last executing test programs: 26.53109969s ago: executing program 0 (id=11280): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0xee, &(0x7f0000000100)=""/238}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x80, 0x8, 0x1, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x42028, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x4081, 0x0, 0x30000, 0x0, 0x82da, 0x401, 0x3, 0x0, 0x6, 0x0, 0x1000}, 0xffffffffffffffff, 0x1, r4, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r2, 0x0, 0x4b, 0xad, &(0x7f0000000c40)="ceeb1ac0ff66475bc01f9836a41a0fac443b848f5a409d7004b826741a26515ea3bc985475f92b44e87d9868b8ce550c7dfa60a4e80000000000000000b5dce94d4fd9c572000000000000", &(0x7f0000000b40)=""/173, 0x1, 0x0, 0x2e, 0x0, &(0x7f0000000c00)="4d1caa58d12e4d89f6dc9cb331ffb4a95b1a23f405b9e9ac20d89b8679ac66cd3c2dcfc2323814d4bec487a00384", 0x0, 0x1, 0x0, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000a80), 0x1}, 0x8080, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x8, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0xe, &(0x7f00000006c0)=ANY=[@ANYRES32=r7, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x2, 0x0, 0x0) r9 = socket$kcm(0x2, 0x1, 0x0) recvmsg$kcm(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/174, 0xae}, {0x0}], 0x2}, 0x10021) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000181500006fed3da1d57ff9e049086f62548eede9c6de06a80789403ec9e0185d9ba4ef01cc24eb882d130a1ea2338104404634189ed7cc18b6bc23edc761ddca1c5a23af7b74fd9851090000004d57e01f0b03b19b3de2acc117b64604640542fb47b7f0b7e7fdff3ca9f7ccda31f37dd72629e95c04fe8eeac6581e3885eb31a11b9535be8a9f56511c03ff83b2e94fc3b40ec6908fb25a0472f2a042e8ea46c7568360f9b9c80f4b837f46f98cfd2fea9aea93400a8af344db601d9c6aa17007db077113fa56572a918c0dfb25df19c7edbd47066c09a7426b", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000063000000851000000100000095000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x9, 0x2, 0x1, &(0x7f0000000200)) 25.836350678s ago: executing program 0 (id=11285): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES16=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000005d31, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) unlink(&(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x81, 0x5, 0x0, 0x10, 0xffffffffffffffff, 0x6887, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xe}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000001d80), &(0x7f0000001d40)=r2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0xfe80, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000100000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_lsm={0x1d, 0x11, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000631}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit], 0x0, 0x75de, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000280)="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", 0x16c}], 0x2}, 0x200400c4) 25.29072527s ago: executing program 0 (id=11299): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040100"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000181100000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x300, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r0], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) 24.619131927s ago: executing program 0 (id=11295): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0xfffffffffffffffd, 0xfffffffffffffffe}, 0x1a114, 0x8, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x102) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x82d7) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) 22.85449047s ago: executing program 0 (id=11305): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r3, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) recvmsg$unix(r2, &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005e00)}, 0x120e3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xb, 0x0, &(0x7f0000000040)="f7edad0000000000000000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000000) 22.109301729s ago: executing program 1 (id=11309): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040100"/18, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000181100000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x300, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r0], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) 19.469074413s ago: executing program 0 (id=11322): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x62b5129d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x40000000, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3673c498, &(0x7f0000000080)=[{&(0x7f0000000280)="c00e02002d000b13d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x100b06, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_clone(0x4003500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 19.432989294s ago: executing program 1 (id=11313): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES16=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000005d31, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) unlink(&(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x81, 0x5, 0x0, 0x10, 0xffffffffffffffff, 0x6887, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xe}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000001d80), &(0x7f0000001d40)=r2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0xfe80, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000100000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001dc0)=@bpf_lsm={0x1d, 0x11, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000631}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit], 0x0, 0x75de, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000280)="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", 0x16c}], 0x2}, 0x200400c4) 16.262898262s ago: executing program 1 (id=11318): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x1a4e, 0x0, 0x0, 0x7, 0x0, 0xbfff}, 0x0, 0xffefffffffffffff, r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x10ed22f000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1ffffffffffffdf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000140)='./file0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x8000000, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xb0, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x4}, 0x986, 0x4, 0x4, 0x0, 0x81, 0x9, 0x83, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000004000000ff03000001000000", @ANYRES32, @ANYBLOB="c843a46d00000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x9, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc, 0xfffffff6, 0x1, 0xfffeffffffffbbfe, 0x200, 0xfffe, 0x0, 0xfffffffe}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 8.744083196s ago: executing program 4 (id=11326): close(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x0, 0x9e8}]}) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/11], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) close(0x3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x0, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) close(0x3) 6.988268829s ago: executing program 3 (id=11332): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040100"/19, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000181100000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x300, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r0], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) 6.863675972s ago: executing program 2 (id=11333): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff6f, 0x10, &(0x7f0000000040)}, 0x48) 5.983999683s ago: executing program 3 (id=11334): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000e9f850000002e00000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='net_prio.prioidx\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r2}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x7, 0x9}, {0x10000002, 0x0, 0xfffffffa, 0xc}], 0x10, 0xfffffffc}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) openat$cgroup_pressure(r5, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x80d1) 5.854995307s ago: executing program 4 (id=11335): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d0400000000000000000000050000000000200000000000090300000000000004610097"], 0x0, 0x52}, 0x28) 5.747750199s ago: executing program 1 (id=11336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="090000002a0001000049000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280), 0x1000000}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x830d}, 0x0, 0x2, 0x4, 0x8, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x2, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x65, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r6 = getpid() perf_event_open(0x0, r6, 0x4, r2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000030000003613000c000000070000002e5f"], 0x0, 0x2a}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x800ac200, &(0x7f0000000200)="081c621af8cc89f43ccdaa910cb05c8b85c2e4d9d445658a77b3978dec42c4f51b675f3415f7e1fa5f8b7e28", 0x2c, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f00000006c0)="b127acd84a3468573fb87001210743c61890c49558b7395bc0b89d05ef656e5b239fb25484e6b107a3b8a2af1a620800000000000000cc1020fcaecfd90d8e92a95dec07f568b2ff40582449af0a6af529cb525d9a42ebc05b8e8481adeecd92e47b2d797abdc4e680607203440ced127350bb147e1621b8d30ef593b14e6bbb21036db7309f88bd7a5ecea55b8aefa6f991b3324a04da8210f9e26961e24bebf8fce1b4ca4cfc390246aced6091d3a949a17d03f14c6a927ed87fb693c5054cf83c316c5b34b22ad7d5ff9fcad6689226cc20e26dbc74e5fd55f3208e1d79e3b6") ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000400000005000100000000", @ANYRES32, @ANYBLOB='\x00'/20], 0x50) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_clone(0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r12, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r13, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x800000000}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r13, 0x40042409, 0x1) r14 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r14, 0x4) 5.74713329s ago: executing program 2 (id=11337): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000500b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffdfff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x48040) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100), 0x4) 4.644400977s ago: executing program 4 (id=11338): socket$kcm(0x21, 0x2, 0x2) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), 0x8) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f00000007c0)="3111", 0x2}], 0x1}, 0x4040) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1], 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b00), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="54000000000000000000000007000000441c9411ac1614aaffffffffe000000200000087ac1414aa0000000b830704ac1e000100891f6de0000002e0000002ffffffffac1414bbac14142f64010100e00000020100000000140000000000000000000000010000000100000000000000140000000000000000000000020000000c00"], 0x88}, 0x1050) (async, rerun: 32) r2 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x400000002, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) close(r3) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x1000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 3.853586225s ago: executing program 32 (id=11322): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x62b5129d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x40000000, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3673c498, &(0x7f0000000080)=[{&(0x7f0000000280)="c00e02002d000b13d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x100b06, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_clone(0x4003500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 3.806910607s ago: executing program 3 (id=11340): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) (async) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}, 0x80, 0x0}, 0x2008e000) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) 3.767259227s ago: executing program 2 (id=11341): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4000, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r3, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) 3.229753851s ago: executing program 1 (id=11342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x4, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) syz_clone(0x11, 0x0, 0x2300, 0x0, 0x0, 0x0) 2.405558481s ago: executing program 4 (id=11343): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000200000000000091030000000000000000000000000000020100000002000000000000080200000000005f"], 0x0, 0x44}, 0x20) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000080000000000000005bed6e830e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000036004b63d2", 0x9}], 0x1}, 0x20004040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000000}]}, @fwd={0x1}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x48}, 0x28) sendmsg$kcm(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x1f, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aa", 0x0, 0x4}, 0x50) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xa0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x59) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x0, 0x2, 0x67, &(0x7f0000000f00)=""/103, 0x40f00, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001080)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000010c0)=[{0x3, 0x2, 0x5, 0xa}, {0x0, 0x5, 0x3, 0x8}], 0x10, 0x7fff}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x26, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x82a0}, @cb_func={0x18, 0x7}, @ldst={0x0, 0x0, 0x4, 0x6, 0x8, 0x2, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='syzkaller\x00', 0x6, 0xf0, &(0x7f0000000800)=""/240, 0x41100, 0x1, '\x00', r6, 0x17, r7, 0x8, &(0x7f0000000980)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x2, 0x101}, 0x10, 0xd6fa, 0xffffffffffffffff, 0x4, &(0x7f0000000440)=[r3, r3, 0xffffffffffffffff, r3, r0, r3, 0xffffffffffffffff, r5], &(0x7f0000000a80)=[{0x0, 0x3, 0x3, 0xa}, {0x0, 0x1, 0x6, 0x4}, {0x2, 0x3, 0x5}, {0x1, 0x5, 0xf, 0x1}], 0x10, 0xfffffffe}, 0x94) 2.368799042s ago: executing program 3 (id=11344): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040100"/19, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000181100000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x300, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r0], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) 1.762468367s ago: executing program 2 (id=11345): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x40000002, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r2, &(0x7f0000000300)}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.303077228s ago: executing program 1 (id=11346): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000800000000000000001c00000000000000000f00d143639efd", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000030000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000000100"/76], 0x98}, 0x0) 1.22048437s ago: executing program 4 (id=11347): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x16584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x7fff}, 0x7602, 0x5, 0x0, 0x0, 0x5, 0x6, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff020000000000000000fffffff50000", 0x28}], 0x1}, 0x0) 1.125545403s ago: executing program 3 (id=11348): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x9, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d2", 0x9}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, r2, 0xb) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000015000b06d25a80648c2594f90924fc60", 0x14}], 0x1}, 0x8114) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="52ab8b610400"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x42d793bcf0cb4e84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r7, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x44041) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x78, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a820ff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31b", 0x0, 0xfe, 0x60000000}, 0x50) 940.163837ms ago: executing program 2 (id=11349): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 400.50254ms ago: executing program 4 (id=11350): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x8d960f, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 200.943475ms ago: executing program 3 (id=11351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000a40), 0x4, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020004000400180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 0s ago: executing program 2 (id=11352): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r3, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) recvmsg$unix(r2, &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005e00)}, 0x120e3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) (fail_nth: 4) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xb, 0x0, &(0x7f0000000040)="f7edad0000000000000000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000000) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.2.8503'. [ 1812.872064][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1812.924502][ T1216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1814.510130][ T1254] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8513'. [ 1814.842666][ T1263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8515'. [ 1815.292014][ T1273] netlink: 'syz.0.8518': attribute type 10 has an invalid length. [ 1816.474438][ T1312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8529'. [ 1816.962074][ T1322] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8534'. [ 1817.103583][T29852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1818.161836][ T1350] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8542'. [ 1818.532717][ T1351] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8535'. [ 1818.983722][ T1377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8549'. [ 1819.369503][ T1351] bond0: (slave bond_slave_0): Releasing backup interface [ 1819.618949][ T1351] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1820.241846][ T1377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8549'. [ 1820.373924][ T1394] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8552'. [ 1820.856217][ T1403] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8558'. [ 1821.684000][ T1430] netlink: 'syz.1.8566': attribute type 9 has an invalid length. [ 1821.720845][ T1430] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.8566'. [ 1822.060118][ T1437] netlink: 'syz.2.8569': attribute type 3 has an invalid length. [ 1822.131719][ T1437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8569'. [ 1822.389540][ T1442] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8570'. [ 1822.441218][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1822.510065][ T1442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1822.647019][ T1451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8573'. [ 1823.315886][ T1463] netlink: 'syz.0.8577': attribute type 10 has an invalid length. [ 1823.411510][ T1463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8577'. [ 1823.517930][ T1463] bridge0: port 3(team0) entered blocking state [ 1823.586349][ T1463] bridge0: port 3(team0) entered disabled state [ 1823.706976][ T1463] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1823.941872][ T1464] netlink: 'syz.0.8577': attribute type 10 has an invalid length. [ 1823.950060][ T1464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8577'. [ 1824.138790][ T1464] bridge0: port 3(team0) entered blocking state [ 1824.263354][ T1464] bridge0: port 3(team0) entered disabled state [ 1824.360365][ T1464] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1824.466685][ T1459] netlink: 'syz.0.8577': attribute type 12 has an invalid length. [ 1824.557693][ T1459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8577'. [ 1826.899919][ T1501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8587'. [ 1828.774955][ T1530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1828.851597][ T1530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1829.041242][ T1538] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1829.465443][ T1549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8599'. [ 1831.597389][ T1575] netlink: 'syz.1.8608': attribute type 21 has an invalid length. [ 1832.102671][ T1588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8612'. [ 1835.041394][T29852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1835.340980][ T1634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8625'. [ 1835.987173][ T1643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8627'. [ 1836.330430][ T1643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.185902][ T1648] netlink: 'syz.0.8630': attribute type 21 has an invalid length. [ 1838.309487][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1838.377080][ T1663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1838.737946][ T1674] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8638'. [ 1838.796999][ T1674] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1838.894663][ T1674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1839.572732][ T1693] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8645'. [ 1839.667592][T29852] wlan1: Trigger new scan to find an IBSS to join [ 1841.311759][ T1727] netlink: 'syz.1.8654': attribute type 7 has an invalid length. [ 1841.399353][ T1730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8659'. [ 1841.978774][ T1738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8662'. [ 1842.032506][ T1738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8662'. [ 1842.164688][ T1739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8662'. [ 1843.318532][ T1766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8672'. [ 1844.701869][T21829] wlan1: Trigger new scan to find an IBSS to join [ 1845.032588][ T1814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8685'. [ 1845.641314][T29852] wlan1: Creating new IBSS network, BSSID 62:4a:9f:c3:bf:61 [ 1845.658236][ T1826] netlink: 'syz.4.8690': attribute type 13 has an invalid length. [ 1845.701656][ T1826] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.8690'. [ 1846.420932][ T1848] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8698'. [ 1846.454435][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1846.513913][ T1848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1846.595457][ T1853] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8699'. [ 1850.853961][ T1898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8714'. [ 1851.826746][ T1923] netlink: 'syz.1.8721': attribute type 10 has an invalid length. [ 1852.688719][ T1923] device syz_tun entered promiscuous mode [ 1852.764583][ T1923] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1852.952639][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.962476][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.082802][ T1944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8728'. [ 1853.831771][ T1956] netlink: 'syz.3.8732': attribute type 5 has an invalid length. [ 1853.853069][ T1956] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8732'. [ 1856.588291][ T1978] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8740'. [ 1857.208947][ T1985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8743'. [ 1857.242177][ T1985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8743'. [ 1857.279431][ T1985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8743'. [ 1857.963158][ T2012] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8749'. [ 1862.757194][ T2035] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8754'. [ 1863.968675][ T2054] netlink: 'syz.0.8761': attribute type 2 has an invalid length. [ 1865.075333][ T2072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8767'. [ 1865.380365][ T2075] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.8768'. [ 1865.560739][ T2076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8769'. [ 1865.597916][ T2076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8769'. [ 1865.668372][ T2083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8769'. [ 1866.316795][ T2106] netlink: 'syz.1.8780': attribute type 25 has an invalid length. [ 1866.348013][ T2106] netlink: 'syz.1.8780': attribute type 29 has an invalid length. [ 1866.385009][ T2105] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8780'. [ 1867.026868][T21829] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1867.534789][ T2116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8783'. [ 1868.573677][ T2127] netlink: 'syz.0.8786': attribute type 2 has an invalid length. [ 1868.579911][ T2123] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.8786'. [ 1868.785615][ T2127] netlink: 175020 bytes leftover after parsing attributes in process `syz.0.8786'. [ 1875.522186][ T2162] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.8797'. [ 1875.669693][ T2166] netlink: 'syz.2.8799': attribute type 25 has an invalid length. [ 1875.691596][ T2166] netlink: 'syz.2.8799': attribute type 28 has an invalid length. [ 1877.904099][T29860] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1878.342155][ T2195] delete_channel: no stack [ 1879.277756][ T2224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8821'. [ 1879.320398][ T2230] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8823'. [ 1879.718522][ T2236] netlink: 'syz.4.8825': attribute type 1 has an invalid length. [ 1879.751822][ T2236] netlink: 'syz.4.8825': attribute type 4 has an invalid length. [ 1879.761031][ T2236] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8825'. [ 1880.328277][ T2255] netlink: 'syz.0.8834': attribute type 2 has an invalid length. [ 1880.354991][ T2255] netlink: 'syz.0.8834': attribute type 1 has an invalid length. [ 1880.392921][ T2255] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.8834'. [ 1880.529430][ T2260] FAULT_INJECTION: forcing a failure. [ 1880.529430][ T2260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.559980][ T2260] CPU: 0 PID: 2260 Comm: syz.3.8836 Not tainted syzkaller #0 [ 1880.567499][ T2260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1880.577621][ T2260] Call Trace: [ 1880.581072][ T2260] [ 1880.584041][ T2260] dump_stack_lvl+0x188/0x24e [ 1880.588792][ T2260] ? show_regs_print_info+0x12/0x12 [ 