_loop+0x60/0xb0 [ 358.200787][ T6571] ? clear_bhb_loop+0x60/0xb0 [ 358.205470][ T6571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.211364][ T6571] RIP: 0033:0x7f94b218ebe9 [ 358.215780][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.236441][ T6571] RSP: 002b:00007f94b2f1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 358.245199][ T6571] RAX: ffffffffffffffda RBX: 00007f94b23b5fa0 RCX: 00007f94b218ebe9 [ 358.253162][ T6571] RDX: 000000000000002c RSI: 0000000000000001 RDI: 0000000000000003 [ 358.261210][ T6571] RBP: 00007f94b2f1a090 R08: 0000000000000008 R09: 0000000000000000 [ 358.269178][ T6571] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 358.277505][ T6571] R13: 00007f94b23b6038 R14: 00007f94b23b5fa0 R15: 00007ffe744e5128 [ 358.285699][ T6571] [ 358.343227][ T6577] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.741'. [ 358.651567][ T6581] IPv6: Can't replace route, no match found [ 358.679853][ T6581] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.714942][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 359.971272][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 360.008504][ T6622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.099494][ T6628] IPv6: Can't replace route, no match found [ 360.115252][ T6623] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.756'. [ 360.178597][ T6631] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 360.234228][ T6632] FAULT_INJECTION: forcing a failure. [ 360.234228][ T6632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.263349][ T6632] CPU: 0 PID: 6632 Comm: syz.1.759 Not tainted 6.1.148-syzkaller #0 [ 360.271604][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.282303][ T6632] Call Trace: [ 360.285774][ T6632] [ 360.288713][ T6632] dump_stack_lvl+0x168/0x22e [ 360.293417][ T6632] ? show_regs_print_info+0x12/0x12 [ 360.298638][ T6632] ? load_image+0x3b0/0x3b0 [ 360.303348][ T6632] ? __lock_acquire+0x7c50/0x7c50 [ 360.308482][ T6632] ? snprintf+0xd7/0x120 [ 360.312768][ T6632] should_fail_ex+0x399/0x4d0 [ 360.317831][ T6632] _copy_to_user+0x2c/0x130 [ 360.322454][ T6632] simple_read_from_buffer+0xe3/0x150 [ 360.327852][ T6632] proc_fail_nth_read+0x19a/0x210 [ 360.332897][ T6632] ? proc_fault_inject_write+0x2f0/0x2f0 [ 360.338558][ T6632] ? fsnotify_perm+0x248/0x550 [ 360.344052][ T6632] ? proc_fault_inject_write+0x2f0/0x2f0 [ 360.349729][ T6632] vfs_read+0x2c0/0x920 [ 360.353953][ T6632] ? kernel_read+0x1e0/0x1e0 [ 360.358899][ T6632] ? __fget_files+0x28/0x4d0 [ 360.363957][ T6632] ? __fget_files+0x44a/0x4d0 [ 360.368929][ T6632] ? __fdget_pos+0x2ae/0x360 [ 360.373630][ T6632] ? ksys_read+0x71/0x240 [ 360.378117][ T6632] ksys_read+0x143/0x240 [ 360.382397][ T6632] ? vfs_write+0x960/0x960 [ 360.386849][ T6632] ? syscall_enter_from_user_mode+0x2a/0x80 [ 360.392776][ T6632] do_syscall_64+0x4c/0xa0 [ 360.397224][ T6632] ? clear_bhb_loop+0x60/0xb0 [ 360.401948][ T6632] ? clear_bhb_loop+0x60/0xb0 [ 360.407453][ T6632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.413553][ T6632] RIP: 0033:0x7f5e95b8d5fc [ 360.418074][ T6632] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 360.438235][ T6632] RSP: 002b:00007f5e96ab8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.446817][ T6632] RAX: ffffffffffffffda RBX: 00007f5e95db5fa0 RCX: 00007f5e95b8d5fc [ 360.455420][ T6632] RDX: 000000000000000f RSI: 00007f5e96ab80a0 RDI: 0000000000000005 [ 360.464371][ T6632] RBP: 00007f5e96ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 360.472564][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.480564][ T6632] R13: 00007f5e95db6038 R14: 00007f5e95db5fa0 R15: 00007fffdd52bfc8 [ 360.488746][ T6632] [ 360.517281][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 361.433660][ T6667] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.772'. [ 361.762523][ T6671] FAULT_INJECTION: forcing a failure. [ 361.762523][ T6671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.807632][ T6671] CPU: 0 PID: 6671 Comm: syz.2.774 Not tainted 6.1.148-syzkaller #0 [ 361.816027][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.826236][ T6671] Call Trace: [ 361.829708][ T6671] [ 361.833289][ T6671] dump_stack_lvl+0x168/0x22e [ 361.838016][ T6671] ? show_regs_print_info+0x12/0x12 [ 361.843522][ T6671] ? load_image+0x3b0/0x3b0 [ 361.848185][ T6671] ? __lock_acquire+0x7c50/0x7c50 [ 361.853814][ T6671] ? verify_lock_unused+0x140/0x140 [ 361.859264][ T6671] should_fail_ex+0x399/0x4d0 [ 361.864406][ T6671] _copy_from_user+0x2c/0x170 [ 361.869147][ T6671] ___sys_sendmsg+0x155/0x290 [ 361.874070][ T6671] ? __sys_sendmsg+0x270/0x270 [ 361.879180][ T6671] ? __lock_acquire+0x7c50/0x7c50 [ 361.884789][ T6671] ? __fdget+0x17c/0x200 [ 361.889595][ T6671] __se_sys_sendmsg+0x19e/0x270 [ 361.894565][ T6671] ? __x64_sys_sendmsg+0x80/0x80 [ 361.899850][ T6671] ? lockdep_hardirqs_on+0x94/0x140 [ 361.906161][ T6671] do_syscall_64+0x4c/0xa0 [ 361.911233][ T6671] ? clear_bhb_loop+0x60/0xb0 [ 361.916368][ T6671] ? clear_bhb_loop+0x60/0xb0 [ 361.921499][ T6671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.928641][ T6671] RIP: 0033:0x7f94b218ebe9 [ 361.933350][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.954915][ T6671] RSP: 002b:00007f94b2f1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.964086][ T6671] RAX: ffffffffffffffda RBX: 00007f94b23b5fa0 RCX: 00007f94b218ebe9 [ 361.972364][ T6671] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 361.980587][ T6671] RBP: 00007f94b2f1a090 R08: 0000000000000000 R09: 0000000000000000 [ 361.988870][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.997500][ T6671] R13: 00007f94b23b6038 R14: 00007f94b23b5fa0 R15: 00007ffe744e5128 [ 362.005515][ T6671] [ 362.025481][ T6677] IPv6: Can't replace route, no match found [ 362.057223][ T6677] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 362.139464][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 362.210778][ T6681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.251560][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 362.676656][ T6701] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.785'. [ 363.404984][ T6729] IPv6: Can't replace route, no match found [ 363.425355][ T6729] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 363.468391][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 364.159890][ T6737] device syzkaller0 entered promiscuous mode [ 364.376993][ T6749] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.800'. [ 364.390625][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 364.432247][ T6750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.235651][ T6768] IPv6: Can't replace route, no match found [ 367.246083][ T6769] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.267271][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 367.657584][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 367.721897][ T6806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.975661][ T6812] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.817'. [ 368.553604][ T6835] IPv6: Can't replace route, no match found [ 368.554257][ T6834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.825'. [ 368.564392][ T6835] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 368.602463][ T6834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.825'. [ 368.634938][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 368.696181][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.825'. [ 368.729585][ T6834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.825'. [ 369.328100][ T6855] FAULT_INJECTION: forcing a failure. [ 369.328100][ T6855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.402286][ T6855] CPU: 1 PID: 6855 Comm: syz.4.832 Not tainted 6.1.148-syzkaller #0 [ 369.410680][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.420758][ T6855] Call Trace: [ 369.424041][ T6855] [ 369.426971][ T6855] dump_stack_lvl+0x168/0x22e [ 369.431791][ T6855] ? show_regs_print_info+0x12/0x12 [ 369.437121][ T6855] ? load_image+0x3b0/0x3b0 [ 369.441658][ T6855] ? __lock_acquire+0x7c50/0x7c50 [ 369.446693][ T6855] should_fail_ex+0x399/0x4d0 [ 369.451465][ T6855] _copy_from_user+0x2c/0x170 [ 369.456341][ T6855] generic_map_update_batch+0x4c5/0x850 [ 369.462196][ T6855] ? rcu_read_unlock+0xa0/0xa0 [ 369.466978][ T6855] ? __fdget+0x17c/0x200 [ 369.471439][ T6855] ? rcu_read_unlock+0xa0/0xa0 [ 369.476596][ T6855] bpf_map_do_batch+0x466/0x600 [ 