last executing test programs: 19m9.960424648s ago: executing program 0 (id=8292): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x24008010) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000200), 0x11) 19m9.650650216s ago: executing program 0 (id=8296): r0 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000300)}, {&(0x7f0000000600)=""/150, 0x96}, {0x0}, {&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000a00)=""/245, 0xf5}], 0x8}, 0x120) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x6, 0xd}, 0x10141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2d}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000001000f1000000000000063000000000000009500e1383ed914b001f821f0ac96f79196050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002121) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r2, &(0x7f00000005c0), 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f2384", 0x16}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x27) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002a000b11d25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x35}, 0x0) 19m9.23564873s ago: executing program 0 (id=8299): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000001, 0x7f}, 0x1401b, 0x0, 0x3, 0x0, 0x8, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x2, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x640) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 19m8.143657774s ago: executing program 0 (id=8310): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x6, [@const={0x7, 0x0, 0x0, 0xa, 0x3}, @enum64={0x5, 0x3, 0x0, 0x13, 0x0, 0x0, [{0x10, 0x2, 0x7}, {0xa, 0x469, 0x2}, {0xc, 0xfffffff9, 0x5}]}, @datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], '\\'}]}, {0x0, [0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000100)=""/10, 0x6a, 0xa, 0x1, 0x18}, 0x28) openat$cgroup_pressure(r0, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x3, [@local, @random="e8dc76e6f748", @remote]}) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x3, [@local, @random="e8dc76e6f748", @remote]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5e, '\x00', r3, r0, 0x5}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000600)={r0}, 0x8) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000600)={r0}, 0x8) r5 = syz_clone(0x1000000, &(0x7f0000000640)="e1d503eebff60df42233bc410cc6f2c38aa4210312b139569bd53429a5bf67c1a9720778cd1dd83d8ae20c36f8a684ece7d6270dd37a726e2b9e7e6f0cea8433a104f76d9c6c8ec70002b12bca3e7c69a3eec2ac8cccad4c7031147217b6db655f4cf04db3dc0311958ab9832e88a1924fbff4a33e475c91ec5f9c12cd2b8f650dd3bfd01c1639e1cf9326db217deb5532b323589d5fac6c22d7e675de4da81d4f461dc490f8366d8556cd5339bbd2ee9c742fae9443752ffca531f2b1567e1007ba3a3cc642b04a42ca3b2b5c3e80bad2dd0d4e42f591d96d3a52db9149", 0xde, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="4e929239141eeef82c28e2248402b31b63d78d35e6769346fa9a080d8d163828aaadd118d529ab4bc9478880d98b34cc955b02f61cfd2a9530cf6891a21bb3bf17a163caf0ac8ce23438bfa07831b50220a943f52430d3e1f334f2197d0f30aaec17ac808e3860c9f4ebbc2733addfe53d72dcf1b96c5c041e6240") write$cgroup_pid(r4, &(0x7f0000000840)=r5, 0x12) (async) write$cgroup_pid(r4, &(0x7f0000000840)=r5, 0x12) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) r6 = syz_clone(0x20000000, &(0x7f0000000940)="1f9ad1450a93fc25fb80cdaad8553ec67184ce7373b35563c9cb19f5f24e6ed3dcf6d827d202d3d59a69aeddc6743c6a9210521c6456e8f7c7307ac0b3c75b9f59d74649e35128037cc4d132e6424db19a2ef4640f85bc22a620ff45a2dcb4a85b121a22e7dec7249e11ebb3d6b98163e36f582ad6aa0cb6168e2703f2226916fa23134836f7a974bac02a641c41f5442a210e2930380a92504a7622104679069deec27def00", 0xa6, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="9ba131bc859b2aa6502f3250f2eb33d1966d944f3a2cf02ac2f46519359233eb211cbc377e99115b914ea06c46684d80b4fcedf7f89ab1253ac1daaa") openat$cgroup_ro(r4, &(0x7f0000000ac0)='freezer.state\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(r4, &(0x7f0000000ac0)='freezer.state\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x2, 0x8, 0x9, 0x7, 0x0, 0x2, 0x80016, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb, 0x0, @perf_bp={&(0x7f0000000880), 0xa}, 0x180, 0x80, 0x7, 0xc, 0x6, 0x10000, 0x3, 0x0, 0x2, 0x0, 0xd}, r6, 0x10, r7, 0x8) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000b00)=0x1) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000b40)=""/185) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r0, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%pi6 \x00'}, 0x20) syz_open_procfs$namespace(r5, &(0x7f0000000cc0)='ns/uts\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000d00)=@raw=[@alu={0x7, 0x1, 0x8, 0xa, 0x8, 0x20, 0xfffffffffffffff0}, @ldst={0x0, 0x2, 0x1, 0x8, 0x2, 0xfffffffffffffffe, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x8, &(0x7f0000000dc0)=""/8, 0x41100, 0x7, '\x00', r3, 0x17, r1, 0x8, &(0x7f0000000e00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x1, 0x5, 0x10000}, 0x10, 0x1e384, r7, 0x0, &(0x7f0000000e80)=[r8, r7, r4], 0x0, 