1880.594059][ T2260] ? load_image+0x410/0x410 [ 1880.598626][ T2260] ? __lock_acquire+0x7ea0/0x7ea0 [ 1880.603730][ T2260] should_fail_ex+0x390/0x4c0 [ 1880.610080][ T2260] _copy_from_user+0x2c/0x170 [ 1880.615873][ T2260] __sys_bpf+0x2ea/0x780 [ 1880.620184][ T2260] ? bpf_link_show_fdinfo+0x380/0x380 [ 1880.625628][ T2260] ? lock_chain_count+0x20/0x20 [ 1880.630627][ T2260] __x64_sys_bpf+0x78/0x90 [ 1880.635100][ T2260] do_syscall_64+0x4c/0xa0 [ 1880.640100][ T2260] ? clear_bhb_loop+0x60/0xb0 [ 1880.645282][ T2260] ? clear_bhb_loop+0x60/0xb0 [ 1880.650309][ T2260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1880.656514][ T2260] RIP: 0033:0x7f4aead9e199 [ 1880.661251][ T2260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1880.682314][ T2260] RSP: 002b:00007f4aebc74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1880.691011][ T2260] RAX: ffffffffffffffda RBX: 00007f4aeb025fa0 RCX: 00007f4aead9e199 [ 1880.699049][ T2260] RDX: 0000000000000028 RSI: 0000200000000440 RDI: 000000000000000a [ 1880.707085][ T2260] RBP: 00007f4aebc74090 R08: 0000000000000000 R09: 0000000000000000 [ 1880.715146][ T2260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1880.723342][ T2260] R13: 00007f4aeb026038 R14: 00007f4aeb025fa0 R15: 00007ffd2e718b78 [ 1880.731386][ T2260] [ 1880.824990][ T2265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8838'. [ 1882.239614][ T2304] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8861'. [ 1882.285157][ T2306] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8861'. [ 1882.574426][ T2309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8852'. [ 1883.814195][ T2348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8867'. [ 1884.155846][ T2352] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8868'. [ 1884.169578][ T2352] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1884.217134][ T2352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1885.535421][ T2391] netlink: 763 bytes leftover after parsing attributes in process `syz.1.8878'. [ 1885.937155][ T2406] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8881'. [ 1890.328783][ T2466] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8896'. [ 1890.884679][ T2486] netlink: 'syz.4.8902': attribute type 3 has an invalid length. [ 1890.897098][ T2488] FAULT_INJECTION: forcing a failure. [ 1890.897098][ T2488] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.922645][ T2489] netlink: 'syz.4.8902': attribute type 41 has an invalid length. [ 1890.940060][ T2488] CPU: 1 PID: 2488 Comm: syz.0.8904 Not tainted syzkaller #0 [ 1890.947605][ T2488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1890.957858][ T2488] Call Trace: [ 1890.961154][ T2488] [ 1890.964106][ T2488] dump_stack_lvl+0x188/0x24e [ 1890.968897][ T2488] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1890.975082][ T2488] ? show_regs_print_info+0x12/0x12 [ 1890.980300][ T2488] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1890.986478][ T2488] ? dump_stack+0x5/0x12 [ 1890.990746][ T2488] should_fail_ex+0x390/0x4c0 [ 1890.995459][ T2488] should_failslab+0x5/0x20 [ 1890.999978][ T2488] slab_pre_alloc_hook+0x59/0x300 [ 1891.005116][ T2488] kmem_cache_alloc+0x56/0x2f0 [ 1891.010244][ T2488] ? __build_skb+0x27/0x3b0 [ 1891.014775][ T2488] __build_skb+0x27/0x3b0 [ 1891.019120][ T2488] ? build_skb+0x14/0x230 [ 1891.023469][ T2488] build_skb+0x1e/0x230 [ 1891.027645][ T2488] __tun_build_skb+0x36/0x320 [ 1891.032347][ T2488] tun_get_user+0x1bab/0x3be0 [ 1891.037057][ T2488] ? tun_get_user+0x66f/0x3be0 [ 1891.041859][ T2488] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1891.048044][ T2488] ? rcu_read_unlock+0xa0/0xa0 [ 1891.052905][ T2488] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1891.059082][ T2488] ? tun_get+0x1c/0x2e0 [ 1891.063290][ T2488] ? __lock_acquire+0x7ea0/0x7ea0 [ 1891.068344][ T2488] ? tun_get+0x1c/0x2e0 [ 1891.072532][ T2488] ? tun_get+0x1c/0x2e0 [ 1891.076780][ T2488] tun_chr_write_iter+0x112/0x1f0 [ 1891.081840][ T2488] vfs_write+0x482/0x9a0 [ 1891.086139][ T2488] ? file_end_write+0x250/0x250 [ 1891.091048][ T2488] ? __fget_files+0x3fc/0x460 [ 1891.095783][ T2488] ? __fdget_pos+0x1d4/0x360 [ 1891.100401][ T2488] ? ksys_write+0x70/0x260 [ 1891.104856][ T2488] ksys_write+0x14d/0x260 [ 1891.109222][ T2488] ? __ia32_sys_read+0x80/0x80 [ 1891.114040][ T2488] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1891.120000][ T2488] do_syscall_64+0x4c/0xa0 [ 1891.124460][ T2488] ? clear_bhb_loop+0x60/0xb0 [ 1891.129168][ T2488] ? clear_bhb_loop+0x60/0xb0 [ 1891.133956][ T2488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.139880][ T2488] RIP: 0033:0x7ff7b9d9e199 [ 1891.144320][ T2488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.163971][ T2488] RSP: 002b:00007ff7babc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1891.172455][ T2488] RAX: ffffffffffffffda RBX: 00007ff7ba025fa0 RCX: 00007ff7b9d9e199 [ 1891.180546][ T2488] RDX: 000000000000000e RSI: 0000200000000000 RDI: 00000000000000c8 [ 1891.188734][ T2488] RBP: 00007ff7babc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1891.196757][ T2488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.205017][ T2488] R13: 00007ff7ba026038 R14: 00007ff7ba025fa0 R15: 00007ffff4000ce8 [ 1891.213043][ T2488] [ 1891.243099][ T2486] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8902'. [ 1891.666155][ T2503] FAULT_INJECTION: forcing a failure. [ 1891.666155][ T2503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1891.728871][ T2503] CPU: 0 PID: 2503 Comm: syz.3.8907 Not tainted syzkaller #0 [ 1891.736428][ T2503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1891.747062][ T2503] Call Trace: [ 1891.750389][ T2503] [ 1891.753386][ T2503] dump_stack_lvl+0x188/0x24e [ 1891.758211][ T2503] ? show_regs_print_info+0x12/0x12 [ 1891.767901][ T2503] ? load_image+0x410/0x410 [ 1891.772808][ T2503] ? __lock_acquire+0x7ea0/0x7ea0 [ 1891.779211][ T2503] ? __rcu_read_unlock+0x78/0xd0 [ 1891.784216][ T2503] should_fail_ex+0x390/0x4c0 [ 1891.789081][ T2503] _copy_to_user+0x2c/0x130 [ 1891.793733][ T2503] bpf_test_finish+0x198/0x600 [ 1891.798660][ T2503] ? dst_hold+0xb0/0xb0 [ 1891.802973][ T2503] ? convert_skb_to___skb+0x420/0x420 [ 1891.809468][ T2503] ? bpf_test_init+0x119/0x140 [ 1891.814832][ T2503] bpf_prog_test_run_xdp+0x827/0xf80 [ 1891.821163][ T2503] ? __lock_acquire+0x7ea0/0x7ea0 [ 1891.828020][ T2503] ? dev_put+0x80/0x80 [ 1891.832517][ T2503] ? dev_put+0x80/0x80 [ 1891.838486][ T2503] bpf_prog_test_run+0x31c/0x390 [ 1891.845229][ T2503] __sys_bpf+0x62b/0x780 [ 1891.849557][ T2503] ? bpf_link_show_fdinfo+0x380/0x380 [ 1891.855876][ T2503] ? lock_chain_count+0x20/0x20 [ 1891.860906][ T2503] __x64_sys_bpf+0x78/0x90 [ 1891.865829][ T2503] do_syscall_64+0x4c/0xa0 [ 1891.872284][ T2503] ? clear_bhb_loop+0x60/0xb0 [ 1891.878593][ T2503] ? clear_bhb_loop+0x60/0xb0 [ 1891.883420][ T2503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.889409][ T2503] RIP: 0033:0x7f4aead9e199 [ 1891.895383][ T2503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.918282][ T2503] RSP: 002b:00007f4aebc74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1891.927903][ T2503] RAX: ffffffffffffffda RBX: 00007f4aeb025fa0 RCX: 00007f4aead9e199 [ 1891.937061][ T2503] RDX: 0000000000000028 RSI: 0000200000000440 RDI: 000000000000000a [ 1891.945951][ T2503] RBP: 00007f4aebc74090 R08: 0000000000000000 R09: 0000000000000000 [ 1891.955547][ T2503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.965211][ T2503] R13: 00007f4aeb026038 R14: 00007f4aeb025fa0 R15: 00007ffd2e718b78 [ 1891.973274][ T2503] [ 1892.145144][ T2520] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8911'. [ 1894.623401][ T2577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1895.402660][ T2608] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1895.408852][ T2608] syzkaller0: linktype set to 775 [ 1896.930185][ T2641] netlink: 'syz.2.8945': attribute type 2 has an invalid length. [ 1897.003054][ T2641] netlink: 'syz.2.8945': attribute type 8 has an invalid length. [ 1897.056587][ T2641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8945'. [ 1897.255736][T24873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1897.266070][T24873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1897.277238][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1897.287078][T24873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1897.296234][T24873] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1897.304018][T24873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1897.829481][ T2647] chnl_net:caif_netlink_parms(): no params data found [ 1898.078055][ T2647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1898.116654][ T2647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.148294][ T2647] device bridge_slave_0 entered promiscuous mode [ 1898.179659][ T2647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.206126][ T2647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.237842][ T2647] device bridge_slave_1 entered promiscuous mode [ 1898.334154][ T2647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1898.359818][ T2647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1898.519206][ T2647] team0: Port device team_slave_0 added [ 1898.550959][ T2647] team0: Port device team_slave_1 added [ 1898.647277][ T2647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1898.679539][ T2647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1898.769428][ T2647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1898.830976][ T2647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1898.838485][ T2647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1898.874429][ T2647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1899.016224][ T2647] device hsr_slave_0 entered promiscuous mode [ 1899.024178][T29857] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1899.051950][ T2647] device hsr_slave_1 entered promiscuous mode [ 1899.103662][T25266] bond0: (slave syz_tun): Releasing backup interface [ 1899.334776][T29852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.515473][T29852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.742197][T32224] Bluetooth: hci5: command 0x0409 tx timeout [ 1899.876958][T29852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.959020][T29852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.058966][ T2710] netlink: 'syz.4.8963': attribute type 27 has an invalid length. [ 1900.083433][ T2710] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8963'. [ 1900.285887][T29852] device .*! left promiscuous mode [ 1900.756499][T29852] device ip6gretap0 left promiscuous mode [ 1900.782251][T29852] : port 1(ip6gretap0) entered disabled state [ 1901.728293][ T2647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1901.821599][T32224] Bluetooth: hci5: command 0x041b tx timeout [ 1901.902102][ T2647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1901.924748][ T2647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1902.137937][ T2647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1902.542476][ T2791] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8980'. [ 1902.576563][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1902.642701][ T2791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1903.150504][ T2647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1903.592570][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1903.600817][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1903.637268][ T2647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1903.702752][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1903.729449][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1903.749724][T21829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.757064][T21829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1903.812868][T29852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1903.820376][T29852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1903.854451][T29852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1903.896899][T29852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1903.904912][T32224] Bluetooth: hci5: command 0x040f tx timeout [ 1903.956083][T29852] bridge0: port 3(dummy0) entered disabled state [ 1904.006855][T29852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1904.039993][T29852] device bridge_slave_0 left promiscuous mode [ 1904.063314][T29852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1904.183082][T29852] device veth0_macvtap left promiscuous mode [ 1904.195884][T29852] device veth1_vlan left promiscuous mode [ 1904.211084][T29852] device veth0_vlan left promiscuous mode [ 1905.022109][ T2854] netlink: 'syz.2.8990': attribute type 1 has an invalid length. [ 1905.057686][T29852] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1905.059430][ T2854] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8990'. [ 1905.756195][T29852] team0 (unregistering): Port device team_slave_1 removed [ 1905.846635][T29852] team0 (unregistering): Port device team_slave_0 removed [ 1905.898958][T29852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1905.966852][T29852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1905.981657][T32224] Bluetooth: hci5: command 0x0419 tx timeout [ 1906.355228][T29852] bond0 (unregistering): Released all slaves [ 1906.415303][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1906.428363][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1906.437442][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1906.447955][T21829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.455191][T21829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1906.503775][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1906.563365][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1906.615300][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1906.635761][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1906.653306][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1906.668083][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1906.718072][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1906.782828][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1906.791903][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1906.804513][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1906.814434][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1906.832645][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1907.675116][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1907.733651][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1907.807705][ T2647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1907.896142][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1907.903701][ T2896] netlink: 'syz.3.9000': attribute type 1 has an invalid length. [ 1907.922411][ T2896] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9000'. [ 1907.933252][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1907.980263][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1908.031456][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1908.045405][ T2647] device veth0_vlan entered promiscuous mode [ 1908.117291][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1908.163601][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1908.188459][ T2647] device veth1_vlan entered promiscuous mode [ 1908.207955][ T2902] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9007'. [ 1908.258277][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1908.397715][ T2902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1908.442079][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1908.676905][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1908.715500][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1908.815190][ T2647] device veth0_macvtap entered promiscuous mode [ 1908.859718][ T2647] device veth1_macvtap entered promiscuous mode [ 1908.937856][ T2647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1908.961542][ T2647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1908.991595][ T2647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1909.004096][ T2647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1909.015181][ T2647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1909.047122][ T2647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1909.081625][ T2647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1909.122619][ T2647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1909.147385][ T2647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1909.199271][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1909.241077][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1909.264564][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1909.292624][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1909.373125][ T2647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1909.391446][ T2647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1909.411434][ T2647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1909.431571][ T2647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1909.471286][ T2647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1909.491511][ T2647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1909.504415][ T2647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1909.516441][ T2647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1909.562954][ T2647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1909.592975][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1909.604201][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1909.647304][ T2647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.671591][ T2647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.680736][ T2647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.701464][ T2647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.908837][T29860] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1909.962001][T29860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1909.969912][T29860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1910.023985][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1910.079321][T22199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1910.111128][T22199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1910.161898][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1910.692147][ T2948] netlink: 'syz.2.9025': attribute type 2 has an invalid length. [ 1910.716385][ T2948] netlink: 'syz.2.9025': attribute type 4 has an invalid length. [ 1910.739629][ T2948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9025'. [ 1911.380102][ T2964] netlink: 'syz.1.9031': attribute type 39 has an invalid length. [ 1911.416170][ T2964] device macvlan0 entered promiscuous mode [ 1911.454300][ T2962] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9030'. [ 1911.505790][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1911.593409][ T2962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1912.326210][T24873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1912.336620][T24873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1912.345310][T24873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1912.359106][T24873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1912.367141][T24873] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1912.403654][T24873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1912.607697][T22190] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.384900][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.391526][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.461780][T24873] Bluetooth: hci0: command 0x0409 tx timeout [ 1915.815474][T22190] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1915.956959][T22190] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.542064][T24873] Bluetooth: hci0: command 0x041b tx timeout [ 1916.779548][ T3015] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9047'. [ 1916.797059][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1916.837911][ T3015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1916.894771][T22190] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.645395][T22190] device ip6gretap0 left promiscuous mode [ 1917.651335][T22190] : port 1(ip6gretap0) entered disabled state [ 1917.739402][ T2979] chnl_net:caif_netlink_parms(): no params data found [ 1918.626736][T24873] Bluetooth: hci0: command 0x040f tx timeout [ 1920.659728][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.701920][T24873] Bluetooth: hci0: command 0x0419 tx timeout [ 1920.726027][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.798588][ T2979] device bridge_slave_0 entered promiscuous mode [ 1920.922682][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.929864][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.076779][ T2979] device bridge_slave_1 entered promiscuous mode [ 1921.339565][ T2979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1921.467829][ T2979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1921.907533][ T2979] team0: Port device team_slave_0 added [ 1921.975480][ T2979] team0: Port device team_slave_1 added [ 1922.122578][ T2979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1922.129802][ T2979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1922.234029][ T2979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1922.282657][ T2979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1922.327395][ T2979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1922.443805][ T2979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1922.506855][ T3098] netlink: 'syz.4.9064': attribute type 1 has an invalid length. [ 1922.517967][ T3098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9064'. [ 1922.700775][ T2979] device hsr_slave_0 entered promiscuous mode [ 1922.780262][ T2979] device hsr_slave_1 entered promiscuous mode [ 1922.831709][ T2979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1922.865428][ T2979] Cannot create hsr debugfs directory [ 1923.256642][T22190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1923.282142][T22190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1923.309737][T22190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1923.337974][T22190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1923.415954][T22190] device bridge_slave_1 left promiscuous mode [ 1923.471988][T22190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1923.524561][T22190] device ÿÿÿÿÿÿ left promiscuous mode [ 1923.530203][T22190] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 1923.638845][T22190] device veth1_macvtap left promiscuous mode [ 1923.673903][T22190] device veth1_vlan left promiscuous mode [ 1923.679902][T22190] device veth0_vlan left promiscuous mode [ 1925.203777][T22190] team0 (unregistering): Port device team_slave_1 removed [ 1925.259158][T22190] team0 (unregistering): Port device team_slave_0 removed [ 1925.320595][T22190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1925.712521][T22190] bond0 (unregistering): Released all slaves [ 1926.652247][ T3185] netlink: 'syz.2.9083': attribute type 21 has an invalid length. [ 1926.660416][ T3185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9083'. [ 1927.075776][ T3196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1927.355574][ T2979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1927.386709][ T2979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1927.506463][ T2979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1927.545409][ T2979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1927.801751][ T2979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1927.899490][T22198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1927.998051][T22198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1928.016641][T24873] Bluetooth: hci1: ISO packet for unknown connection handle 62 [ 1928.064988][ T2979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1928.079687][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1928.171960][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1928.249111][T22190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1928.256372][T22190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1928.343609][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1928.400471][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1928.430341][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1928.460174][T22190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.467439][T22190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1928.536627][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1928.572961][T29857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1928.588587][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1928.612993][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1928.726127][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1928.746229][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1928.800550][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1928.823464][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1928.886961][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1928.920464][ T2979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1928.950449][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1928.992623][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1929.002707][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1929.024744][ T3237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9100'. [ 1929.544348][ T3255] netlink: 'syz.4.9106': attribute type 21 has an invalid length. [ 1929.573442][ T3255] netlink: 'syz.4.9106': attribute type 23 has an invalid length. [ 1929.601312][ T3255] netlink: 'syz.4.9106': attribute type 25 has an invalid length. [ 1929.673636][ T3255] netlink: 'syz.4.9106': attribute type 27 has an invalid length. [ 1929.710741][ T3255] netlink: 'syz.4.9106': attribute type 28 has an invalid length. [ 1929.738792][ T3255] netlink: 'syz.4.9106': attribute type 29 has an invalid length. [ 1929.763981][ T3255] netlink: 'syz.4.9106': attribute type 30 has an invalid length. [ 1930.125871][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1930.164794][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1930.229720][ T2979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1930.349331][T29858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1930.363181][T29858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1930.482671][T29858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1930.522505][T29858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1930.579780][T29858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1930.660949][T29858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1930.703965][ T2979] device veth0_vlan entered promiscuous mode [ 1930.739158][ T2979] device veth1_vlan entered promiscuous mode [ 1930.842940][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1930.860146][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1930.898294][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1930.957754][T22190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1930.972903][ T2979] device veth0_macvtap entered promiscuous mode [ 1931.014844][ T2979] device veth1_macvtap entered promiscuous mode [ 1931.021986][T29852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1931.062925][ T3297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9115'. [ 1931.120471][ T2979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1931.172285][ T2979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.221451][ T2979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1931.261472][ T2979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.301408][ T2979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1931.342496][ T2979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.362922][ T2979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1931.394085][ T2979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.426497][ T2979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1931.455524][T22198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1931.474308][T22198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1931.499464][T22198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1931.530757][T22198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1931.556695][ T2979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.603109][ T2979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.635447][ T2979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.673664][ T2979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.714975][ T2979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.751259][ T2979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.800493][ T2979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1931.843371][ T2979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1931.906078][ T2979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1931.943528][T22198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1931.958384][T22198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1932.003205][ T2979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1932.032764][ T2979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1932.085169][ T2979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1932.104479][ T2979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1932.190123][ T3321] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1932.358591][T22198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.378792][T22198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.400684][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1932.479485][T22198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.490698][T22198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.514437][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1933.210300][ T3357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9130'. [ 1933.322957][ T3354] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9128'. [ 1933.365138][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1933.470295][ T3354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1936.365648][ T3408] netlink: 'syz.4.9143': attribute type 2 has an invalid length. [ 1936.432514][ T3408] netlink: 'syz.4.9143': attribute type 8 has an invalid length. [ 1936.631609][ T3408] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9143'. [ 1936.693095][ T3410] netlink: 'syz.4.9143': attribute type 2 has an invalid length. [ 1936.750521][ T3410] netlink: 'syz.4.9143': attribute type 8 has an invalid length. [ 1936.787757][ T3410] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9143'. [ 1936.829868][ T3416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9144'. [ 1937.209940][ T3433] netlink: 'syz.3.9147': attribute type 21 has an invalid length. [ 1937.336669][ T3435] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9149'. [ 1937.351853][ T3435] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1937.406481][ T3435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1939.353181][ T3528] netlink: 'syz.0.9161': attribute type 21 has an invalid length. [ 1939.471668][ T3528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9161'. [ 1940.202852][ T3548] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9169'. [ 1940.236723][ T3545] tun0: tun_chr_ioctl cmd 2148553947 [ 1940.498333][ T3553] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9170'. [ 1940.533717][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1940.609318][ T3553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1941.557768][ T3587] netlink: 'syz.3.9182': attribute type 10 has an invalid length. [ 1941.757000][ T3587] team0 (unregistering): Port device team_slave_0 removed [ 1941.800935][ T3587] team0 (unregistering): Port device team_slave_1 removed [ 1941.844253][ T3591] netlink: 'syz.4.9184': attribute type 21 has an invalid length. [ 1941.902565][T29858] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1942.484407][ T3618] tun0: tun_chr_ioctl cmd 1074812117 [ 1943.474976][ T3655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9199'. [ 1943.675339][ T3659] netlink: 'syz.0.9200': attribute type 2 has an invalid length. [ 1943.697299][ T3659] netlink: 'syz.0.9200': attribute type 8 has an invalid length. [ 1943.711840][ T3659] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9200'. [ 1944.458135][ T3683] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9207'. [ 1944.510896][ T3685] netlink: 'syz.4.9209': attribute type 29 has an invalid length. [ 1944.539365][ T3685] netlink: 'syz.4.9209': attribute type 29 has an invalid length. [ 1944.566958][ T3690] netlink: 'syz.4.9209': attribute type 29 has an invalid length. [ 1944.928750][ T3701] netlink: 'syz.3.9215': attribute type 10 has an invalid length. [ 1947.744847][ T3701] device syz_tun entered promiscuous mode [ 1948.076254][ T3701] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1948.299909][ T3713] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.9218'. [ 1949.423371][ T3742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9225'. [ 1949.700638][ T3746] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.9227'. [ 1950.038224][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9231'. [ 1950.075848][ T3757] netlink: 'syz.4.9230': attribute type 2 has an invalid length. [ 1950.096331][ T3757] netlink: 'syz.4.9230': attribute type 8 has an invalid length. [ 1950.106723][ T3757] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9230'. [ 1952.028854][T25714] device syz_tun left promiscuous mode [ 1952.044089][T25714] : port 1(syz_tun) entered disabled state [ 1952.061513][T32224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1952.071255][T32224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1952.081887][T32224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1952.090619][T32224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1952.112509][T32224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1952.121636][T32224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1952.446849][T22199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.492033][ T3831] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9245'. [ 1952.553061][ T3837] netlink: 'syz.1.9247': attribute type 10 has an invalid length. [ 1952.572248][ T3837] device syz_tun entered promiscuous mode [ 1952.664894][ T3837] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1952.713880][T22199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.835877][T22199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.997434][ T3844] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9250'. [ 1953.016832][T22199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.174059][ T3842] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1953.504184][T22199] device .*! left promiscuous mode [ 1953.610441][ T3823] chnl_net:caif_netlink_parms(): no params data found [ 1954.221903][T24873] Bluetooth: hci3: command 0x0409 tx timeout [ 1954.473181][ T3872] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9257'. [ 1954.821428][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.843128][T21849] tipc: Subscription rejected, illegal request [ 1954.847390][ T3823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.860370][ T3896] netlink: 'syz.2.9262': attribute type 2 has an invalid length. [ 1954.891664][ T3823] device bridge_slave_0 entered promiscuous mode [ 1954.974409][ T3823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.986473][ T3823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.003993][ T3823] device bridge_slave_1 entered promiscuous mode [ 1955.170354][ T3823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1955.236108][ T3823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1955.413570][ T3823] team0: Port device team_slave_0 added [ 1955.542395][ T3823] team0: Port device team_slave_1 added [ 1955.548642][ T3917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9268'. [ 1955.690736][ T3823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1955.704551][ T3823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1955.790483][ T3823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1955.920273][ T3823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1955.931196][ T3823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1955.997571][ T3823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1956.109322][ T3928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9271'. [ 1956.284569][ T3823] device hsr_slave_0 entered promiscuous mode [ 1956.292251][ T3823] device hsr_slave_1 entered promiscuous mode [ 1956.305190][T24873] Bluetooth: hci3: command 0x041b tx timeout [ 1956.327203][ T3823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1956.362622][ T3823] Cannot create hsr debugfs directory [ 1957.220440][T22199] device hsr_slave_0 left promiscuous mode [ 1957.262707][T22199] device hsr_slave_1 left promiscuous mode [ 1957.270635][T22199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1957.289639][T22199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1957.326090][T22199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1957.347787][T22199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1957.376663][T22199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1957.417305][T22199] device bridge_slave_0 left promiscuous mode [ 1957.434133][T22199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1957.555597][T22199] device veth1_macvtap left promiscuous mode [ 1957.574838][T22199] device veth0_macvtap left promiscuous mode [ 1957.582537][T22199] device veth1_vlan left promiscuous mode [ 1957.588425][T22199] device veth0_vlan left promiscuous mode [ 1958.387214][T24873] Bluetooth: hci3: command 0x040f tx timeout [ 1958.979459][T22199] device team_slave_1 left promiscuous mode [ 1958.990549][T22199] team0 (unregistering): Port device team_slave_1 removed [ 1959.060292][T22199] device team_slave_0 left promiscuous mode [ 1959.074960][T22199] team0 (unregistering): Port device team_slave_0 removed [ 1959.626488][T22199] device bridge0 left promiscuous mode [ 1959.635667][T22199] team0 (unregistering): Port device bridge0 removed [ 1959.732369][ T3974] netlink: 'syz.4.9281': attribute type 11 has an invalid length. [ 1959.749808][ T3980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9282'. [ 1959.780228][ T3991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9284'. [ 1960.410772][ T4005] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9288'. [ 1960.446201][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1960.466521][T24873] Bluetooth: hci3: command 0x0419 tx timeout [ 1960.534061][ T4005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1960.878904][ T3823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1960.925339][ T3823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1960.938932][ T3823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1960.979470][ T3823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1961.319239][ T3823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1961.401323][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1961.436584][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1961.484068][ T3823] 8021q: adding VLAN 0 to HW filter on device team0 [ 1961.502548][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9295'. [ 1961.563447][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1961.592767][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1961.611880][T29860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.619285][T29860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.647823][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1961.679684][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1961.702961][T29860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.710287][T29860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1961.755840][ T4046] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9296'. [ 1961.805954][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1961.824579][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1961.862075][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1961.893281][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1961.932732][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1961.978600][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1962.002438][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1962.022500][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1962.039255][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1962.060465][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1962.102288][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1962.162445][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1962.183817][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1962.987461][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1963.008894][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1963.023541][T29852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1963.080222][ T3823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1963.154937][T29862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1963.186753][T29862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1963.248927][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1963.275322][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1963.293399][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1963.312127][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1963.336387][ T3823] device veth0_vlan entered promiscuous mode [ 1963.385802][ T4102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9311'. [ 1963.415061][ T3823] device veth1_vlan entered promiscuous mode [ 1963.442815][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1963.533841][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1963.553889][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1963.594083][ T3823] device veth0_macvtap entered promiscuous mode [ 1963.646837][ T3823] device veth1_macvtap entered promiscuous mode [ 1963.733232][ T3823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1963.765129][ T3823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1963.801576][ T3823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1963.871521][ T3823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1963.931616][ T3823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1963.960086][ T3823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1964.002395][ T3823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1964.047442][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1964.080985][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1964.104331][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1964.115959][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1964.130106][ T3823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1964.166122][ T3823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1964.202425][ T3823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1964.250833][ T3823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1964.297631][ T3823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1964.351605][ T3823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1964.398719][ T3823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1964.443520][ T3823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1964.497166][ T3823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1964.591594][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1964.612402][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1964.664312][ T3823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1964.694574][ T3823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1964.721628][ T3823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1964.730521][ T3823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.040723][T29852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1965.088770][T29852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1965.153464][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1965.216258][T29852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1965.251436][T29852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1965.271805][T29860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1967.123266][T32224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1967.135466][T32224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1967.145319][T32224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1967.154300][T32224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1967.165322][T32224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1967.174606][T32224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1967.276824][T29852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.204559][ T4208] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1968.263747][ T4208] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1968.331557][ T4208] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1968.545213][T29852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.656854][T29852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.918366][T29852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.989855][ T4249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9348'. [ 1969.261627][T32224] Bluetooth: hci2: command 0x0409 tx timeout [ 1969.380420][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 1969.614217][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1969.638081][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.670624][ T4196] device bridge_slave_0 entered promiscuous mode [ 1969.742694][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1969.753035][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1969.783419][ T4196] device bridge_slave_1 entered promiscuous mode [ 1969.879841][ T4278] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.9351'. [ 1970.250807][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.451305][ T4278] device bridge_slave_0 left promiscuous mode [ 1970.481603][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.626312][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1970.821947][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1970.888814][ T4305] netlink: 'syz.3.9358': attribute type 41 has an invalid length. [ 1970.956068][ T4309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1970.978541][ T4305] netlink: 'syz.3.9358': attribute type 41 has an invalid length. [ 1971.038792][ T4196] team0: Port device team_slave_0 added [ 1971.239701][ T4196] team0: Port device team_slave_1 added [ 1971.342212][T32224] Bluetooth: hci2: command 0x041b tx timeout [ 1971.370269][ T4295] device syzkaller0 entered promiscuous mode [ 1971.506923][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1971.520270][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.558134][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.431669][T32224] Bluetooth: hci2: command 0x040f tx timeout [ 1974.717971][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1974.741462][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1974.782958][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1974.796418][ T4328] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9364'. [ 1974.956752][ T4196] device hsr_slave_0 entered promiscuous mode [ 1975.013312][ T4196] device hsr_slave_1 entered promiscuous mode [ 1975.042396][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1975.050442][ T4196] Cannot create hsr debugfs directory [ 1975.495003][ T4367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9372'. [ 1975.513129][T32224] Bluetooth: hci2: command 0x0419 tx timeout [ 1975.824809][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.831206][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.994325][T29852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1976.016125][T29852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1976.052377][T29852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1976.060056][T29852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1976.104102][T29852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.117128][T29852] device bridge_slave_0 left promiscuous mode [ 1976.146565][T29852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.292489][T29852] device veth1_macvtap left promiscuous mode [ 1976.311613][T29852] device veth0_macvtap left promiscuous mode [ 1976.367045][ T4391] FAULT_INJECTION: forcing a failure. [ 1976.367045][ T4391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1976.446358][ T4391] CPU: 0 PID: 4391 Comm: syz.1.9378 Not tainted syzkaller #0 [ 1976.453911][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1976.464015][ T4391] Call Trace: [ 1976.467374][ T4391] [ 1976.470348][ T4391] dump_stack_lvl+0x188/0x24e [ 1976.475106][ T4391] ? show_regs_print_info+0x12/0x12 [ 1976.480353][ T4391] ? load_image+0x410/0x410 [ 1976.485013][ T4391] ? __lock_acquire+0x7ea0/0x7ea0 [ 1976.490086][ T4391] ? snprintf+0xe5/0x140 [ 1976.494368][ T4391] should_fail_ex+0x390/0x4c0 [ 1976.499126][ T4391] _copy_to_user+0x2c/0x130 [ 1976.503666][ T4391] simple_read_from_buffer+0xe3/0x150 [ 1976.509080][ T4391] proc_fail_nth_read+0x1a6/0x220 [ 1976.514143][ T4391] ? proc_fault_inject_write+0x310/0x310 [ 1976.519811][ T4391] ? fsnotify_perm+0x248/0x550 [ 1976.524625][ T4391] ? proc_fault_inject_write+0x310/0x310 [ 1976.530302][ T4391] vfs_read+0x2db/0x960 [ 1976.534506][ T4391] ? kernel_read+0x1e0/0x1e0 [ 1976.539126][ T4391] ? __fget_files+0x28/0x460 [ 1976.543744][ T4391] ? __fget_files+0x3fc/0x460 [ 1976.548549][ T4391] ? __fdget_pos+0x2ae/0x360 [ 1976.553176][ T4391] ? ksys_read+0x70/0x260 [ 1976.557682][ T4391] ksys_read+0x14d/0x260 [ 1976.561972][ T4391] ? vfs_write+0x9a0/0x9a0 [ 1976.566426][ T4391] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1976.572356][ T4391] do_syscall_64+0x4c/0xa0 [ 1976.576798][ T4391] ? clear_bhb_loop+0x60/0xb0 [ 1976.581945][ T4391] ? clear_bhb_loop+0x60/0xb0 [ 1976.586669][ T4391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1976.592588][ T4391] RIP: 0033:0x7f79f455e9ce [ 1976.597044][ T4391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1976.616942][ T4391] RSP: 002b:00007f79f53adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1976.625376][ T4391] RAX: ffffffffffffffda RBX: 00007f79f53ae6c0 RCX: 00007f79f455e9ce [ 1976.633625][ T4391] RDX: 000000000000000f RSI: 00007f79f53ae0a0 RDI: 000000000000000a [ 1976.641617][ T4391] RBP: 00007f79f53ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1976.649780][ T4391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1976.657767][ T4391] R13: 00007f79f4826038 R14: 00007f79f4825fa0 R15: 00007ffcf44290a8 [ 1976.665771][ T4391] [ 1978.076878][T29852] team0 (unregistering): Port device team_slave_1 removed [ 1978.139557][T29852] team0 (unregistering): Port device team_slave_0 removed [ 1978.196998][T29852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1978.620993][T29852] team0 (unregistering): Port device bridge0 removed [ 1978.656935][T29852] bond0 (unregistering): Released all slaves [ 1978.726243][ T4399] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1978.735930][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9377'. [ 1978.764086][ T4406] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9380'. [ 1978.799651][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1978.816313][ T4406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1978.841579][ T4425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1982.470266][ T4473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9398'. [ 1982.707248][T21825] wlan1: Trigger new scan to find an IBSS to join [ 1982.839131][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1982.910203][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1983.006589][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1983.058547][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1983.310645][ T4490] mac80211_hwsim hwsim66 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1983.451550][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9400'. [ 1984.108507][ T4512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9406'. [ 1984.294848][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1984.384333][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1984.391794][T29858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1984.410191][T29858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1984.452964][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1984.492475][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1984.532052][T29852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.539259][T29852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1984.591605][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1984.620640][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1984.656914][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1984.676130][T29852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.683408][T29852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.712080][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1984.744972][ T4531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9411'. [ 1984.799766][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1984.832461][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1984.864172][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1984.892539][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1984.921254][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1984.952531][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1984.982370][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1985.033508][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1985.047682][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1985.061889][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1985.071193][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1985.090574][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1985.667086][T29858] wlan1: Trigger new scan to find an IBSS to join [ 1985.911294][ T4569] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1986.198656][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9419'. [ 1986.238757][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1986.262932][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1986.318779][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1986.409756][ T4580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9423'. [ 1986.477854][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1986.505712][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1986.642224][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1986.667312][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1986.695732][ T4196] device veth0_vlan entered promiscuous mode [ 1986.733116][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1986.760151][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1986.808508][ T4196] device veth1_vlan entered promiscuous mode [ 1986.931072][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1986.953199][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1986.972925][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1987.022188][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1987.057303][ T4196] device veth0_macvtap entered promiscuous mode [ 1987.087153][ T4196] device veth1_macvtap entered promiscuous mode [ 1987.174314][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1987.217875][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1987.293365][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1987.358613][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.383647][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1987.421221][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.461525][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1987.505102][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.555032][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1987.597890][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1987.622108][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1987.675633][T29858] wlan1: Trigger new scan to find an IBSS to join [ 1987.680249][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.744312][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.798834][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.845067][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.899079][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.963917][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1988.061549][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1988.098170][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1988.127710][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1988.142326][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1988.151304][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1988.215405][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.257240][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.306358][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.333291][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.372080][ T4621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9436'. [ 1988.561746][T29852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.569664][T29852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.639882][T29858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1988.685947][T29858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.698492][T29852] wlan1: Creating new IBSS network, BSSID 5a:fe:7a:92:08:37 [ 1988.706461][T22192] wlan1: Trigger new scan to find an IBSS to join [ 1988.727861][T29858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.785655][T29858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1989.080153][ T4644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9326'. [ 1989.735626][ T4652] device hsr0 entered promiscuous mode [ 1990.026539][T24873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1990.038466][T24873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1990.049236][T24873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1990.058656][T24873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1990.068275][T24873] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1990.085980][T24873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1990.116848][T22192] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.174982][ T4662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9450'. [ 1990.195510][ T4661] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9448'. [ 1990.413982][T22192] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.657290][T21825] wlan1: Trigger new scan to find an IBSS to join [ 1991.317761][ T4677] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1991.371823][ T4677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1991.431663][ T4678] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9455'. [ 1991.563722][T21849] wlan1: Creating new IBSS network, BSSID aa:39:1b:79:23:4a [ 1991.634220][T22192] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1991.807848][T22192] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1992.151509][T32224] Bluetooth: hci1: command 0x0409 tx timeout [ 1992.603750][ T4663] chnl_net:caif_netlink_parms(): no params data found [ 1993.397202][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.406580][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.433586][ T4663] device bridge_slave_0 entered promiscuous mode [ 1993.486104][ T4736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9469'. [ 1993.642091][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.649285][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.661687][T22199] wlan1: Trigger new scan to find an IBSS to join [ 1993.736709][ T4663] device bridge_slave_1 entered promiscuous mode [ 1994.160981][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1994.221691][T24873] Bluetooth: hci1: command 0x041b tx timeout [ 1994.467422][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.746891][ T4663] team0: Port device team_slave_0 added [ 1994.753627][T29852] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1994.914568][ T4663] team0: Port device team_slave_1 added [ 1995.165845][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1995.181485][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.271506][ T4663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1995.303610][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1995.310986][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.391741][ T4663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.301868][T24873] Bluetooth: hci1: command 0x040f tx timeout [ 1998.391771][T32224] Bluetooth: hci1: command 0x0419 tx timeout [ 1998.598134][ T4772] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9481'. [ 1998.639857][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1998.676696][ T4772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1998.731451][ T4663] device hsr_slave_0 entered promiscuous mode [ 1998.752316][ T4663] device hsr_slave_1 entered promiscuous mode [ 1998.766775][ T4663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1998.797351][ T4663] Cannot create hsr debugfs directory [ 2000.289277][ T4796] device hsr0 entered promiscuous mode [ 2000.522233][T22192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2000.547845][T22192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2000.632729][T22192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2000.640324][T22192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2000.742071][T22192] device bridge_slave_1 left promiscuous mode [ 2000.748463][T22192] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.920538][T22192] device bridge_slave_0 left promiscuous mode [ 2000.933549][T22192] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.097284][T22192] device veth1_macvtap left promiscuous mode [ 2001.114030][T22192] device veth0_macvtap left promiscuous mode [ 2001.142540][T22192] device veth1_vlan left promiscuous mode [ 2001.166422][T22192] device veth0_vlan left promiscuous mode [ 2001.835163][T22192] team0 (unregistering): Port device geneve1 removed [ 2002.482234][T22192] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 2002.863245][T22192] team0 (unregistering): Port device team_slave_1 removed [ 2002.919645][T22192] team0 (unregistering): Port device team_slave_0 removed [ 2002.973759][T22192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2002.982979][T22192] device bond_slave_1 left promiscuous mode [ 2003.043698][T22192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2003.054195][T22192] device bond_slave_0 left promiscuous mode [ 2003.493362][T22192] bond0 (unregistering): Released all slaves [ 2003.617075][ T4827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9493'. [ 2004.644000][ T4663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2004.674828][ T4663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2004.707048][ T4663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2004.749876][ T4663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2005.020509][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2005.079427][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2005.106335][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2005.156179][ T4663] 8021q: adding VLAN 0 to HW filter on device team0 [ 2005.184940][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2005.199173][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2005.219076][T21825] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.226341][T21825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2005.311900][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2005.360630][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2005.395194][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2005.427749][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.435273][T21825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2005.466786][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2005.530146][ T4867] netlink: 'syz.0.9503': attribute type 21 has an invalid length. [ 2005.544243][ T4867] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9503'. [ 2005.606907][ T4867] netlink: 'syz.0.9503': attribute type 4 has an invalid length. [ 2005.650820][ T4867] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9503'. [ 2005.736290][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2005.762388][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2005.799621][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2005.827439][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2005.860008][ T4876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9505'. [ 2006.036722][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2006.065201][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2006.086562][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2006.124150][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2006.163906][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2006.202218][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2006.240946][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2007.098911][ T4918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9516'. [ 2007.150407][ T4918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9516'. [ 2007.170770][ T4915] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9516'. [ 2007.272366][ T4663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2007.294758][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2007.315740][T29852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2007.463958][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9519'. [ 2009.365932][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2009.397472][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2009.524002][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2009.558624][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2009.589544][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2009.652189][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2009.693614][ T4663] device veth0_vlan entered promiscuous mode [ 2009.766392][ T4663] device veth1_vlan entered promiscuous mode [ 2009.899962][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2009.939199][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2010.027086][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2010.092744][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2010.146715][ T4663] device veth0_macvtap entered promiscuous mode [ 2010.168932][ T4997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9535'. [ 2010.196770][ T4663] device veth1_macvtap entered promiscuous mode [ 2010.252292][ T5003] netlink: 'syz.0.9532': attribute type 2 has an invalid length. [ 2010.283191][ T5003] netlink: 'syz.0.9532': attribute type 8 has an invalid length. [ 2010.341292][ T5003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9532'. [ 2010.488528][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2010.524393][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.549339][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2010.590340][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.610784][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2010.643164][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.677704][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2010.711564][ T5006] netlink: 'syz.0.9532': attribute type 2 has an invalid length. [ 2010.719471][ T5006] netlink: 'syz.0.9532': attribute type 8 has an invalid length. [ 2010.757543][ T5006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9532'. [ 2010.807566][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2010.822561][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2010.855501][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2010.896125][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2010.929374][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2010.956762][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.991503][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2011.025588][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2011.062533][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2011.100247][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2011.137636][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2011.171463][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2011.222867][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2011.251592][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2011.283047][T22192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2011.324570][ T4663] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.351388][ T4663] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.360208][ T4663] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.403698][ T4663] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.468384][ T5039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9547'. [ 2011.532584][ T5042] netlink: 'syz.0.9549': attribute type 10 has an invalid length. [ 2011.631694][ T5042] batman_adv: batadv0: Adding interface: netdevsim0 [ 2011.656733][ T5042] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2011.711613][ T5042] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2012.002708][T22192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.010606][T22192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2012.055676][T29862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2012.090537][T21849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.122081][T21849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2012.147207][T21849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2012.685291][ T5082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9563'. [ 2013.935528][ T5117] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9577'. [ 2013.978243][ T5119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9578'. [ 2014.883447][ T5152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9592'. [ 2015.412091][ T5163] netlink: 'syz.2.9597': attribute type 10 has an invalid length. [ 2016.788379][ T5200] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9609'. [ 2016.827408][ T5200] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2016.894371][ T5200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2017.525547][ T5226] netlink: 'syz.2.9618': attribute type 12 has an invalid length. [ 2017.568643][ T5226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9618'. [ 2018.000925][ T5235] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9623'. [ 2018.058930][ T5235] bond0: (slave bond_slave_0): Releasing backup interface [ 2018.165470][ T5235] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2018.674862][ T5248] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 2018.854862][ T5256] netlink: 'syz.2.9630': attribute type 3 has an invalid length. [ 2018.881949][ T5256] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9630'. [ 2018.958738][ T5256] netlink: 'syz.2.9630': attribute type 3 has an invalid length. [ 2018.988963][ T5256] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9630'. [ 2019.584397][ T5285] netlink: 'syz.4.9640': attribute type 10 has an invalid length. [ 2019.622633][ T5285] device syz_tun entered promiscuous mode [ 2019.681016][ T5285] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2020.953096][ T5319] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9652'. [ 2021.206389][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9657'. [ 2021.262815][T21825] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2021.489187][ T5339] FAULT_INJECTION: forcing a failure. [ 2021.489187][ T5339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2021.527875][ T5339] CPU: 1 PID: 5339 Comm: syz.0.9661 Not tainted syzkaller #0 [ 2021.536963][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2021.549360][ T5339] Call Trace: [ 2021.552910][ T5339] [ 2021.556499][ T5339] dump_stack_lvl+0x188/0x24e [ 2021.562201][ T5339] ? show_regs_print_info+0x12/0x12 [ 2021.569584][ T5339] ? load_image+0x410/0x410 [ 2021.574972][ T5339] ? __lock_acquire+0x7ea0/0x7ea0 [ 2021.580762][ T5339] should_fail_ex+0x390/0x4c0 [ 2021.586706][ T5339] _copy_from_user+0x2c/0x170 [ 2021.592188][ T5339] iovec_from_user+0x143/0x360 [ 2021.597640][ T5339] __import_iovec+0x6c/0x510 [ 2021.602764][ T5339] import_iovec+0x6f/0xa0 [ 2021.608001][ T5339] ___sys_sendmsg+0x252/0x360 [ 2021.613731][ T5339] ? __sys_sendmsg+0x2a0/0x2a0 [ 2021.619207][ T5339] ? __lock_acquire+0x7ea0/0x7ea0 [ 2021.625191][ T5339] __se_sys_sendmsg+0x1c3/0x2b0 [ 2021.630205][ T5339] ? __x64_sys_sendmsg+0x80/0x80 [ 2021.637523][ T5339] ? lockdep_hardirqs_on+0x94/0x140 [ 2021.644338][ T5339] do_syscall_64+0x4c/0xa0 [ 2021.649361][ T5339] ? clear_bhb_loop+0x60/0xb0 [ 2021.654701][ T5339] ? clear_bhb_loop+0x60/0xb0 [ 2021.662838][ T5339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2021.670387][ T5339] RIP: 0033:0x7f4e3e39e199 [ 2021.677072][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2021.699617][ T5339] RSP: 002b:00007f4e3f1c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2021.708441][ T5339] RAX: ffffffffffffffda RBX: 00007f4e3e625fa0 RCX: 00007f4e3e39e199 [ 2021.717898][ T5339] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 2021.727418][ T5339] RBP: 00007f4e3f1c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2021.738407][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2021.749152][ T5339] R13: 00007f4e3e626038 R14: 00007f4e3e625fa0 R15: 00007ffe25d6d388 [ 2021.758804][ T5339] [ 2021.980321][ T5341] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9660'. [ 2022.050729][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2022.138047][ T5341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2022.416643][ T5353] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9665'. [ 2022.777824][ T5361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9667'. [ 2022.832402][ T5363] netlink: 'syz.0.9668': attribute type 10 has an invalid length. [ 2022.859298][ T5363] device syz_tun entered promiscuous mode [ 2022.933628][ T5363] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2023.066905][ T5376] netlink: 'syz.4.9671': attribute type 10 has an invalid length. [ 2023.170888][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9673'. [ 2023.852791][T29852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2023.982913][T24873] Bluetooth: hci5: command 0x0406 tx timeout [ 2024.452109][ T5402] netlink: 'syz.3.9679': attribute type 21 has an invalid length. [ 2024.478717][ T5402] IPv6: NLM_F_CREATE should be specified when creating new route [ 2024.496362][ T5402] IPv6: Can't replace route, no match found [ 2024.546291][ T5399] netlink: 'syz.3.9679': attribute type 39 has an invalid length. [ 2024.602159][ T5399] device macvlan0 entered promiscuous mode [ 2024.790847][ T5408] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9682'. [ 2025.643243][ T5429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9691'. [ 2026.096498][ T5442] FAULT_INJECTION: forcing a failure. [ 2026.096498][ T5442] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.138741][ T5442] CPU: 1 PID: 5442 Comm: syz.0.9695 Not tainted syzkaller #0 [ 2026.146236][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2026.156357][ T5442] Call Trace: [ 2026.159760][ T5442] [ 2026.162723][ T5442] dump_stack_lvl+0x188/0x24e [ 2026.167512][ T5442] ? show_regs_print_info+0x12/0x12 [ 2026.172783][ T5442] ? load_image+0x410/0x410 [ 2026.177973][ T5442] ? __might_sleep+0xd0/0xd0 [ 2026.182658][ T5442] ? __lock_acquire+0x7ea0/0x7ea0 [ 2026.187746][ T5442] should_fail_ex+0x390/0x4c0 [ 2026.192570][ T5442] should_failslab+0x5/0x20 [ 2026.197116][ T5442] slab_pre_alloc_hook+0x59/0x300 [ 2026.202188][ T5442] kmem_cache_alloc_node+0x5a/0x310 [ 2026.207427][ T5442] ? __alloc_skb+0xf9/0x7d0 [ 2026.211989][ T5442] __alloc_skb+0xf9/0x7d0 [ 2026.216378][ T5442] netlink_sendmsg+0x654/0xbd0 [ 2026.221222][ T5442] ? netlink_getsockopt+0x550/0x550 [ 2026.226505][ T5442] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2026.232374][ T5442] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2026.237778][ T5442] ? security_socket_sendmsg+0x7c/0xa0 [ 2026.243378][ T5442] ? netlink_getsockopt+0x550/0x550 [ 2026.248690][ T5442] ____sys_sendmsg+0x5ed/0x9a0 [ 2026.253591][ T5442] ? __sys_sendmsg_sock+0x30/0x30 [ 2026.258656][ T5442] ? __import_iovec+0x306/0x510 [ 2026.263572][ T5442] ? import_iovec+0x6f/0xa0 [ 2026.268133][ T5442] ___sys_sendmsg+0x2a2/0x360 [ 2026.272952][ T5442] ? __sys_sendmsg+0x2a0/0x2a0 [ 2026.277872][ T5442] ? __lock_acquire+0x7ea0/0x7ea0 [ 2026.283104][ T5442] __se_sys_sendmsg+0x1c3/0x2b0 [ 2026.287996][ T5442] ? __x64_sys_sendmsg+0x80/0x80 [ 2026.293000][ T5442] ? lockdep_hardirqs_on+0x94/0x140 [ 2026.298251][ T5442] do_syscall_64+0x4c/0xa0 [ 2026.302741][ T5442] ? clear_bhb_loop+0x60/0xb0 [ 2026.307473][ T5442] ? clear_bhb_loop+0x60/0xb0 [ 2026.312191][ T5442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2026.318156][ T5442] RIP: 0033:0x7f4e3e39e199 [ 2026.322692][ T5442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2026.343793][ T5442] RSP: 002b:00007f4e3f1c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2026.354044][ T5442] RAX: ffffffffffffffda RBX: 00007f4e3e625fa0 RCX: 00007f4e3e39e199 [ 2026.363336][ T5442] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 2026.371953][ T5442] RBP: 00007f4e3f1c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2026.381562][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2026.391371][ T5442] R13: 00007f4e3e626038 R14: 00007f4e3e625fa0 R15: 00007ffe25d6d388 [ 2026.400293][ T5442] [ 2026.430493][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9692'. [ 2026.472067][ T5444] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9696'. [ 2026.948771][ T5456] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9697'. [ 2027.042265][ T5456] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2027.108215][ T5456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2028.471914][ T5460] netlink: 'syz.1.9700': attribute type 3 has an invalid length. [ 2031.168853][ T5468] netlink: 'syz.0.9701': attribute type 10 has an invalid length. [ 2031.191506][ T5477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9706'. [ 2031.213753][ T5483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9709'. [ 2031.238585][ T5485] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9708'. [ 2031.807495][ T5507] IPv6: Can't replace route, no match found [ 2032.134180][ T5513] netlink: 'syz.0.9717': attribute type 2 has an invalid length. [ 2032.207734][ T5513] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9717'. [ 2034.692930][ T5532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9722'. [ 2034.741684][ T5531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9723'. [ 2035.068091][ T5542] IPv6: NLM_F_CREATE should be specified when creating new route [ 2036.482270][ T5562] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9734'. [ 2036.547477][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2036.652838][ T5562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2036.837035][ T5574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9746'. [ 2036.869008][ T5573] netlink: 'syz.4.9736': attribute type 2 has an invalid length. [ 2036.907494][ T5573] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9736'. [ 2037.274898][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.281449][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.341486][T32224] Bluetooth: hci0: command 0x0406 tx timeout [ 2039.563485][ T5583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9738'. [ 2039.616074][ T5585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9737'. [ 2039.736928][ T5587] netlink: 'syz.0.9740': attribute type 10 has an invalid length. [ 2040.195060][ T5590] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9741'. [ 2040.948279][ T5608] netlink: 'syz.0.9748': attribute type 4 has an invalid length. [ 2041.282490][ T5613] FAULT_INJECTION: forcing a failure. [ 2041.282490][ T5613] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.389181][ T5613] CPU: 1 PID: 5613 Comm: syz.2.9750 Not tainted syzkaller #0 [ 2041.396797][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2041.406930][ T5613] Call Trace: [ 2041.410278][ T5613] [ 2041.413282][ T5613] dump_stack_lvl+0x188/0x24e [ 2041.418056][ T5613] ? show_regs_print_info+0x12/0x12 [ 2041.423383][ T5613] ? load_image+0x410/0x410 [ 2041.427986][ T5613] ? verify_lock_unused+0x140/0x140 [ 2041.433786][ T5613] ? perf_trace_lock+0x301/0x390 [ 2041.438830][ T5613] should_fail_ex+0x390/0x4c0 [ 2041.443610][ T5613] should_failslab+0x5/0x20 [ 2041.448173][ T5613] slab_pre_alloc_hook+0x59/0x300 [ 2041.453288][ T5613] kmem_cache_alloc+0x56/0x2f0 [ 2041.458137][ T5613] ? skb_clone+0x1e7/0x370 [ 2041.462741][ T5613] skb_clone+0x1e7/0x370 [ 2041.467083][ T5613] __netlink_deliver_tap+0x3e4/0x7e0 [ 2041.472500][ T5613] ? netlink_deliver_tap+0x2e/0x1b0 [ 2041.477784][ T5613] netlink_deliver_tap+0x19c/0x1b0 [ 2041.482994][ T5613] netlink_unicast+0x777/0x920 [ 2041.489481][ T5613] netlink_sendmsg+0x8ad/0xbd0 [ 2041.495071][ T5613] ? netlink_getsockopt+0x550/0x550 [ 2041.500817][ T5613] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2041.507204][ T5613] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2041.512663][ T5613] ? security_socket_sendmsg+0x7c/0xa0 [ 2041.518832][ T5613] ? netlink_getsockopt+0x550/0x550 [ 2041.524395][ T5613] ____sys_sendmsg+0x5ed/0x9a0 [ 2041.529393][ T5613] ? __sys_sendmsg_sock+0x30/0x30 [ 2041.534719][ T5613] ? __import_iovec+0x306/0x510 [ 2041.539681][ T5613] ? import_iovec+0x6f/0xa0 [ 2041.544369][ T5613] ___sys_sendmsg+0x2a2/0x360 [ 2041.549331][ T5613] ? __sys_sendmsg+0x2a0/0x2a0 [ 2041.554266][ T5613] ? __lock_acquire+0x7ea0/0x7ea0 [ 2041.559473][ T5613] __se_sys_sendmsg+0x1c3/0x2b0 [ 2041.564412][ T5613] ? ct_nmi_exit+0x145/0x1c0 [ 2041.569111][ T5613] ? __x64_sys_sendmsg+0x80/0x80 [ 2041.574376][ T5613] ? lockdep_hardirqs_on+0x94/0x140 [ 2041.579688][ T5613] do_syscall_64+0x4c/0xa0 [ 2041.584188][ T5613] ? clear_bhb_loop+0x60/0xb0 [ 2041.588942][ T5613] ? clear_bhb_loop+0x60/0xb0 [ 2041.593748][ T5613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2041.599830][ T5613] RIP: 0033:0x7fded3b9e199 [ 2041.604335][ T5613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2041.624454][ T5613] RSP: 002b:00007fded1df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2041.633061][ T5613] RAX: ffffffffffffffda RBX: 00007fded3e25fa0 RCX: 00007fded3b9e199 [ 2041.641223][ T5613] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 2041.649800][ T5613] RBP: 00007fded1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2041.658208][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2041.666553][ T5613] R13: 00007fded3e26038 R14: 00007fded3e25fa0 R15: 00007ffcf2082c98 [ 2041.675283][ T5613] [ 2041.908767][ T5613] netlink: 'syz.2.9750': attribute type 10 has an invalid length. [ 2041.947709][ T5613] device syz_tun entered promiscuous mode [ 2042.011699][ T5613] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2042.126699][ T5618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9752'. [ 2042.396530][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9756'. [ 2043.185518][ T5638] netlink: 'syz.2.9760': attribute type 19 has an invalid length. [ 2043.231648][ T5638] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.9760'. [ 2043.273747][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9771'. [ 2043.473166][ T5652] netlink: 'syz.3.9761': attribute type 2 has an invalid length. [ 2043.481114][ T5652] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9761'. [ 2044.000501][ T5656] netlink: 'syz.1.9764': attribute type 4 has an invalid length. [ 2044.960581][ T5664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9766'. [ 2044.993461][ T5663] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9765'. [ 2045.011736][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2045.062554][ T5663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2046.664745][ T5702] netlink: 'syz.2.9780': attribute type 29 has an invalid length. [ 2046.687592][ T5702] netlink: 'syz.2.9780': attribute type 16 has an invalid length. [ 2046.716497][ T5702] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9780'. [ 2046.884026][ T5708] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9782'. [ 2047.014149][ T5717] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.9788'. [ 2047.363083][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9792'. [ 2047.464383][ T5730] netlink: 'syz.0.9792': attribute type 10 has an invalid length. [ 2047.516018][ T5730] netlink: 3819 bytes leftover after parsing attributes in process `syz.0.9792'. [ 2048.340892][ T5756] netlink: 'syz.0.9802': attribute type 10 has an invalid length. [ 2048.357878][ T5756] FAULT_INJECTION: forcing a failure. [ 2048.357878][ T5756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2048.426740][ T5756] CPU: 0 PID: 5756 Comm: syz.0.9802 Not tainted syzkaller #0 [ 2048.434297][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2048.438505][ T5754] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9801'. [ 2048.444375][ T5756] Call Trace: [ 2048.444417][ T5756] [ 2048.444426][ T5756] dump_stack_lvl+0x188/0x24e [ 2048.444466][ T5756] ? show_regs_print_info+0x12/0x12 [ 2048.444494][ T5756] ? load_image+0x410/0x410 [ 2048.444532][ T5756] ? __lock_acquire+0x7ea0/0x7ea0 [ 2048.444566][ T5756] ? snprintf+0xe5/0x140 [ 2048.444602][ T5756] should_fail_ex+0x390/0x4c0 [ 2048.444642][ T5756] _copy_to_user+0x2c/0x130 [ 2048.444671][ T5756] simple_read_from_buffer+0xe3/0x150 [ 2048.444700][ T5756] proc_fail_nth_read+0x1a6/0x220 [ 2048.444730][ T5756] ? proc_fault_inject_write+0x310/0x310 [ 2048.444762][ T5756] ? fsnotify_perm+0x248/0x550 [ 2048.444790][ T5756] ? proc_fault_inject_write+0x310/0x310 [ 2048.444817][ T5756] vfs_read+0x2db/0x960 [ 2048.444857][ T5756] ? kernel_read+0x1e0/0x1e0 [ 2048.444892][ T5756] ? __fget_files+0x28/0x460 [ 2048.444925][ T5756] ? __fget_files+0x3fc/0x460 [ 2048.444966][ T5756] ? __fdget_pos+0x2ae/0x360 [ 2048.444996][ T5756] ? ksys_read+0x70/0x260 [ 2048.445039][ T5756] ksys_read+0x14d/0x260 [ 2048.445075][ T5756] ? vfs_write+0x9a0/0x9a0 [ 2048.445112][ T5756] ? lockdep_hardirqs_on+0x94/0x140 [ 2048.445148][ T5756] do_syscall_64+0x4c/0xa0 [ 2048.445173][ T5756] ? clear_bhb_loop+0x60/0xb0 [ 2048.445199][ T5756] ? clear_bhb_loop+0x60/0xb0 [ 2048.445226][ T5756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2048.445250][ T5756] RIP: 0033:0x7f4e3e35e9ce [ 2048.445272][ T5756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2048.445292][ T5756] RSP: 002b:00007f4e3f1c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2048.445318][ T5756] RAX: ffffffffffffffda RBX: 00007f4e3f1c16c0 RCX: 00007f4e3e35e9ce [ 2048.445335][ T5756] RDX: 000000000000000f RSI: 00007f4e3f1c10a0 RDI: 0000000000000004 [ 2048.445350][ T5756] RBP: 00007f4e3f1c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2048.505047][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2048.509578][ T5756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2048.509599][ T5756] R13: 00007f4e3e626038 R14: 00007f4e3e625fa0 R15: 00007ffe25d6d388 [ 2048.509633][ T5756] [ 2048.929378][ T5754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2049.012459][ T5764] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9803'. [ 2049.476394][ T5781] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9811'. [ 2050.176626][ T5795] netlink: 'syz.4.9817': attribute type 2 has an invalid length. [ 2050.203750][ T5795] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.9817'. [ 2050.596400][ T5809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9822'. [ 2050.728344][ T5811] can: request_module (can-proto-0) failed. [ 2052.423818][ T5831] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9830'. [ 2052.451527][ T5831] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2052.470812][ T5831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2052.607649][ T5849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9836'. [ 2052.625428][T22199] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2052.879892][ T5857] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9840'. [ 2053.028427][ T5862] IPv6: Can't replace route, no match found [ 2054.143468][ T5886] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9851'. [ 2054.203458][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9855'. [ 2054.431745][ T5906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2054.792396][ T5903] can: request_module (can-proto-0) failed. [ 2054.937852][ T5913] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9859'. [ 2055.183070][T29862] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2055.273045][ T5915] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.9860'. [ 2055.317778][ T5915] openvswitch: netlink: Message has 48126 unknown bytes. [ 2055.347577][ T5918] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9860'. [ 2055.433266][ T5922] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9861'. [ 2055.450971][ T5922] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2055.500942][ T5922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2055.767682][ T5930] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.9866'. [ 2056.008823][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): pim6reg1: link becomes ready [ 2056.083675][ T5933] mac80211_hwsim hwsim68 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2058.389241][ T5989] netlink: 'syz.3.9890': attribute type 10 has an invalid length. [ 2058.621024][ T6001] __nla_validate_parse: 2 callbacks suppressed [ 2058.621044][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9894'. [ 2058.627618][T29858] wlan1: Trigger new scan to find an IBSS to join [ 2059.042945][ T6010] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9897'. [ 2059.157716][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2059.278474][ T6010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2060.582498][ T6040] FAULT_INJECTION: forcing a failure. [ 2060.582498][ T6040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2060.633179][ T6040] CPU: 1 PID: 6040 Comm: syz.2.9908 Not tainted syzkaller #0 [ 2060.640690][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2060.650847][ T6040] Call Trace: [ 2060.654192][ T6040] [ 2060.657411][ T6040] dump_stack_lvl+0x188/0x24e [ 2060.662150][ T6040] ? show_regs_print_info+0x12/0x12 [ 2060.667428][ T6040] ? load_image+0x410/0x410 [ 2060.671984][ T6040] ? __lock_acquire+0x7ea0/0x7ea0 [ 2060.677104][ T6040] should_fail_ex+0x390/0x4c0 [ 2060.681850][ T6040] _copy_from_user+0x2c/0x170 [ 2060.686579][ T6040] __sys_bpf+0x2ea/0x780 [ 2060.690872][ T6040] ? bpf_link_show_fdinfo+0x380/0x380 [ 2060.696319][ T6040] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2060.702700][ T6040] __x64_sys_bpf+0x78/0x90 [ 2060.707166][ T6040] do_syscall_64+0x4c/0xa0 [ 2060.711624][ T6040] ? clear_bhb_loop+0x60/0xb0 [ 2060.716346][ T6040] ? clear_bhb_loop+0x60/0xb0 [ 2060.721075][ T6040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2060.727102][ T6040] RIP: 0033:0x7fded3b9e199 [ 2060.731557][ T6040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2060.751406][ T6040] RSP: 002b:00007fded1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2060.759889][ T6040] RAX: ffffffffffffffda RBX: 00007fded3e25fa0 RCX: 00007fded3b9e199 [ 2060.767992][ T6040] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000001 [ 2060.776004][ T6040] RBP: 00007fded1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2060.784018][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2060.792027][ T6040] R13: 00007fded3e26038 R14: 00007fded3e25fa0 R15: 00007ffcf2082c98 [ 2060.800070][ T6040] [ 2060.881141][ T6047] netlink: 'syz.3.9909': attribute type 21 has an invalid length. [ 2061.024394][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9911'. [ 2061.663389][T29858] wlan1: Trigger new scan to find an IBSS to join [ 2062.196280][ T6064] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9915'. [ 2062.272781][ T6067] netlink: 763 bytes leftover after parsing attributes in process `syz.4.9914'. [ 2062.825789][ T6069] mac80211_hwsim hwsim73 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2063.072372][ T6085] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9920'. [ 2063.107261][ T6081] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9920'. [ 2063.909147][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9928'. [ 2063.971962][ T6109] netlink: 'syz.2.9927': attribute type 2 has an invalid length. [ 2064.036770][ T6109] netlink: 'syz.2.9927': attribute type 8 has an invalid length. [ 2064.137062][ T6109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9927'. [ 2065.670226][T29858] wlan1: Trigger new scan to find an IBSS to join [ 2066.547058][ T6151] netlink: 'syz.0.9936': attribute type 1 has an invalid length. [ 2066.624979][T21849] wlan1: Trigger new scan to find an IBSS to join [ 2066.701505][ T6151] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9936'. [ 2066.742915][T22199] wlan1: Creating new IBSS network, BSSID b2:2a:40:27:8c:37 [ 2066.852370][ T6158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9936'. [ 2067.032585][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9944'. [ 2067.601808][T24873] Bluetooth: hci1: ISO packet for unknown connection handle 53 [ 2071.672054][T29862] wlan1: Trigger new scan to find an IBSS to join [ 2072.104993][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.115794][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.126203][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.137207][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.147451][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.158382][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.168371][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.178937][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.189654][ T6187] netlink: 'syz.1.9950': attribute type 10 has an invalid length. [ 2072.518364][ T6219] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9961'. [ 2072.545930][ T6218] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9961'. [ 2072.607172][T22199] wlan1: Creating new IBSS network, BSSID da:60:4f:51:b8:f3 [ 2074.505324][ T6268] netlink: 'syz.0.9974': attribute type 39 has an invalid length. [ 2074.598786][ T6268] bond0: (slave syz_tun): Releasing backup interface [ 2075.186600][ T6290] netlink: 'syz.4.9984': attribute type 1 has an invalid length. [ 2075.195258][T24873] Bluetooth: hci3: command 0x0406 tx timeout [ 2075.201775][ T6290] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9984'. [ 2077.731491][ T6299] tipc: Started in network mode [ 2077.736468][ T6299] tipc: Node identity 9215a268, cluster identity 4711 [ 2077.771098][ T6299] tipc: Node number set to 2450891368 [ 2079.210147][ T6334] netlink: 'syz.3.10000': attribute type 10 has an invalid length. [ 2083.981812][T29852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2084.715261][ T6431] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10038'. [ 2084.737764][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2084.768870][ T6431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2086.508315][T32224] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 2087.217618][T22192] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2088.541431][T24873] Bluetooth: hci2: command 0x0409 tx timeout [ 2089.476881][ T6490] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 2089.562622][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10062'. [ 2090.005049][ T6506] netlink: 'syz.1.10068': attribute type 1 has an invalid length. [ 2090.021492][ T6506] netlink: 'syz.1.10068': attribute type 4 has an invalid length. [ 2090.033979][ T6506] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.10068'. [ 2090.613352][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10080'. [ 2090.631467][T24873] Bluetooth: hci2: command 0x0406 tx timeout [ 2091.847093][ T6570] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2092.700325][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10098'. [ 2093.199469][ T6602] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10102'. [ 2093.237993][ T6602] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2093.318969][ T6602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2093.910842][ T6611] netlink: 'syz.1.10105': attribute type 10 has an invalid length. [ 2094.430817][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10115'. [ 2094.579102][ T6636] netlink: 180 bytes leftover after parsing attributes in process `syz.3.10118'. [ 2095.229090][ T6641] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10119'. [ 2095.552190][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10125'. [ 2096.086893][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10132'. [ 2096.222507][ T6686] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10133'. [ 2096.258932][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2096.355986][ T6686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2096.432599][ T6695] FAULT_INJECTION: forcing a failure. [ 2096.432599][ T6695] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.481748][ T6695] CPU: 0 PID: 6695 Comm: syz.0.10136 Not tainted syzkaller #0 [ 2096.490084][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2096.500388][ T6695] Call Trace: [ 2096.504152][ T6695] [ 2096.507129][ T6695] dump_stack_lvl+0x188/0x24e [ 2096.512045][ T6695] ? show_regs_print_info+0x12/0x12 [ 2096.517567][ T6695] ? load_image+0x410/0x410 [ 2096.522658][ T6695] ? __might_sleep+0xd0/0xd0 [ 2096.527475][ T6695] ? __lock_acquire+0x7ea0/0x7ea0 [ 2096.532953][ T6695] should_fail_ex+0x390/0x4c0 [ 2096.538238][ T6695] should_failslab+0x5/0x20 [ 2096.542879][ T6695] slab_pre_alloc_hook+0x59/0x300 [ 2096.548069][ T6695] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2096.563765][ T6695] __kmem_cache_alloc_node+0x4f/0x270 [ 2096.569460][ T6695] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2096.575731][ T6695] __kmalloc+0xa3/0x240 [ 2096.580351][ T6695] tomoyo_realpath_from_path+0xe2/0x5c0 [ 2096.586135][ T6695] ? tomoyo_domain+0xd2/0x120 [ 2096.590881][ T6695] ? tomoyo_path_number_perm+0x205/0x650 [ 2096.596631][ T6695] tomoyo_path_number_perm+0x22f/0x650 [ 2096.602340][ T6695] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2096.608285][ T6695] ? ksys_write+0x1ce/0x260 [ 2096.613107][ T6695] ? common_file_perm+0x171/0x1c0 [ 2096.618583][ T6695] ? __fget_files+0x28/0x460 [ 2096.623413][ T6695] security_file_ioctl+0x6c/0xa0 [ 2096.628783][ T6695] __se_sys_ioctl+0x48/0x170 [ 2096.633767][ T6695] do_syscall_64+0x4c/0xa0 [ 2096.638400][ T6695] ? clear_bhb_loop+0x60/0xb0 [ 2096.643213][ T6695] ? clear_bhb_loop+0x60/0xb0 [ 2096.647938][ T6695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2096.654049][ T6695] RIP: 0033:0x7f4e3e39e199 [ 2096.658583][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2096.678712][ T6695] RSP: 002b:00007f4e3f1c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2096.688197][ T6695] RAX: ffffffffffffffda RBX: 00007f4e3e625fa0 RCX: 00007f4e3e39e199 [ 2096.696401][ T6695] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2096.704504][ T6695] RBP: 00007f4e3f1c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2096.713722][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.722525][ T6695] R13: 00007f4e3e626038 R14: 00007f4e3e625fa0 R15: 00007ffe25d6d388 [ 2096.730725][ T6695] [ 2096.847595][ T6695] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2096.921661][ T6701] netlink: 'syz.1.10138': attribute type 11 has an invalid length. [ 2096.940375][ T6701] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10138'. [ 2096.974052][ T6706] netlink: 'syz.1.10138': attribute type 11 has an invalid length. [ 2097.022259][ T6706] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10138'. [ 2097.088121][ T6700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2097.450436][ T6721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10146'. [ 2097.582296][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10148'. [ 2097.686825][ T6729] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10149'. [ 2098.599187][ T6758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10159'. [ 2098.708604][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.715036][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.721689][T29858] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2098.834379][ T6756] netlink: 'syz.4.10157': attribute type 2 has an invalid length. [ 2099.011924][ T6753] netlink: 'syz.4.10157': attribute type 2 has an invalid length. [ 2099.090630][ T6771] netlink: 'syz.3.10162': attribute type 10 has an invalid length. [ 2100.051623][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2100.104921][ T6783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2100.668820][ T6798] __nla_validate_parse: 4 callbacks suppressed [ 2100.668866][ T6798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10173'. [ 2101.374960][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10185'. [ 2101.797780][ T6834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10191'. [ 2102.594030][ T6867] netlink: 10 bytes leftover after parsing attributes in process `syz.2.10199'. [ 2103.027472][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10206'. [ 2103.402735][ T6882] FAULT_INJECTION: forcing a failure. [ 2103.402735][ T6882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2103.473779][ T6882] CPU: 1 PID: 6882 Comm: syz.0.10208 Not tainted syzkaller #0 [ 2103.481360][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2103.491458][ T6882] Call Trace: [ 2103.494862][ T6882] [ 2103.497830][ T6882] dump_stack_lvl+0x188/0x24e [ 2103.502564][ T6882] ? show_regs_print_info+0x12/0x12 [ 2103.507815][ T6882] ? load_image+0x410/0x410 [ 2103.512373][ T6882] ? __lock_acquire+0x7ea0/0x7ea0 [ 2103.517464][ T6882] should_fail_ex+0x390/0x4c0 [ 2103.522229][ T6882] _copy_from_user+0x2c/0x170 [ 2103.526941][ T6882] __sys_bpf+0x2ea/0x780 [ 2103.531227][ T6882] ? bpf_link_show_fdinfo+0x380/0x380 [ 2103.536640][ T6882] ? lock_chain_count+0x20/0x20 [ 2103.541528][ T6882] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2103.547654][ T6882] __x64_sys_bpf+0x78/0x90 [ 2103.552124][ T6882] do_syscall_64+0x4c/0xa0 [ 2103.556570][ T6882] ? clear_bhb_loop+0x60/0xb0 [ 2103.561358][ T6882] ? clear_bhb_loop+0x60/0xb0 [ 2103.566070][ T6882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2103.572025][ T6882] RIP: 0033:0x7f4e3e39e199 [ 2103.576548][ T6882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2103.596370][ T6882] RSP: 002b:00007f4e3f1c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2103.604815][ T6882] RAX: ffffffffffffffda RBX: 00007f4e3e625fa0 RCX: 00007f4e3e39e199 [ 2103.612809][ T6882] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 2103.622204][ T6882] RBP: 00007f4e3f1c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2103.630203][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.638478][ T6882] R13: 00007f4e3e626038 R14: 00007f4e3e625fa0 R15: 00007ffe25d6d388 [ 2103.646519][ T6882] [ 2105.112557][T29860] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2106.014873][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10221'. [ 2106.361949][ T6930] netlink: 'syz.2.10227': attribute type 10 has an invalid length. [ 2106.382733][ T6930] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.406355][ T6930] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.430011][ T6930] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.479407][ T6930] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.564177][ T6930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.601511][ T6930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.627331][ T6930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.646862][ T6930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.690202][ T6930] team0: Port device geneve1 added [ 2106.872403][ T6945] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10233'. [ 2107.255393][ T6959] FAULT_INJECTION: forcing a failure. [ 2107.255393][ T6959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2107.315515][ T6959] CPU: 1 PID: 6959 Comm: syz.2.10238 Not tainted syzkaller #0 [ 2107.323084][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2107.333177][ T6959] Call Trace: [ 2107.336496][ T6959] [ 2107.339477][ T6959] dump_stack_lvl+0x188/0x24e [ 2107.344211][ T6959] ? show_regs_print_info+0x12/0x12 [ 2107.349667][ T6959] ? load_image+0x410/0x410 [ 2107.354666][ T6959] ? __lock_acquire+0x7ea0/0x7ea0 [ 2107.359749][ T6959] ? __lock_acquire+0x7ea0/0x7ea0 [ 2107.364857][ T6959] should_fail_ex+0x390/0x4c0 [ 2107.369604][ T6959] strncpy_from_user+0x32/0x340 [ 2107.374507][ T6959] bpf_prog_load+0x200/0x1530 [ 2107.379250][ T6959] ? map_freeze+0x390/0x390 [ 2107.383934][ T6959] ? __might_fault+0xa6/0x120 [ 2107.388664][ T6959] ? lockdep_hardirqs_on+0x94/0x140 [ 2107.395390][ T6959] ? __might_fault+0xa6/0x120 [ 2107.400093][ T6959] ? __might_fault+0xc2/0x120 [ 2107.404924][ T6959] ? __might_fault+0xa6/0x120 [ 2107.410128][ T6959] ? bpf_lsm_bpf+0x5/0x10 [ 2107.415023][ T6959] ? security_bpf+0x7a/0xa0 [ 2107.419555][ T6959] __sys_bpf+0x5b8/0x780 [ 2107.423828][ T6959] ? bpf_link_show_fdinfo+0x380/0x380 [ 2107.429272][ T6959] ? lock_chain_count+0x20/0x20 [ 2107.434166][ T6959] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2107.441532][ T6959] __x64_sys_bpf+0x78/0x90 [ 2107.446010][ T6959] do_syscall_64+0x4c/0xa0 [ 2107.451679][ T6959] ? clear_bhb_loop+0x60/0xb0 [ 2107.456387][ T6959] ? clear_bhb_loop+0x60/0xb0 [ 2107.461090][ T6959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2107.467008][ T6959] RIP: 0033:0x7fded3b9e199 [ 2107.471473][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2107.493119][ T6959] RSP: 002b:00007fded1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2107.501670][ T6959] RAX: ffffffffffffffda RBX: 00007fded3e25fa0 RCX: 00007fded3b9e199 [ 2107.510318][ T6959] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 2107.518324][ T6959] RBP: 00007fded1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2107.527376][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2107.535480][ T6959] R13: 00007fded3e26038 R14: 00007fded3e25fa0 R15: 00007ffcf2082c98 [ 2107.547978][ T6959] [ 2107.674833][ T6963] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10236'. [ 2107.710844][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2107.773978][ T6963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2107.809431][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10239'. [ 2108.799827][ T6982] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10245'. [ 2111.910669][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10254'. [ 2112.003243][ T7014] netlink: 'syz.1.10257': attribute type 10 has an invalid length. [ 2112.319589][ T7020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10259'. [ 2112.874350][ T7036] netlink: 'syz.2.10266': attribute type 5 has an invalid length. [ 2112.882818][ T7036] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10266'. [ 2113.197322][ T7048] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10273'. [ 2113.554502][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10278'. [ 2114.121953][ T7082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10286'. [ 2114.644187][ T7097] netlink: 'syz.4.10290': attribute type 10 has an invalid length. [ 2114.954653][ T7105] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.10293'. [ 2115.028117][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10295'. [ 2115.761153][ T7131] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10301'. [ 2115.983179][T22199] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2116.141490][T24873] Bluetooth: hci1: command 0x0406 tx timeout [ 2116.208348][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10307'. [ 2118.074107][ T7187] netlink: 'syz.0.10320': attribute type 2 has an invalid length. [ 2118.965270][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10331'. [ 2119.214199][T29852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2119.560986][ T7229] netlink: 'syz.3.10334': attribute type 2 has an invalid length. [ 2119.583859][ T7229] netlink: 'syz.3.10334': attribute type 8 has an invalid length. [ 2119.622222][ T7229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10334'. [ 2119.874162][ T7236] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10337'. [ 2119.904579][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2119.976484][ T7236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2120.330064][ T7249] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10339'. [ 2120.408116][ T7249] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2120.441572][ T7249] CPU: 0 PID: 7249 Comm: syz.2.10339 Not tainted syzkaller #0 [ 2120.449130][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2120.459316][ T7249] Call Trace: [ 2120.462737][ T7249] [ 2120.465730][ T7249] dump_stack_lvl+0x188/0x24e [ 2120.470479][ T7249] ? show_regs_print_info+0x12/0x12 [ 2120.475737][ T7249] ? load_image+0x410/0x410 [ 2120.480313][ T7249] sysfs_warn_dup+0x8a/0xa0 [ 2120.484880][ T7249] sysfs_do_create_link_sd+0xc0/0x110 [ 2120.490318][ T7249] device_add+0x83b/0x1050 [ 2120.494886][ T7249] wiphy_register+0x1d8b/0x2aa0 [ 2120.499798][ T7249] ? cfg80211_event_work+0x40/0x40 [ 2120.504953][ T7249] ? minstrel_ht_alloc+0x894/0xa20 [ 2120.510168][ T7249] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2120.516292][ T7249] ieee80211_register_hw+0x2e33/0x3b00 [ 2120.521810][ T7249] ? ieee80211_register_hw+0xf61/0x3b00 [ 2120.527404][ T7249] ? ieee80211_register_hw+0xf61/0x3b00 [ 2120.533097][ T7249] ? ieee80211_tasklet_handler+0x20/0x20 [ 2120.538789][ T7249] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2120.544742][ T7249] ? __debug_object_init+0xed/0x440 [ 2120.550073][ T7249] ? memset+0x1e/0x40 [ 2120.554171][ T7249] ? __hrtimer_init+0x189/0x270 [ 2120.559058][ T7249] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2120.564812][ T7249] ? memcpy+0x3c/0x60 [ 2120.568821][ T7249] hwsim_new_radio_nl+0xab7/0xc90 [ 2120.573886][ T7249] genl_family_rcv_msg_doit+0x22f/0x350 [ 2120.579462][ T7249] ? end_current_label_crit_section+0x170/0x170 [ 2120.585999][ T7249] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2120.591933][ T7249] ? bpf_lsm_capable+0x5/0x10 [ 2120.596670][ T7249] ? security_capable+0x85/0xb0 [ 2120.601655][ T7249] genl_rcv_msg+0x601/0x790 [ 2120.606219][ T7249] ? genl_bind+0x360/0x360 [ 2120.610672][ T7249] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2120.617045][ T7249] netlink_rcv_skb+0x1ef/0x440 [ 2120.621850][ T7249] ? genl_bind+0x360/0x360 [ 2120.627581][ T7249] ? netlink_ack+0x1160/0x1160 [ 2120.632394][ T7249] ? down_read+0x1a8/0x2d0 [ 2120.636869][ T7249] genl_rcv+0x24/0x40 [ 2120.640878][ T7249] netlink_unicast+0x7ad/0x920 [ 2120.645700][ T7249] netlink_sendmsg+0x8ad/0xbd0 [ 2120.650788][ T7249] ? netlink_getsockopt+0x550/0x550 [ 2120.656035][ T7249] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2120.661632][ T7249] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2120.666956][ T7249] ? security_socket_sendmsg+0x7c/0xa0 [ 2120.672454][ T7249] ? netlink_getsockopt+0x550/0x550 [ 2120.677684][ T7249] ____sys_sendmsg+0x5ed/0x9a0 [ 2120.682490][ T7249] ? __sys_sendmsg_sock+0x30/0x30 [ 2120.687539][ T7249] ? __import_iovec+0x306/0x510 [ 2120.692517][ T7249] ? import_iovec+0x6f/0xa0 [ 2120.697075][ T7249] ___sys_sendmsg+0x2a2/0x360 [ 2120.701781][ T7249] ? __sys_sendmsg+0x2a0/0x2a0 [ 2120.706694][ T7249] __se_sys_sendmsg+0x1c3/0x2b0 [ 2120.711580][ T7249] ? __x64_sys_sendmsg+0x80/0x80 [ 2120.716658][ T7249] ? lockdep_hardirqs_on+0x94/0x140 [ 2120.721896][ T7249] do_syscall_64+0x4c/0xa0 [ 2120.726333][ T7249] ? clear_bhb_loop+0x60/0xb0 [ 2120.731032][ T7249] ? clear_bhb_loop+0x60/0xb0 [ 2120.735756][ T7249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2120.741692][ T7249] RIP: 0033:0x7fded3b9e199 [ 2120.746247][ T7249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2120.765892][ T7249] RSP: 002b:00007fded1dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2120.774331][ T7249] RAX: ffffffffffffffda RBX: 00007fded3e26090 RCX: 00007fded3b9e199 [ 2120.782340][ T7249] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2120.790371][ T7249] RBP: 00007fded3c350b8 R08: 0000000000000000 R09: 0000000000000000 [ 2120.798371][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2120.806365][ T7249] R13: 00007fded3e26128 R14: 00007fded3e26090 R15: 00007ffcf2082c98 [ 2120.814377][ T7249] [ 2121.456716][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10348'. [ 2122.220382][ T7287] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2126.945389][ T7357] FAULT_INJECTION: forcing a failure. [ 2126.945389][ T7357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2126.989224][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10381'. [ 2127.024112][ T7357] CPU: 0 PID: 7357 Comm: syz.4.10380 Not tainted syzkaller #0 [ 2127.031838][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2127.041944][ T7357] Call Trace: [ 2127.045255][ T7357] [ 2127.048222][ T7357] dump_stack_lvl+0x188/0x24e [ 2127.052951][ T7357] ? show_regs_print_info+0x12/0x12 [ 2127.058189][ T7357] ? load_image+0x410/0x410 [ 2127.062746][ T7357] ? __lock_acquire+0x7ea0/0x7ea0 [ 2127.068020][ T7357] should_fail_ex+0x390/0x4c0 [ 2127.072843][ T7357] _copy_from_iter+0x1c0/0x1130 [ 2127.077745][ T7357] ? rcu_is_watching+0x11/0xa0 [ 2127.082579][ T7357] ? __alloc_pages+0x290/0x4f0 [ 2127.087397][ T7357] ? copyout_mc+0x110/0x110 [ 2127.091956][ T7357] ? page_copy_sane+0x4e/0x390 [ 2127.096752][ T7357] copy_page_from_iter+0x77/0x100 [ 2127.101810][ T7357] tun_get_user+0x1b2d/0x3be0 [ 2127.106519][ T7357] ? tun_get_user+0x66f/0x3be0 [ 2127.111320][ T7357] ? rcu_read_unlock+0xa0/0xa0 [ 2127.116125][ T7357] ? tun_get+0x1c/0x2e0 [ 2127.120311][ T7357] ? __lock_acquire+0x7ea0/0x7ea0 [ 2127.125374][ T7357] ? tun_get+0x1c/0x2e0 [ 2127.129563][ T7357] tun_chr_write_iter+0x112/0x1f0 [ 2127.134619][ T7357] vfs_write+0x482/0x9a0 [ 2127.138896][ T7357] ? file_end_write+0x250/0x250 [ 2127.143790][ T7357] ? __fget_files+0x3fc/0x460 [ 2127.148499][ T7357] ? __fdget_pos+0x1d4/0x360 [ 2127.153203][ T7357] ? ksys_write+0x70/0x260 [ 2127.157648][ T7357] ksys_write+0x14d/0x260 [ 2127.162009][ T7357] ? __ia32_sys_read+0x80/0x80 [ 2127.166813][ T7357] ? lockdep_hardirqs_on+0x94/0x140 [ 2127.172042][ T7357] do_syscall_64+0x4c/0xa0 [ 2127.176485][ T7357] ? clear_bhb_loop+0x60/0xb0 [ 2127.181272][ T7357] ? clear_bhb_loop+0x60/0xb0 [ 2127.185983][ T7357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2127.191917][ T7357] RIP: 0033:0x7fa03259e199 [ 2127.196365][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2127.215996][ T7357] RSP: 002b:00007fa0334b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2127.224442][ T7357] RAX: ffffffffffffffda RBX: 00007fa032825fa0 RCX: 00007fa03259e199 [ 2127.232464][ T7357] RDX: 000000000000000e RSI: 0000200000000000 RDI: 00000000000000c8 [ 2127.240512][ T7357] RBP: 00007fa0334b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2127.248526][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2127.256527][ T7357] R13: 00007fa032826038 R14: 00007fa032825fa0 R15: 00007ffc36ae8818 [ 2127.264541][ T7357] [ 2127.389648][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10385'. [ 2128.126162][ T7386] netlink: 'syz.0.10393': attribute type 10 has an invalid length. [ 2128.153396][ T7386] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10393'. [ 2128.229569][ T7391] FAULT_INJECTION: forcing a failure. [ 2128.229569][ T7391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2128.271600][ T7391] CPU: 1 PID: 7391 Comm: syz.4.10395 Not tainted syzkaller #0 [ 2128.279150][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2128.289250][ T7391] Call Trace: [ 2128.292583][ T7391] [ 2128.295564][ T7391] dump_stack_lvl+0x188/0x24e [ 2128.300293][ T7391] ? show_regs_print_info+0x12/0x12 [ 2128.305623][ T7391] ? load_image+0x410/0x410 [ 2128.310186][ T7391] ? __lock_acquire+0x7ea0/0x7ea0 [ 2128.315344][ T7391] ? __local_bh_enable_ip+0x136/0x1c0 [ 2128.320755][ T7391] ? _local_bh_enable+0xa0/0xa0 [ 2128.325650][ T7391] should_fail_ex+0x390/0x4c0 [ 2128.330381][ T7391] copy_fpstate_to_sigframe+0xaae/0xd70 [ 2128.335979][ T7391] ? copy_fpstate_to_sigframe+0x26a/0xd70 [ 2128.341744][ T7391] ? fpregs_set+0x5f0/0x5f0 [ 2128.346292][ T7391] ? ct_irq_exit_irqson+0x113/0x170 [ 2128.351538][ T7391] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2128.357571][ T7391] ? lock_chain_count+0x20/0x20 [ 2128.362481][ T7391] ? arch_do_signal_or_restart+0x23b/0x1310 [ 2128.368527][ T7391] ? fpu__alloc_mathframe+0xa3/0x120 [ 2128.373868][ T7391] arch_do_signal_or_restart+0x67a/0x1310 [ 2128.379745][ T7391] ? get_sigframe_size+0x10/0x10 [ 2128.384768][ T7391] ? mutex_unlock+0x10/0x10 [ 2128.389331][ T7391] ? ksys_write+0x1fd/0x260 [ 2128.393897][ T7391] ? exit_to_user_mode_loop+0x3b/0x110 [ 2128.399414][ T7391] exit_to_user_mode_loop+0x70/0x110 [ 2128.404761][ T7391] exit_to_user_mode_prepare+0xee/0x180 [ 2128.410449][ T7391] syscall_exit_to_user_mode+0x16/0x40 [ 2128.415962][ T7391] do_syscall_64+0x58/0xa0 [ 2128.420417][ T7391] ? clear_bhb_loop+0x60/0xb0 [ 2128.425248][ T7391] ? clear_bhb_loop+0x60/0xb0 [ 2128.429974][ T7391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2128.435908][ T7391] RIP: 0033:0x7fa03255e9ce [ 2128.440367][ T7391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2128.460007][ T7391] RSP: 002b:00007fa0334b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2128.468478][ T7391] RAX: 0000000000000001 RBX: 00007fa0334b66c0 RCX: 00007fa03255e9ce [ 2128.476498][ T7391] RDX: 0000000000000001 RSI: 00007fa0334b6090 RDI: 0000000000000006 [ 2128.484608][ T7391] RBP: 00007fa0334b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2128.492631][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2128.500646][ T7391] R13: 00007fa032826038 R14: 00007fa032825fa0 R15: 00007ffc36ae8818 [ 2128.508687][ T7391] [ 2128.675403][ T7400] netlink: 'syz.1.10399': attribute type 25 has an invalid length. [ 2128.686849][ T7400] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.10399'. [ 2128.960997][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10401'. [ 2129.807499][ T7427] device vcan0 entered promiscuous mode [ 2129.826584][ T7427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2129.877546][ T7432] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10408'. [ 2129.921761][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2129.984698][ T7432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2130.063484][T21825] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2130.967633][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10419'. [ 2132.398767][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10432'. [ 2133.255021][ T7516] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.10440'. [ 2133.316055][T24873] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 2134.289592][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10450'. [ 2134.362367][ T7537] netlink: 'syz.1.10449': attribute type 10 has an invalid length. [ 2134.449662][ T7537] team0: Port device geneve1 added [ 2134.462533][ T7539] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10447'. [ 2135.608157][ T7574] netlink: 'syz.4.10465': attribute type 1 has an invalid length. [ 2135.626016][ T7574] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.10465'. [ 2135.659885][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10464'. [ 2135.659999][T24873] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 2137.112424][T29852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2137.305173][ T7610] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10477'. [ 2137.341755][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2137.393054][ T7610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2137.630851][ T7619] netlink: 'syz.3.10480': attribute type 46 has an invalid length. [ 2137.911564][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10483'. [ 2139.587608][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10497'. [ 2139.924317][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10503'. [ 2140.116509][ T7684] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10505'. [ 2141.660988][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10520'. [ 2143.092807][ T7751] FAULT_INJECTION: forcing a failure. [ 2143.092807][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 2143.150745][ T7751] CPU: 1 PID: 7751 Comm: syz.3.10530 Not tainted syzkaller #0 [ 2143.158698][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2143.169817][ T7751] Call Trace: [ 2143.173115][ T7751] [ 2143.176260][ T7751] dump_stack_lvl+0x188/0x24e [ 2143.180993][ T7751] ? show_regs_print_info+0x12/0x12 [ 2143.186251][ T7751] ? load_image+0x410/0x410 [ 2143.190819][ T7751] ? __might_sleep+0xd0/0xd0 [ 2143.195454][ T7751] ? __lock_acquire+0x7ea0/0x7ea0 [ 2143.200547][ T7751] should_fail_ex+0x390/0x4c0 [ 2143.205286][ T7751] should_failslab+0x5/0x20 [ 2143.209830][ T7751] slab_pre_alloc_hook+0x59/0x300 [ 2143.214904][ T7751] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2143.220672][ T7751] __kmem_cache_alloc_node+0x4f/0x270 [ 2143.226091][ T7751] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2143.231853][ T7751] __kmalloc+0xa3/0x240 [ 2143.236055][ T7751] tomoyo_realpath_from_path+0xe2/0x5c0 [ 2143.241653][ T7751] ? tomoyo_domain+0xd2/0x120 [ 2143.246384][ T7751] ? tomoyo_path_number_perm+0x205/0x650 [ 2143.252063][ T7751] tomoyo_path_number_perm+0x22f/0x650 [ 2143.257594][ T7751] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2143.263113][ T7751] ? ksys_write+0x1ce/0x260 [ 2143.267668][ T7751] ? common_file_perm+0x171/0x1c0 [ 2143.272788][ T7751] ? __fget_files+0x28/0x460 [ 2143.277435][ T7751] security_file_ioctl+0x6c/0xa0 [ 2143.282656][ T7751] __se_sys_ioctl+0x48/0x170 [ 2143.287305][ T7751] do_syscall_64+0x4c/0xa0 [ 2143.292056][ T7751] ? clear_bhb_loop+0x60/0xb0 [ 2143.296967][ T7751] ? clear_bhb_loop+0x60/0xb0 [ 2143.301959][ T7751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2143.307913][ T7751] RIP: 0033:0x7fafc5d9e199 [ 2143.312413][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2143.332703][ T7751] RSP: 002b:00007fafc6d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2143.341447][ T7751] RAX: ffffffffffffffda RBX: 00007fafc6025fa0 RCX: 00007fafc5d9e199 [ 2143.349564][ T7751] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2143.357775][ T7751] RBP: 00007fafc6d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 2143.365894][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2143.373916][ T7751] R13: 00007fafc6026038 R14: 00007fafc6025fa0 R15: 00007ffcb8c92598 [ 2143.382045][ T7751] [ 2143.391643][ T7751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2143.898231][ T7764] netlink: 'syz.1.10534': attribute type 21 has an invalid length. [ 2143.941830][ T7764] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10534'. [ 2144.188599][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10538'. [ 2144.287207][ T7767] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10537'. [ 2144.421819][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2144.527615][ T7767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2147.983634][T22199] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2148.108716][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10556'. [ 2148.658910][ T7830] netlink: 'syz.2.10562': attribute type 29 has an invalid length. [ 2148.676047][ T7830] netlink: 'syz.2.10562': attribute type 29 has an invalid length. [ 2148.825532][ T7830] netlink: 'syz.2.10562': attribute type 2 has an invalid length. [ 2148.923479][ T7830] netlink: 'syz.2.10562': attribute type 29 has an invalid length. [ 2149.845921][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10576'. [ 2149.878287][ T7864] netlink: 'syz.1.10575': attribute type 21 has an invalid length. [ 2149.891758][ T7864] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10575'. [ 2150.794128][ T7881] netlink: 'syz.1.10583': attribute type 39 has an invalid length. [ 2150.824637][ T7881] netlink: 'syz.1.10583': attribute type 10 has an invalid length. [ 2151.188726][ T7895] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.10586'. [ 2151.192621][T29852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2151.209506][ T7895] netlink: zone id is out of range [ 2151.220904][ T7895] netlink: zone id is out of range [ 2151.233997][ T7895] netlink: zone id is out of range [ 2151.254662][ T7895] netlink: zone id is out of range [ 2151.272049][ T7895] netlink: zone id is out of range [ 2151.280712][ T7895] netlink: zone id is out of range [ 2151.301367][ T7895] netlink: zone id is out of range [ 2151.318254][ T7895] netlink: zone id is out of range [ 2151.335104][ T7895] netlink: zone id is out of range [ 2151.350366][ T7895] netlink: zone id is out of range [ 2151.675540][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10594'. [ 2151.706178][ T7911] FAULT_INJECTION: forcing a failure. [ 2151.706178][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 2151.782324][ T7911] CPU: 1 PID: 7911 Comm: syz.1.10592 Not tainted syzkaller #0 [ 2151.789965][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2151.800415][ T7911] Call Trace: [ 2151.803744][ T7911] [ 2151.806886][ T7911] dump_stack_lvl+0x188/0x24e [ 2151.811782][ T7911] ? show_regs_print_info+0x12/0x12 [ 2151.817134][ T7911] ? load_image+0x410/0x410 [ 2151.821800][ T7911] ? __might_sleep+0xd0/0xd0 [ 2151.826450][ T7911] ? __lock_acquire+0x7ea0/0x7ea0 [ 2151.831585][ T7911] should_fail_ex+0x390/0x4c0 [ 2151.836453][ T7911] should_failslab+0x5/0x20 [ 2151.841014][ T7911] slab_pre_alloc_hook+0x59/0x300 [ 2151.846205][ T7911] ? tomoyo_encode+0x28a/0x550 [ 2151.851168][ T7911] __kmem_cache_alloc_node+0x4f/0x270 [ 2151.856709][ T7911] ? tomoyo_encode+0x28a/0x550 [ 2151.861930][ T7911] __kmalloc+0xa3/0x240 [ 2151.866151][ T7911] tomoyo_encode+0x28a/0x550 [ 2151.870987][ T7911] tomoyo_realpath_from_path+0x578/0x5c0 [ 2151.876818][ T7911] ? tomoyo_domain+0xd2/0x120 [ 2151.881687][ T7911] ? tomoyo_path_number_perm+0x205/0x650 [ 2151.887663][ T7911] tomoyo_path_number_perm+0x22f/0x650 [ 2151.893207][ T7911] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2151.899428][ T7911] ? ksys_write+0x1ce/0x260 [ 2151.903996][ T7911] ? common_file_perm+0x171/0x1c0 [ 2151.909394][ T7911] ? __fget_files+0x28/0x460 [ 2151.914068][ T7911] security_file_ioctl+0x6c/0xa0 [ 2151.919160][ T7911] __se_sys_ioctl+0x48/0x170 [ 2151.924035][ T7911] do_syscall_64+0x4c/0xa0 [ 2151.928507][ T7911] ? clear_bhb_loop+0x60/0xb0 [ 2151.933338][ T7911] ? clear_bhb_loop+0x60/0xb0 [ 2151.938064][ T7911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2151.944289][ T7911] RIP: 0033:0x7f79f459e199 [ 2151.948744][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2151.968855][ T7911] RSP: 002b:00007f79f53ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2151.977613][ T7911] RAX: ffffffffffffffda RBX: 00007f79f4825fa0 RCX: 00007f79f459e199 [ 2151.985915][ T7911] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2151.994033][ T7911] RBP: 00007f79f53ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2152.002141][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2152.010596][ T7911] R13: 00007f79f4826038 R14: 00007f79f4825fa0 R15: 00007ffcf44290a8 [ 2152.018730][ T7911] [ 2152.274322][ T7923] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10599'. [ 2152.306127][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2152.548931][ T7911] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2153.144563][ T7956] netlink: 'syz.4.10610': attribute type 13 has an invalid length. [ 2153.166603][ T7956] netlink: 172 bytes leftover after parsing attributes in process `syz.4.10610'. [ 2153.740694][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10614'. [ 2158.043266][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10632'. [ 2158.135877][ T8008] netlink: 'syz.0.10633': attribute type 4 has an invalid length. [ 2158.962510][ T8032] netlink: 'syz.2.10642': attribute type 10 has an invalid length. [ 2158.986868][ T8032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10642'. [ 2159.007288][ T8032] netlink: 'syz.2.10642': attribute type 10 has an invalid length. [ 2159.032876][ T8032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10642'. [ 2159.060390][ T8034] netlink: 'syz.2.10642': attribute type 10 has an invalid length. [ 2159.076446][ T8034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10642'. [ 2159.759331][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10652'. [ 2160.144006][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.150568][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.333297][ T8069] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10656'. [ 2160.360717][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2160.446957][ T8069] net_ratelimit: 3547 callbacks suppressed [ 2160.446979][ T8069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2160.475995][ T8079] FAULT_INJECTION: forcing a failure. [ 2160.475995][ T8079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2160.614809][ T8079] CPU: 0 PID: 8079 Comm: syz.3.10658 Not tainted syzkaller #0 [ 2160.623759][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2160.635800][ T8079] Call Trace: [ 2160.639113][ T8079] [ 2160.642194][ T8079] dump_stack_lvl+0x188/0x24e [ 2160.647820][ T8079] ? show_regs_print_info+0x12/0x12 [ 2160.655791][ T8079] ? load_image+0x410/0x410 [ 2160.661157][ T8079] ? __lock_acquire+0x7ea0/0x7ea0 [ 2160.668165][ T8079] ? unix_ioctl+0x255/0x6a0 [ 2160.673210][ T8079] should_fail_ex+0x390/0x4c0 [ 2160.680747][ T8079] _copy_from_user+0x2c/0x170 [ 2160.686387][ T8079] sock_do_ioctl+0x18c/0x320 [ 2160.692390][ T8079] ? sock_show_fdinfo+0xb0/0xb0 [ 2160.700061][ T8079] sock_ioctl+0x48a/0x700 [ 2160.706502][ T8079] ? sock_poll+0x420/0x420 [ 2160.711716][ T8079] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2160.717335][ T8079] ? security_file_ioctl+0x7c/0xa0 [ 2160.723733][ T8079] ? sock_poll+0x420/0x420 [ 2160.728838][ T8079] __se_sys_ioctl+0xfa/0x170 [ 2160.734668][ T8079] do_syscall_64+0x4c/0xa0 [ 2160.739555][ T8079] ? clear_bhb_loop+0x60/0xb0 [ 2160.746149][ T8079] ? clear_bhb_loop+0x60/0xb0 [ 2160.751143][ T8079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2160.758428][ T8079] RIP: 0033:0x7fafc5d9e199 [ 2160.763254][ T8079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2160.789439][ T8079] RSP: 002b:00007fafc6d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2160.802524][ T8079] RAX: ffffffffffffffda RBX: 00007fafc6025fa0 RCX: 00007fafc5d9e199 [ 2160.812367][ T8079] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2160.822160][ T8079] RBP: 00007fafc6d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 2160.834727][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2160.852816][ T8079] R13: 00007fafc6026038 R14: 00007fafc6025fa0 R15: 00007ffcb8c92598 [ 2160.862506][ T8079] [ 2161.154895][ T8087] netlink: 'syz.4.10660': attribute type 16 has an invalid length. [ 2161.167260][ T8087] netlink: 'syz.4.10660': attribute type 3 has an invalid length. [ 2161.203934][ T8087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10660'. [ 2162.061586][T21825] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2162.295407][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10673'. [ 2162.847103][ T8127] netlink: 'syz.3.10676': attribute type 29 has an invalid length. [ 2162.909469][ T8130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10678'. [ 2162.977535][ T8130] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10678'. [ 2163.019458][ T8127] netlink: 