369.481493][ T6855] __sys_bpf+0x65f/0x6d0 [ 369.486116][ T6855] ? bpf_link_show_fdinfo+0x340/0x340 [ 369.491614][ T6855] ? lock_chain_count+0x20/0x20 [ 369.496651][ T6855] __x64_sys_bpf+0x78/0x90 [ 369.501235][ T6855] do_syscall_64+0x4c/0xa0 [ 369.505838][ T6855] ? clear_bhb_loop+0x60/0xb0 [ 369.510798][ T6855] ? clear_bhb_loop+0x60/0xb0 [ 369.515624][ T6855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.521538][ T6855] RIP: 0033:0x7fea6858ebe9 [ 369.526231][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.546126][ T6855] RSP: 002b:00007fea6937d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.554832][ T6855] RAX: ffffffffffffffda RBX: 00007fea687b5fa0 RCX: 00007fea6858ebe9 [ 369.563203][ T6855] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 369.571913][ T6855] RBP: 00007fea6937d090 R08: 0000000000000000 R09: 0000000000000000 [ 369.580734][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.589418][ T6855] R13: 00007fea687b6038 R14: 00007fea687b5fa0 R15: 00007ffe40ec6b38 [ 369.600121][ T6855] [ 369.790545][ T6861] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.833'. [ 370.074766][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 370.114437][ T6869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.229208][ T6874] IPv6: Can't replace route, no match found [ 370.256104][ T6874] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 370.307654][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 371.532675][ T6910] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.848'. [ 372.168374][ T6923] IPv6: Can't replace route, no match found [ 372.191634][ T6923] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 372.420577][ T6928] __nla_validate_parse: 1 callbacks suppressed [ 372.420594][ T6928] netlink: 180 bytes leftover after parsing attributes in process `syz.0.855'. [ 372.578324][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 372.618458][ T6935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.729248][ T6938] netlink: 'syz.4.858': attribute type 4 has an invalid length. [ 372.756701][ T6940] FAULT_INJECTION: forcing a failure. [ 372.756701][ T6940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.779392][ T6938] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.858'. [ 372.820955][ T6941] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.858'. [ 372.830552][ T6940] CPU: 1 PID: 6940 Comm: syz.1.859 Not tainted 6.1.148-syzkaller #0 [ 372.830603][ T6940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.830615][ T6940] Call Trace: [ 372.830625][ T6940] [ 372.830637][ T6940] dump_stack_lvl+0x168/0x22e [ 372.830674][ T6940] ? show_regs_print_info+0x12/0x12 [ 372.830699][ T6940] ? load_image+0x3b0/0x3b0 [ 372.830735][ T6940] ? __lock_acquire+0x7c50/0x7c50 [ 372.830761][ T6940] ? rcu_is_watching+0x11/0xa0 [ 372.830801][ T6940] should_fail_ex+0x399/0x4d0 [ 372.830844][ T6940] _copy_from_user+0x2c/0x170 [ 372.830876][ T6940] ppp_get_filter+0x9d/0x1b0 [ 372.830901][ T6940] ? ppp_set_compress+0x720/0x720 [ 372.830978][ T6940] ppp_ioctl+0xdf4/0x1940 [ 372.831020][ T6940] ? ppp_poll+0x250/0x250 [ 372.831042][ T6940] ? __fget_files+0x28/0x4d0 [ 372.831103][ T6940] ? bpf_lsm_file_ioctl+0x5/0x10 [ 372.831125][ T6940] ? security_file_ioctl+0x7c/0xa0 [ 372.831150][ T6940] ? ppp_poll+0x250/0x250 [ 372.831174][ T6940] __se_sys_ioctl+0xfa/0x170 [ 372.831208][ T6940] do_syscall_64+0x4c/0xa0 [ 372.831226][ T6940] ? clear_bhb_loop+0x60/0xb0 [ 372.831246][ T6940] ? clear_bhb_loop+0x60/0xb0 [ 372.831272][ T6940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.831297][ T6940] RIP: 0033:0x7f5e95b8ebe9 [ 372.831319][ T6940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.831336][ T6940] RSP: 002b:00007f5e96ab8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.831361][ T6940] RAX: ffffffffffffffda RBX: 00007f5e95db5fa0 RCX: 00007f5e95b8ebe9 [ 372.885505][ T6940] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000004 [ 372.885525][ T6940] RBP: 00007f5e96ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 372.885538][ T6940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.885551][ T6940] R13: 00007f5e95db6038 R14: 00007f5e95db5fa0 R15: 00007fffdd52bfc8 [ 372.885608][ T6940] [ 372.915337][ T6941] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 373.750892][ T6961] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.865'. [ 374.183324][ T6969] IPv6: Can't replace route, no match found [ 374.192308][ T6969] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 374.265889][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 374.726365][ T6984] netlink: 'syz.4.872': attribute type 10 has an invalid length. [ 374.755582][ T6984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.872'. [ 374.809918][ T6984] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 374.834287][ T6984] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.956033][ T6975] syz.0.869 (6975) used greatest stack depth: 18176 bytes left [ 374.979598][ T6984] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 375.128803][ T6993] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 375.244923][ T6993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.496922][ T7004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.879'. [ 375.527395][ T7004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.879'. [ 375.549883][ T7007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.879'. [ 375.583595][ T7004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.879'. [ 375.749132][ T7013] IPv6: Can't replace route, no match found [ 375.777927][ T7013] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 376.055651][ T4316] Bluetooth: hci1: ISO packet for unknown connection handle 3478 [ 376.341309][ T7028] FAULT_INJECTION: forcing a failure. [ 376.341309][ T7028] name failslab, interval 1, probability 0, space 0, times 0 [ 376.354641][ T7028] CPU: 1 PID: 7028 Comm: syz.3.888 Not tainted 6.1.148-syzkaller #0 [ 376.362770][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.372951][ T7028] Call Trace: [ 376.376248][ T7028] [ 376.379221][ T7028] dump_stack_lvl+0x168/0x22e [ 376.384209][ T7028] ? __dev_queue_xmit+0x26f/0x3760 [ 376.389366][ T7028] ? show_regs_print_info+0x12/0x12 [ 376.394593][ T7028] ? load_image+0x3b0/0x3b0 [ 376.399360][ T7028] should_fail_ex+0x399/0x4d0 [ 376.404151][ T7028] should_failslab+0x5/0x20 [ 376.408672][ T7028] slab_pre_alloc_hook+0x59/0x310 [ 376.413854][ T7028] kmem_cache_alloc_node+0x5a/0x320 [ 376.419245][ T7028] ? ip_finish_output2+0x3e8/0x11b0 [ 376.424657][ T7028] ? __alloc_skb+0xfc/0x7e0 [ 376.429270][ T7028] __alloc_skb+0xfc/0x7e0 [ 376.433673][ T7028] ip_frag_next+0xcd/0xaf0 [ 376.438194][ T7028] ? ip_options_fragment+0x1aa/0x290 [ 376.443476][ T7028] ? ip_do_fragment+0x8c7/0x1750 [ 376.448509][ T7028] ip_do_fragment+0x866/0x1750 [ 376.453269][ T7028] ? ip_mc_finish_output+0x250/0x250 [ 376.458662][ T7028] ? ip_fragment+0x210/0x210 [ 376.463285][ T7028] iptunnel_xmit+0x525/0x930 [ 376.468093][ T7028] ip_tunnel_xmit+0x1c39/0x2360 [ 376.472964][ T7028] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 376.478073][ T7028] ? skb_network_protocol+0x505/0x750 [ 376.483572][ T7028] ? skb_push+0x8a/0xd0 [ 376.488013][ T7028] ? gre_build_header+0x25b/0x9a0 [ 376.493230][ T7028] ipgre_xmit+0x79d/0xb20 [ 376.497616][ T7028] dev_hard_start_xmit+0x262/0x870 [ 376.502839][ T7028] __dev_queue_xmit+0x1bf1/0x3760 [ 376.507886][ T7028] ? __dev_queue_xmit+0x26f/0x3760 [ 376.513085][ T7028] ? netdev_core_pick_tx+0x340/0x340 [ 376.518743][ T7028] ? __kmem_cache_alloc_node+0x140/0x260 [ 376.524457][ T7028] ? skb_release_data+0x1d2/0x7c0 [ 376.529519][ T7028] __bpf_redirect+0x915/0x1180 [ 376.534412][ T7028] bpf_clone_redirect+0x26c/0x3c0 [ 376.539974][ T7028] bpf_prog_208b094576c80b22+0x56/0x5b [ 376.545457][ T7028] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 376.551902][ T7028] ? lock_chain_count+0x20/0x20 [ 376.556771][ T7028] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 376.563150][ T7028] ? lockdep_hardirqs_on+0x94/0x140 [ 376.569201][ T7028] ? ktime_get+0x7b/0x270 [ 376.574840][ T7028] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 376.581351][ T7028] ? ktime_get_real_ts64+0x420/0x420 [ 376.586716][ T7028] ? read_lock_is_recursive+0x10/0x10 [ 376.592266][ T7028] ? __cant_sleep+0x210/0x210 [ 376.597423][ T7028] ? ktime_get+0x247/0x270 [ 376.601962][ T7028] bpf_test_run+0x29e/0x7d0 [ 376.606721][ T7028] ? convert___skb_to_skb+0x580/0x580 [ 376.612138][ T7028] ? eth_get_headlen+0x1f0/0x1f0 [ 376.617287][ T7028] ? __build_skb+0x257/0x3c0 [ 376.622332][ T7028] ? convert___skb_to_skb+0x3d/0x580 [ 376.628287][ T7028] bpf_prog_test_run_skb+0xa40/0x11b0 [ 376.633866][ T7028] ? cpu_online+0xa0/0xa0 [ 376.638269][ T7028] bpf_prog_test_run+0x31e/0x390 [ 376.643943][ T7028] __sys_bpf+0x593/0x6d0 [ 376.649402][ T7028] ? bpf_link_show_fdinfo+0x340/0x340 [ 376.655080][ T7028] ? lock_chain_count+0x20/0x20 [ 376.660149][ T7028] __x64_sys_bpf+0x78/0x90 [ 376.665149][ T7028] do_syscall_64+0x4c/0xa0 [ 376.669610][ T7028] ? clear_bhb_loop+0x60/0xb0 [ 376.674306][ T7028] ? clear_bhb_loop+0x60/0xb0 [ 376.679130][ T7028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.685495][ T7028] RIP: 0033:0x7fdd5ed8ebe9 [ 376.690802][ T7028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.711548][ T7028] RSP: 002b:00007fdd5fb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.720174][ T7028] RAX: ffffffffffffffda RBX: 00007fdd5efb5fa0 RCX: 00007fdd5ed8ebe9 [ 376.728414][ T7028] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 376.736773][ T7028] RBP: 00007fdd5fb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 376.744961][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.753036][ T7028] R13: 00007fdd5efb6038 R14: 00007fdd5efb5fa0 R15: 00007ffe9e606ee8 [ 376.761965][ T7028] [ 378.505968][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.618845][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.717731][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.837839][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.085669][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.098210][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.950184][ T46] device hsr_slave_0 left promiscuous mode [ 379.957751][ T46] device hsr_slave_1 left promiscuous mode [ 379.964973][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.974012][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.983048][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.990604][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.999751][ T46] device bridge_slave_1 left promiscuous mode [ 380.007896][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.020213][ T46] device bridge_slave_0 left promiscuous mode [ 380.029017][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.055622][ T46] device veth1_macvtap left promiscuous mode [ 380.062757][ T46] device veth0_macvtap left promiscuous mode [ 380.068917][ T46] device veth1_vlan left promiscuous mode [ 380.075188][ T46] device veth0_vlan left promiscuous mode [ 380.467965][ T46] team0 (unregistering): Port device team_slave_1 removed [ 380.501163][ T46] team0 (unregistering): Port device team_slave_0 removed [ 380.536178][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.574215][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.933458][ T46] bond0 (unregistering): Released all slaves [ 381.383773][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.449948][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.524033][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.577402][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.664458][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.735251][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.795415][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.865633][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.944554][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.014792][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.056011][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.094923][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.206692][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.278555][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.326486][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.385678][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.277453][ T46] device hsr_slave_0 left promiscuous mode [ 384.284163][ T46] device hsr_slave_1 left promiscuous mode [ 384.290751][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.301934][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.310219][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.321798][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.329867][ T46] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 384.340643][ T46] batman_adv: batadv0: Removing interface: virt_wifi0 [ 384.348522][ T46] device bridge_slave_1 left promiscuous mode [ 384.358573][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.368636][ T46] device bridge_slave_0 left promiscuous mode [ 384.375895][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.388135][ T46] device hsr_slave_0 left promiscuous mode [ 384.395325][ T46] device hsr_slave_1 left promiscuous mode [ 384.402207][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.409781][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.417719][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.425468][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.434809][ T46] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 384.442273][ T46] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 384.449862][ T46] device bridge_slave_1 left promiscuous mode [ 384.456803][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.467664][ T46] device bridge_slave_0 left promiscuous mode [ 384.475434][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.488556][ T46] device hsr_slave_0 left promiscuous mode [ 384.495494][ T46] device hsr_slave_1 left promiscuous mode [ 384.504001][ T46] device bridge_slave_1 left promiscuous mode [ 384.510489][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.520013][ T46] device bridge_slave_0 left promiscuous mode [ 384.527958][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.540644][ T46] device hsr_slave_0 left promiscuous mode [ 384.547655][ T46] device hsr_slave_1 left promiscuous mode [ 384.555600][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.563808][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.572709][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.580185][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.588799][ T46] bridge0: port 3(bond0) entered disabled state [ 384.597246][ T46] device bridge_slave_1 left promiscuous mode [ 384.605075][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.614117][ T46] device bridge_slave_0 left promiscuous mode [ 384.620571][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.676663][ T46] device veth1_macvtap left promiscuous mode [ 384.682944][ T46] device veth0_macvtap left promiscuous mode [ 384.690285][ T46] device veth1_vlan left promiscuous mode [ 384.696337][ T46] device veth0_vlan left promiscuous mode [ 384.704543][ T46] device veth1_macvtap left promiscuous mode [ 384.710814][ T46] device veth0_macvtap left promiscuous mode [ 384.717293][ T46] device veth1_vlan left promiscuous mode [ 384.723745][ T46] device veth0_vlan left promiscuous mode [ 384.732632][ T46] device veth1_macvtap left promiscuous mode [ 384.739181][ T46] device veth0_macvtap left promiscuous mode [ 384.747549][ T46] device veth1_macvtap left promiscuous mode [ 384.754130][ T46] device veth0_macvtap left promiscuous mode [ 384.761597][ T46] device veth1_vlan left promiscuous mode [ 384.769459][ T46] device veth0_vlan left promiscuous mode [ 385.306539][ T46] team0 (unregistering): Port device team_slave_1 removed [ 385.338650][ T46] team0 (unregistering): Port device team_slave_0 removed [ 385.370086][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.406319][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.749164][ T46] bond0 (unregistering): Released all slaves [ 386.075892][ T46] team0 (unregistering): Port device team_slave_1 removed [ 386.109510][ T46] team0 (unregistering): Port device team_slave_0 removed [ 386.147229][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.181575][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.511934][ T46] bond0 (unregistering): Released all slaves [ 386.786292][ T46] team0 (unregistering): Port device team_slave_1 removed [ 386.823793][ T46] team0 (unregistering): Port device team_slave_0 removed [ 386.857131][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.891058][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.198083][ T46] bond0 (unregistering): Released all slaves