last executing test programs: 7m10.727284659s ago: executing program 1 (id=390): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000000701000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r1}, 0x38) 7m3.523919052s ago: executing program 2 (id=436): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m3.411768262s ago: executing program 3 (id=438): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5a8}], 0x10}, 0x406) 7m3.094399964s ago: executing program 2 (id=440): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7m3.001912364s ago: executing program 3 (id=442): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8992, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x2}]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000c3000040000000"], &(0x7f0000000180)='syzkaller\x00', 0x5}, 0x94) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 7m2.953765585s ago: executing program 1 (id=443): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 7m2.899780355s ago: executing program 2 (id=444): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 7m2.819152656s ago: executing program 1 (id=445): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x100) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/157, 0x9d}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000004c00)=""/4047, 0xfcf}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f00000000c0)=""/119, 0x77}, {&(0x7f0000000e00)=""/83, 0x53}, {&(0x7f0000000240)=""/103, 0x67}], 0x8}, 0x2202) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 7m2.523605677s ago: executing program 3 (id=447): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x46, &(0x7f00000000c0)=r0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000700), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) 7m2.441770868s ago: executing program 2 (id=448): perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) 7m2.377940138s ago: executing program 1 (id=449): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 7m2.294802989s ago: executing program 3 (id=451): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x100) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/157, 0x9d}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000004c00)=""/4047, 0xfcf}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f00000000c0)=""/119, 0x77}], 0x6}, 0x0) 7m2.178405019s ago: executing program 2 (id=452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="2705020029ff14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600004000000000805db18f", 0x4b}, {&(0x7f0000000380)="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", 0xee2}], 0x2}, 0x20008010) 7m2.01575015s ago: executing program 1 (id=453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x6, 0x60000000, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x5}, 0x50) 7m1.99383019s ago: executing program 3 (id=454): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xffffff68, &(0x7f0000000040)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 7m1.720351632s ago: executing program 1 (id=455): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m1.357528444s ago: executing program 32 (id=455): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m1.315428694s ago: executing program 2 (id=458): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x9a) write$cgroup_devices(r2, &(0x7f0000000000)={'b', ' *:* ', 'rm\x00'}, 0x9) 7m1.178791795s ago: executing program 33 (id=458): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x9a) write$cgroup_devices(r2, &(0x7f0000000000)={'b', ' *:* ', 'rm\x00'}, 0x9) 7m1.172133005s ago: executing program 3 (id=459): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x81, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x8001}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f00000005c0)="63ec33c9e9b98600000000000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 7m1.066281996s ago: executing program 34 (id=459): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x81, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x8001}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f00000005c0)="63ec33c9e9b98600000000000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 14.243514834s ago: executing program 6 (id=2925): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000001d00)=@in6={0xa, 0xe23, 0xfffffffc, @private1, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x4}], 0x10}, 0xc0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x400002, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000680)={'nicvf0\x00', @multicast}) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="8f00000015006b05c84e21000ab16d8b230675f802000000440002005805530461bc24eeb556a705251e6182149a36c23d1b48dfd8cd81bf9367b098fa51f60a64c9f40800000000", 0x48}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 12.590969235s ago: executing program 6 (id=2926): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000d44ef783eab93d44b373fa8bd8cadbb340e68228000005"], 0x10}, 0x24048800) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf706e105000700810005008100", 0x1c}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800) 12.164418417s ago: executing program 6 (id=2930): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000840)=""/4085, 0xff5}, {0x0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000780)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/82, 0x52}], 0x8}, 0x0) 12.010959778s ago: executing program 6 (id=2932): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006620020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000add1d549850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r1, 0x4, 0x1, 0x9bba, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, r1, 0x19, 0x0, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 11.902222038s ago: executing program 6 (id=2934): r0 = socket$kcm(0x21, 0x2, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x20048890) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="060000000400000006000000000600"], 0x48) (async) r1 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="060000000400000006000000000600"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x9a, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000440), 0x200df000, r1, 0x0, 0xf2}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40004) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40004) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0xbff9}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) (async) socket$kcm(0x2, 0x3, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x2c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x2c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x1000, 0x3, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x1000, 0x3, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c04", 0x41}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c04", 0x41}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) 10.883796724s ago: executing program 6 (id=2935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0ef", 0xeb}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x30) 6.319473362s ago: executing program 4 (id=2951): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x6f, 0x0, 0x2, [0x10]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x50}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0xa00, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="9dbe44f632c72137820ca3215935b741b669af55cdc581eec182ea3d7fcf7232e02142cdc6c5d4acfffd36f914871683b533cdb42cf6be04643044d7991b2fd65403926c8787900e25311dec663a76601cefd1acd496bcc5d507e285d26bd817b736b75780fe981b147295c326ce065bc41e54fdd8e38fc15fe229031899a44ac490a4344a8d18c18420cc020b5bf34595823382201d36b7b882710723bce22b832883ffb74915472c7a167585847478792aee8b4c765e1ec5ca320079cb5d67f2b81f9d514dc93a005fb1513dd764d4bc9cc8266f78e9070b2214069c672c6251ad678c8fe7e846ddf619b31a6f98cb72558f3d919410d16a9abfbc6e856dbd19cf5c6fdd6225b8aef8e666ec271a4f5c900d7008a4d663f0b6e92c90cdace507de3e0c9f", 0x125}, {&(0x7f0000001440)="e74908366df33851e35dbefda327dcabbe4bea2f2fb1d0b89713beef4c55e8d676ace96553a9085679fdf8b6b816e048f8536734f87f3dd119a4ed6ba53a5735dc0cdd9f1e01d47bb38b34f382d13d9ca4b8dbbd291322e566e998a6410eae7583123640cf371e33fe1f869518a7c26aa850945bda30f96492108fdce96b4f20ecca95b6c7b5d7896f8b29eae2e5fc805ae3763d219729badc08d2144980fd732d4800035a1f77e7cb37aa23746d03f27e9e065fc5cc54912b3cdb948a5b49053a759e03ac6bd497078c0a29a576a397deba1445cd79924f31d2b5bb867442318d0c482b137e67d7d9e7f8f74590f098bfdccfd77e269057a139deefc4444dbbe4e3435648c009f60a346484a8b76ca2cdad2f4bcbd593cc9c33471b1cf455257f41bc0457859c45d734ff40351258f21f08d8b9fd3c4693255b003621a7bb3f6ba3db97117a69c57c4dae73b6b83b2c304596b3f3b18f7e7359972271192660f88f6ace82b9b9ac441adb0f567c0c355f9911c3a7b4deec3a6cee967ccb9285359e9cdf46bab03bad3db08f38ba569dabcd9541c2856a2dd2ab54e0161798e48c8b3c719288b615b0523559c4e73f426a6010213add2c1b08256d61652ad6b2474c63874e874f3ecfab0c4dc76b7c8bd2013b73afac690b911c1321ac5ba9714c0ab0d34a31a9d726cbede591da77d59e1494d93a39b084c43f226f586280c14593738c9c542d73dd73a4b7077c7a041265e1db715c339eba31036ae06cd5c1a0a591be0d2bb8bdcfb5cdec65e084f959cacfd4c6dba66948e290f285cb958b7540250e70b5bfb89a4818e362a4cf3f3f228a775e192ee6f0b756f76990f02375397c04a62c0272dc32563b4a4dc5e5abe2bf9a80537150c0020a28643e5382e149ff656caf0b58e93222a6ad5d138bd99cd2945e838bcadf9ba956c990ef32aa896cb34296011db8069fd6b154b33c9d68486584b46d1dff48f87668725cc354a1a0df5958112a3a8fba860927957f03dba73eb748ece14f5e88f6b9178c695668b802288736d896ba06f607a8dc0455c248d26b73eb86c0f9df36668f4ea41d9e17eff8b1217cbc6e6396dd5b54ff5f4bf23859f1e559b0b8082f135081b47ab1688e4646f43b2bc55aa9e08304b47bb5ea5e38a07ae98f85705360a8121206a2f6e3532db37f5041dad583766454684517a334010d60f17938dc27b060b3228278d3266710381b543bfeafd633bdd1a58548d93af89fa6244e72309f73442768e7161f1c984984bf43403abd31738bb902fca2b34231b3ea69434d699c7e2eb534e40fc74908188d0f600e05bc2078413c5f65d2157577502911f0d8b4abcc0736cb1e3d60b138db584ff374a7bb5d6665479437444b96282536519badca1e9fbaedf868839a1f00edc1b00fb53736eba97a8893b40884eb9a1d0d9f8d68909133da5a21899cd91552a41da6d1b9042dc052cc25cc29a129cfc8c1b30d9b4bc3d340c0a82fb405bc06d09b90dc54b5b524173baf5185573ee706048af550be2c883590e277a1b47c6b012ed77db0269a7b301c03b278bf72b032370337aae7dbd1b4f76274ead496303f59a1b47219045dea2f5a06ca6a1fbe1c6b8598d3626263927391f7c7", 0x488}], 0x2}, 0x0) 6.149735563s ago: executing program 4 (id=2952): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000004700)=""/4080, 0xff0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000780)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/82, 0x52}], 0x7}, 0x0) 4.307553443s ago: executing program 4 (id=2954): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000540)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call, @generic={0x2, 0x4, 0x9, 0x2, 0x8}], &(0x7f00000007c0)='GPL\x00', 0x7fffffff, 0xfc, &(0x7f0000000800)=""/252, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x2, 0xa, 0x2, 0x2}, 0x10, 0x2dfd, 0xffffffffffffffff, 0x6, &(0x7f0000001100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001140)=[{0x2, 0x3, 0xe, 0x5}, {0x0, 0x2, 0xc}, {0x3, 0x4, 0x5, 0x9}, {0x5, 0x4, 0x9, 0xa}, {0x0, 0x2, 0x10, 0x7}, {0x0, 0x2, 0xb}], 0x10, 0x7}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000940)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="2d6306f46578637420"], 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) openat$cgroup(r8, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r11, 0x0, 0x0}, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="1c0000006d0081044e81f782db1f4cb9041c1d0800fe007c05e8fe55", 0x1c}, {&(0x7f00000004c0)="21a06861179b2a1bfc2d22b9bd8818b80d70cef82c5554ff4ebef4dc49f28d3c053274afd6828332182d036714094bf32a1b8ba8c511389efd97f061d1180723dde28deb0d78bf362a7e88bdb0c371ff47b3e1f3fb912e3e1bd80b86e34302beea4b8627f04676dd82ddca84b4f46c4b50a34680dcdbc05bb58f", 0x7a}, {&(0x7f0000000740)="3b6b96929e377142a90ac0cb475b13e467d6b2d397147a46e04a344a1559089febf86ac78e94bbf6afa3c74f05d208b2f83220bfa482b254d2685f8529cd6d1d6bce430cbe6d3812d16e553f353ca8c0e460a9e87241279903885b80d0a1978278282f16cc3f38f22b2553fb1c", 0x6d}], 0x3}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r8, 0x58, &(0x7f00000001c0)}, 0x10) 4.183086015s ago: executing program 4 (id=2956): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pB \x00'}, 0x20) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10042, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114100000000008510000002000000850000007d0000009d00a505000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000000004000085100000f8ffffff9500000000000000a8f032518400000000ecc951f04d8d"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000580)=""/185, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x17d2b, r2, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0x8}, 0x8031, 0x0, 0x0, 0x5, 0x3, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$kcm(0x2, 0x0, 0x106) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 3.653054178s ago: executing program 5 (id=2960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0", 0xea}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x30) 3.436965579s ago: executing program 0 (id=2962): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x3, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.33381471s ago: executing program 0 (id=2963): gettid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000000), 0x0}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11e, 0x17, 0x0, 0x0) 1.60380525s ago: executing program 0 (id=2964): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x7b, &(0x7f0000000080)=""/123, 0x0, 0x40}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r3, r3, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) (async) close(r2) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0x3) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRES8=r5], 0x12) 1.54629564s ago: executing program 5 (id=2965): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="074cfd00000000000000000208"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060080010400000008000000"], 0x48) 1.458582441s ago: executing program 0 (id=2966): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, 0x0, 0x2000000) 1.247696242s ago: executing program 5 (id=2967): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x7, 0x1, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="48000007150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 505.116237ms ago: executing program 4 (id=2968): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x14}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x48}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x587d8bf) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ff00"}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%'], 0x20) 504.509027ms ago: executing program 5 (id=2969): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000004700)=""/4080, 0xff0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000780)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/82, 0x52}], 0x8}, 0x0) 503.837257ms ago: executing program 0 (id=2975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1, 0x0, 0x0, 0x4000840}, 0x4010) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x80044943, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400030404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000050) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x5480, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/137, 0x89}, {&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000580)=""/112, 0x70}, {&(0x7f0000000600)=""/149, 0x95}], 0x4, &(0x7f00000006c0)=""/130, 0x82}, 0x2042) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x900000000000000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000004000000000000000008000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 237.405718ms ago: executing program 5 (id=2970): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x3, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 95.832979ms ago: executing program 5 (id=2971): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x404, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x34040041) openat$cgroup_ro(r1, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8913, &(0x7f0000000000)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000001980)="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", 0x91e}], 0x2}, 0x24000008) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz0\x00', 0x1ff) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1a000000040000f2040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) 93.116069ms ago: executing program 0 (id=2979): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x357, 