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000f80)=r9, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000fc0)={'dvmrp0\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000fc0)={'dvmrp0\x00', @broadcast}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000001000)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r7}, &(0x7f0000001040), &(0x7f0000001080)=r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r7, 0xffffffffffffffff}, &(0x7f0000001040), &(0x7f0000001080)=r9}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={r0, 0x58, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x14, 0x1a, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d78}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x0, 0x6, 0xa, 0x4, 0x4, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001200)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r11, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001340)={0x2, 0xe, 0xd113, 0x6}, 0x10, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x14, 0x1a, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d78}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x0, 0x6, 0xa, 0x4, 0x4, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001200)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r11, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001340)={0x2, 0xe, 0xd113, 0x6}, 0x10, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001480)={r6, r7, 0x0, 0xe, &(0x7f0000001440)='freezer.state\x00'}, 0x30) 19m7.791713545s ago: executing program 0 (id=8314): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x9}, 0x14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x4, 0x0, 0x6, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19m7.299855133s ago: executing program 0 (id=8319): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={0x0, 0x0}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/39, 0x27}}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0xd, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000380)='GPL\x00', 0x80000000, 0x1000, &(0x7f0000002540)=""/4096, 0x41100, 0x12, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0x4, 0x3, 0xfffffffc}, 0x10, 0x306, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa2}, [@generic={0x88, 0x5, 0xd, 0x1, 0x9ea}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x152, 0x7e, &(0x7f0000000280)=""/126, 0x41100, 0x40, '\x00', 0x0, @fallback=0x4, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x4, 0xd}, 0x10, r1, r2, 0x7, 0x0, &(0x7f0000000780)=[{0x4, 0x2, 0x1, 0x1}, {0x4, 0x1, 0x5, 0xa}, {0x4, 0x4, 0x10}, {0x4, 0x4, 0x2, 0x8}, {0x1, 0x5, 0x6, 0x1}, {0x2, 0x4, 0xa, 0x5}, {0x3, 0x3, 0x6, 0x3}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100003d634dabe549c4ce414adc0a945f647279f3c4db1f96e39ce584e3e4f84090d94c647b34ab61e2640d29ffb134703cc6819f93c29ef49cb3bd04249e3e01efc8123c3428e3389d0ae0ed96e31ecb4eb3325ea057b1b38a78765dc6df1164fceb2716c7c0c49fdbc219438a8b355c8a45936bc158ba961963da4ac6a2f920d606958029ed333946469de9bd396370a4d37204ca3532a459cce4e88edf64f31730051fe0e48f2b33", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_skb}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0x1}, {0x2}]}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000)=r7, 0xc) r8 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x6, 0x0, 0xa4ff) 18m52.025149887s ago: executing program 32 (id=8319): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={0x0, 0x0}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/39, 0x27}}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0xd, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000380)='GPL\x00', 0x80000000, 0x1000, &(0x7f0000002540)=""/4096, 0x41100, 0x12, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0x4, 0x3, 0xfffffffc}, 0x10, 0x306, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa2}, [@generic={0x88, 0x5, 0xd, 0x1, 0x9ea}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x152, 0x7e, &(0x7f0000000280)=""/126, 0x41100, 0x40, '\x00', 0x0, @fallback=0x4, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x4, 0xd}, 0x10, r1, r2, 0x7, 0x0, &(0x7f0000000780)=[{0x4, 0x2, 0x1, 0x1}, {0x4, 0x1, 0x5, 0xa}, {0x4, 0x4, 0x10}, {0x4, 0x4, 0x2, 0x8}, {0x1, 0x5, 0x6, 0x1}, {0x2, 0x4, 0xa, 0x5}, {0x3, 0x3, 0x6, 0x3}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100003d634dabe549c4ce414adc0a945f647279f3c4db1f96e39ce584e3e4f84090d94c647b34ab61e2640d29ffb134703cc6819f93c29ef49cb3bd04249e3e01efc8123c3428e3389d0ae0ed96e31ecb4eb3325ea057b1b38a78765dc6df1164fceb2716c7c0c49fdbc219438a8b355c8a45936bc158ba961963da4ac6a2f920d606958029ed333946469de9bd396370a4d37204ca3532a459cce4e88edf64f31730051fe0e48f2b33", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_skb}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0x1}, {0x2}]}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000)=r7, 0xc) r8 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x6, 0x0, 0xa4ff) 22.625587835s ago: executing program 2 (id=20138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x28, 0x7f, 0x86, 0xfffff010}, {0x6, 0xfd}]}) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xf, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000003c0)=""/51, 0x29, 0x33, 0x1, 0x7, 0x10000, @value=r3}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x10}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r6}, 