'syz.3.10676': attribute type 29 has an invalid length. [ 2163.099902][ T8134] netlink: 'syz.3.10676': attribute type 29 has an invalid length. [ 2163.199341][ T8146] netlink: 1958 bytes leftover after parsing attributes in process `syz.2.10681'. [ 2163.832558][ T8163] FAULT_INJECTION: forcing a failure. [ 2163.832558][ T8163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2163.861816][ T8163] CPU: 1 PID: 8163 Comm: syz.2.10687 Not tainted syzkaller #0 [ 2163.869418][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2163.879528][ T8163] Call Trace: [ 2163.882849][ T8163] [ 2163.885817][ T8163] dump_stack_lvl+0x188/0x24e [ 2163.890589][ T8163] ? show_regs_print_info+0x12/0x12 [ 2163.895844][ T8163] ? load_image+0x410/0x410 [ 2163.900545][ T8163] ? __lock_acquire+0x7ea0/0x7ea0 [ 2163.905631][ T8163] ? ima_match_policy+0x211c/0x21b0 [ 2163.910887][ T8163] should_fail_ex+0x390/0x4c0 [ 2163.915639][ T8163] prepare_alloc_pages+0x1e1/0x5b0 [ 2163.920865][ T8163] __alloc_pages+0x130/0x4f0 [ 2163.925613][ T8163] ? zone_statistics+0x170/0x170 [ 2163.930622][ T8163] ? register_lock_class+0xc0/0x870 [ 2163.935878][ T8163] ? verify_lock_unused+0x140/0x140 [ 2163.941147][ T8163] __folio_alloc+0xe/0x30 [ 2163.945563][ T8163] vma_alloc_folio+0x499/0x900 [ 2163.950383][ T8163] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 2163.956254][ T8163] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 2163.962046][ T8163] ? shmem_replace_folio+0xdc0/0xdc0 [ 2163.967414][ T8163] ? xas_load+0x119/0x140 [ 2163.971805][ T8163] ? __filemap_get_folio+0x10f/0xde0 [ 2163.977153][ T8163] ? __filemap_get_folio+0xb43/0xde0 [ 2163.982495][ T8163] ? __filemap_get_folio+0x10f/0xde0 [ 2163.987836][ T8163] ? page_cache_prev_miss+0x380/0x380 [ 2163.993272][ T8163] ? mark_lock+0x94/0x320 [ 2163.997756][ T8163] shmem_get_folio_gfp+0x1439/0x35e0 [ 2164.003136][ T8163] shmem_write_begin+0xee/0x3f0 [ 2164.008047][ T8163] generic_perform_write+0x2fa/0x5c0 [ 2164.013406][ T8163] ? generic_file_direct_write+0x330/0x330 [ 2164.019306][ T8163] ? __file_remove_privs+0x5f0/0x5f0 [ 2164.024653][ T8163] ? rwsem_write_trylock+0x135/0x1c0 [ 2164.029992][ T8163] ? clear_nonspinnable+0x60/0x60 [ 2164.035067][ T8163] ? generic_write_checks_count+0x363/0x440 [ 2164.041015][ T8163] __generic_file_write_iter+0x148/0x2a0 [ 2164.046716][ T8163] generic_file_write_iter+0xab/0x2e0 [ 2164.052161][ T8163] vfs_write+0x482/0x9a0 [ 2164.056467][ T8163] ? file_end_write+0x250/0x250 [ 2164.061388][ T8163] ? __fget_files+0x3fc/0x460 [ 2164.066123][ T8163] ? __fdget_pos+0x2ae/0x360 [ 2164.070757][ T8163] ? ksys_write+0x70/0x260 [ 2164.075233][ T8163] ksys_write+0x14d/0x260 [ 2164.079674][ T8163] ? __ia32_sys_read+0x80/0x80 [ 2164.084496][ T8163] ? lockdep_hardirqs_on+0x94/0x140 [ 2164.089838][ T8163] do_syscall_64+0x4c/0xa0 [ 2164.094305][ T8163] ? clear_bhb_loop+0x60/0xb0 [ 2164.099003][ T8163] ? clear_bhb_loop+0x60/0xb0 [ 2164.103719][ T8163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2164.109641][ T8163] RIP: 0033:0x7fded3b9e199 [ 2164.114089][ T8163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2164.133891][ T8163] RSP: 002b:00007fded1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2164.142360][ T8163] RAX: ffffffffffffffda RBX: 00007fded3e25fa0 RCX: 00007fded3b9e199 [ 2164.150355][ T8163] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000008 [ 2164.158363][ T8163] RBP: 00007fded1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2164.166353][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2164.174346][ T8163] R13: 00007fded3e26038 R14: 00007fded3e25fa0 R15: 00007ffcf2082c98 [ 2164.182353][ T8163] [ 2164.458245][ T8165] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10688'. [ 2164.727984][ T8175] netlink: 'syz.2.10693': attribute type 5 has an invalid length. [ 2164.802063][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10691'. [ 2165.748745][ T8205] netlink: 'syz.4.10701': attribute type 19 has an invalid length. [ 2165.858210][ T8206] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.10701'. [ 2165.943571][ T8209] : port 1(bond0) entered blocking state [ 2165.958009][ T8209] : port 1(bond0) entered disabled state [ 2166.010364][ T8209] device bond0 entered promiscuous mode [ 2166.072362][ T8209] device bond_slave_0 entered promiscuous mode [ 2166.112372][ T8209] device bond_slave_1 entered promiscuous mode [ 2166.708637][ T8228] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.10709'. [ 2166.753378][ T8228] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2166.812789][ T8231] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.10709'. [ 2166.847423][ T8231] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2167.284855][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10714'. [ 2167.316639][ T8249] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10715'. [ 2167.336909][ T8249] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2167.356052][ T8256] FAULT_INJECTION: forcing a failure. [ 2167.356052][ T8256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2167.387952][ T8256] CPU: 0 PID: 8256 Comm: syz.1.10718 Not tainted syzkaller #0 [ 2167.395515][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2167.405785][ T8256] Call Trace: [ 2167.409100][ T8256] [ 2167.412157][ T8256] dump_stack_lvl+0x188/0x24e [ 2167.416905][ T8256] ? show_regs_print_info+0x12/0x12 [ 2167.422165][ T8256] ? load_image+0x410/0x410 [ 2167.426810][ T8256] ? __lock_acquire+0x7ea0/0x7ea0 [ 2167.431889][ T8256] should_fail_ex+0x390/0x4c0 [ 2167.435115][ T8249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2167.436709][ T8256] _copy_from_user+0x2c/0x170 [ 2167.436745][ T8256] dev_ethtool+0xc2/0x12f0 [ 2167.436788][ T8256] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2167.467326][ T8256] ? __lock_acquire+0x7ea0/0x7ea0 [ 2167.472433][ T8256] ? __kmem_cache_free+0xb6/0x200 [ 2167.477524][ T8256] ? full_name_hash+0x8e/0xe0 [ 2167.482254][ T8256] ? dev_load+0x1d/0x1e0 [ 2167.486655][ T8256] ? dev_load+0x1d/0x1e0 [ 2167.490944][ T8256] dev_ioctl+0x474/0xe80 [ 2167.495248][ T8256] sock_do_ioctl+0x245/0x320 [ 2167.499907][ T8256] ? sock_show_fdinfo+0xb0/0xb0 [ 2167.504819][ T8256] sock_ioctl+0x48a/0x700 [ 2167.509284][ T8256] ? sock_poll+0x420/0x420 [ 2167.513754][ T8256] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2167.518740][ T8256] ? security_file_ioctl+0x7c/0xa0 [ 2167.523901][ T8256] ? sock_poll+0x420/0x420 [ 2167.528393][ T8256] __se_sys_ioctl+0xfa/0x170 [ 2167.533046][ T8256] do_syscall_64+0x4c/0xa0 [ 2167.537509][ T8256] ? clear_bhb_loop+0x60/0xb0 [ 2167.542232][ T8256] ? clear_bhb_loop+0x60/0xb0 [ 2167.546967][ T8256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2167.552912][ T8256] RIP: 0033:0x7f79f459e199 [ 2167.557545][ T8256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2167.577214][ T8256] RSP: 002b:00007f79f53ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2167.585684][ T8256] RAX: ffffffffffffffda RBX: 00007f79f4825fa0 RCX: 00007f79f459e199 [ 2167.593735][ T8256] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2167.601754][ T8256] RBP: 00007f79f53ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2167.609797][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2167.617822][ T8256] R13: 00007f79f4826038 R14: 00007f79f4825fa0 R15: 00007ffcf44290a8 [ 2167.625867][ T8256] [ 2169.102720][T29860] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2169.363953][ T8288] netlink: 6071 bytes leftover after parsing attributes in process `syz.0.10731'. [ 2169.392259][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10732'. [ 2169.460760][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2169.494463][ T8291] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10728'. [ 2169.612873][ T8282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2170.599184][ T8313] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.10740'. [ 2170.634194][ T8317] FAULT_INJECTION: forcing a failure. [ 2170.634194][ T8317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2170.647835][ T8317] CPU: 0 PID: 8317 Comm: syz.3.10742 Not tainted syzkaller #0 [ 2170.655391][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2170.665495][ T8317] Call Trace: [ 2170.668902][ T8317] [ 2170.671871][ T8317] dump_stack_lvl+0x188/0x24e [ 2170.676608][ T8317] ? show_regs_print_info+0x12/0x12 [ 2170.681890][ T8317] ? load_image+0x410/0x410 [ 2170.686488][ T8317] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2170.691637][ T8317] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2170.696914][ T8317] ? lockdep_hardirqs_on+0x94/0x140 [ 2170.702222][ T8317] should_fail_ex+0x390/0x4c0 [ 2170.707101][ T8317] copy_page_from_iter_atomic+0x21d/0x12e0 [ 2170.713051][ T8317] ? pipe_zero+0x140/0x140 [ 2170.717570][ T8317] ? PageHeadHuge+0x8e/0x1c0 [ 2170.722248][ T8317] ? shmem_write_begin+0x1b4/0x3f0 [ 2170.727464][ T8317] generic_perform_write+0x34f/0x5c0 [ 2170.732892][ T8317] ? generic_file_direct_write+0x330/0x330 [ 2170.738790][ T8317] ? __file_remove_privs+0x5f0/0x5f0 [ 2170.744154][ T8317] ? rwsem_write_trylock+0x135/0x1c0 [ 2170.749801][ T8317] ? clear_nonspinnable+0x60/0x60 [ 2170.754919][ T8317] ? generic_write_checks_count+0x363/0x440 [ 2170.760925][ T8317] __generic_file_write_iter+0x148/0x2a0 [ 2170.766665][ T8317] generic_file_write_iter+0xab/0x2e0 [ 2170.772133][ T8317] vfs_write+0x482/0x9a0 [ 2170.776458][ T8317] ? file_end_write+0x250/0x250 [ 2170.781396][ T8317] ? __fget_files+0x3fc/0x460 [ 2170.786152][ T8317] ? __fdget_pos+0x2ae/0x360 [ 2170.790787][ T8317] ? ksys_write+0x70/0x260 [ 2170.795263][ T8317] ksys_write+0x14d/0x260 [ 2170.799653][ T8317] ? __ia32_sys_read+0x80/0x80 [ 2170.804673][ T8317] ? lockdep_hardirqs_on+0x94/0x140 [ 2170.809928][ T8317] do_syscall_64+0x4c/0xa0 [ 2170.814481][ T8317] ? clear_bhb_loop+0x60/0xb0 [ 2170.819196][ T8317] ? clear_bhb_loop+0x60/0xb0 [ 2170.823918][ T8317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2170.829848][ T8317] RIP: 0033:0x7fafc5d9e199 [ 2170.834301][ T8317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2170.854491][ T8317] RSP: 002b:00007fafc6d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2170.862957][ T8317] RAX: ffffffffffffffda RBX: 00007fafc6025fa0 RCX: 00007fafc5d9e199 [ 2170.870966][ T8317] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000008 [ 2170.878977][ T8317] RBP: 00007fafc6d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 2170.886989][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2170.894995][ T8317] R13: 00007fafc6026038 R14: 00007fafc6025fa0 R15: 00007ffcb8c92598 [ 2170.903052][ T8317] [ 2171.223930][ T8324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10744'. [ 2171.278753][ T8324] netlink: 'syz.2.10744': attribute type 10 has an invalid length. [ 2171.570086][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10751'. [ 2171.951489][ T8347] netlink: 'syz.0.10753': attribute type 21 has an invalid length. [ 2171.993258][ T8347] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10753'. [ 2172.663574][ T8365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10757'. [ 2173.038793][ T8368] netlink: 'syz.0.10759': attribute type 21 has an invalid length. [ 2173.064186][ T8368] netlink: 'syz.0.10759': attribute type 1 has an invalid length. [ 2173.517724][ T8383] netlink: 'syz.1.10761': attribute type 12 has an invalid length. [ 2173.695515][ T8383] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10761'. [ 2173.855162][ T8379] netlink: 'syz.1.10761': attribute type 13 has an invalid length. [ 2173.915101][ T8379] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10761'. [ 2174.026645][ T8379] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2174.118311][ T8399] device lo entered promiscuous mode [ 2174.143069][ T8399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2174.209291][ T8403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2174.499416][ T8412] FAULT_INJECTION: forcing a failure. [ 2174.499416][ T8412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2174.541210][ T8412] CPU: 0 PID: 8412 Comm: syz.3.10773 Not tainted syzkaller #0 [ 2174.548767][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2174.558963][ T8412] Call Trace: [ 2174.562294][ T8412] [ 2174.565272][ T8412] dump_stack_lvl+0x188/0x24e [ 2174.569979][ T8412] ? show_regs_print_info+0x12/0x12 [ 2174.575201][ T8412] ? load_image+0x410/0x410 [ 2174.579919][ T8412] ? __lock_acquire+0x7ea0/0x7ea0 [ 2174.584981][ T8412] should_fail_ex+0x390/0x4c0 [ 2174.589763][ T8412] _copy_from_user+0x2c/0x170 [ 2174.594485][ T8412] dev_ethtool+0xc2/0x12f0 [ 2174.598942][ T8412] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2174.605220][ T8412] ? __lock_acquire+0x7ea0/0x7ea0 [ 2174.610369][ T8412] ? __kmem_cache_free+0xb6/0x200 [ 2174.615458][ T8412] ? full_name_hash+0x8e/0xe0 [ 2174.620161][ T8412] ? dev_load+0x1d/0x1e0 [ 2174.624562][ T8412] ? dev_load+0x1d/0x1e0 [ 2174.628860][ T8412] dev_ioctl+0x474/0xe80 [ 2174.633148][ T8412] sock_do_ioctl+0x245/0x320 [ 2174.637776][ T8412] ? sock_show_fdinfo+0xb0/0xb0 [ 2174.642668][ T8412] sock_ioctl+0x48a/0x700 [ 2174.647028][ T8412] ? sock_poll+0x420/0x420 [ 2174.651479][ T8412] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2174.656447][ T8412] ? security_file_ioctl+0x7c/0xa0 [ 2174.661590][ T8412] ? sock_poll+0x420/0x420 [ 2174.666066][ T8412] __se_sys_ioctl+0xfa/0x170 [ 2174.670704][ T8412] do_syscall_64+0x4c/0xa0 [ 2174.675158][ T8412] ? clear_bhb_loop+0x60/0xb0 [ 2174.680010][ T8412] ? clear_bhb_loop+0x60/0xb0 [ 2174.684764][ T8412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2174.690703][ T8412] RIP: 0033:0x7fafc5d9e199 [ 2174.695232][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2174.714872][ T8412] RSP: 002b:00007fafc6d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2174.723420][ T8412] RAX: ffffffffffffffda RBX: 00007fafc6025fa0 RCX: 00007fafc5d9e199 [ 2174.731435][ T8412] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2174.739434][ T8412] RBP: 00007fafc6d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 2174.747451][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2174.755484][ T8412] R13: 00007fafc6026038 R14: 00007fafc6025fa0 R15: 00007ffcb8c92598 [ 2174.763519][ T8412] [ 2174.965177][ T8419] netlink: 'syz.4.10776': attribute type 10 has an invalid length. [ 2175.344753][ T8419] 8021q: adding VLAN 0 to HW filter on device team0 [ 2175.395658][ T8419] bond0: (slave team0): Enslaving as an active interface with an up link [ 2175.889310][ T8437] __nla_validate_parse: 1 callbacks suppressed [ 2175.889331][ T8437] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10783'. [ 2175.931764][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2175.960109][ T8437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2176.488989][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10786'. [ 2176.527013][ T8453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10788'. [ 2176.572253][ T8453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10788'. [ 2176.950499][ T8461] netlink: 'syz.3.10791': attribute type 10 has an invalid length. [ 2176.973819][ T8461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10791'. [ 2177.035108][ T8461] device ipvlan1 entered promiscuous mode [ 2177.154644][ T8461] bridge0: port 3(ipvlan1) entered blocking state [ 2177.172798][ T8461] bridge0: port 3(ipvlan1) entered disabled state [ 2177.267421][ T8461] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2179.401180][ T8500] FAULT_INJECTION: forcing a failure. [ 2179.401180][ T8500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2179.445412][ T8500] CPU: 1 PID: 8500 Comm: syz.3.10804 Not tainted syzkaller #0 [ 2179.452977][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2179.463078][ T8500] Call Trace: [ 2179.466395][ T8500] [ 2179.469359][ T8500] dump_stack_lvl+0x188/0x24e [ 2179.474092][ T8500] ? show_regs_print_info+0x12/0x12 [ 2179.479339][ T8500] ? load_image+0x410/0x410 [ 2179.483902][ T8500] ? __lock_acquire+0x7ea0/0x7ea0 [ 2179.488977][ T8500] ? __lock_acquire+0x1359/0x7ea0 [ 2179.494120][ T8500] should_fail_ex+0x390/0x4c0 [ 2179.498855][ T8500] prepare_alloc_pages+0x1e1/0x5b0 [ 2179.504033][ T8500] __alloc_pages+0x130/0x4f0 [ 2179.508683][ T8500] ? zone_statistics+0x170/0x170 [ 2179.513679][ T8500] ? verify_lock_unused+0x140/0x140 [ 2179.518959][ T8500] __folio_alloc+0xe/0x30 [ 2179.523350][ T8500] vma_alloc_folio+0x499/0x900 [ 2179.528200][ T8500] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 2179.534242][ T8500] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 2179.540048][ T8500] ? shmem_replace_folio+0xdc0/0xdc0 [ 2179.545419][ T8500] ? xas_load+0x119/0x140 [ 2179.549886][ T8500] ? __filemap_get_folio+0x10f/0xde0 [ 2179.555233][ T8500] ? __filemap_get_folio+0xb43/0xde0 [ 2179.560578][ T8500] ? __filemap_get_folio+0x10f/0xde0 [ 2179.565937][ T8500] ? page_cache_prev_miss+0x380/0x380 [ 2179.571366][ T8500] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2179.576454][ T8500] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2179.581702][ T8500] ? lockdep_hardirqs_on+0x94/0x140 [ 2179.586992][ T8500] shmem_get_folio_gfp+0x1439/0x35e0 [ 2179.592371][ T8500] shmem_write_begin+0xee/0x3f0 [ 2179.597322][ T8500] generic_perform_write+0x2fa/0x5c0 [ 2179.602772][ T8500] ? generic_file_direct_write+0x330/0x330 [ 2179.608950][ T8500] ? __file_remove_privs+0x5f0/0x5f0 [ 2179.614570][ T8500] ? rwsem_write_trylock+0x135/0x1c0 [ 2179.620214][ T8500] ? clear_nonspinnable+0x60/0x60 [ 2179.626264][ T8500] ? generic_write_checks_count+0x363/0x440 [ 2179.633134][ T8500] __generic_file_write_iter+0x148/0x2a0 [ 2179.639117][ T8500] generic_file_write_iter+0xab/0x2e0 [ 2179.645194][ T8500] vfs_write+0x482/0x9a0 [ 2179.649606][ T8500] ? file_end_write+0x250/0x250 [ 2179.654698][ T8500] ? __fget_files+0x3fc/0x460 [ 2179.659441][ T8500] ? __fdget_pos+0x2ae/0x360 [ 2179.664094][ T8500] ? ksys_write+0x70/0x260 [ 2179.668576][ T8500] ksys_write+0x14d/0x260 [ 2179.673071][ T8500] ? __ia32_sys_read+0x80/0x80 [ 2179.677916][ T8500] ? lockdep_hardirqs_on+0x94/0x140 [ 2179.683185][ T8500] do_syscall_64+0x4c/0xa0 [ 2179.687748][ T8500] ? clear_bhb_loop+0x60/0xb0 [ 2179.691793][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10805'. [ 2179.692455][ T8500] ? clear_bhb_loop+0x60/0xb0 [ 2179.707221][ T8500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2179.713305][ T8500] RIP: 0033:0x7fafc5d9e199 [ 2179.718029][ T8500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2179.741275][ T8500] RSP: 002b:00007fafc6d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2179.749884][ T8500] RAX: ffffffffffffffda RBX: 00007fafc6025fa0 RCX: 00007fafc5d9e199 [ 2179.758248][ T8500] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000008 [ 2179.766705][ T8500] RBP: 00007fafc6d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 2179.774983][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2179.782999][ T8500] R13: 00007fafc6026038 R14: 00007fafc6025fa0 R15: 00007ffcb8c92598 [ 2179.791604][ T8500] [ 2179.993090][T29852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2181.478422][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10822'. [ 2182.422578][ T8592] FAULT_INJECTION: forcing a failure. [ 2182.422578][ T8592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2182.511365][ T8592] CPU: 0 PID: 8592 Comm: syz.2.10830 Not tainted syzkaller #0 [ 2182.519106][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2182.529304][ T8592] Call Trace: [ 2182.532634][ T8592] [ 2182.535606][ T8592] dump_stack_lvl+0x188/0x24e [ 2182.540347][ T8592] ? show_regs_print_info+0x12/0x12 [ 2182.545700][ T8592] ? load_image+0x410/0x410 [ 2182.550540][ T8592] ? __lock_acquire+0x7ea0/0x7ea0 [ 2182.555671][ T8592] should_fail_ex+0x390/0x4c0 [ 2182.560427][ T8592] _copy_from_user+0x2c/0x170 [ 2182.565261][ T8592] ethtool_set_link_ksettings+0x168/0x460 [ 2182.571051][ T8592] ? rcu_is_watching+0x11/0xa0 [ 2182.575886][ T8592] ? ethtool_get_link_ksettings+0x400/0x400 [ 2182.581845][ T8592] ? aa_get_newest_label+0xf9/0x5b0 [ 2182.587152][ T8592] ? end_current_label_crit_section+0x170/0x170 [ 2182.593483][ T8592] ? bpf_lsm_capable+0x5/0x10 [ 2182.598311][ T8592] ? security_capable+0x85/0xb0 [ 2182.603312][ T8592] dev_ethtool+0xd72/0x12f0 [ 2182.607885][ T8592] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2182.614202][ T8592] ? __lock_acquire+0x7ea0/0x7ea0 [ 2182.619291][ T8592] ? __kmem_cache_free+0xb6/0x200 [ 2182.624383][ T8592] ? full_name_hash+0x8e/0xe0 [ 2182.629244][ T8592] ? dev_load+0x1d/0x1e0 [ 2182.633545][ T8592] ? dev_load+0x1d/0x1e0 [ 2182.637848][ T8592] dev_ioctl+0x474/0xe80 [ 2182.642216][ T8592] sock_do_ioctl+0x245/0x320 [ 2182.646868][ T8592] ? sock_show_fdinfo+0xb0/0xb0 [ 2182.651794][ T8592] sock_ioctl+0x48a/0x700 [ 2182.656181][ T8592] ? sock_poll+0x420/0x420 [ 2182.660676][ T8592] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2182.665869][ T8592] ? security_file_ioctl+0x7c/0xa0 [ 2182.671051][ T8592] ? sock_poll+0x420/0x420 [ 2182.675529][ T8592] __se_sys_ioctl+0xfa/0x170 [ 2182.680183][ T8592] do_syscall_64+0x4c/0xa0 [ 2182.684658][ T8592] ? clear_bhb_loop+0x60/0xb0 [ 2182.689386][ T8592] ? clear_bhb_loop+0x60/0xb0 [ 2182.694243][ T8592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2182.700193][ T8592] RIP: 0033:0x7fded3b9e199 [ 2182.704662][ T8592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2182.724366][ T8592] RSP: 002b:00007fded1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2182.732926][ T8592] RAX: ffffffffffffffda RBX: 00007fded3e25fa0 RCX: 00007fded3b9e199 [ 2182.740950][ T8592] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2182.748977][ T8592] RBP: 00007fded1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2182.757004][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2182.765034][ T8592] R13: 00007fded3e26038 R14: 00007fded3e25fa0 R15: 00007ffcf2082c98 [ 2182.773085][ T8592] [ 2183.182494][ T8560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2185.251897][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10841'. [ 2185.321518][ T8619] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10843'. [ 2185.347070][ T8619] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2185.451045][ T8619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2186.191919][ T8644] tun0: tun_chr_ioctl cmd 1074812117 [ 2186.238763][ T8644] tun0: tun_chr_ioctl cmd 1074025698 [ 2187.186385][ T8663] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.10858'. [ 2187.530929][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10860'. [ 2190.409419][ T8709] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10873'. [ 2191.252358][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10877'. [ 2191.613686][ T8724] netlink: 'syz.3.10880': attribute type 39 has an invalid length. [ 2192.630394][ T8731] netlink: 'syz.1.10883': attribute type 2 has an invalid length. [ 2192.684513][ T8737] netlink: 'syz.2.10884': attribute type 3 has an invalid length. [ 2193.774172][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10893'. [ 2193.879658][ T8767] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.10892'. [ 2194.064205][T21839] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2194.622233][ T8779] netlink: 'syz.0.10899': attribute type 10 has an invalid length. [ 2194.640774][ T8779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10899'. [ 2194.683492][ T8779] device dummy0 entered promiscuous mode [ 2194.690182][ T8779] bridge0: port 1(dummy0) entered blocking state [ 2194.771801][ T8779] bridge0: port 1(dummy0) entered disabled state [ 2194.779932][ T8779] bridge0: port 1(dummy0) entered blocking state [ 2194.786699][ T8779] bridge0: port 1(dummy0) entered listening state [ 2195.138193][ T8792] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.10902'. [ 2195.166744][ T8791] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.10902'. [ 2195.207698][ T8775] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10897'. [ 2195.223486][ T8775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2195.331196][ T8775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2195.788050][ T8813] ÿÿÿÿÿÿ: renamed from vlan1 [ 2195.885611][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10911'. [ 2196.698960][ T8825] FAULT_INJECTION: forcing a failure. [ 2196.698960][ T8825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2196.712283][ T8825] CPU: 1 PID: 8825 Comm: syz.4.10914 Not tainted syzkaller #0 [ 2196.719800][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2196.730863][ T8825] Call Trace: [ 2196.734171][ T8825] [ 2196.737213][ T8825] dump_stack_lvl+0x188/0x24e [ 2196.741934][ T8825] ? show_regs_print_info+0x12/0x12 [ 2196.747155][ T8825] ? load_image+0x410/0x410 [ 2196.751694][ T8825] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2196.756862][ T8825] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2196.762105][ T8825] ? lockdep_hardirqs_on+0x94/0x140 [ 2196.767523][ T8825] should_fail_ex+0x390/0x4c0 [ 2196.772258][ T8825] copy_page_from_iter_atomic+0x21d/0x12e0 [ 2196.778126][ T8825] ? pipe_zero+0x140/0x140 [ 2196.782582][ T8825] ? PageHeadHuge+0x8e/0x1c0 [ 2196.787945][ T8825] ? shmem_write_begin+0x1b4/0x3f0 [ 2196.793120][ T8825] generic_perform_write+0x34f/0x5c0 [ 2196.798457][ T8825] ? generic_file_direct_write+0x330/0x330 [ 2196.804298][ T8825] ? __file_remove_privs+0x5f0/0x5f0 [ 2196.809616][ T8825] ? rwsem_write_trylock+0x135/0x1c0 [ 2196.815030][ T8825] ? clear_nonspinnable+0x60/0x60 [ 2196.820111][ T8825] ? generic_write_checks_count+0x363/0x440 [ 2196.826139][ T8825] __generic_file_write_iter+0x148/0x2a0 [ 2196.831813][ T8825] generic_file_write_iter+0xab/0x2e0 [ 2196.837571][ T8825] vfs_write+0x482/0x9a0 [ 2196.841851][ T8825] ? file_end_write+0x250/0x250 [ 2196.846914][ T8825] ? __fget_files+0x3fc/0x460 [ 2196.851631][ T8825] ? __fdget_pos+0x2ae/0x360 [ 2196.856254][ T8825] ? ksys_write+0x70/0x260 [ 2196.860701][ T8825] ksys_write+0x14d/0x260 [ 2196.865155][ T8825] ? __ia32_sys_read+0x80/0x80 [ 2196.870133][ T8825] ? lockdep_hardirqs_on+0x94/0x140 [ 2196.875624][ T8825] do_syscall_64+0x4c/0xa0 [ 2196.880153][ T8825] ? clear_bhb_loop+0x60/0xb0 [ 2196.884852][ T8825] ? clear_bhb_loop+0x60/0xb0 [ 2196.889804][ T8825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2196.895789][ T8825] RIP: 0033:0x7fa03259e199 [ 2196.900236][ T8825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2196.920133][ T8825] RSP: 