0x4}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000200)="0310014b2d67d5478736678deeec0c934ddd0fe0132cf4492615dd2f886bbbdc3065d24cfb5d326c4df08c83d958429d8bafd352aaeaaa92597bb5aea4b6e68a8ac12142e22b221868054d3363191db02311d2ef8b6c13ed1046bb90b49b192b1c3267fe76dad903d5ed889e343e14b7884f299763f4a5d25ae7cf87a335c5108fe966d3b4cc2a900166f2286c4a049f9016058c50eebc3269e9ef481abd28f367aac080e070f01df2e7fe2490ae48cc5fd3a4c7f98e2c11e837e422c9304838bde4d149e88a748eea9c3774f0acdf76c3ec35dbac86a25f4125f742b200763aeb52696bd0168bbe60e6880a364438dd9e798a2c4e7b787fc5544f7e07125b80b9678d788259c6479c6fd21fd7f215e01951df6c9d4bac6f3dc8dc74bd3de67937e6ef2b41e52c63eb4870a13e9140f1456ab0104c12f74ee5f5a71cc894095b7ced83d938ba538655823a29dede584e08651f61c38cccee0e07bd7cde6d54a6e35f51753cf4d34158a7b240f42fbcc587af776dfbed15e20fec0132ea3d2290221216b3a1b369368fa9fb297a7fc2218f61556509b2191e08160c39f3c22706b54bb322f6765dbffbc8279678e0792e0604eef85e1c3ec922e497115f38383ff62955bd812f86834648c901e8a55722753a68781096e6acf48b86debbbafe4f450ea09bf7859e761f7beb81bbf96b3992c46d5713948eced53748e7f7dc80397e3797d6470989cc9c287e810c6b954731feded3b7229750e8f284e9b34bb11ccb37a4b5ac6abc6121263ed84399bb2eed551cf98c62d5d0311ed11a36d0d5726a379699cce5b3d538309850820163fb79adfca3749098ec793207160e78d55b5f09b14dc999d453247695ab69eb00a183f24064a2303dfa5735d73bacaf0bec2b5afc72cb2d5a62d29c70db8a2ddbad3ff565c09d4c46c3b245579fdf60094ce3b1a437902cca82245549705211724b17873b3e8f0a646d05b758db32910c96606d0365d2372014b7ab83cc4f74f0c18f1fc1b9b12601e16a16d06d36adb6e70bdb0e1d443a26e713e6b3f229bf5a8f654b9bf189b4b807600fc3063fe4ecd3e353444ec803b280b6d35bd8963fa8e00d23ff9165731b7203804a48b254a3532b0348c75e2cb081ed2067749692c275090112503b4fcafe871968f1d8bad3a78157c1ed10172036b6ba29075f6ead74ecf463e4144465792a88ae9f62de811d6306257efc3bd7345b4c51de092359efad3f754e997508121c01eb52e850643788721d814acf932843c7d715cceda15156db6a4884c27c3f587ab8396f9488579bc3cf9e7bf1d39b45ec6e357e38af11b2021367c45d1ad989e1d228dda6b755ab69fd7733634bbc15b8f74d0bee569345d8dafe53e7192f01b8de6e09720412d3a5d2636c1b5d918a653f4becf9ce4548604017cf5e582ffe201fa7b451c610da186d9168e673b4cf87a53be6b912f2d7d24ba26a06cdd5644de5ba11ce7f9f0962e080c0ebf761bbcc8132ed0977198e947b595e44d9a40d73ff222f94e10883a99c0ad6d9c5e97a739b24ea44f3666beeaed4819fe6f66dfea120e3e0a82bab83cbabee9e1101a1a90abb0af825b31c42dadda1948bc026e036042aba40242651f422b955d72a395bd92eeba47e528da46ca9e4209fc54714e20ee5a2600c88ed74372e3898b570f1ca3b3ad39002049766442e13dd4cce4c027dae54930f1b6350dc0198b13f501f8c3c13de483b48ebce9fa7715da2f2ecf3a4fd16da82ed414aa62cad4aeccc7193699be5204407396670afb3de0fd6e1051facf646b1f7ec98d14499e07d85479071b8269ddd971657fd9bcc54796b2863d7cdf24f7360db371eda8b1b8480e819352e01900fbecb1c92a7c2cd61778c3ab8dfa3f082f49cb1c093852cec8bc06629e2892347531f9a25be8ee026f93e79da08d717d7b9b03d76d8331f9ccac8d637608cc0b54fab15301e09101482ecf1bc10ae4b51b66509380a511679e08e54cc97ed2f492639a2307283545e44a14cb1e8bf4cffa94e927dc104565580711b417c92164c00ecd2897c93b2c23d1f902d19bcf1f3082a16637f064839981f2b0ba10743404e90b2e9520aaacd403b71758c7815d0ae656d186e3b9aa16aca01bf919f68315d588acf68a8eda26684ab02fd243dbb07d7d7e161824e24fc441784575c07f8b40a545c2e5e736a5e57706e186f7c4846958d8b60e689693163756ec52486954b3bd98a05f4bb1c3c5e5623a7321363b4912f89ad045357c7b6d726b2aee939e335b4811eecb42a0cab681a7aa899fe60c1b0030c3142b0ad9e7a60931bcaefa90553a77ca50984e9af83e706e02bca18302bd51c156bcce1041edec587c7dae532be687de3f623eddfb1836179f5b3f3c243780a376dcfd1dfc637f6db26b7ee5723131ca8fac4532192ff2125bec2d0cc97c0278d95536b47db9b253f6f0d35e308b8f70bc66f19ce2455c6e12c6a9242b36b3f2935e42819695d1a0bcaa2751a0f51380e01e1b54cd8e661f2abf01ed28fb807005d5e9331c0e5d68d2642536d1b06f53fcf1c70ffc1c5d9ea6b225c04e755f5df9dc389eb94834c60abc433153434fcbe897c55240772859fa673d795e1053850e0878ecfc7f208c7761b9d1b01de3c8c142939ccd5841cf860e1257b06f81aff6939719d1d204118863114b8be4bcf61aaaed811754753e38e2acae0232d339829896c03e4b2e896efea9534c2d397e977e2581bbdfe82b60abc7697f251eda9d082e45408930d85c149d28ee80207ea5e660d4bb9ce0e0eb2df682bcdfc473b44c48c2a59f38be1da0d6ee5fdb6ca38a2173f5c04eb4a719026723f1b12090e84a7fd6e9bbc43f62a52a4347325ee9388798674cb511d660a73f10798d1558f638153d18d5579783facddf05b0c4cb9c39b7e245edaa1c7802f6c6ad09a0c3e79683c9c0a62cd1c2bbab30eed395fa0addefefb6121fc62305929a02da370965ff34657e49911edd004cb62644aae26f2470c39d2c51746827df274fd63618bb0106d51512ce024f015eb7ad835578e6ac891e20b3590be60cdc7a2441e3259cadc114e7f3b6cd979d965a46b2921eeb466e8c2278be4fcfaa47bc4be70d8ea413e9930426fac6cefedf12a18113ea1d3dc2d4c6f833ca784220a8391f5344a9b0b0487ab4dead9fd5ce5bbd34aa150c02e7410115fd3b7abf23d99ba19cc3504831c5e3bc972114b765830a798f5ff317287aef2fc3539aa1d15e8ad7d5c5b625a584cacc12d431ef8cb151ab5795053b7a2e5d0af7a373b0f7874b18399e20d2ee359c0831911d5b6127422c8a6d2ad923761f2d143f987befd667a2d639484d5f867597c2cc604a67439f166b2717814401f3e468bbddeefd75b1a6c4b0c848678cc1fa8523d88d6eb0e7bf2a331a8210f2e162a174c474d1ad3cfcd14f451f3b4256658963b8294e2fcd640dcbcd6200118c104db134d506f47a9a47902754335b0b530535b1797bf7da3fafcec137a0b6fb45e670d4d1469f7223311a7db447a4b6db09bc3d999dac8cf6156dff8741c7acfff307804c83d08e906e2cbda2c3258c2faf6c2a14127006d520343185c9ed95cbd7f7dcdc10d4b829441c68116c68f42ff82f6827cacfdeab468bbc270a5121bbbd0e0238623991162f0be15e0e1fcd85c905545a9f5752b7bbb3bfa4d8be7440af5aa3747f52e862bd62b79ab01d21d35c76e4c2bf2708b68c0ec0e0a4ac3b977e2363af6ad0c0a47f515f2cbe6ce74b7bfca69bbdf336767250ea702abd7a6c170d36df440bca987311c99e5bd1a90e3474306fb5b080d2f6dc1d34fef154762bac795ac350fa046d73bb01c77e5b2d3f2ab1818b2d49158ca6c4a817c0875cc76d6d90a0cbce10585acfd80cb5d9c94835822398f412c79c17b706c278581fd6ffc90a03b1fe702ba21bb09c29cb53cd8a9526a6ca8310bf49731c2ef59e4a7f6f0661c06e570453c4482b18de048092a6f6abfec255cc03614a3af6235137fa706188d003df31fff03c6c6f7515f0594cd3c0842f7e4b3b3b1ec89f0f35bab133c488243b08ff7b1c0bf16abc6b1b71c41208f789cc77c2b089d0159f3cf526f718c6114a0ede8c423466756f685e6ba012f060bc8c1839849cc95b0b77defeffadae23090b60149333d8b5b6b5bc0d245897f6962844f5adeafd046afebd4ddcf010361d53571c4f297cbb748917329bf6d09e6277652b84f50f03cb62c3e90d09bef73cd40dc644ef3c24e9cb1c809feacc41887af84362ecd0cafe287b3e0cba53c0d5e0e416e126e24928dde1739f290739c125fc3be9042bd2283a1904f25fac2b1164caa0d6ada6772a48a37020e882599a9e06d3250bf8d21413fb0177783d4b70e596d6811591dfbcfe6af42819ff355cf9e4afef777e340c750907e989679112bfdc77e8ddd1fe2b3ee516eb47d6f83b002923bca1d5eef08843135ea022ddafa310843ad1e64909cf35149f1ee385eff5555a38693ec7972b155c6de87539f1d2ab242ad29ae9188130e4434a4d0585b0c713d4480c872a076506a0a8d7faef08d5b7ad489b0a364e5b34229fbf473ed3ef65dd2fce18e70bf74aa63b51a16f06f6b67aa1a37bfb06deb08fa8b7a22db3566ea0c519e99f45d219c77f3ec80c10fe0a0cf138b2740c6cff7e7c601451a8e7c0342625e3ad9ef98dece9ec6833d5937ff6fadbaa2d457933c673ead96426e171757ec576fe870010ddc1894e27aaf66192fd08aeabdd6c30839b11215e3881ae8d87e80a37ccd56abd322da123cd1596bba01397ff6032939d00303224236f25eaf50cc79c65ae542d4d18355f3f63fd7bd7baa3f3811aea09fa9ef5337ba681de65c819aa41b9a57617eee75521e54586a4d8b3ed977462303e7c94a83d0dd632f371aa1ed34264b8cb7e780e753be32fc5a2c8e235893918b9a051b756db96418d5e3a372b75425cf8a0f9560d60319a43953d814577a75d96ac1e2d77407b4343fcbee3d9f5de5e3dcbc0bd9dd7e992797ac0af4b5306726f75c4e051069bf4fa0593a1314a49ef9ea28d77a8b526e9a0d19a7cc4d18574bd784edf98f1186505fe970cf12e863d757b27ad71ed3650a1a3af320b07affbaa0301c91ffe594e73c806d7271b78eae76be712425f72d57fd100d819306483c46bfec720090eaae7724bd2086534f3492b4196fed445d3916c27103fe5df3cafa6b2d3661288f964b9ceb7ee82826247460fdada522797703575081535e1cf655d4be149c1c4ccf4e8e538e69f6dfba7cf8f5484b4e6b414e1acd903ea2dbc9fc3a98837a8e884f5a493413548d7d94b975004d7db066827c667f96c300461307e90eeab67a8aad91b3c58a6a1d59fd2d09de0d8ab6b5dee3d154014be4928ab43517184b1ac31aef0a4d8145203bf4a5a54ddc618a3d490043bd20c657cd99ee5d151670e9256b7c9c8a6640f77c0c66ee755c65f6bca1871f9adeba1be2ef527a8daf3d09dfb6a8b42f51424df1f3a621f22b729fb5a77263c03441689e54afbcd8ffa0293990b638eafd1972d4e602c9fc46a900ff97681af815b4c3ba8de129f78886049c499185abe2050c390c5fdde5dc9c7a576021365ac242f062d737894486c88efbf7f8a6d41dd7ff323ed16711906d08d64d09cd8456b8a3c6e2bd9e3b2b3aaafdbb0ec7e027758177ac4c512e8ec2524c03f9998246c1f42d27830cacbab59b96c303160a9b311b62c5027d3c2c3f0ee4d738cf8c3dd08d2040c7778daeebeee5edf885be882897704a7134", 0x1000}, {&(0x7f0000001200)="7d171d467e2ea514d6abd5fac01aba95c5a3122da3b67474eb2658a984beec198a8e5ebe55b0e1e1b6d1e6ce48c5ea64192bfc6c765c3a3ba0ffbfab5d536a2ed7317763b3a9e582a973e94ff427029531ef5601ad77d5d8e062887d873664520fc446aa5d04371670beac6bf0c38b572f505f81d9e90bfd179a12405c00165cec0eb78485a65c5c04c6d93d7c6ee5c2306293e08fa9cb79d09ed996a8ad6a7ef5e6f908052768231f3c79febeda112057b64e71c7ee0ba907d75996d70e287097e3147e7fcbdf84694c72177a888fb752e897a0e518", 0xd6}, {&(0x7f0000001300)="19a18781b952dd2e12991b54985efa4e12b799c091d8498bde32668b5ef633af479d39bcbfd8fc562f3407c515fd2b04606c850ab898f95ecc72677b918333916b644afa0e986afc481f78ac3a7975bbff2d42b76e7466a4371f1284e01bff3bb3fef0ac5550a019f80ecdc177a71ecd2ab3f4c3769e85f1f22181b134ee05bd9e188e9cd1898dd27af09abecd3d2da57951e6929da64e777a40e334c4452f927d249ae14c288213d1d87e1cb7a327e007ed8ccd0c3e1f3ba2b76bb4d6e8a94ef86dfb2fa7e18578d8d5f7a1c3ea3317254e956fa84e93b7869c31f20341daf8063e43fa0483111f", 0xe8}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000000040)="61f2c833b4526f59bb805bbdb918dd339b0b5aad4e348497cc4014875d645880b6a00ac0e3880f81c2abb07ac17c279be637c5f3855146c02f74", 0x3a}, {&(0x7f0000001400)="855ddd355d91780aab1283b33978f85ef884200b6c312a108253d515117cdf5721e0a0596588598968a8be3dffc433e08f20b75acd3ea263624528cde0ad2fc69bf46fb3abc49e2618c1dd762fc1cb9dcdc698ab091525e94d1613864efa02b1302a44af7c8ec3c7dba59b9eca57b6b6c1faa33adf962f438c46a0b3d1c8ae9942215847b64186a3b0a72abef5efdbd4c5c33a73bf1f64d8c5b0aee5b1cf473323e7ef412a0ad388cb7f1e0c2064ecb4885b6650c2c2d2b6295533c9380156c6", 0xc0}], 0x6, &(0x7f0000001540)=[{0xa8, 0x10a, 0x1, "9fa8d475b36cad4ad2613fe72ead49e20c587d11c97a4d64bb61b7e87cb91b8b5ec6dd1cc9cc5b18fe454fbba1b931309da9b5ddbdfc7d3161fc78215db0c9d523f77ab9c9fcfa7cada43ab6ab5c927bdd8b7362da129f4a9e2fa103b6e902aa3ca186354bd9cf88c30c41c9abe5ea753e441bb8c061dfe9ba4860d714555f9716316a854015e5d437d43c9f85fdb1ae5d80"}, {0x50, 0x88, 0x0, "f06ffa2e750a29400087800f175fea3bad0575ba9cc5579a94d7731311073e57b325b606fb1dec43b2b7b7b07b266b4b687410af0db1daeb5ed4ffdc8261f632"}, {0xf0, 0x118, 0xfffffffc, "5156c011b9136eac6174ebd125cac53865368311a098874b51684e1f1f59ce2dfbf6d198eaa712b7ba466408d5c006f585b6e0231e1d21ea85fd84b5230098fb7b18c0fb413e2569fea3568c0621a393423ff53ab639a8a259020a804191ff1ca3e4e41254948ff388efdd52f32befc2b061f6aa1067ddee3897a45195751efaf8ed63269b822916329a06deb5017ada49a794504a6e919bf000c04353a699a4dc3f99a79744ca3a11d6b7c8637673764c42804e2239362aa6bc78591e548fc170250edd325502ebd98696ebca9a650fd9988008a878adc9a99a"}, {0xf0, 0x13, 0x7, "4cdb77739667e924c6d0770ab8bf28881cd3f93667b23a9d193265ac58dec6631735e57460aa5b67a9c3cab254694ffaeaaa6f77670f10b49fa778c3a89c01938f0c2742487f255a5e7c90d203cef131b9206ca4642ba3ce04e3401a4e5f8956b32cb2f257e46665f8684a6d8071a9f91f6407ad0f7e78ebfb7b38051a272e9b5d6591bfa176c224ef4925575949ea47b6a96dcce2dada5cafd5e0dfb60e87dd10b6cfab101a78209863360a7c9e2f44a6dd7d3fd1d8faa05561f7586119ed318c9081c55df2201a87f82baab5b413b61a1e526cbe9f2df01228c4c6"}, {0x38, 0x114, 0x3, "291b1b622cee93eeeb0ec552ed47eede1c5f774e87a3c6bda9045152d62641cb9550"}], 0x310}, 0x48801) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x118bae, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140)=[{0x0, 0x2}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 0s ago: executing program 4 (id=2972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0", 0xea}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x30) kernel console output (not intermixed with test programs): tlink: 'syz.3.142': attribute type 16 has an invalid length. [ 185.574510][ T6238] netlink: 152 bytes leftover after parsing attributes in process `syz.3.142'. [ 185.692135][ T5104] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 186.367803][ T6265] netlink: 168 bytes leftover after parsing attributes in process `syz.2.154'. [ 186.974677][ T5104] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 187.011188][ T6280] netlink: 'syz.3.161': attribute type 10 has an invalid length. [ 187.038608][ T6280] netlink: 55 bytes leftover after parsing attributes in process `syz.3.161'. [ 192.014291][ T5104] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 193.031360][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.207'. [ 193.122541][ T6399] TCP: TCP_TX_DELAY enabled [ 193.779714][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.214'. [ 193.800550][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.214'. [ 193.838399][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.214'. [ 193.878440][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.214'. [ 193.908086][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.214'. [ 194.078171][ T5818] Bluetooth: hci2: command tx timeout [ 194.426055][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.434300][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.525802][ T6435] netlink: 'syz.2.225': attribute type 10 has an invalid length. [ 195.304247][ T6454] raw_sendmsg: syz.0.234 forgot to set AF_INET. Fix it! [ 197.331863][ T6506] lo: entered promiscuous mode [ 197.536658][ T6515] netlink: 'syz.1.258': attribute type 10 has an invalid length. [ 197.584488][ T6515] team0: Port device dummy0 added [ 197.608607][ T6515] syz.1.258 (6515) used greatest stack depth: 19688 bytes left [ 198.241954][ T6536] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.782853][ T6549] netlink: 'syz.3.274': attribute type 10 has an invalid length. [ 198.794729][ T6549] netlink: 152 bytes leftover after parsing attributes in process `syz.3.274'. [ 199.065493][ T5818] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 199.610203][ T6576] netlink: 'syz.2.287': attribute type 2 has an invalid length. [ 199.633631][ T6576] netlink: 'syz.2.287': attribute type 8 has an invalid length. [ 199.641965][ T6576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.287'. [ 201.118421][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 202.605681][ T6610] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.302'. [ 202.615254][ T6610] bridge: RTM_NEWNEIGH with invalid ether address [ 203.228787][ T6639] syz.3.313[6639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.228913][ T6639] syz.3.313[6639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.284416][ T6660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.323'. [ 204.370734][ T5104] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 205.970030][ T6660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.323'. [ 205.993327][ T6666] syzkaller0: entered promiscuous mode [ 206.002234][ T6666] syzkaller0: entered allmulticast mode [ 206.771065][ T6693] netlink: 'syz.2.336': attribute type 10 has an invalid length. [ 206.865863][ T6693] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.031592][ T6766] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 209.816016][ T6791] netlink: 'syz.0.381': attribute type 39 has an invalid length. [ 210.145029][ T6801] netlink: 'syz.0.384': attribute type 10 has an invalid length. [ 211.034480][ T6820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.392'. [ 211.069848][ T6820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.392'. [ 211.082798][ T6820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.392'. [ 211.105229][ T6820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.392'. [ 211.142844][ T6824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.393'. [ 211.152527][ T6824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.393'. [ 211.183364][ T6824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.393'. [ 211.224006][ T6824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.393'. [ 211.368954][ T6832] netlink: 'syz.3.396': attribute type 10 has an invalid length. [ 212.976928][ T6858] netlink: 'syz.0.409': attribute type 29 has an invalid length. [ 212.996784][ T6858] netlink: 'syz.0.409': attribute type 29 has an invalid length. [ 213.014818][ T6858] netlink: 'syz.0.409': attribute type 29 has an invalid length. [ 213.048055][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 213.493856][ T6874] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.417'. [ 214.578175][ T6898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.429'. [ 216.000249][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 217.758394][ T3539] wlan1: Creating new IBSS network, BSSID 1a:98:ef:c4:04:bb [ 218.757355][ T6933] __nla_validate_parse: 4 callbacks suppressed [ 218.757373][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.445'. [ 218.805029][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.445'. [ 218.820965][ T6935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.445'. [ 218.836254][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.445'. [ 218.847533][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.445'. [ 219.074018][ T6944] netlink: 'syz.1.449': attribute type 10 has an invalid length. [ 219.089297][ T6944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.449'. [ 219.100223][ T6944] batadv0: entered promiscuous mode [ 219.117974][ T6944] batadv0: entered allmulticast mode [ 219.124618][ T6944] bridge0: port 3(batadv0) entered blocking state [ 219.128193][ T6947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.451'. [ 219.138105][ T6944] bridge0: port 3(batadv0) entered disabled state [ 219.170057][ T6944] bridge0: port 3(batadv0) entered blocking state [ 219.176710][ T6944] bridge0: port 3(batadv0) entered forwarding state [ 219.207595][ T6947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.451'. [ 219.231126][ T6951] netlink: 60 bytes leftover after parsing attributes in process `syz.3.451'. [ 219.252680][ T6947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.451'. [ 219.451895][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 219.461781][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 219.783864][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.963002][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.191255][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.319442][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.818743][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.827938][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.842790][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.889768][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.925880][ T5818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.938277][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.058782][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.083296][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.111238][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.118917][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.129009][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.137539][ T5817] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.145030][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.152209][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.168641][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.176816][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.186997][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.194956][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.783834][ T6962] chnl_net:caif_netlink_parms(): no params data found [ 221.821754][ T35] bond0: (slave wlan1): Releasing backup interface [ 222.368174][ T35] hsr_slave_0: left promiscuous mode [ 222.374750][ T35] hsr_slave_1: left promiscuous mode [ 222.381612][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.391421][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.400767][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.408437][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.441617][ T35] veth1_macvtap: left promiscuous mode [ 222.447663][ T35] veth0_macvtap: left promiscuous mode [ 222.457089][ T35] veth1_vlan: left promiscuous mode [ 222.462879][ T35] veth0_vlan: left promiscuous mode [ 223.040031][ T5104] Bluetooth: hci0: command tx timeout [ 223.060817][ T35] team0 (unregistering): Port device team_slave_1 removed [ 223.100899][ T35] team0 (unregistering): Port device team_slave_0 removed [ 223.142899][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.183726][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.203170][ T5104] Bluetooth: hci1: command tx timeout [ 223.278189][ T5104] Bluetooth: hci3: command tx timeout [ 223.577409][ T35] bond0 (unregistering): Released all slaves [ 223.608745][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.616258][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.623934][ T6962] bridge_slave_0: entered allmulticast mode [ 223.632100][ T6962] bridge_slave_0: entered promiscuous mode [ 223.641392][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.648715][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.655898][ T6962] bridge_slave_1: entered allmulticast mode [ 223.663867][ T6962] bridge_slave_1: entered promiscuous mode [ 223.711141][ T6999] syzkaller0: entered promiscuous mode [ 223.717380][ T6999] syzkaller0: entered allmulticast mode [ 223.823465][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.835589][ T6970] chnl_net:caif_netlink_parms(): no params data found [ 225.121293][ T5104] Bluetooth: hci0: command tx timeout [ 225.166651][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.187911][ T6965] chnl_net:caif_netlink_parms(): no params data found [ 225.279764][ T5104] Bluetooth: hci1: command tx timeout [ 225.342654][ T6962] team0: Port device team_slave_0 added [ 225.356903][ T6962] team0: Port device team_slave_1 added [ 225.362666][ T5104] Bluetooth: hci3: command tx timeout [ 225.533230][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.554620][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.582849][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.608268][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.615495][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.630979][ T6970] bridge_slave_0: entered allmulticast mode [ 225.644705][ T6970] bridge_slave_0: entered promiscuous mode [ 225.715270][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.756555][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.814325][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.832605][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.840766][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.848555][ T6970] bridge_slave_1: entered allmulticast mode [ 225.868038][ T6970] bridge_slave_1: entered promiscuous mode [ 225.982603][ T7041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.470'. [ 226.020711][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.035127][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.042987][ T6965] bridge_slave_0: entered allmulticast mode [ 226.057916][ T6965] bridge_slave_0: entered promiscuous mode [ 226.081374][ T7041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.470'. [ 226.095558][ T7043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.470'. [ 226.117432][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.127175][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.136629][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.144575][ T6965] bridge_slave_1: entered allmulticast mode [ 226.152245][ T6965] bridge_slave_1: entered promiscuous mode [ 226.164909][ T6962] hsr_slave_0: entered promiscuous mode [ 226.173745][ T6962] hsr_slave_1: entered promiscuous mode [ 226.181673][ T6962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.195747][ T6962] Cannot create hsr debugfs directory [ 226.203056][ T7041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.470'. [ 226.215890][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.374739][ T6965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.425241][ T6970] team0: Port device team_slave_0 added [ 226.436596][ T7048] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 226.444589][ T7048] team0: Device dummy0 is up. Set it down before adding it as a team port [ 226.456710][ T6965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.500686][ T6970] team0: Port device team_slave_1 added [ 226.578764][ T3456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.641073][ T6965] team0: Port device team_slave_0 added [ 226.648132][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.655221][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.689675][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.707521][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.716509][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.742742][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.770670][ T3456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.787351][ T6965] team0: Port device team_slave_1 added [ 226.793753][ T7052] netlink: 'syz.0.473': attribute type 22 has an invalid length. [ 226.912124][ T3456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.949859][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.964761][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.996438][ T6965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.010427][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.017409][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.070147][ T6965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.090600][ T6970] hsr_slave_0: entered promiscuous mode [ 227.099473][ T6970] hsr_slave_1: entered promiscuous mode [ 227.106147][ T6970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.113961][ T6970] Cannot create hsr debugfs directory [ 227.177622][ T3456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.204239][ T5104] Bluetooth: hci0: command tx timeout [ 227.358011][ T5104] Bluetooth: hci1: command tx timeout [ 227.438279][ T5104] Bluetooth: hci3: command tx timeout [ 227.875000][ T6965] hsr_slave_0: entered promiscuous mode [ 227.881739][ T6965] hsr_slave_1: entered promiscuous mode [ 227.888876][ T6965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.896476][ T6965] Cannot create hsr debugfs directory [ 228.396578][ T6962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.451128][ T6962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.486754][ T6962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.513240][ T6962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.853951][ T6970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.908149][ T6970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.955447][ T6970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.061675][ T6970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.278326][ T5104] Bluetooth: hci0: command tx timeout [ 229.302711][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.407356][ T6965] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.431647][ T6965] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 229.439099][ T5104] Bluetooth: hci1: command tx timeout [ 229.514592][ T6965] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.522199][ T5104] Bluetooth: hci3: command tx timeout [ 229.631064][ T6965] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 229.673442][ T6962] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.018895][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.026085][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.126206][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.133471][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.233170][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.332006][ T6970] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.377489][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.384753][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.424310][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.431542][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.541081][ T3456] hsr_slave_0: left promiscuous mode [ 230.557926][ T3456] hsr_slave_1: left promiscuous mode [ 230.619084][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.626564][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.659232][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.666730][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.676030][ T3456] bridge_slave_1: left allmulticast mode [ 230.682616][ T3456] bridge_slave_1: left promiscuous mode [ 230.689972][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.702529][ T3456] bridge_slave_0: left allmulticast mode [ 230.713028][ T3456] bridge_slave_0: left promiscuous mode [ 230.726320][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.766041][ T3456] veth1_macvtap: left promiscuous mode [ 230.776780][ T3456] veth0_macvtap: left promiscuous mode [ 231.356542][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 231.396711][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 231.435671][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.481333][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.875424][ T3456] bond0 (unregistering): Released all slaves [ 231.993752][ T6965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.129820][ T6965] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.179325][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.186699][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.223510][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.230730][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.271032][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.288969][ T7156] netlink: 'syz.0.492': attribute type 25 has an invalid length. [ 232.307512][ T7156] netlink: 'syz.0.492': attribute type 28 has an invalid length. [ 232.466454][ T6965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.170227][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.261630][ T6962] veth0_vlan: entered promiscuous mode [ 233.301662][ T6965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.355428][ T6962] veth1_vlan: entered promiscuous mode [ 233.462548][ T6962] veth0_macvtap: entered promiscuous mode [ 233.491130][ T6962] veth1_macvtap: entered promiscuous mode [ 233.554665][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.608328][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.648289][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.673470][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.700060][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.760832][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.788123][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.814066][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.855608][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.886528][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.912096][ T6962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.932206][ T6962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.954632][ T6962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.963620][ T6962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.191657][ T35] tipc: Subscription rejected, illegal request [ 234.206874][ T6970] veth0_vlan: entered promiscuous mode [ 234.252631][ T6970] veth1_vlan: entered promiscuous mode [ 234.347793][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.374110][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.394451][ T6970] veth0_macvtap: entered promiscuous mode [ 234.433604][ T6970] veth1_macvtap: entered promiscuous mode [ 234.516011][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.537727][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.548173][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.561071][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.575277][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.609014][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.619477][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.645655][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.664579][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.728576][ T6965] veth0_vlan: entered promiscuous mode [ 234.737604][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.752187][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.762572][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.780341][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.798043][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.817603][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.834997][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.875568][ T6970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.885719][ T6970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.896717][ T6970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.941519][ T6970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.996277][ T6965] veth1_vlan: entered promiscuous mode [ 235.114670][ T6965] veth0_macvtap: entered promiscuous mode [ 235.146881][ T6965] veth1_macvtap: entered promiscuous mode [ 235.162206][ T5104] Bluetooth: hci2: unexpected event 0x18 length: 151 > 23 [ 235.281701][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.322297][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.352880][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.372060][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.414650][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.433348][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.453480][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.465595][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.485415][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.531571][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.579462][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.610377][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.643933][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.656332][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.667401][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.679714][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.690863][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.728851][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.753536][ T6965] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.779952][ T6965] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.789643][ T6965] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.799885][ T6965] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.890111][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.923251][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.088330][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.105402][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.263230][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.295008][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.444294][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.490229][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.930980][ T5104] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 240.281775][ T7353] syzkaller0: entered promiscuous mode [ 240.298326][ T7353] syzkaller0: entered allmulticast mode [ 240.306406][ T7357] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.533'. [ 240.752546][ T7373] netlink: 60 bytes leftover after parsing attributes in process `syz.5.538'. [ 244.090419][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 244.577935][ T7373] netlink: 60 bytes leftover after parsing attributes in process `syz.5.538'. [ 244.626345][ T7385] netlink: 188 bytes leftover after parsing attributes in process `syz.6.542'. [ 244.829375][ T7392] netlink: 'syz.0.543': attribute type 10 has an invalid length. [ 245.420794][ T7392] team0 (unregistering): Port device team_slave_0 removed [ 245.457245][ T7392] team0 (unregistering): Port device team_slave_1 removed [ 245.543363][ T7413] netlink: 'syz.4.549': attribute type 16 has an invalid length. [ 245.551516][ T7413] netlink: 156 bytes leftover after parsing attributes in process `syz.4.549'. [ 245.802741][ T7430] netlink: 40 bytes leftover after parsing attributes in process `syz.4.553'. [ 245.825583][ T7430] netlink: 40 bytes leftover after parsing attributes in process `syz.4.553'. [ 245.840138][ T7429] netlink: 'syz.0.552': attribute type 25 has an invalid length. [ 245.887889][ T7429] netlink: 'syz.0.552': attribute type 28 has an invalid length. [ 245.899053][ T7430] netlink: 40 bytes leftover after parsing attributes in process `syz.4.553'. [ 245.931834][ T7434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.553'. [ 246.338519][ T7443] netlink: 'syz.5.558': attribute type 10 has an invalid length. [ 246.383949][ T7443] team0: Device ipvlan1 failed to register rx_handler [ 247.779143][ T3456] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 249.766248][ T5104] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 250.160642][ T5104] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 250.177041][ T5104] Bluetooth: hci1: Injecting HCI hardware error event [ 250.185364][ T5104] Bluetooth: hci1: hardware error 0x00 [ 250.642636][ T7558] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.588'. [ 251.210591][ T7570] netlink: 144 bytes leftover after parsing attributes in process `syz.6.592'. [ 252.271544][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.5.602'. [ 252.334282][ T5104] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 252.341403][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.5.602'. [ 252.391764][ T7610] netlink: 60 bytes leftover after parsing attributes in process `syz.5.602'. [ 252.401883][ T7607] netlink: 60 bytes leftover after parsing attributes in process `syz.5.602'. [ 252.418693][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.5.602'. [ 253.020696][ T7630] netlink: 14 bytes leftover after parsing attributes in process `syz.4.611'. [ 253.529100][ T7630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.571336][ T7630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.593903][ T7630] bond0 (unregistering): Released all slaves [ 253.905396][ T7651] netlink: 60 bytes leftover after parsing attributes in process `syz.4.619'. [ 253.938263][ T7651] netlink: 60 bytes leftover after parsing attributes in process `syz.4.619'. [ 254.621469][ T5104] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 255.157775][ T7697] netlink: 'syz.6.633': attribute type 46 has an invalid length. [ 