0x8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000bb000000182a0000", @ANYRES32, @ANYBLOB="0000000001000100290700ca238cd5e8619cc9e73e46543bc91d977b7a6e3b63d581829abbcf"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r5, r6, 0xffffffffffffffff, r7], &(0x7f0000000580), 0x10, 0x1}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}, 0x10}, 0x94) socket$kcm(0x2, 0x5, 0x84) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) 20.359321648s ago: executing program 2 (id=20154): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) 19.613923751s ago: executing program 2 (id=20160): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8991, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000020000000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f1, &(0x7f0000000040)={'pimreg0\x00', @remote}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 2.240683709s ago: executing program 5 (id=20316): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.234016719s ago: executing program 1 (id=20326): socketpair(0x15, 0x800, 0xcea, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x50) close(0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000010085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.930593276s ago: executing program 4 (id=20317): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xdf, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x600, 0x0, 0x0, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4300, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="7d29564cf068f714ba030248f2a311ffe4f6762a4a04b2a43590cca0a556843ad4e510cf1cdd395b5110d2e65c9d4cf7723fb7a416886514cb1cef760f957dcab6876c1fbc91cad44c37fb1f3acfc301dbf5e5d3720ce8a20a1394e287edd7c3c2aabcbca964758343cacb708c89f1e05d76fe43af54abcbb24d97d894fd24f9d3aada6c1e7396eaffc101ec57dc395460eab19345d60aff11f20cedec36560a13d2c29dbeee321a7f293bd6b10a9421ff16", 0xb2}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="b5d966507a0adcc0011b26b3959db598f88d1e33bb0d92fc0446aa4185d3a9cc47d0184df9a4f57d71e6fbb176d351ccebe86359af04ca3b7ce20ea8ce2498db6a8e5a7acc4363b8db60d85be531a6745b535bab802ce8822686da", 0x5b}, {&(0x7f00000001c0)="e403c98207d2a2ac0d8279c9858ccce3b5eef7a5c26a6fd9a823ca5b22547239e7e3e916e72f75a0deb143aa7837c58303ae6f7b3c95cf10431cd0cf8c0b6c13b2eb41d00c73ca510680b5c22dcfa87e311ae7f904955d4a52e176574c4bf20fa6fbcd6b9dd1", 0x66}], 0x2}, 0x20000040) 1.929704137s ago: executing program 5 (id=20328): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.928967217s ago: executing program 1 (id=20318): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000001040)=ANY=[], &(0x7f0000000580)=""/57, 0x71, 0x39, 0x0, 0xc}, 0x28) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x20000002) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) syz_clone(0x40148000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00"/18, @ANYRES32=0x1], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000"], 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x12) 1.767771126s ago: executing program 5 (id=20319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0xf00, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {0x30}, {0x40, 0x40}, {0x6}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x26048001) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/23, 0x17}, 0x40010100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa", 0x151}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000001811531e8575fa055f3da90993529e4736d999f3a9d7c86a1e44dd642fbb86318ececd8fdee07ac4c95cf5465ed0073d579788c438cc545c1b9f41c2fc5a772997df12fee2763b1589b2d05163c621d700"/96, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$kcm(0xa, 0x2, 0x0) close(r8) socket$kcm(0xa, 0x2, 0x73) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x6, 0xd, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) 1.490848252s ago: executing program 3 (id=20320): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.305702214s ago: executing program 3 (id=20321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.259997786s ago: executing program 5 (id=20322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, 0x0) 1.259322826s ago: executing program 1 (id=20323): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.237754857s ago: executing program 5 (id=20324): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa2c200007"], 0xfdef) write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x2d, 'hugetlb'}, {0x2b, 'net_cls'}]}, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x10100, 0x3, 0x5fe, 0x2}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 1.034689029s ago: executing program 3 (id=20325): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 907.263007ms ago: executing program 3 (id=20327): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 674.93201ms ago: executing program 4 (id=20329): socketpair(0x15, 0x800, 0xcea, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x50) close(0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000010085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 650.190471ms ago: executing program 1 (id=20330): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x28) 572.777526ms ago: executing program 3 (id=20331): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 571.614366ms