002b:00007fa0334b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2196.928569][ T8825] RAX: ffffffffffffffda RBX: 00007fa032825fa0 RCX: 00007fa03259e199 [ 2196.936562][ T8825] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000008 [ 2196.944664][ T8825] RBP: 00007fa0334b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2196.952658][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2196.960745][ T8825] R13: 00007fa032826038 R14: 00007fa032825fa0 R15: 00007ffc36ae8818 [ 2196.968755][ T8825] [ 2198.496024][ T8859] netlink: 'syz.4.10925': attribute type 21 has an invalid length. [ 2198.546054][ T8859] netlink: 'syz.4.10925': attribute type 5 has an invalid length. [ 2198.644518][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10926'. [ 2199.767006][ T8886] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.10934'. [ 2199.870012][ T8893] netlink: 'syz.0.10936': attribute type 4 has an invalid length. [ 2199.985384][ T8893] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10936'. [ 2201.104607][T29855] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2201.118607][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10947'. [ 2202.625312][ T8948] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10954'. [ 2202.635510][ T8948] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2202.687081][ T8948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2203.733126][ T8977] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10966'. [ 2203.789032][ T8982] netlink: 'syz.3.10968': attribute type 10 has an invalid length. [ 2203.814000][ T8982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10968'. [ 2203.838681][ T8982] batman_adv: batadv0: Adding interface: veth0_vlan [ 2203.879687][ T8982] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2204.006472][ T8982] batman_adv: batadv0: Interface activated: veth0_vlan [ 2204.070033][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10965'. [ 2205.045889][ T9016] netlink: 'syz.3.10978': attribute type 10 has an invalid length. [ 2205.074029][ T9016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10978'. [ 2205.123660][ T9016] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2205.159986][ T9016] batman_adv: batadv0: Removing interface: veth0_vlan [ 2205.185387][ T9016] bridge0: port 3(veth0_vlan) entered blocking state [ 2205.222021][ T9016] bridge0: port 3(veth0_vlan) entered disabled state [ 2205.248763][ T9016] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2205.435690][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10981'. [ 2205.764569][ T9033] netlink: 22 bytes leftover after parsing attributes in process `syz.4.10984'. [ 2205.888127][ T9033] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10984'. [ 2207.996195][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10997'. [ 2209.772659][ T9100] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11007'. [ 2209.791867][ T9100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2210.063872][ C1] bridge0: port 1(dummy0) entered learning state [ 2210.985221][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11016'. [ 2211.755393][ T9145] device syzkaller0 entered promiscuous mode [ 2211.981771][T21839] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2212.645689][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11028'. [ 2212.989452][ T9179] netlink: 'syz.1.11033': attribute type 29 has an invalid length. [ 2212.997794][ T9180] netlink: 'syz.1.11033': attribute type 29 has an invalid length. [ 2213.013962][ T9179] netlink: 'syz.1.11033': attribute type 29 has an invalid length. [ 2213.023432][ T9180] netlink: 'syz.1.11033': attribute type 29 has an invalid length. [ 2213.050253][ T9179] netlink: 'syz.1.11033': attribute type 29 has an invalid length. [ 2213.541442][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11042'. [ 2213.863686][ T9206] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11044'. [ 2214.339825][ T9219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11049'. [ 2214.443211][ T9221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11049'. [ 2215.498783][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11055'. [ 2215.573302][ T9253] netlink: 'syz.4.11057': attribute type 29 has an invalid length. [ 2215.611508][ T9253] netlink: 'syz.4.11057': attribute type 29 has an invalid length. [ 2215.650898][ T9258] netlink: 'syz.4.11057': attribute type 29 has an invalid length. [ 2215.699560][ T9253] netlink: 'syz.4.11057': attribute type 29 has an invalid length. [ 2215.803080][ T9264] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11061'. [ 2215.818617][ T9264] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11061'. [ 2215.838481][T29855] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2215.851513][ T9264] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11061'. [ 2216.393463][ T9268] __nla_validate_parse: 1 callbacks suppressed [ 2216.393505][ T9268] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11059'. [ 2216.471886][ T9268] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2216.621095][ T9268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2217.667954][ T9299] netlink: 'syz.0.11072': attribute type 2 has an invalid length. [ 2217.856902][ T9299] device .*! entered promiscuous mode [ 2217.920015][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11073'. [ 2219.928926][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11088'. [ 2220.467854][ T9358] netlink: 'syz.3.11090': attribute type 29 has an invalid length. [ 2220.533457][ T9358] netlink: 'syz.3.11090': attribute type 29 has an invalid length. [ 2220.711609][ T9362] netlink: 'syz.3.11090': attribute type 29 has an invalid length. [ 2220.751510][ T9364] netlink: 'syz.3.11090': attribute type 29 has an invalid length. [ 2221.542857][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11100'. [ 2221.584110][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.604610][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.749568][ T9381] netlink: 'syz.4.11100': attribute type 21 has an invalid length. [ 2221.821397][ T9381] netlink: 'syz.4.11100': attribute type 4 has an invalid length. [ 2221.971444][ T9381] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11100'. [ 2222.016751][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11102'. [ 2222.925124][ T9417] netlink: 'syz.3.11107': attribute type 39 has an invalid length. [ 2223.985748][ T9434] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11113'. [ 2224.028173][ T9434] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2224.156376][ T9434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2224.352744][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11115'. [ 2224.447551][ T9441] netlink: 'syz.1.11117': attribute type 1 has an invalid length. [ 2224.492139][ T9441] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11117'. [ 2225.432761][ C1] bridge0: port 1(dummy0) entered forwarding state [ 2225.439460][ C1] bridge0: topology change detected, propagating [ 2225.877134][ T9471] netlink: 'syz.3.11127': attribute type 21 has an invalid length. [ 2226.085600][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11129'. [ 2226.289232][ T9481] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11131'. [ 2226.400170][ T9486] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11131'. [ 2226.824336][ T9500] netlink: 'syz.1.11135': attribute type 10 has an invalid length. [ 2226.864289][ T9502] netlink: 'syz.3.11137': attribute type 11 has an invalid length. [ 2226.892037][ T9502] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11137'. [ 2227.851880][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2228.762130][T24873] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 2229.017355][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11143'. [ 2230.297205][ T9530] device syzkaller0 entered promiscuous mode [ 2230.781532][T32224] Bluetooth: hci3: command 0x0409 tx timeout [ 2233.103874][T29867] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2233.957346][ T9563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2233.964791][ T9563] IPv6: NLM_F_CREATE should be set when creating new route [ 2233.972245][ T9563] IPv6: NLM_F_CREATE should be set when creating new route [ 2233.979552][ T9563] IPv6: NLM_F_CREATE should be set when creating new route [ 2234.282460][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11158'. [ 2234.778842][ T9588] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11166'. [ 2234.805258][ T9588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2234.925175][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11170'. [ 2235.309108][ T9611] netlink: 'syz.0.11175': attribute type 21 has an invalid length. [ 2235.345552][ T9611] IPv6: NLM_F_CREATE should be specified when creating new route [ 2236.400818][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11186'. [ 2236.642497][ T9645] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.11189'. [ 2237.019519][ T9664] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11193'. [ 2237.111624][ T9668] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11197'. [ 2237.120940][ T9668] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11197'. [ 2237.200349][ T9668] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11197'. [ 2237.234459][ T9668] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11197'. [ 2237.953052][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2237.983292][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.015259][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2238.061715][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.162014][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2238.217522][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2238.261863][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2238.281513][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2239.498272][ T9729] netlink: 'syz.3.11219': attribute type 2 has an invalid length. [ 2239.522252][ T9732] __nla_validate_parse: 3 callbacks suppressed [ 2239.522275][ T9732] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11218'. [ 2239.612732][ T9729] device .*! entered promiscuous mode [ 2239.627903][ T9732] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11218'. [ 2239.710780][ T9739] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11218'. [ 2239.778391][ T9740] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11221'. [ 2239.805682][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2239.869705][ T9740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2239.937132][ T9732] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11218'. [ 2240.385945][ T9759] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.11227'. [ 2240.662352][ T9763] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11229'. [ 2240.684419][ T9763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2240.732235][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11230'. [ 2240.988289][ T9773] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11232'. [ 2241.081974][ T9774] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11234'. [ 2241.117307][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2241.192444][ T9774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2242.429395][ T9808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2242.692230][ T9812] netlink: 'syz.4.11245': attribute type 2 has an invalid length. [ 2242.901036][ T9812] device .*! entered promiscuous mode [ 2246.193414][ T9877] __nla_validate_parse: 7 callbacks suppressed [ 2246.193510][ T9877] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11267'. [ 2246.309913][ T9877] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2246.409213][ T9877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2246.424615][ T9885] netlink: 'syz.1.11266': attribute type 2 has an invalid length. [ 2246.495458][ T9885] device .*! entered promiscuous mode [ 2247.085192][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11275'. [ 2247.200973][T29856] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2249.442744][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11290'. [ 2250.936455][ T9970] netlink: 'syz.1.11298': attribute type 2 has an invalid length. [ 2252.092604][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11304'. [ 2266.897003][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11329'. [ 2267.166370][T10076] netlink: 22 bytes leftover after parsing attributes in process `syz.3.11330'. [ 2269.572070][T10088] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11334'. [ 2269.692694][T10094] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11337'. [ 2269.736975][T10094] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2269.884318][T10094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2273.861694][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11348'. [ 2274.569662][T24873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2274.581274][T24873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2274.590823][T24873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2274.619009][T24873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2274.630307][T24873] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2274.638808][T24873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2275.073840][T10145] FAULT_INJECTION: forcing a failure. [ 2275.073840][T10145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2275.133237][T10145] CPU: 1 PID: 10145 Comm: syz.2.11352 Not tainted syzkaller #0 [ 2275.146476][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2275.159735][T10145] Call Trace: [ 2275.163169][T10145] [ 2275.166443][T10145] dump_stack_lvl+0x188/0x24e [ 2275.173808][T10145] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2275.180943][T10145] ? show_regs_print_info+0x12/0x12 [ 2275.187760][T10145] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2275.194075][T10145] should_fail_ex+0x390/0x4c0 [ 2275.199310][T10145] _copy_from_user+0x2c/0x170 [ 2275.205072][T10145] dev_ethtool+0xc2/0x12f0 [ 2275.210893][T10145] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2275.218722][T10145] ? __lock_acquire+0x7ea0/0x7ea0 [ 2275.224784][T10145] ? full_name_hash+0x8e/0xe0 [ 2275.229566][T10145] ? dev_load+0x1d/0x1e0 [ 2275.233885][T10145] ? dev_load+0x1d/0x1e0 [ 2275.238188][T10145] dev_ioctl+0x474/0xe80 [ 2275.242508][T10145] sock_do_ioctl+0x245/0x320 [ 2275.247376][T10145] ? sock_show_fdinfo+0xb0/0xb0 [ 2275.252322][T10145] sock_ioctl+0x48a/0x700 [ 2275.256705][T10145] ? sock_poll+0x420/0x420 [ 2275.261191][T10145] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2275.266299][T10145] ? security_file_ioctl+0x7c/0xa0 [ 2275.271920][T10145] ? sock_poll+0x420/0x420 [ 2275.277199][T10145] __se_sys_ioctl+0xfa/0x170 [ 2275.282186][T10145] do_syscall_64+0x4c/0xa0 [ 2275.288354][T10145] ? clear_bhb_loop+0x60/0xb0 [ 2275.293584][T10145] ? clear_bhb_loop+0x60/0xb0 [ 2275.298425][T10145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2275.305204][T10145] RIP: 0033:0x7fded3b9e199 [ 2275.310144][T10145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2275.330502][T10145] RSP: 002b:00007fded1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2275.340009][T10145] RAX: ffffffffffffffda RBX: 00007fded3e25fa0 RCX: 00007fded3b9e199 [ 2275.348747][T10145] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000023 [ 2275.357222][T10145] RBP: 00007fded1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2275.365979][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2275.375499][T10145] R13: 00007fded3e26038 R14: 00007fded3e25fa0 R15: 00007ffcf2082c98 [ 2275.384254][T10145] [ 2275.711818][T10159] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.752101][T10138] chnl_net:caif_netlink_parms(): no params data found [ 2275.793647][T10153] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11354'. [ 2276.078635][T10153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2276.127760][T10153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2276.171777][T10153] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 2276.182235][T10153] bond0 (unregistering): Released all slaves [ 2276.339724][ T8562] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.380946][T10138] bridge0: port 1(bridge_slave_0) entered blocking state [ 2276.389386][T10138] bridge0: port 1(bridge_slave_0) entered disabled state [ 2276.408731][T10138] device bridge_slave_0 entered promiscuous mode [ 2276.440207][ T8562] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.467053][T10138] bridge0: port 2(bridge_slave_1) entered blocking state [ 2276.474781][T10138] bridge0: port 2(bridge_slave_1) entered disabled state [ 2276.483619][T10138] device bridge_slave_1 entered promiscuous mode [ 2276.620787][ T8562] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.678750][T10138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2276.701626][T24873] Bluetooth: hci4: command 0x0409 tx timeout [ 2276.727004][T10138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2276.904253][ T8562] batman_adv: batadv0: Removing interface: netdevsim0 [ 2276.976951][ T8562] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2277.224276][T10138] team0: Port device team_slave_0 added [ 2277.273461][T10138] team0: Port device team_slave_1 added [ 2277.465628][T10138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2277.472855][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.511318][T10138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2277.545123][T10138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2277.561318][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.621408][T10138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2277.689779][ T8562] device .*! left promiscuous mode [ 2277.727154][T10138] device hsr_slave_0 entered promiscuous mode [ 2277.751662][T10138] device hsr_slave_1 entered promiscuous mode [ 2277.758492][T10138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2277.781455][T10138] Cannot create hsr debugfs directory [ 2278.324582][T10138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2278.396301][T10138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2278.496040][T10138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2278.508525][T10138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2278.791409][T24873] Bluetooth: hci4: command 0x041b tx timeout [ 2278.892885][T10138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2278.964939][T10138] 8021q: adding VLAN 0 to HW filter on device team0 [ 2278.994014][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2279.003567][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2279.044271][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2279.054308][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2279.075341][T21829] bridge0: port 1(bridge_slave_0) entered blocking state [ 2279.082701][T21829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2279.105880][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2279.115110][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2279.132277][T21829] bridge0: port 2(bridge_slave_1) entered blocking state [ 2279.139478][T21829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2279.161803][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2279.182851][ T8559] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2279.226162][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2279.242236][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2279.264517][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2279.290618][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2279.312725][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2279.373454][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2279.410929][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2279.469162][T10138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2279.517679][T10138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2279.557829][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2279.568155][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2279.586996][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2279.618127][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2279.642982][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2280.167084][ T8562] device bond0 left promiscuous mode [ 2280.211394][ T8562] device bond_slave_0 left promiscuous mode [ 2280.217775][ T8562] device bond_slave_1 left promiscuous mode [ 2280.231845][ T8562] : port 1(bond0) entered disabled state [ 2280.301087][ T8562] device hsr_slave_0 left promiscuous mode [ 2280.323928][ T8562] device hsr_slave_1 left promiscuous mode [ 2280.331810][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2280.339293][ T8562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2280.392421][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2280.399943][ T8562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2280.469935][ T8562] bridge0: port 1(dummy0) entered disabled state [ 2280.515046][ T8562] device bridge_slave_1 left promiscuous mode [ 2280.527742][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.571426][ T8562] device veth1_macvtap left promiscuous mode [ 2280.577653][ T8562] device veth0_macvtap left promiscuous mode [ 2280.867548][T24873] Bluetooth: hci4: command 0x040f tx timeout [ 2281.476769][ T8562] team0 (unregistering): Port device team_slave_1 removed [ 2281.534681][ T8562] team0 (unregistering): Port device team_slave_0 removed [ 2281.589402][ T8562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2281.646785][ T8562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2282.019605][ T8562] bond0 (unregistering): Released all slaves [ 2282.119243][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2282.133908][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2282.153465][T10138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2282.789670][T29856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2282.807102][T29856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2282.850722][T29856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2282.864016][T29856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2282.877825][T10138] device veth0_vlan entered promiscuous mode [ 2282.894071][T29856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2282.909463][T29856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2282.928946][T10138] device veth1_vlan entered promiscuous mode [ 2282.951399][T24873] Bluetooth: hci4: command 0x0419 tx timeout [ 2282.977846][T29855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2283.003775][T29855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2283.013886][T29855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2283.038310][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.042246][T29855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2283.053263][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.076724][T10138] device veth0_macvtap entered promiscuous mode [ 2283.097538][T10138] device veth1_macvtap entered promiscuous mode [ 2283.131090][T29855] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2283.156460][T29855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2283.185314][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.205421][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.220679][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.238971][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.249271][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.265675][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.280087][T10138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2283.292099][T29855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2283.306979][T29855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2283.333225][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.344218][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.354425][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.365662][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.376440][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.387136][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.397106][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.407779][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.418975][T10138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2283.432590][ T8559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2283.446153][ T8559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2283.458556][T10138] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.468077][T10138] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.477467][T10138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.486818][T10138] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.562571][ T8559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2283.570482][ T8559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2283.595626][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2283.620234][ T8559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2283.635101][ T8559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2283.645210][T21829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2311.183343][ T8562] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2343.181957][ T8559] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2344.463560][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.469924][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2375.182709][T29856] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2397.741582][T32224] Bluetooth: hci4: command 0x0406 tx timeout [ 2405.907700][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.914125][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.181855][T29855] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2439.182418][T29864] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2467.344344][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.350767][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2471.191464][ T8562] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2503.182269][ T8560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2528.785536][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.793137][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2535.181585][T29864] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2567.181533][ T8560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)