255.858512][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.864944][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.960686][ T7725] __nla_validate_parse: 3 callbacks suppressed [ 255.960704][ T7725] netlink: 60 bytes leftover after parsing attributes in process `syz.5.644'. [ 256.018089][ T7725] netlink: 60 bytes leftover after parsing attributes in process `syz.5.644'. [ 256.070626][ T7725] netlink: 60 bytes leftover after parsing attributes in process `syz.5.644'. [ 256.123299][ T7725] netlink: 60 bytes leftover after parsing attributes in process `syz.5.644'. [ 256.559954][ T7745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.653'. [ 256.836820][ T7757] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.656'. [ 260.064008][ T7816] netlink: 'syz.5.678': attribute type 4 has an invalid length. [ 262.723285][ T7878] netlink: 'syz.6.697': attribute type 3 has an invalid length. [ 262.748722][ T7878] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.697'. [ 262.853311][ T7878] netlink: 132 bytes leftover after parsing attributes in process `syz.6.697'. [ 264.567352][ T7889] netlink: 132 bytes leftover after parsing attributes in process `syz.5.698'. [ 266.708909][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.716723][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.749921][ T7922] bridge0: entered allmulticast mode [ 267.129452][ T7931] netlink: 'syz.4.708': attribute type 3 has an invalid length. [ 267.165982][ T7931] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.708'. [ 267.814353][ T7944] netlink: 132 bytes leftover after parsing attributes in process `syz.5.710'. [ 269.898356][ T7988] macsec0: entered promiscuous mode [ 270.061652][ T7990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.723'. [ 270.542150][ T8003] netlink: 'syz.6.725': attribute type 3 has an invalid length. [ 270.555789][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.570549][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.588757][ T8003] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.725'. [ 270.635163][ T8005] bridge0: entered allmulticast mode [ 271.289599][ T8008] bridge_slave_1: left allmulticast mode [ 271.295333][ T8008] bridge_slave_1: left promiscuous mode [ 271.307505][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.343414][ T8008] bridge_slave_0: left allmulticast mode [ 271.353960][ T8008] bridge_slave_0: left promiscuous mode [ 271.360058][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.383464][ T8008] bond0: (slave bridge0): Releasing backup interface [ 271.661054][ T8024] netlink: 'syz.6.732': attribute type 3 has an invalid length. [ 271.702655][ T8024] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.732'. [ 271.775070][ T8024] netlink: 132 bytes leftover after parsing attributes in process `syz.6.732'. [ 272.279966][ T8041] macsec0: entered promiscuous mode [ 272.342577][ T8038] netlink: 132 bytes leftover after parsing attributes in process `syz.5.736'. [ 274.053013][ T8064] bridge_slave_1: left allmulticast mode [ 274.062500][ T8064] bridge_slave_1: left promiscuous mode [ 274.070486][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.091191][ T8064] bridge_slave_0: left allmulticast mode [ 274.097994][ T8064] bridge_slave_0: left promiscuous mode [ 274.104075][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.007998][ T8092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.747'. [ 277.087696][ T8152] netlink: 132 bytes leftover after parsing attributes in process `syz.6.761'. [ 277.283427][ T8160] macsec0: entered promiscuous mode [ 277.455500][ T8167] netlink: 'syz.4.766': attribute type 3 has an invalid length. [ 277.515733][ T8167] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.766'. [ 277.664081][ T8170] netlink: 132 bytes leftover after parsing attributes in process `syz.4.766'. [ 278.688353][ T8197] netlink: 132 bytes leftover after parsing attributes in process `syz.6.774'. [ 281.649305][ T8237] Dead loop on virtual device ip6_vti0, fix it urgently! [ 281.912284][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.264733][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.421408][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.441153][ T8255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.785'. [ 282.525774][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.609438][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 284.725732][ T8311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.796'. [ 285.345594][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.356852][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.482757][ T8319] bridge0: entered allmulticast mode [ 285.661229][ T8334] netlink: 'syz.0.804': attribute type 3 has an invalid length. [ 285.700478][ T8334] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.804'. [ 285.760844][ T8325] bridge_slave_1: left allmulticast mode [ 285.772264][ T8325] bridge_slave_1: left promiscuous mode [ 285.785756][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.877077][ T8325] bridge_slave_0: left allmulticast mode [ 285.897891][ T8325] bridge_slave_0: left promiscuous mode [ 285.930693][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.104234][ T8334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.804'. [ 286.690843][ T8359] netlink: 132 bytes leftover after parsing attributes in process `syz.4.807'. [ 286.802930][ T11] hsr_slave_0: left promiscuous mode [ 286.853777][ T11] hsr_slave_1: left promiscuous mode [ 286.899066][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.948220][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.974646][ T8365] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.809'. [ 286.979630][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.017969][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.040378][ T11] bridge0: port 3(batadv0) entered disabled state [ 287.164630][ T11] bridge_slave_1: left allmulticast mode [ 287.191343][ T11] bridge_slave_1: left promiscuous mode [ 287.197227][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.232847][ T11] bridge_slave_0: left allmulticast mode [ 287.255982][ T11] bridge_slave_0: left promiscuous mode [ 287.267319][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.445192][ T11] veth1_macvtap: left promiscuous mode [ 287.450956][ T11] veth0_macvtap: left promiscuous mode [ 287.456692][ T11] veth1_vlan: left promiscuous mode [ 287.468044][ T11] veth0_vlan: left promiscuous mode [ 288.412750][ T11] team0 (unregistering): Port device team_slave_1 removed [ 288.457069][ T11] team0 (unregistering): Port device team_slave_0 removed [ 288.499247][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.548007][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.765095][ T11] team0 (unregistering): Port device dummy0 removed [ 288.960197][ T11] bond0 (unregistering): Released all slaves [ 289.062184][ T8366] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.809'. [ 289.617458][ T8400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.819'. [ 292.911483][ T8438] netlink: 132 bytes leftover after parsing attributes in process `syz.0.830'. [ 293.410397][ T8472] netlink: 'syz.5.836': attribute type 3 has an invalid length. [ 293.443862][ T8472] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.836'. [ 293.498385][ T8472] netlink: 132 bytes leftover after parsing attributes in process `syz.5.836'. [ 294.421806][ T8494] netlink: 132 bytes leftover after parsing attributes in process `syz.0.843'. [ 296.852661][ T8563] netlink: 188 bytes leftover after parsing attributes in process `syz.5.856'. [ 297.951814][ T5104] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 299.312020][ T8629] netlink: 188 bytes leftover after parsing attributes in process `syz.4.872'. [ 302.755601][ T8707] netlink: 'syz.5.888': attribute type 39 has an invalid length. [ 304.254329][ T8750] netlink: 'syz.6.901': attribute type 39 has an invalid length. [ 304.516394][ T5104] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 309.407548][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.431596][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.462996][ T8891] bridge0: entered allmulticast mode [ 309.688093][ T8894] bridge_slave_1: left allmulticast mode [ 309.730030][ T8894] bridge_slave_1: left promiscuous mode [ 309.773671][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.347885][ T8894] bridge_slave_0: left allmulticast mode [ 310.353631][ T8894] bridge_slave_0: left promiscuous mode [ 310.364310][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.694866][ T8933] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.967'. [ 314.750328][ T9098] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.1031'. [ 315.364859][ T9123] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1042'. [ 315.854785][ T9144] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1053'. [ 316.498649][ T9169] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1063'. [ 317.110955][ T9197] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1076'. [ 317.284493][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.291049][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.673536][ T9219] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.1085'. [ 318.314824][ T9248] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.1097'. [ 318.852043][ T9271] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.1107'. [ 319.567047][ T9298] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1117'. [ 321.667330][ T9374] netlink: 'syz.0.1152': attribute type 3 has an invalid length. [ 321.688177][ T9374] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1152'. [ 321.730393][ T9374] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1152'. [ 322.020250][ T9385] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.1157'. [ 323.057729][ T9421] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.1167'. [ 324.211203][ T9456] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.1178'. [ 325.545017][ T9492] netlink: 'syz.4.1190': attribute type 3 has an invalid length. [ 325.567972][ T9492] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1190'. [ 325.589650][ T9496] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1191'. [ 325.628925][ T9492] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1190'. [ 330.467318][ T9536] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1204'. [ 331.197264][ T9622] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1238'. [ 337.722105][ T9740] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1278'. [ 338.575032][ T9829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1312'. [ 344.460936][ T9983] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1360'. [ 344.492571][ T9981] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1359'. [ 344.958221][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 344.964407][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 345.232846][T10012] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1373'. [ 346.324621][T10051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1390'. [ 347.488253][T10094] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1409'. [ 348.364016][T10129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1425'. [ 351.814797][T10168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1441'. [ 352.355122][T10190] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1451'. [ 353.081263][T10222] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1467'. [ 353.725704][T10248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1479'. [ 354.367333][T10275] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1491'. [ 355.230741][T10314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1509'. [ 355.961274][T10346] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1523'. [ 357.810212][T10422] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1554'. [ 358.452752][T10446] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1566'. [ 359.290841][T10472] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1578'. [ 363.062670][T10631] netlink: 61967 bytes leftover after parsing attributes in process `syz.6.1643'. [ 366.073992][T10753] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1693'. [ 366.895646][T10785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1705'. [ 367.572236][T10813] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1716'. [ 378.737132][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.743628][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.156708][T11125] netlink: 'syz.5.1831': attribute type 3 has an invalid length. [ 382.180719][T11125] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1831'. [ 383.633166][T11125] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1831'. [ 385.209046][T11183] netlink: 'syz.0.1853': attribute type 3 has an invalid length. [ 385.232200][T11183] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1853'. [ 386.558174][T11183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1853'. [ 392.293462][T11302] netlink: 'syz.4.1896': attribute type 3 has an invalid length. [ 392.307901][T11302] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1896'. [ 392.406687][T11302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1896'. [ 394.993234][T11342] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1914'. [ 398.211800][T11404] netlink: 'syz.5.1938': attribute type 3 has an invalid length. [ 398.224159][T11404] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1938'. [ 399.577899][T11404] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1938'. [ 410.844702][T11551] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1991'. [ 433.652082][T12033] sit0: entered allmulticast mode [ 440.166088][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.172684][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.863738][T12188] netlink: 'syz.5.2244': attribute type 12 has an invalid length. [ 443.871900][T12188] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.2244'. [ 444.837184][T12218] netlink: 'syz.0.2256': attribute type 17 has an invalid length. [ 444.847292][T12218] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2256'. [ 448.873732][T12263] FAULT_INJECTION: forcing a failure. [ 448.873732][T12263] name failslab, interval 1, probability 0, space 0, times 0 [ 448.887052][T12263] CPU: 0 PID: 12263 Comm: syz.4.2270 Not tainted syzkaller #0 [ 448.894580][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.904676][T12263] Call Trace: [ 448.907966][T12263] [ 448.910908][T12263] dump_stack_lvl+0x16c/0x230 [ 448.915605][T12263] ? show_regs_print_info+0x20/0x20 [ 448.920832][T12263] ? load_image+0x3b0/0x3b0 [ 448.925386][T12263] ? __might_sleep+0xe0/0xe0 [ 448.930045][T12263] ? __lock_acquire+0x7c80/0x7c80 [ 448.935113][T12263] should_fail_ex+0x39d/0x4d0 [ 448.939827][T12263] should_failslab+0x9/0x20 [ 448.944362][T12263] slab_pre_alloc_hook+0x59/0x310 [ 448.949426][T12263] ? __lock_acquire+0x7c80/0x7c80 [ 448.954550][T12263] kmem_cache_alloc+0x5a/0x2e0 [ 448.959334][T12263] ? security_file_alloc+0x34/0x120 [ 448.964557][T12263] security_file_alloc+0x34/0x120 [ 448.969607][T12263] init_file+0x94/0x1f0 [ 448.973786][T12263] alloc_empty_file+0xb7/0x1d0 [ 448.978573][T12263] path_openat+0x100/0x3190 [ 448.983112][T12263] ? kasan_set_track+0x4e/0x70 [ 448.987883][T12263] ? __kasan_slab_alloc+0x6c/0x80 [ 448.992934][T12263] ? do_sys_openat2+0xcb/0x1c0 [ 448.997711][T12263] ? __x64_sys_openat+0x139/0x160 [ 449.002770][T12263] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.008859][T12263] ? verify_lock_unused+0x140/0x140 [ 449.014251][T12263] ? do_filp_open+0x3d0/0x3d0 [ 449.018954][T12263] ? __virt_addr_valid+0x18c/0x540 [ 449.024093][T12263] do_filp_open+0x1c5/0x3d0 [ 449.028617][T12263] ? vfs_tmpfile+0x490/0x490 [ 449.033247][T12263] ? _raw_spin_unlock+0x28/0x40 [ 449.038108][T12263] ? alloc_fd+0x58f/0x630 [ 449.042458][T12263] do_sys_openat2+0x12c/0x1c0 [ 449.047168][T12263] ? do_sys_open+0xe0/0xe0 [ 449.051596][T12263] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 449.057581][T12263] ? lock_chain_count+0x20/0x20 [ 449.062438][T12263] __x64_sys_openat+0x139/0x160 [ 449.067299][T12263] do_syscall_64+0x55/0xb0 [ 449.071728][T12263] ? clear_bhb_loop+0x40/0x90 [ 449.076427][T12263] ? clear_bhb_loop+0x40/0x90 [ 449.081123][T12263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.087035][T12263] RIP: 0033:0x7f1ca478d810 [ 449.091551][T12263] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 449.111272][T12263] RSP: 002b:00007f1ca56ccf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 449.119699][T12263] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ca478d810 [ 449.127681][T12263] RDX: 0000000000000000 RSI: 00007f1ca56ccfa0 RDI: 00000000ffffff9c [ 449.135667][T12263] RBP: 00007f1ca56ccfa0 R08: 0000000000000000 R09: 00007f1ca56cccd4 [ 449.143658][T12263] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 449.151639][T12263] R13: 00007f1ca49e6128 R14: 00007f1ca49e6090 R15: 00007ffdfd126a28 [ 449.159623][T12263] [ 452.032314][T12307] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.2286'. [ 454.233261][T12337] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2295'. [ 454.705168][T12344] syzkaller0: entered promiscuous mode [ 454.718604][T12344] syzkaller0: entered allmulticast mode [ 461.762106][T12423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2327'. [ 461.771927][T12420] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2327'. [ 461.783178][T12430] C: renamed from team_slave_0 (while UP) [ 461.813655][T12430] netlink: 'syz.6.2330': attribute type 3 has an invalid length. [ 461.830878][T12430] netlink: 'syz.6.2330': attribute type 1 has an invalid length. [ 461.847608][T12430] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2330'. [ 462.614435][T12457] FAULT_INJECTION: forcing a failure. [ 462.614435][T12457] name failslab, interval 1, probability 0, space 0, times 0 [ 462.649743][T12457] CPU: 1 PID: 12457 Comm: syz.5.2340 Not tainted syzkaller #0 [ 462.657284][T12457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 462.667375][T12457] Call Trace: [ 462.670689][T12457] [ 462.673655][T12457] dump_stack_lvl+0x16c/0x230 [ 462.678386][T12457] ? show_regs_print_info+0x20/0x20 [ 462.683633][T12457] ? load_image+0x3b0/0x3b0 [ 462.688181][T12457] ? __might_sleep+0xe0/0xe0 [ 462.692819][T12457] ? __lock_acquire+0x7c80/0x7c80 [ 462.697885][T12457] should_fail_ex+0x39d/0x4d0 [ 