ago: executing program 4 (id=20341): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 370.854618ms ago: executing program 33 (id=20198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c334eab3b4c0c083313101999613684f57c30ceab04d041b1e79fe489e4f3ea44b80dd050ceaa64280f7d7933a6d434820a4752a935ac3a31ca1f8dab976d211eadd23d4043d5650d6f792394704451d497c7201fc6978c585544e3330f7a5e7e70eac926a3c46c86011d781384ebf80b091deb1c5ab39f54f08ecf49c5ca459447c6452b2ad006192dda46aa335af8ab41840ac7172ee4ba226425360cd84696c42c8317256df4bcefcd8d8cff94dec5e19bea5638ce893d2e6c0ab5715230000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xf5, 0xf, 0xf9, 0x81, 0x0, 0x9, 0x2, 0x7dd2e9665abae118, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x9}, 0xc0, 0x8, 0x2, 0x9, 0x3, 0x7491bb01, 0x1b36, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffd3e1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000020000000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f1, &(0x7f0000000040)={'pimreg0\x00', @remote}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 344.532089ms ago: executing program 4 (id=20333): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 343.84935ms ago: executing program 1 (id=20334): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x83f000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x921b0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81, 0x0, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000120081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000900000000000000010000040000400006000000030000001900000000612e615f302e"], &(0x7f0000000580)=""/263, 0x39, 0x107, 0x1}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711813000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x58, &(0x7f0000000600)}, 0x10) sendmsg$inet(r2, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000002c0)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791", 0x69}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff85700e766137c60ff308000000000000bcbe6c4c5a7baaf8ff215524561400000000b5080000000000007b8af0ff00000000bfa100000000010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000740)="8b0a", 0x2}], 0x2}, 0x200ce0c0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) r9 = socket$kcm(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0) 280.051333ms ago: executing program 5 (id=20335): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000001040)=ANY=[], &(0x7f0000000580)=""/57, 0x71, 0x39, 0x0, 0xc}, 0x28) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x20000002) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) syz_clone(0x40148000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00"/18, @ANYRES32=0x1], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000"], 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x12) 222.056377ms ago: executing program 4 (id=20336): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xa888, &(0x7f0000000180)=[{&(0x7f0000002f00)=""/4081, 0xff1}, {&(0x7f0000000000)=""/107, 0x6b}, {&(0x7f0000000080)=""/29, 0x1d}], 0x3}, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) 88.437975ms ago: executing program 3 (id=20337): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 74.816275ms ago: executing program 1 (id=20338): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) 0s ago: executing program 4 (id=20339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffe09, &(0x7f0000000000)="b9ff03076844268cb8be14f086dd", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000380)="842636b131c1ee257bc2ea656bfa9a9de5c3d170e89b8faf24d64452152844f3653baba74aaceb8dc09a8341b23792842542bab2c8333576b8f520f0172d648e65d475f6060c930dba588f8edc5f3d9137332d7f226d15bbd48477e614a4a91ccf8b3a2ac9ae6bbdac5a4d930d500b9c6f518f8f2493504da913dcaf13ebfca657a1ff407559cf3fb3b918cc5baed5087f921e749985a3fccffe108f9a4da097b270c5e68f41e8e84bd44751f2d5c0329d4bbcee927b8be233d878cd", &(0x7f0000000440)=""/238}, 0x20) kernel console output (not intermixed with test programs): 1c/0xc0 [ 2088.841958][T22665] do_syscall_64+0x4c/0xa0 [ 2088.846388][T22665] ? clear_bhb_loop+0x30/0x80 [ 2088.851085][T22665] ? clear_bhb_loop+0x30/0x80 [ 2088.855789][T22665] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2088.861703][T22665] RIP: 0033:0x7fa11eb11cb9 [ 2088.866142][T22665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2088.877578][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2088.885762][T22665] RSP: 002b:00007fa11cd6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2088.885789][T22665] RAX: ffffffffffffffda RBX: 00007fa11ed8cfa0 RCX: 00007fa11eb11cb9 [ 2088.885802][T22665] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000003c0 [ 2088.885814][T22665] RBP: 00007fa11cd6d090 R08: 0000000000000000 R09: 0000000000000000 [ 2088.885825][T22665] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2088.885837][T22665] R13: 00007fa11ed8d038 R14: 00007fa11ed8cfa0 R15: 00007fff4a80cd58 [ 2088.885874][T22665] [ 2088.947481][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2088.999871][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2089.016439][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2089.060940][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2089.092844][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2089.129199][T22470] device