462.702614][T12457] should_failslab+0x9/0x20 [ 462.707176][T12457] slab_pre_alloc_hook+0x59/0x310 [ 462.712262][T12457] kmem_cache_alloc_node+0x60/0x330 [ 462.717487][T12457] ? __alloc_skb+0x108/0x2c0 [ 462.722098][T12457] __alloc_skb+0x108/0x2c0 [ 462.726540][T12457] alloc_skb_with_frags+0xca/0x7c0 [ 462.731663][T12457] ? __lock_acquire+0x1334/0x7c80 [ 462.736706][T12457] sock_alloc_send_pskb+0x857/0x990 [ 462.741936][T12457] ? sock_kzfree_s+0x50/0x50 [ 462.746533][T12457] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 462.752431][T12457] ? lockdep_hardirqs_on+0x98/0x150 [ 462.757633][T12457] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 462.763539][T12457] ? perf_trace_preemptirq_template+0xa4/0x340 [ 462.769707][T12457] __ip_append_data+0x2971/0x3bd0 [ 462.774760][T12457] ? lockdep_hardirqs_on+0x98/0x150 [ 462.779985][T12457] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 462.784876][T12457] ? ip_setup_cork+0x860/0x860 [ 462.789669][T12457] ? ip_setup_cork+0x530/0x860 [ 462.794448][T12457] ip_make_skb+0x1da/0x3f0 [ 462.798892][T12457] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 462.803763][T12457] ? ip_flush_pending_frames+0x250/0x250 [ 462.809463][T12457] udp_sendmsg+0x1a90/0x2380 [ 462.814296][T12457] ? release_sock+0x2f/0x1c0 [ 462.818922][T12457] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 462.823800][T12457] ? udp_cmsg_send+0x350/0x350 [ 462.828604][T12457] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 462.834600][T12457] ? lock_chain_count+0x20/0x20 [ 462.839467][T12457] ? inet_sendmsg+0x14b/0x2f0 [ 462.844162][T12457] ? __local_bh_enable_ip+0x12e/0x1c0 [ 462.849550][T12457] ? _local_bh_enable+0xa0/0xa0 [ 462.854439][T12457] ? inet_sendmsg+0x14b/0x2f0 [ 462.859132][T12457] ? inet_sendmsg+0x14b/0x2f0 [ 462.863826][T12457] ? inet_send_prepare+0x260/0x260 [ 462.868942][T12457] ____sys_sendmsg+0x5bf/0x950 [ 462.873723][T12457] ? __sys_sendmsg_sock+0x30/0x30 [ 462.878760][T12457] ? __import_iovec+0x5f2/0x860 [ 462.883637][T12457] ? import_iovec+0x73/0xa0 [ 462.888157][T12457] ___sys_sendmsg+0x220/0x290 [ 462.892847][T12457] ? __sys_sendmsg+0x270/0x270 [ 462.897635][T12457] ? __lock_acquire+0x7c80/0x7c80 [ 462.902685][T12457] __se_sys_sendmsg+0x1a5/0x270 [ 462.907557][T12457] ? __x64_sys_sendmsg+0x80/0x80 [ 462.912521][T12457] ? lockdep_hardirqs_on+0x98/0x150 [ 462.917722][T12457] do_syscall_64+0x55/0xb0 [ 462.922154][T12457] ? clear_bhb_loop+0x40/0x90 [ 462.926925][T12457] ? clear_bhb_loop+0x40/0x90 [ 462.931608][T12457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.937508][T12457] RIP: 0033:0x7fe925f8efc9 [ 462.941963][T12457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.961659][T12457] RSP: 002b:00007fe926e38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.970079][T12457] RAX: ffffffffffffffda RBX: 00007fe9261e5fa0 RCX: 00007fe925f8efc9 [ 462.978062][T12457] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003 [ 462.986046][T12457] RBP: 00007fe926e38090 R08: 0000000000000000 R09: 0000000000000000 [ 462.994063][T12457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.002052][T12457] R13: 00007fe9261e6038 R14: 00007fe9261e5fa0 R15: 00007ffd4e43c858 [ 463.010044][T12457] [ 463.430237][T12472] FAULT_INJECTION: forcing a failure. [ 463.430237][T12472] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 463.464637][T12469] C: renamed from team_slave_0 [ 463.467883][T12472] CPU: 1 PID: 12472 Comm: syz.6.2345 Not tainted syzkaller #0 [ 463.477047][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 463.487134][T12472] Call Trace: [ 463.490440][T12472] [ 463.493395][T12472] dump_stack_lvl+0x16c/0x230 [ 463.498113][T12472] ? show_regs_print_info+0x20/0x20 [ 463.503364][T12472] ? load_image+0x3b0/0x3b0 [ 463.507906][T12472] ? __might_fault+0xaa/0x120 [ 463.512621][T12472] ? __lock_acquire+0x7c80/0x7c80 [ 463.517681][T12472] should_fail_ex+0x39d/0x4d0 [ 463.522397][T12472] _copy_from_user+0x2f/0xe0 [ 463.527002][T12472] __sys_bpf+0x1e9/0x800 [ 463.531254][T12472] ? bpf_link_show_fdinfo+0x350/0x350 [ 463.536642][T12472] ? lock_chain_count+0x20/0x20 [ 463.541508][T12472] __x64_sys_bpf+0x7c/0x90 [ 463.545936][T12472] do_syscall_64+0x55/0xb0 [ 463.550367][T12472] ? clear_bhb_loop+0x40/0x90 [ 463.555044][T12472] ? clear_bhb_loop+0x40/0x90 [ 463.559734][T12472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.565634][T12472] RIP: 0033:0x7f1f4a78efc9 [ 463.570070][T12472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.589680][T12472] RSP: 002b:00007f1f4b66f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.598125][T12472] RAX: ffffffffffffffda RBX: 00007f1f4a9e5fa0 RCX: 00007f1f4a78efc9 [ 463.606102][T12472] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 463.614076][T12472] RBP: 00007f1f4b66f090 R08: 0000000000000000 R09: 0000000000000000 [ 463.622052][T12472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.630024][T12472] R13: 00007f1f4a9e6038 R14: 00007f1f4a9e5fa0 R15: 00007ffc0c2b0c38 [ 463.638016][T12472] [ 463.658776][T12469] netlink: 'syz.0.2344': attribute type 3 has an invalid length. [ 463.668240][T12469] netlink: 'syz.0.2344': attribute type 1 has an invalid length. [ 463.702293][T12469] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2344'. [ 465.200365][T12507] C: renamed from team_slave_0 (while UP) [ 465.287175][T12507] netlink: 'syz.4.2363': attribute type 3 has an invalid length. [ 465.306002][T12507] netlink: 'syz.4.2363': attribute type 1 has an invalid length. [ 465.326104][T12507] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2363'. [ 467.034048][ T5818] Bluetooth: hci0: ISO packet for unknown connection handle 1296 [ 467.054073][T12551] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2377'. [ 469.960532][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.969666][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.977348][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 469.997595][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.006140][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 470.015405][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.209192][ T2958] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.390809][ T2958] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.564212][ T2958] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.615120][T12619] chnl_net:caif_netlink_parms(): no params data found [ 470.703686][ T2958] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.026380][T12619] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.036237][T12619] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.044393][T12619] bridge_slave_0: entered allmulticast mode [ 471.054237][T12619] bridge_slave_0: entered promiscuous mode [ 471.071269][T12619] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.082231][T12619] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.089800][T12619] bridge_slave_1: entered allmulticast mode [ 471.097417][T12619] bridge_slave_1: entered promiscuous mode [ 471.215006][T12619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.244272][T12619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.387185][T12619] team0: Port device team_slave_0 added [ 471.404905][T12619] team0: Port device team_slave_1 added [ 471.591362][T12619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.602809][T12619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.629735][T12619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.698684][T12619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.705702][T12619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.750677][T12619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.975627][T12619] hsr_slave_0: entered promiscuous mode [ 472.007516][T12619] hsr_slave_1: entered promiscuous mode [ 472.093683][ T5104] Bluetooth: hci2: command tx timeout [ 474.157925][ T5104] Bluetooth: hci2: command tx timeout [ 474.915747][T12738] netlink: 'syz.4.2435': attribute type 21 has an invalid length. [ 475.000463][ T2958] hsr_slave_0: left promiscuous mode [ 475.013482][ T2958] hsr_slave_1: left promiscuous mode [ 475.031841][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.044084][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.061247][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.073236][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.126361][ T2958] veth1_vlan: left promiscuous mode [ 475.135689][ T2958] veth0_vlan: left promiscuous mode [ 475.145341][T12743] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.2437'. [ 475.843881][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.886387][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.201574][ T2958] bond0 (unregistering): Released all slaves [ 476.238437][ T5104] Bluetooth: hci2: command tx timeout [ 478.321431][ T5104] Bluetooth: hci2: command tx timeout [ 478.556496][T12619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 478.613746][T12619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 478.647348][T12619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.689271][T12619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.755619][T12775] IPv6: Can't replace route, no match found [ 478.793266][T12775] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 479.086875][T12619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.151538][T12619] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.182395][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.189606][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.224050][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.231252][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.364010][T12803] netlink: 'syz.6.2450': attribute type 21 has an invalid length. [ 481.967231][T12619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.091585][T12619] veth0_vlan: entered promiscuous mode [ 482.141990][T12619] veth1_vlan: entered promiscuous mode [ 482.264881][T12833] IPv6: Can't replace route, no match found [ 482.291908][T12619] veth0_macvtap: entered promiscuous mode [ 482.325563][T12833] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 482.384585][T12619] veth1_macvtap: entered promiscuous mode [ 482.436335][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.449583][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.460661][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.471552][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.482307][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.493250][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.505343][T12619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.535715][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.580223][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.597641][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.608621][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.638195][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.666396][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.679068][T12619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.691489][T12619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.712776][T12619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.757432][T12619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.787336][T12619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.685894][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.721124][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.868497][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.877124][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.060704][T12901] netlink: 'syz.4.2472': attribute type 12 has an invalid length. [ 487.079766][T12901] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.2472'. [ 487.666191][T12923] netlink: 'syz.4.2481': attribute type 12 has an invalid length. [ 487.680594][T12923] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.2481'. [ 487.912880][T12933] netlink: 'syz.6.2484': attribute type 1 has an invalid length. [ 487.924027][T12933] netlink: 'syz.6.2484': attribute type 4 has an invalid length. [ 487.934868][T12933] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2484'. [ 490.187485][T12954] netlink: 'syz.6.2492': attribute type 12 has an invalid length. [ 490.195695][T12954] netlink: 14585 bytes leftover after parsing attributes in process `syz.6.2492'. [ 491.053221][T12992] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2506'. [ 492.597144][T12997] ªªªªª»: renamed from bond_slave_1 [ 492.802986][T13000] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2507'. [ 494.964832][T13020] sit0: entered promiscuous mode [ 494.995462][T13022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2518'. [ 495.292088][T13039] netlink: 'syz.0.2524': attribute type 21 has an invalid length. [ 495.306916][T13039] netlink: 'syz.0.2524': attribute type 6 has an invalid length. [ 495.315087][T13039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2524'. [ 500.706448][T13131] sit0: entered allmulticast mode [ 500.785794][T13131] sit0: entered promiscuous mode [ 501.620453][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.627011][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.875034][T13158] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.2567'. [ 503.711886][T13195] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 505.140419][T13179] sit0: entered allmulticast mode [ 505.155984][T13185] sit0: entered promiscuous mode [ 507.306594][T13225] ªªªªª»: renamed from bond_slave_1 (while UP) [ 507.538771][T13242] netlink: 'syz.5.2595': attribute type 12 has an invalid length. [ 507.547774][T13242] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.2595'. [ 508.469378][T13271] netlink: 'syz.6.2606': attribute type 12 has an invalid length. [ 508.516793][T13271] netlink: 14585 bytes leftover after parsing attributes in process `syz.6.2606'. [ 510.732559][T13309] netlink: 'syz.6.2617': attribute type 12 has an invalid length. [ 510.741353][T13309] netlink: 14585 bytes leftover after parsing attributes in process `syz.6.2617'. [ 511.977365][T13340] netlink: 'syz.4.2627': attribute type 12 has an invalid length. [ 511.998259][T13340] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.2627'. [ 516.981466][T13413] delete_channel: no stack [ 518.481145][T13418] netlink: 'syz.6.2651': attribute type 12 has an invalid length. [ 518.494139][T13418] netlink: 14585 bytes leftover after parsing attributes in process `syz.6.2651'. [ 523.758205][T13471] netlink: 'syz.5.2669': attribute type 28 has an invalid length. [ 523.781767][T13471] netlink: 'syz.5.2669': attribute type 29 has an invalid length. [ 523.792773][T13471] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2669'. [ 526.133785][T13500] FAULT_INJECTION: forcing a failure. [ 526.133785][T13500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.155074][T13500] CPU: 0 PID: 13500 Comm: syz.5.2680 Not tainted syzkaller #0 [ 526.162599][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 526.172677][T13500] Call Trace: [ 526.175965][T13500] [ 526.178902][T13500] dump_stack_lvl+0x16c/0x230 [ 526.183595][T13500] ? show_regs_print_info+0x20/0x20 [ 526.188802][T13500] ? load_image+0x3b0/0x3b0 [ 526.193307][T13500] ? __might_fault+0xaa/0x120 [ 526.198034][T13500] ? __lock_acquire+0x7c80/0x7c80 [ 526.203079][T13500] ? seqcount_lockdep_reader_access+0x160/0x1c0 [ 526.209341][T13500] should_fail_ex+0x39d/0x4d0 [ 526.214033][T13500] _copy_from_user+0x2f/0xe0 [ 526.218635][T13500] __sys_bpf+0x1e9/0x800 [ 526.222883][T13500] ? bpf_link_show_fdinfo+0x350/0x350 [ 526.228270][T13500] ? lock_chain_count+0x20/0x20 [ 526.233127][T13500] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 526.239122][T13500] __x64_sys_bpf+0x7c/0x90 [ 526.243544][T13500] do_syscall_64+0x55/0xb0 [ 526.247975][T13500] ? clear_bhb_loop+0x40/0x90 [ 526.252664][T13500] ? clear_bhb_loop+0x40/0x90 [ 526.257342][T13500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.263261][T13500] RIP: 0033:0x7fe925f8efc9 [ 526.267692][T13500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.287300][T13500] RSP: 002b:00007fe926e38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.295723][T13500] RAX: ffffffffffffffda RBX: 00007fe9261e5fa0 RCX: 00007fe925f8efc9 [ 526.303701][T13500] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 526.311767][T13500] RBP: 00007fe926e38090 R08: 0000000000000000 R09: 0000000000000000 [ 526.319746][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.327730][T13500] R13: 00007fe9261e6038 R14: 00007fe9261e5fa0 R15: 00007ffd4e43c858 [ 526.335727][T13500] [ 529.344793][T13498] hsr0: entered promiscuous mode [ 529.351295][T13498] hsr0: entered allmulticast mode [ 529.356368][T13498] hsr_slave_0: entered allmulticast mode [ 529.362206][T13498] hsr_slave_1: entered allmulticast mode [ 531.781422][T13524] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2689'. [ 532.055194][T13537] netlink: 'syz.5.2693': attribute type 39 has an invalid length. [ 532.072111][T13540] FAULT_INJECTION: forcing a failure. [ 532.072111][T13540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.101304][T13540] CPU: 0 PID: 13540 Comm: syz.0.2694 Not tainted syzkaller #0 [ 532.108854][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.118944][T13540] Call Trace: [ 532.122268][T13540] [ 532.125233][T13540] dump_stack_lvl+0x16c/0x230 [ 532.129986][T13540] ? show_regs_print_info+0x20/0x20 [ 532.135243][T13540] ? load_image+0x3b0/0x3b0 [ 532.139793][T13540] ? __might_fault+0xaa/0x120 [ 532.144499][T13540] ? __lock_acquire+0x7c80/0x7c80 [ 532.149564][T13540] should_fail_ex+0x39d/0x4d0 [ 532.154299][T13540] _copy_from_user+0x2f/0xe0 [ 532.158933][T13540] ___sys_sendmsg+0x159/0x290 [ 532.163657][T13540] ? __sys_sendmsg+0x270/0x270 [ 532.168486][T13540] ? lockdep_hardirqs_on+0x98/0x150 [ 532.173749][T13540] __se_sys_sendmsg+0x1a5/0x270 [ 532.178667][T13540] ? __x64_sys_sendmsg+0x80/0x80 [ 532.183667][T13540] ? syscall_enter_from_user_mode+0x2e/0x80 [ 532.189595][T13540] do_syscall_64+0x55/0xb0 [ 532.194074][T13540] ? clear_bhb_loop+0x40/0x90 [ 532.198803][T13540] ? clear_bhb_loop+0x40/0x90 [ 532.203533][T13540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.209466][T13540] RIP: 0033:0x7f0c7118efc9 [ 532.213922][T13540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.233572][T13540] RSP: 002b:00007f0c72001038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.242033][T13540] RAX: ffffffffffffffda RBX: 00007f0c713e5fa0 RCX: 00007f0c7118efc9 [ 532.250045][T13540] RDX: 0000000020000800 RSI: 0000200000000940 RDI: 0000000000000008 [ 532.258048][T13540] RBP: 00007f0c72001090 R08: 0000000000000000 R09: 0000000000000000 [ 532.266052][T13540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.274087][T13540] R13: 00007f0c713e6038 R14: 00007f0c713e5fa0 R15: 00007ffcb6ad0998 [ 532.282086][T13540] [ 534.771038][T13582] netlink: 'syz.5.2707': attribute type 3 has an invalid length. [ 534.782695][T13582] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2707'. [ 534.910319][T13592] FAULT_INJECTION: forcing a failure. [ 534.910319][T13592] name failslab, interval 1, probability 0, space 0, times 0 [ 534.997962][T13592] CPU: 1 PID: 13592 Comm: syz.6.2708 Not tainted syzkaller #0 [ 535.005533][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.015667][T13592] Call Trace: [ 535.019009][T13592] [ 535.021986][T13592] dump_stack_lvl+0x16c/0x230 [ 535.026740][T13592] ? show_regs_print_info+0x20/0x20 [ 535.032023][T13592] ? load_image+0x3b0/0x3b0 [ 535.036575][T13592] ? __lock_acquire+0x1260/0x7c80 [ 535.041713][T13592] should_fail_ex+0x39d/0x4d0 [ 535.046490][T13592] should_failslab+0x9/0x20 [ 535.051059][T13592] slab_pre_alloc_hook+0x59/0x310 [ 535.056154][T13592] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 535.062036][T13592] ? ___neigh_create+0x6d2/0x2440 [ 535.067160][T13592] ? ___neigh_create+0x6d2/0x2440 [ 535.072258][T13592] __kmem_cache_alloc_node+0x53/0x260 [ 535.077767][T13592] ? ___neigh_create+0x6d2/0x2440 [ 535.082847][T13592] __kmalloc+0xa4/0x240 [ 535.087076][T13592] ___neigh_create+0x6d2/0x2440 [ 535.092055][T13592] ip_neigh_gw4+0x35a/0x4e0 [ 535.096638][T13592] ? ip_finish_output2+0x11d0/0x11d0 [ 535.102010][T13592] ? nf_hook_slow+0x1b4/0x200 [ 535.106774][T13592] ip_finish_output2+0xf1d/0x11d0 [ 535.111865][T13592] ? ip_finish_output2+0x45c/0x11d0 [ 535.117148][T13592] ? ip_mc_finish_output+0x250/0x250 [ 535.122506][T13592] ? ip_fragment+0x210/0x210 [ 535.127174][T13592] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 535.132118][T13592] ? ip_finish_output+0x3ef/0x4c0 [ 535.137227][T13592] ip_send_skb+0x12f/0x1d0 [ 535.141733][T13592] udp_send_skb+0xa37/0x13a0 [ 535.146475][T13592] udp_sendmsg+0x1ae0/0x2380 [ 535.151134][T13592] ? release_sock+0x2f/0x1c0 [ 535.155835][T13592] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 535.160772][T13592] ? udp_cmsg_send+0x350/0x350 [ 535.165636][T13592] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 535.171753][T13592] ? lock_chain_count+0x20/0x20 [ 535.176674][T13592] ? inet_sendmsg+0x14b/0x2f0 [ 535.181453][T13592] ? __local_bh_enable_ip+0x12e/0x1c0 [ 535.186885][T13592] ? _local_bh_enable+0xa0/0xa0 [ 535.191840][T13592] ? inet_sendmsg+0x14b/0x2f0 [ 535.196594][T13592] ? inet_sendmsg+0x14b/0x2f0 [ 535.201338][T13592] ? inet_send_prepare+0x260/0x260 [ 535.206524][T13592] ____sys_sendmsg+0x5bf/0x950 [ 535.211406][T13592] ? __sys_sendmsg_sock+0x30/0x30 [ 535.216504][T13592] ? __import_iovec+0x3fa/0x860 [ 535.221459][T13592] ? import_iovec+0x73/0xa0 [ 535.226047][T13592] ___sys_sendmsg+0x220/0x290 [ 535.230820][T13592] ? __sys_sendmsg+0x270/0x270 [ 535.235752][T13592] ? __lock_acquire+0x7c80/0x7c80 [ 535.240893][T13592] __se_sys_sendmsg+0x1a5/0x270 [ 535.245822][T13592] ? __x64_sys_sendmsg+0x80/0x80 [ 535.250886][T13592] ? lockdep_hardirqs_on+0x98/0x150 [ 535.256164][T13592] do_syscall_64+0x55/0xb0 [ 535.260639][T13592] ? clear_bhb_loop+0x40/0x90 [ 535.265388][T13592] ? clear_bhb_loop+0x40/0x90 [ 535.270128][T13592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.276070][T13592] RIP: 0033:0x7f1f4a78efc9 [ 535.280545][T13592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.300209][T13592] RSP: 002b:00007f1f4b66f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.308702][T13592] RAX: ffffffffffffffda RBX: 00007f1f4a9e5fa0 RCX: 00007f1f4a78efc9 [ 535.316732][T13592] RDX: 0000000020000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 535.324760][T13592] RBP: 00007f1f4b66f090 R08: 0000000000000000 R09: 0000000000000000 [ 535.332794][T13592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.340814][T13592] R13: 00007f1f4a9e6038 R14: 00007f1f4a9e5fa0 R15: 00007ffc0c2b0c38 [ 535.348900][T13592] [ 537.200778][T13602] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2711'. [ 537.210873][T13604] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2712'. [ 541.471714][T13647] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2724'. [ 541.624131][T13652] netlink: 'syz.4.2725': attribute type 3 has an invalid length. [ 541.646586][T13652] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2725'. [ 541.656493][T13652] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 544.192077][T13702] netlink: 'syz.0.2742': attribute type 10 has an invalid length. [ 544.222684][T13702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2742'. [ 544.265076][T13702] batman_adv: batadv0: Adding interface: virt_wifi0 [ 544.279278][T13702] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.375898][T13702] batman_adv: batadv0: Interface activated: virt_wifi0 [ 544.542241][T13712] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2745'. [ 545.336523][T13715] FAULT_INJECTION: forcing a failure. [ 545.336523][T13715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.352990][T13715] CPU: 1 PID: 13715 Comm: syz.5.2746 Not tainted syzkaller #0 [ 545.360503][T13715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 545.370571][T13715] Call Trace: [ 545.373862][T13715] [ 545.376807][T13715] dump_stack_lvl+0x16c/0x230 [ 545.381525][T13715] ? show_regs_print_info+0x20/0x20 [ 545.386757][T13715] ? load_image+0x3b0/0x3b0 [ 545.391289][T13715] ? __might_fault+0xaa/0x120 [ 545.395990][T13715] ? __lock_acquire+0x7c80/0x7c80 [ 545.401059][T13715] should_fail_ex+0x39d/0x4d0 [ 545.405784][T13715] _copy_to_user+0x2f/0xa0 [ 545.410230][T13715] bpf_test_finish+0x19a/0x620 [ 545.415025][T13715] ? convert___skb_to_skb+0x590/0x590 [ 545.420433][T13715] ? convert_skb_to___skb+0x420/0x420 [ 545.425832][T13715] ? slab_build_skb+0x25f/0x3f0 [ 545.430715][T13715] bpf_prog_test_run_skb+0xc28/0x11c0 [ 545.436130][T13715] ? cpu_online+0x60/0x60 [ 545.440490][T13715] bpf_prog_test_run+0x321/0x390 [ 545.445449][T13715] __sys_bpf+0x440/0x800 [ 545.449726][T13715] ? bpf_link_show_fdinfo+0x350/0x350 [ 545.455136][T13715] ? lock_chain_count+0x20/0x20 [ 545.460023][T13715] __x64_sys_bpf+0x7c/0x90 [ 545.464462][T13715] do_syscall_64+0x55/0xb0 [ 545.468906][T13715] ? clear_bhb_loop+0x40/0x90 [ 545.473598][T13715] ? clear_bhb_loop+0x40/0x90 [ 545.478301][T13715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.484229][T13715] RIP: 0033:0x7fe925f8efc9 [ 545.488668][T13715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.508297][T13715] RSP: 002b:00007fe926e38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 545.516775][T13715] RAX: ffffffffffffffda RBX: 00007fe9261e5fa0 RCX: 00007fe925f8efc9 [ 545.524763][T13715] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 545.532935][T13715] RBP: 00007fe926e38090 R08: 0000000000000000 R09: 0000000000000000 [ 545.540926][T13715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.548939][T13715] R13: 00007fe9261e6038 R14: 00007fe9261e5fa0 R15: 00007ffd4e43c858 [ 545.556954][T13715] [ 549.369783][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 549.384681][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 549.393475][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 549.402613][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 549.410747][ T5818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 549.419786][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 550.664777][T13743] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2754'. [ 550.905612][T13749] delete_channel: no stack [ 551.249801][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.489890][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.518799][ T5818] Bluetooth: hci0: command tx timeout [ 553.137548][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.602890][ T5818] Bluetooth: hci0: command tx timeout [ 554.928871][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.217982][T13745] chnl_net:caif_netlink_parms(): no params data found [ 555.678448][ T5818] Bluetooth: hci0: command tx timeout [ 556.640225][T13816] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2770'. [ 557.762349][ T5818] Bluetooth: hci0: command tx timeout [ 558.405616][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.413267][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.420556][T13745] bridge_slave_0: entered allmulticast mode [ 558.427604][T13745] bridge_slave_0: entered promiscuous mode [ 558.436965][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.445052][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.452468][T13745] bridge_slave_1: entered allmulticast mode [ 558.460115][T13745] bridge_slave_1: entered promiscuous mode [ 560.314184][T13850] FAULT_INJECTION: forcing a failure. [ 560.314184][T13850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.328022][T13850] CPU: 0 PID: 13850 Comm: syz.6.2776 Not tainted syzkaller #0 [ 560.335522][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 560.345610][T13850] Call Trace: [ 560.348906][T13850] [ 560.351839][T13850] dump_stack_lvl+0x16c/0x230 [ 560.356540][T13850] ? show_regs_print_info+0x20/0x20 [ 560.361764][T13850] ? load_image+0x3b0/0x3b0 [ 560.366272][T13850] ? __lock_acquire+0x7c80/0x7c80 [ 560.371307][T13850] ? snprintf+0xdb/0x120 [ 560.375557][T13850] should_fail_ex+0x39d/0x4d0 [ 560.380244][T13850] _copy_to_user+0x2f/0xa0 [ 560.384683][T13850] simple_read_from_buffer+0xe7/0x150 [ 560.390081][T13850] proc_fail_nth_read+0x1e3/0x250 [ 560.395138][T13850] ? proc_fault_inject_write+0x340/0x340 [ 560.400792][T13850] ? fsnotify_perm+0x271/0x5e0 [ 560.405582][T13850] ? proc_fault_inject_write+0x340/0x340 [ 560.411242][T13850] vfs_read+0x27e/0x920 [ 560.415415][T13850] ? kernel_read+0x1e0/0x1e0 [ 560.420030][T13850] ? __fget_files+0x28/0x4d0 [ 560.424620][T13850] ? __fget_files+0x44a/0x4d0 [ 560.429297][T13850] ? __fdget_pos+0x2a3/0x330 [ 560.433903][T13850] ? ksys_read+0x75/0x250 [ 560.438243][T13850] ksys_read+0x147/0x250 [ 560.442523][T13850] ? vfs_write+0x940/0x940 [ 560.446971][T13850] ? lockdep_hardirqs_on+0x98/0x150 [ 560.452168][T13850] do_syscall_64+0x55/0xb0 [ 560.456619][T13850] ? clear_bhb_loop+0x40/0x90 [ 560.461326][T13850] ? clear_bhb_loop+0x40/0x90 [ 560.466002][T13850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.471895][T13850] RIP: 0033:0x7f1f4a78d9dc [ 560.476310][T13850] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 560.495921][T13850] RSP: 002b:00007f1f4b66f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 560.504339][T13850] RAX: ffffffffffffffda RBX: 00007f1f4a9e5fa0 RCX: 00007f1f4a78d9dc [ 560.512571][T13850] RDX: 000000000000000f RSI: 00007f1f4b66f0a0 RDI: 0000000000000004 [ 560.520635][T13850] RBP: 00007f1f4b66f090 R08: 0000000000000000 R09: 0000000000000000 [ 560.528628][T13850] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 560.536681][T13850] R13: 00007f1f4a9e6038 R14: 00007f1f4a9e5fa0 R15: 00007ffc0c2b0c38 [ 560.544676][T13850] [ 562.089783][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.214453][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.554916][T13745] team0: Port device team_slave_0 added [ 562.671952][T13745] team0: Port device team_slave_1 added [ 562.738672][T13877] FAULT_INJECTION: forcing a failure. [ 562.738672][T13877] name failslab, interval 1, probability 0, space 0, times 0 [ 562.763729][T13877] CPU: 0 PID: 13877 Comm: syz.5.2783 Not tainted syzkaller #0 [ 562.771293][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 562.781391][T13877] Call Trace: [ 562.784733][T13877] [ 562.787700][T13877] dump_stack_lvl+0x16c/0x230 [ 562.792430][T13877] ? show_regs_print_info+0x20/0x20 [ 562.797667][T13877] ? load_image+0x3b0/0x3b0 [ 562.802220][T13877] ? __might_sleep+0xe0/0xe0 [ 562.806855][T13877] ? __lock_acquire+0x7c80/0x7c80 [ 562.811939][T13877] should_fail_ex+0x39d/0x4d0 [ 562.816689][T13877] should_failslab+0x9/0x20 [ 562.821252][T13877] slab_pre_alloc_hook+0x59/0x310 [ 562.826341][T13877] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 562.832020][T13877] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 562.837705][T13877] __kmem_cache_alloc_node+0x53/0x260 [ 562.843146][T13877] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 562.848834][T13877] __kmalloc_node+0xa4/0x230 [ 562.853508][T13877] memcg_alloc_slab_cgroups+0x87/0x130 [ 562.859016][T13877] slab_post_alloc_hook+0xfc/0x4d0 [ 562.864195][T13877] kmem_cache_alloc_node+0x150/0x330 [ 562.869563][T13877] ? __alloc_skb+0x108/0x2c0 [ 562.874220][T13877] __alloc_skb+0x108/0x2c0 [ 562.878715][T13877] alloc_skb_with_frags+0xca/0x7c0 [ 562.883870][T13877] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 562.889927][T13877] sock_alloc_send_pskb+0x857/0x990 [ 562.895181][T13877] ? tomoyo_check_unix_address+0x158/0x7a0 [ 562.901060][T13877] ? sock_kzfree_s+0x50/0x50 [ 562.905726][T13877] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 562.911843][T13877] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 562.918159][T13877] unix_dgram_sendmsg+0x5a1/0x1720 [ 562.923361][T13877] ? aa_sk_perm+0x7fc/0x930 [ 562.927926][T13877] ? unix_dgram_poll+0x670/0x670 [ 562.932910][T13877] ? tomoyo_socket_sendmsg_permission+0x1da/0x2f0 [ 562.939386][T13877] ? aa_sock_msg_perm+0x94/0x150 [ 562.944369][T13877] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 562.949712][T13877] ? security_socket_sendmsg+0x80/0xa0 [ 562.955217][T13877] ? unix_dgram_poll+0x670/0x670 [ 562.960214][T13877] ____sys_sendmsg+0x5bf/0x950 [ 562.965059][T13877] ? __asan_memset+0x22/0x40 [ 562.969713][T13877] ? __sys_sendmsg_sock+0x30/0x30 [ 562.974882][T13877] ? __import_iovec+0x3fa/0x860 [ 562.979811][T13877] ? import_iovec+0x73/0xa0 [ 562.984369][T13877] ___sys_sendmsg+0x220/0x290 [ 562.989110][T13877] ? __sys_sendmsg+0x270/0x270 [ 562.993965][T13877] ? __lock_acquire+0x7c80/0x7c80 [ 562.999081][T13877] __se_sys_sendmsg+0x1a5/0x270 [ 563.003989][T13877] ? __x64_sys_sendmsg+0x80/0x80 [ 563.009007][T13877] ? lockdep_hardirqs_on+0x98/0x150 [ 563.014251][T13877] do_syscall_64+0x55/0xb0 [ 563.018721][T13877] ? clear_bhb_loop+0x40/0x90 [ 563.023446][T13877] ? clear_bhb_loop+0x40/0x90 [ 563.028185][T13877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.034121][T13877] RIP: 0033:0x7fe925f8efc9 [ 563.038578][T13877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.058234][T13877] RSP: 002b:00007fe926e38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.066715][T13877] RAX: ffffffffffffffda RBX: 00007fe9261e5fa0 RCX: 00007fe925f8efc9 [ 563.074733][T13877] RDX: 0000000020000000 RSI: 0000200000002380 RDI: 0000000000000005 [ 563.082748][T13877] RBP: 00007fe926e38090 R08: 0000000000000000 R09: 0000000000000000 [ 563.090769][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.098781][T13877] R13: 00007fe9261e6038 R14: 00007fe9261e5fa0 R15: 00007ffd4e43c858 [ 563.106841][T13877] [ 563.139114][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.145487][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.947188][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.954450][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.980952][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.617479][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.647718][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.759250][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.865244][T13909] FAULT_INJECTION: forcing a failure. [ 566.865244][T13909] name failslab, interval 1, probability 0, space 0, times 0 [ 566.901869][T13909] CPU: 1 PID: 13909 Comm: syz.6.2788 Not tainted syzkaller #0 [ 566.909405][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.919514][T13909] Call Trace: [ 566.922819][T13909] [ 566.925770][T13909] dump_stack_lvl+0x16c/0x230 [ 566.930503][T13909] ? show_regs_print_info+0x20/0x20 [ 566.935749][T13909] ? load_image+0x3b0/0x3b0 [ 566.940291][T13909] ? __might_sleep+0xe0/0xe0 [ 566.944914][T13909] ? __lock_acquire+0x7c80/0x7c80 [ 566.949968][T13909] should_fail_ex+0x39d/0x4d0 [ 566.954674][T13909] should_failslab+0x9/0x20 [ 566.959207][T13909] slab_pre_alloc_hook+0x59/0x310 [ 566.964250][T13909] ? kvmalloc_node+0x70/0x180 [ 566.968946][T13909] ? kvmalloc_node+0x70/0x180 [ 566.973644][T13909] __kmem_cache_alloc_node+0x53/0x260 [ 566.979034][T13909] ? kvmalloc_node+0x70/0x180 [ 566.983722][T13909] __kmalloc_node+0xa4/0x230 [ 566.988344][T13909] kvmalloc_node+0x70/0x180 [ 566.992939][T13909] bpf_test_run_xdp_live+0x1a7/0x1a20 [ 566.998323][T13909] ? 0xffffffffa0004740 [ 567.002502][T13909] ? bpf_dispatcher_change_prog+0xa76/0xcc0 [ 567.008409][T13909] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.014577][T13909] ? xdp_convert_md_to_buff+0x330/0x330 [ 567.020155][T13909] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 567.026406][T13909] ? _copy_from_user+0xa5/0xe0 [ 567.031181][T13909] ? bpf_test_init+0x134/0x150 [ 567.035951][T13909] ? xdp_convert_md_to_buff+0x5b/0x330 [ 567.041429][T13909] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 567.046726][T13909] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.052888][T13909] ? dev_put+0x80/0x80 [ 567.056971][T13909] ? dev_put+0x80/0x80 [ 567.061051][T13909] bpf_prog_test_run+0x321/0x390 [ 567.066006][T13909] __sys_bpf+0x440/0x800 [ 567.070258][T13909] ? bpf_link_show_fdinfo+0x350/0x350 [ 567.075648][T13909] ? lock_chain_count+0x20/0x20 [ 567.080511][T13909] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 567.086519][T13909] __x64_sys_bpf+0x7c/0x90 [ 567.090950][T13909] do_syscall_64+0x55/0xb0 [ 567.095513][T13909] ? clear_bhb_loop+0x40/0x90 [ 567.100198][T13909] ? clear_bhb_loop+0x40/0x90 [ 567.104880][T13909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.110781][T13909] RIP: 0033:0x7f1f4a78efc9 [ 567.115202][T13909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.134821][T13909] RSP: 002b:00007f1f4b66f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 567.143245][T13909] RAX: ffffffffffffffda RBX: 00007f1f4a9e5fa0 RCX: 00007f1f4a78efc9 [ 567.151229][T13909] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 567.159208][T13909] RBP: 00007f1f4b66f090 R08: 0000000000000000 R09: 0000000000000000 [ 567.167186][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.175176][T13909] R13: 00007f1f4a9e6038 R14: 00007f1f4a9e5fa0 R15: 00007ffc0c2b0c38 [ 567.183184][T13909] [ 567.213192][T13745] hsr_slave_0: entered promiscuous mode [ 567.228737][T13745] hsr_slave_1: entered promiscuous mode [ 567.236124][T13745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.249616][T13745] Cannot create hsr debugfs directory [ 569.969705][ T49] hsr_slave_0: left promiscuous mode [ 569.975713][ T49] hsr_slave_1: left promiscuous mode [ 569.982015][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.989673][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.997501][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.005209][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.035959][ T49] veth1_macvtap: left promiscuous mode [ 570.041631][ T49] veth0_macvtap: left promiscuous mode [ 570.047298][ T49] veth1_vlan: left promiscuous mode [ 570.052835][ T49] veth0_vlan: left promiscuous mode [ 570.572480][ T49] team0 (unregistering): Port device team_slave_1 removed [ 570.617260][ T49] team0 (unregistering): Port device C removed [ 571.211944][T13936] FAULT_INJECTION: forcing a failure. [ 571.211944][T13936] name failslab, interval 1, probability 0, space 0, times 0 [ 571.274588][T13936] CPU: 1 PID: 13936 Comm: syz.0.2795 Not tainted syzkaller #0 [ 571.282133][T13936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 571.292232][T13936] Call Trace: [ 571.295554][T13936] [ 571.298524][T13936] dump_stack_lvl+0x16c/0x230 [ 571.303264][T13936] ? show_regs_print_info+0x20/0x20 [ 571.308512][T13936] ? load_image+0x3b0/0x3b0 [ 571.313056][T13936] ? verify_lock_unused+0x140/0x140 [ 571.318306][T13936] should_fail_ex+0x39d/0x4d0 [ 571.323048][T13936] should_failslab+0x9/0x20 [ 571.327596][T13936] slab_pre_alloc_hook+0x59/0x310 [ 571.332673][T13936] kmem_cache_alloc+0x5a/0x2e0 [ 571.337464][T13936] ? skb_clone+0x1eb/0x370 [ 571.341919][T13936] skb_clone+0x1eb/0x370 [ 571.346299][T13936] __netlink_deliver_tap+0x41c/0x830 [ 571.351641][T13936] ? netlink_deliver_tap+0x2e/0x1b0 [ 571.356882][T13936] netlink_deliver_tap+0x19c/0x1b0 [ 571.362030][T13936] netlink_unicast+0x72c/0x8d0 [ 571.366843][T13936] netlink_sendmsg+0x8c1/0xbe0 [ 571.371665][T13936] ? netlink_getsockopt+0x580/0x580 [ 571.376909][T13936] ? aa_sock_msg_perm+0x94/0x150 [ 571.381888][T13936] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 571.387206][T13936] ? security_socket_sendmsg+0x80/0xa0 [ 571.392680][T13936] ? netlink_getsockopt+0x580/0x580 [ 571.397893][T13936] ____sys_sendmsg+0x5bf/0x950 [ 571.402689][T13936] ? __asan_memset+0x22/0x40 [ 571.407287][T13936] ? __sys_sendmsg_sock+0x30/0x30 [ 571.412324][T13936] ? __import_iovec+0x3fa/0x860 [ 571.417192][T13936] ? import_iovec+0x73/0xa0 [ 571.421711][T13936] ___sys_sendmsg+0x220/0x290 [ 571.426411][T13936] ? __sys_sendmsg+0x270/0x270 [ 571.431212][T13936] ? __lock_acquire+0x7c80/0x7c80 [ 571.436269][T13936] __se_sys_sendmsg+0x1a5/0x270 [ 571.441137][T13936] ? __x64_sys_sendmsg+0x80/0x80 [ 571.446118][T13936] ? lockdep_hardirqs_on+0x98/0x150 [ 571.451344][T13936] do_syscall_64+0x55/0xb0 [ 571.455773][T13936] ? clear_bhb_loop+0x40/0x90 [ 571.460467][T13936] ? clear_bhb_loop+0x40/0x90 [ 571.465152][T13936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.471051][T13936] RIP: 0033:0x7f0c7118efc9 [ 571.475474][T13936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.495096][T13936] RSP: 002b:00007f0c72001038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.503519][T13936] RAX: ffffffffffffffda RBX: 00007f0c713e5fa0 RCX: 00007f0c7118efc9 [ 571.511497][T13936] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 571.519472][T13936] RBP: 00007f0c72001090 R08: 0000000000000000 R09: 0000000000000000 [ 571.527452][T13936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.535460][T13936] R13: 00007f0c713e6038 R14: 00007f0c713e5fa0 R15: 00007ffcb6ad0998 [ 571.543456][T13936] [ 575.643456][T13987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.637085][T13989] netlink: 'syz.6.2806': attribute type 10 has an invalid length. [ 576.663719][T13989] team0: Port device wlan1 added [ 576.742645][T14002] netlink: 'syz.5.2808': attribute type 39 has an invalid length. [ 576.961922][T14012] netlink: 'syz.6.2810': attribute type 41 has an invalid length. [ 576.970170][T14012] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2810'. [ 577.337729][T14027] FAULT_INJECTION: forcing a failure. [ 577.337729][T14027] name failslab, interval 1, probability 0, space 0, times 0 [ 577.352694][T14027] CPU: 1 PID: 14027 Comm: syz.6.2813 Not tainted syzkaller #0 [ 577.360181][T14027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.370276][T14027] Call Trace: [ 577.373570][T14027] [ 577.376517][T14027] dump_stack_lvl+0x16c/0x230 [ 577.381228][T14027] ? show_regs_print_info+0x20/0x20 [ 577.386440][T14027] ? load_image+0x3b0/0x3b0 [ 577.390959][T14027] should_fail_ex+0x39d/0x4d0 [ 577.395652][T14027] should_failslab+0x9/0x20 [ 577.400166][T14027] slab_pre_alloc_hook+0x59/0x310 [ 577.405197][T14027] kmem_cache_alloc+0x5a/0x2e0 [ 577.409979][T14027] ? radix_tree_node_alloc+0x7e/0x3a0 [ 577.415411][T14027] radix_tree_node_alloc+0x7e/0x3a0 [ 577.420635][T14027] idr_get_free+0x2b3/0xa60 [ 577.425159][T14027] idr_alloc_cyclic+0x1a2/0x530 [ 577.430031][T14027] ? idr_alloc+0x2c0/0x2c0 [ 577.434463][T14027] ? do_raw_spin_lock+0x121/0x2c0 [ 577.439526][T14027] ? bpf_map_alloc_id+0x21/0xd0 [ 577.444382][T14027] bpf_map_alloc_id+0x40/0xd0 [ 577.449065][T14027] map_create+0xe25/0x12f0 [ 577.453496][T14027] __sys_bpf+0x5f0/0x800 [ 577.457749][T14027] ? bpf_link_show_fdinfo+0x350/0x350 [ 577.463158][T14027] ? lock_chain_count+0x20/0x20 [ 577.468019][T14027] __x64_sys_bpf+0x7c/0x90 [ 577.472436][T14027] do_syscall_64+0x55/0xb0 [ 577.476856][T14027] ? clear_bhb_loop+0x40/0x90 [ 577.481540][T14027] ? clear_bhb_loop+0x40/0x90 [ 577.486225][T14027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.492129][T14027] RIP: 0033:0x7f1f4a78efc9 [ 577.496563][T14027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.516176][T14027] RSP: 002b:00007f1f4b64e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.524599][T14027] RAX: ffffffffffffffda RBX: 00007f1f4a9e6090 RCX: 00007f1f4a78efc9 [ 577.532666][T14027] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0100000000000000 [ 577.540662][T14027] RBP: 00007f1f4b64e090 R08: 0000000000000000 R09: 0000000000000000 [ 577.548641][T14027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.556618][T14027] R13: 00007f1f4a9e6128 R14: 00007f1f4a9e6090 R15: 00007ffc0c2b0c38 [ 577.564614][T14027] [ 579.110850][T13745] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 579.188266][T13745] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 579.240479][T13745] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 579.265047][T13745] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 581.406209][T14071] netlink: 'syz.5.2821': attribute type 10 has an invalid length. [ 581.419510][T14071] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2821'. [ 581.433443][T14071] team0: entered promiscuous mode [ 581.440079][T14071] team_slave_0: entered promiscuous mode [ 581.446131][T14071] team_slave_1: entered promiscuous mode [ 581.456628][T14071] team0: entered allmulticast mode [ 581.468035][T14071] team_slave_0: entered allmulticast mode [ 581.483918][T14071] team_slave_1: entered allmulticast mode [ 581.498942][T14071] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 581.540518][T14072] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2821'. [ 585.643785][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.759103][T13745] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.814124][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.821329][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.875482][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.882759][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.091104][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.565669][T14197] netlink: 'syz.5.2847': attribute type 10 has an invalid length. [ 591.580693][T14197] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2847'. [ 591.596487][T14197] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 591.651698][T13745] veth0_vlan: entered promiscuous mode [ 591.670778][T13745] veth1_vlan: entered promiscuous mode [ 591.725611][T13745] veth0_macvtap: entered promiscuous mode [ 591.735307][T13745] veth1_macvtap: entered promiscuous mode [ 591.759642][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.770977][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.781059][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.793685][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.803804][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.814421][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.826088][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.845445][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.856174][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.866130][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.876807][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.888293][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.898846][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.909988][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.931427][T13745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.940657][T13745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.950106][T13745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.959500][T13745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.052160][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.062041][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.129743][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.137622][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.578177][T14205] dvmrp1: tun_chr_ioctl cmd 99999999 [ 593.259396][T14217] FAULT_INJECTION: forcing a failure. [ 593.259396][T14217] name failslab, interval 1, probability 0, space 0, times 0 [ 593.280039][T14217] CPU: 0 PID: 14217 Comm: syz.4.2852 Not tainted syzkaller #0 [ 593.287574][T14217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 593.297689][T14217] Call Trace: [ 593.301000][T14217] [ 593.303958][T14217] dump_stack_lvl+0x16c/0x230 [ 593.308685][T14217] ? verify_lock_unused+0x140/0x140 [ 593.313933][T14217] ? show_regs_print_info+0x20/0x20 [ 593.319200][T14217] ? load_image+0x3b0/0x3b0 [ 593.323747][T14217] ? crng_make_state+0x349/0x700 [ 593.328736][T14217] ? lockdep_hardirqs_on+0x98/0x150 [ 593.334003][T14217] should_fail_ex+0x39d/0x4d0 [ 593.338737][T14217] should_failslab+0x9/0x20 [ 593.343291][T14217] slab_pre_alloc_hook+0x59/0x310 [ 593.348364][T14217] ? sctp_add_bind_addr+0x8c/0x360 [ 593.353526][T14217] __kmem_cache_alloc_node+0x53/0x260 [ 593.358956][T14217] ? sctp_add_bind_addr+0x8c/0x360 [ 593.364116][T14217] kmalloc_trace+0x2a/0xe0 [ 593.368584][T14217] sctp_add_bind_addr+0x8c/0x360 [ 593.373568][T14217] sctp_copy_local_addr_list+0x30c/0x4e0 [ 593.379242][T14217] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 593.385006][T14217] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 593.391109][T14217] ? sctp_v6_is_any+0x64/0x70 [ 593.393478][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 593.395805][T14217] ? sctp_copy_one_addr+0x8c/0x350 [ 593.405228][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 593.408008][T14217] sctp_bind_addr_copy+0xb3/0x3c0 [ 593.408045][T14217] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 593.416704][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 593.420017][T14217] sctp_connect_new_asoc+0x2da/0x690 [ 593.420078][T14217] ? __sctp_connect+0xd20/0xd20 [ 593.428858][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 593.433325][T14217] ? __local_bh_enable_ip+0x12e/0x1c0 [ 593.440331][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 593.443476][T14217] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 593.451053][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 593.455801][T14217] ? security_sctp_bind_connect+0x89/0xb0 [ 593.481123][T14217] sctp_sendmsg+0x155c/0x27e0 [ 593.485868][T14217] ? sctp_getsockopt+0xb60/0xb60 [ 593.490859][T14217] ? aa_sk_perm+0x7fc/0x930 [ 593.495387][T14217] ? aa_af_perm+0x2b0/0x2b0 [ 593.499930][T14217] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 593.506385][T14217] ? sock_rps_record_flow+0x19/0x400 [ 593.511683][T14217] ? inet_send_prepare+0x260/0x260 [ 593.516805][T14217] ? inet_sendmsg+0xe9/0x2f0 [ 593.521404][T14217] ? inet_send_prepare+0x260/0x260 [ 593.526533][T14217] ____sys_sendmsg+0x5bf/0x950 [ 593.531325][T14217] ? __sys_sendmsg_sock+0x30/0x30 [ 593.536367][T14217] ? __import_iovec+0x5f2/0x860 [ 593.541247][T14217] ? import_iovec+0x73/0xa0 [ 593.545768][T14217] ___sys_sendmsg+0x220/0x290 [ 593.550481][T14217] ? __sys_sendmsg+0x270/0x270 [ 593.555279][T14217] ? __lock_acquire+0x7c80/0x7c80 [ 593.560351][T14217] __se_sys_sendmsg+0x1a5/0x270 [ 593.565215][T14217] ? __x64_sys_sendmsg+0x80/0x80 [ 593.570289][T14217] ? lockdep_hardirqs_on+0x98/0x150 [ 593.575502][T14217] do_syscall_64+0x55/0xb0 [ 593.579936][T14217] ? clear_bhb_loop+0x40/0x90 [ 593.584627][T14217] ? clear_bhb_loop+0x40/0x90 [ 593.589314][T14217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.595212][T14217] RIP: 0033:0x7ffb2a58efc9 [ 593.599634][T14217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.619244][T14217] RSP: 002b:00007ffb2b4f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.627757][T14217] RAX: ffffffffffffffda RBX: 00007ffb2a7e5fa0 RCX: 00007ffb2a58efc9 [ 593.635737][T14217] RDX: 0000000020004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 593.643717][T14217] RBP: 00007ffb2b4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 593.651696][T14217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 593.659677][T14217] R13: 00007ffb2a7e6038 R14: 00007ffb2a7e5fa0 R15: 00007ffe2ff89bc8 [ 593.667682][T14217] [ 595.518152][ T5104] Bluetooth: hci3: command tx timeout [ 595.561972][T14234] netlink: 209820 bytes leftover after parsing attributes in process `syz.6.2856'. [ 595.820599][T14220] chnl_net:caif_netlink_parms(): no params data found [ 595.847869][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 597.600316][ T5818] Bluetooth: hci3: command tx timeout [ 599.681439][ T5818] Bluetooth: hci3: command tx timeout [ 601.768029][ T5818] Bluetooth: hci3: command tx timeout [ 603.483343][T14220] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.510235][T14220] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.527974][T14220] bridge_slave_0: entered allmulticast mode [ 603.539472][T14220] bridge_slave_0: entered promiscuous mode [ 603.599142][T14220] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.606335][T14220] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.638066][T14220] bridge_slave_1: entered allmulticast mode [ 603.664072][T14220] bridge_slave_1: entered promiscuous mode [ 603.744262][T14220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.762291][T14220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.756880][T14220] team0: Port device team_slave_0 added [ 605.765926][T14220] team0: Port device team_slave_1 added [ 605.858186][T14220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.879870][T14220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.940451][T14220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.961209][T14220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.971201][T14220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.999846][T14220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.120575][T14220] hsr_slave_0: entered promiscuous mode [ 606.128289][T14220] hsr_slave_1: entered promiscuous mode [ 606.138419][T14220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.146112][T14220] Cannot create hsr debugfs directory [ 608.360498][T14220] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.087601][T14220] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.231647][T14220] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.281663][T14361] FAULT_INJECTION: forcing a failure. [ 610.281663][T14361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.299750][T14361] CPU: 1 PID: 14361 Comm: syz.4.2893 Not tainted syzkaller #0 [ 610.307254][T14361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 610.317318][T14361] Call Trace: [ 610.320593][T14361] [ 610.323525][T14361] dump_stack_lvl+0x16c/0x230 [ 610.328212][T14361] ? show_regs_print_info+0x20/0x20 [ 610.333413][T14361] ? load_image+0x3b0/0x3b0 [ 610.337914][T14361] ? __might_fault+0xaa/0x120 [ 610.342598][T14361] ? __lock_acquire+0x7c80/0x7c80 [ 610.347629][T14361] should_fail_ex+0x39d/0x4d0 [ 610.352384][T14361] _copy_to_user+0x2f/0xa0 [ 610.356845][T14361] bpf_test_finish+0x19a/0x620 [ 610.361627][T14361] ? bpf_test_timer_leave+0x110/0x150 [ 610.367090][T14361] ? convert_skb_to___skb+0x420/0x420 [ 610.372459][T14361] ? read_tsc+0x9/0x20 [ 610.376561][T14361] bpf_prog_test_run_flow_dissector+0x4a1/0x600 [ 610.382831][T14361] ? xdp_convert_buff_to_md+0x200/0x200 [ 610.388381][T14361] ? __fget_files+0x28/0x4d0 [ 610.392980][T14361] ? xdp_convert_buff_to_md+0x200/0x200 [ 610.398542][T14361] bpf_prog_test_run+0x321/0x390 [ 610.403510][T14361] __sys_bpf+0x440/0x800 [ 610.407760][T14361] ? bpf_link_show_fdinfo+0x350/0x350 [ 610.413150][T14361] ? lock_chain_count+0x20/0x20 [ 610.418011][T14361] __x64_sys_bpf+0x7c/0x90 [ 610.422456][T14361] do_syscall_64+0x55/0xb0 [ 610.426888][T14361] ? clear_bhb_loop+0x40/0x90 [ 610.431568][T14361] ? clear_bhb_loop+0x40/0x90 [ 610.436270][T14361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.442173][T14361] RIP: 0033:0x7ffb2a58efc9 [ 610.446607][T14361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.466242][T14361] RSP: 002b:00007ffb2b4f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 610.474672][T14361] RAX: ffffffffffffffda RBX: 00007ffb2a7e5fa0 RCX: 00007ffb2a58efc9 [ 610.482648][T14361] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 610.490619][T14361] RBP: 00007ffb2b4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 610.498618][T14361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.506600][T14361] R13: 00007ffb2a7e6038 R14: 00007ffb2a7e5fa0 R15: 00007ffe2ff89bc8 [ 610.514596][T14361] [ 610.582515][T14220] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.964169][T14220] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 617.086602][T14220] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 617.099819][T14220] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 617.116272][T14220] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 617.160972][T14407] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 1280 [ 619.458609][T14433] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2911'. [ 621.472725][T14445] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 1280 [ 621.493036][T14447] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2916'. [ 621.556756][T14220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.673493][T14220] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.713687][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.720934][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.823356][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.830625][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.544104][ T11] hsr_slave_0: left promiscuous mode [ 623.550123][ T11] hsr_slave_1: left promiscuous mode [ 623.556133][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.564122][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.573731][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.583796][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.619857][ T11] veth1_macvtap: left promiscuous mode [ 623.625474][ T11] veth0_macvtap: left promiscuous mode [ 623.636386][ T11] veth1_vlan: left promiscuous mode [ 623.643224][ T11] veth0_vlan: left promiscuous mode [ 624.292335][ T11] team_slave_1 (unregistering): left promiscuous mode [ 624.300586][ T11] team_slave_1 (unregistering): left allmulticast mode [ 624.313219][ T11] team0 (unregistering): Port device team_slave_1 removed [ 624.357564][ T11] team_slave_0 (unregistering): left promiscuous mode [ 624.364611][ T11] team_slave_0 (unregistering): left allmulticast mode [ 624.375883][ T11] team0 (unregistering): Port device team_slave_0 removed [ 624.429265][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.479324][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.496980][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.504748][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.944863][ T11] bond0 (unregistering): Released all slaves [ 626.567452][T14459] netlink: 'syz.4.2921': attribute type 25 has an invalid length. [ 628.639378][T14479] netlink: 'syz.6.2925': attribute type 10 has an invalid length. [ 628.675228][T14220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.824232][T14482] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 1280 [ 631.426057][T14524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2937'. [ 632.917572][T14524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2937'. [ 632.935034][T14220] veth0_vlan: entered promiscuous mode [ 632.954140][T14220] veth1_vlan: entered promiscuous mode [ 633.041549][T14220] veth0_macvtap: entered promiscuous mode [ 633.062739][T14220] veth1_macvtap: entered promiscuous mode [ 633.085120][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.095725][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.106417][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.128727][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.138939][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.150111][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.161711][T14220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.177063][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.189110][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.199393][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.210095][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.220465][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.231277][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.243186][T14220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.262073][T14220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.274036][T14220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.287151][T14220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.301009][T14220] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.370171][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.382262][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.407604][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.416970][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.515263][T14534] netlink: 1030 bytes leftover after parsing attributes in process `syz.4.2947'. [ 633.563303][T14534] bond_slave_0: entered promiscuous mode [ 633.569488][T14534] bond_slave_1: entered promiscuous mode [ 633.621875][T14536] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.2855'. [ 633.722049][T14536] openvswitch: netlink: Duplicate key (type 0). [ 634.146809][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 634.156040][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 634.166534][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 634.175242][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 634.183091][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 634.190543][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 634.401267][T14547] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 1280 [ 636.240668][ T5104] Bluetooth: hci4: command tx timeout [ 636.843122][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.862870][T14564] netlink: 'syz.0.2950': attribute type 39 has an invalid length. [ 636.942049][T14541] chnl_net:caif_netlink_parms(): no params data found [ 637.008635][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.196821][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.343291][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.414161][T14541] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.425953][T14541] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.454377][T14541] bridge_slave_0: entered allmulticast mode [ 637.471089][T14541] bridge_slave_0: entered promiscuous mode [ 637.480440][T14590] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2956'. [ 637.522840][T14541] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.543117][T14541] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.559336][T14541] bridge_slave_1: entered allmulticast mode [ 637.592108][T14541] bridge_slave_1: entered promiscuous mode [ 637.733105][T14541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.784772][T14541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.318061][ T5104] Bluetooth: hci4: command tx timeout [ 639.608234][T14541] team0: Port device team_slave_0 added [ 639.642987][T14541] team0: Port device team_slave_1 added [ 639.938454][T14541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.968112][T14541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.005451][T14541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.019230][T14541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.026222][T14541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.088187][T14541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.253148][T14541] hsr_slave_0: entered promiscuous mode [ 640.259998][T14541] hsr_slave_1: entered promiscuous mode [ 640.266453][T14541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.277100][T14541] Cannot create hsr debugfs directory [ 640.405458][ T5104] Bluetooth: hci4: command tx timeout [ 641.012411][T14645] delete_channel: no stack [ 641.330422][ T49] [ 641.332819][ T49] ====================================================== [ 641.339856][ T49] WARNING: possible circular locking dependency detected [ 641.346919][ T49] syzkaller #0 Not tainted [ 641.351353][ T49] ------------------------------------------------------ [ 641.358387][ T49] kworker/u4:3/49 is trying to acquire lock: [ 641.364380][ T49] ffff88805ed84d00 (team->team_lock_key#6){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 641.373992][ T49] [ 641.373992][ T49] but task is already holding lock: [ 641.381364][ T49] ffff88807c718768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 641.391741][ T49] [ 641.391741][ T49] which lock already depends on the new lock. [ 641.391741][ T49] [ 641.402155][ T49] [ 641.402155][ T49] the existing dependency chain (in reverse order) is: [ 641.411175][ T49] [ 641.411175][ T49] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 641.418922][ T49] __mutex_lock+0x129/0xcc0 [ 641.423968][ T49] ieee80211_open+0x144/0x200 [ 641.429212][ T49] __dev_open+0x2bc/0x430 [ 641.434065][ T49] dev_open+0xab/0x170 [ 641.438656][ T49] team_add_slave+0xae7/0x2660 [ 641.443946][ T49] do_setlink+0xe14/0x3fb0 [ 641.448888][ T49] rtnl_newlink+0x175b/0x2020 [ 641.454093][ T49] rtnetlink_rcv_msg+0x7c7/0xf10 [ 641.459551][ T49] netlink_rcv_skb+0x216/0x480 [ 641.464870][ T49] netlink_unicast+0x751/0x8d0 [ 641.470160][ T49] netlink_sendmsg+0x8c1/0xbe0 [ 641.475451][ T49] ____sys_sendmsg+0x5bf/0x950 [ 641.480757][ T49] ___sys_sendmsg+0x220/0x290 [ 641.485983][ T49] __se_sys_sendmsg+0x1a5/0x270 [ 641.491369][ T49] do_syscall_64+0x55/0xb0 [ 641.496322][ T49] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.502834][ T49] [ 641.502834][ T49] -> #0 (team->team_lock_key#6){+.+.}-{3:3}: [ 641.511111][ T49] __lock_acquire+0x2ddb/0x7c80 [ 641.516489][ T49] lock_acquire+0x197/0x410 [ 641.521542][ T49] __mutex_lock+0x129/0xcc0 [ 641.526599][ T49] team_del_slave+0x32/0x1c0 [ 641.531711][ T49] team_device_event+0x28d/0xa20 [ 641.537181][ T49] notifier_call_chain+0x197/0x390 [ 641.542907][ T49] unregister_netdevice_many_notify+0xf36/0x1810 [ 641.549777][ T49] unregister_netdevice_queue+0x324/0x360 [ 641.556026][ T49] _cfg80211_unregister_wdev+0x16b/0x580 [ 641.562196][ T49] ieee80211_remove_interfaces+0x496/0x680 [ 641.568535][ T49] ieee80211_unregister_hw+0x5d/0x2a0 [ 641.574443][ T49] mac80211_hwsim_del_radio+0x274/0x450 [ 641.580516][ T49] hwsim_exit_net+0x585/0x640 [ 641.585722][ T49] cleanup_net+0x6f4/0xb90 [ 641.590671][ T49] process_scheduled_works+0xa45/0x15b0 [ 641.596743][ T49] worker_thread+0xa55/0xfc0 [ 641.601866][ T49] kthread+0x2fa/0x390 [ 641.606461][ T49] ret_from_fork+0x48/0x80 [ 641.611408][ T49] ret_from_fork_asm+0x11/0x20 [ 641.616706][ T49] [ 641.616706][ T49] other info that might help us debug this: [ 641.616706][ T49] [ 641.626932][ T49] Possible unsafe locking scenario: [ 641.626932][ T49] [ 641.634468][ T49] CPU0 CPU1 [ 641.639834][ T49] ---- ---- [ 641.645200][ T49] lock(&rdev->wiphy.mtx); [ 641.649711][ T49] lock(team->team_lock_key#6); [ 641.657173][ T49] lock(&rdev->wiphy.mtx); [ 641.664203][ T49] lock(team->team_lock_key#6); [ 641.669151][ T49] [ 641.669151][ T49] *** DEADLOCK *** [ 641.669151][ T49] [ 641.677288][ T49] 5 locks held by kworker/u4:3/49: [ 641.682392][ T49] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 641.693276][ T49] #1: ffffc90000ba7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 641.703807][ T49] #2: ffffffff8dfaee10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 641.713233][ T49] #3: ffffffff8dfbbc48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 641.723079][ T49] #4: ffff88807c718768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 641.733909][ T49] [ 641.733909][ T49] stack backtrace: [ 641.739807][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 641.747181][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 641.757244][ T49] Workqueue: netns cleanup_net [ 641.762023][ T49] Call Trace: [ 641.765313][ T49] [ 641.768268][ T49] dump_stack_lvl+0x16c/0x230 [ 641.772958][ T49] ? load_image+0x3b0/0x3b0 [ 641.777466][ T49] ? show_regs_print_info+0x20/0x20 [ 641.782680][ T49] ? print_circular_bug+0x12b/0x1a0 [ 641.787895][ T49] check_noncircular+0x2bd/0x3c0 [ 641.792850][ T49] ? print_deadlock_bug+0x5d0/0x5d0 [ 641.798056][ T49] ? lockdep_lock+0xe0/0x220 [ 641.802757][ T49] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 641.808332][ T49] ? _find_first_zero_bit+0xd3/0x100 [ 641.813653][ T49] __lock_acquire+0x2ddb/0x7c80 [ 641.818545][ T49] ? verify_lock_unused+0x140/0x140 [ 641.823761][ T49] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 641.829325][ T49] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 641.835929][ T49] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 641.841496][ T49] lock_acquire+0x197/0x410 [ 641.846007][ T49] ? team_del_slave+0x32/0x1c0 [ 641.850781][ T49] ? __might_sleep+0xe0/0xe0 [ 641.855402][ T49] ? read_lock_is_recursive+0x20/0x20 [ 641.860840][ T49] __mutex_lock+0x129/0xcc0 [ 641.865378][ T49] ? team_del_slave+0x32/0x1c0 [ 641.870147][ T49] ? __lock_acquire+0x7c80/0x7c80 [ 641.875171][ T49] ? rcu_is_watching+0x15/0xb0 [ 641.879973][ T49] ? trace_contention_end+0x39/0xe0 [ 641.885267][ T49] ? __mutex_lock+0x304/0xcc0 [ 641.889948][ T49] ? team_del_slave+0x32/0x1c0 [ 641.894707][ T49] ? mutex_lock_nested+0x20/0x20 [ 641.899647][ T49] ? bond_netdev_event+0xe1/0xef0 [ 641.904684][ T49] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 641.910324][ T49] ? bond_ipsec_offload_ok+0x410/0x410 [ 641.915796][ T49] team_del_slave+0x32/0x1c0 [ 641.920407][ T49] team_device_event+0x28d/0xa20 [ 641.925359][ T49] notifier_call_chain+0x197/0x390 [ 641.930540][ T49] unregister_netdevice_many_notify+0xf36/0x1810 [ 641.936879][ T49] ? lock_chain_count+0x20/0x20 [ 641.941826][ T49] ? unregister_netdevice_many+0x20/0x20 [ 641.947471][ T49] ? kernfs_remove_by_name_ns+0x117/0x150 [ 641.953202][ T49] ? __lock_acquire+0x7c80/0x7c80 [ 641.958241][ T49] unregister_netdevice_queue+0x324/0x360 [ 641.963976][ T49] ? list_netdevice+0x730/0x730 [ 641.968841][ T49] ? kernfs_remove_by_name_ns+0x117/0x150 [ 641.974568][ T49] _cfg80211_unregister_wdev+0x16b/0x580 [ 641.980210][ T49] ieee80211_remove_interfaces+0x496/0x680 [ 641.986032][ T49] ? ieee80211_do_stop+0x1db0/0x1db0 [ 641.991336][ T49] ? rcu_is_watching+0x15/0xb0 [ 641.996117][ T49] ieee80211_unregister_hw+0x5d/0x2a0 [ 642.001508][ T49] mac80211_hwsim_del_radio+0x274/0x450 [ 642.007072][ T49] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 642.012715][ T49] hwsim_exit_net+0x585/0x640 [ 642.017408][ T49] ? hwsim_init_net+0x90/0x90 [ 642.022109][ T49] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 642.027922][ T49] cleanup_net+0x6f4/0xb90 [ 642.032351][ T49] ? ops_free_list+0x3b0/0x3b0 [ 642.037125][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 642.042326][ T49] ? process_scheduled_works+0x957/0x15b0 [ 642.048053][ T49] ? process_scheduled_works+0x957/0x15b0 [ 642.053782][ T49] process_scheduled_works+0xa45/0x15b0 [ 642.059352][ T49] ? assign_work+0x400/0x400 [ 642.063964][ T49] ? assign_work+0x39e/0x400 [ 642.068565][ T49] worker_thread+0xa55/0xfc0 [ 642.073173][ T49] kthread+0x2fa/0x390 [ 642.077241][ T49] ? pr_cont_work+0x560/0x560 [ 642.081929][ T49] ? kthread_blkcg+0xd0/0xd0 [ 642.086536][ T49] ret_from_fork+0x48/0x80 [ 642.090968][ T49] ? kthread_blkcg+0xd0/0xd0 [ 642.095561][ T49] ret_from_fork_asm+0x11/0x20 [ 642.100436][ T49] [ 642.133929][ T49] team0: Port device wlan1 removed [ 642.314502][ T49] hsr_slave_0: left promiscuous mode [ 642.321495][ T49] hsr_slave_1: left promiscuous mode [ 642.331292][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.339098][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.347906][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.355368][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.364893][ T49] veth0_macvtap: left promiscuous mode [ 642.370512][ T49] veth1_vlan: left promiscuous mode [ 642.375810][ T49] veth0_vlan: left promiscuous mode [ 642.477797][ T5104] Bluetooth: hci4: command tx timeout [ 642.685464][ T49] team0 (unregistering): Port device team_slave_1 removed [ 642.710928][ T49] team0 (unregistering): Port device C removed [ 642.724528][ T49] bond0 (unregistering): (slave ªªªªª»): Releasing backup interface [ 642.739367][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.827368][ T49] bond0 (unregistering): Released all slaves [ 642.920260][T14541] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 642.930733][T14541] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 642.951773][T14541] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 642.979258][T14541] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 643.083074][T14541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.102606][T14541] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.116508][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.123773][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.171984][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.179179][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.422761][T14541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.676234][T14541] veth0_vlan: entered promiscuous mode [ 643.695507][T14541] veth1_vlan: entered promiscuous mode [ 643.735132][T14541] veth0_macvtap: entered promiscuous mode [ 643.746620][T14541] veth1_macvtap: entered promiscuous mode [ 643.771909][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.783136][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.796698][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.815568][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.825759][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.838134][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.850865][T14541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.870000][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.881248][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.893388][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.906063][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.917331][T14541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.934898][T14541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.946151][T14541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.958860][T14541] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.967995][T14541] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.976712][T14541] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.985616][T14541] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.024176][T14541] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 644.054372][T14575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.063286][T14541] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 644.076366][T14575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.103531][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.111555][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50