veth0_vlan entered promiscuous mode [ 2089.180273][T22470] device veth1_vlan entered promiscuous mode [ 2089.287637][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2089.309585][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2089.338916][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2089.369317][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2089.414503][T22470] device veth0_macvtap entered promiscuous mode [ 2089.439997][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2089.469398][T22470] device veth1_macvtap entered promiscuous mode [ 2089.551189][T22470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.582434][T22470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.631603][T22470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.663214][T22470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.702076][T22470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.734168][T22470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.754475][T22470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2089.783227][T22470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.827849][T22470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2089.863306][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2089.882725][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2089.915732][T22470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2089.941060][T22470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2089.990670][T22470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2090.029472][T22470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2090.071227][T22470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2090.119730][T22470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2090.160188][T22470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2090.203630][T17942] Bluetooth: hci4: command 0x0419 tx timeout [ 2090.221184][T22470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2090.259902][T22470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2090.291704][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2090.314535][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2090.360828][T22470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2090.386897][T22470] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2090.426546][T22470] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2090.459038][T22470] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.511573][T22697] netlink: 'syz.3.17829': attribute type 9 has an invalid length. [ 2092.520230][T24958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2092.543457][T22697] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.17829'. [ 2092.555397][T24958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2092.582670][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2092.654970][ T6075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2092.669272][ T6075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2092.689484][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2092.791220][T22699] netlink: 156 bytes leftover after parsing attributes in process `syz.2.17830'. [ 2093.250201][T22730] netlink: 'syz.3.17839': attribute type 10 has an invalid length. [ 2093.269288][T22730] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.291102][T22730] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.313857][T22730] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.333483][T22730] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.526508][T22736] FAULT_INJECTION: forcing a failure. [ 2093.526508][T22736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2093.542051][T22734] netlink: 'syz.1.17841': attribute type 21 has an invalid length. [ 2093.595544][T22736] CPU: 0 PID: 22736 Comm: syz.4.17842 Not tainted syzkaller #0 [ 2093.603322][T22736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2093.613476][T22736] Call Trace: [ 2093.616764][T22736] [ 2093.619713][T22736] dump_stack_lvl+0x188/0x250 [ 2093.624492][T22736] ? show_regs_print_info+0x20/0x20 [ 2093.629702][T22736] ? load_image+0x400/0x400 [ 2093.634211][T22736] ? __lock_acquire+0x7d10/0x7d10 [ 2093.639270][T22736] should_fail+0x38c/0x4c0 [ 2093.643739][T22736] _copy_to_user+0x2e/0x130 [ 2093.648243][T22736] simple_read_from_buffer+0xe3/0x150 [ 2093.653616][T22736] proc_fail_nth_read+0x1a6/0x220 [ 2093.658635][T22736] ? proc_fault_inject_write+0x310/0x310 [ 2093.664345][T22736] ? fsnotify_perm+0x254/0x560 [ 2093.669097][T22736] ? proc_fault_inject_write+0x310/0x310 [ 2093.674718][T22736] vfs_read+0x301/0xd60 [ 2093.678865][T22736] ? kernel_read+0x1e0/0x1e0 [ 2093.683456][T22736] ? __fget_files+0x40f/0x480 [ 2093.688143][T22736] ? mutex_lock_nested+0x17/0x20 [ 2093.693177][T22736] ? __fdget_pos+0x2bf/0x370 [ 2093.697752][T22736] ? ksys_read+0x71/0x260 [ 2093.702074][T22736] ksys_read+0x152/0x260 [ 2093.706300][T22736] ? vfs_write+0xd60/0xd60 [ 2093.710705][T22736] ? lockdep_hardirqs_on+0x94/0x140 [ 2093.715890][T22736] do_syscall_64+0x4c/0xa0 [ 2093.720293][T22736] ? clear_bhb_loop+0x30/0x80 [ 2093.724956][T22736] ? clear_bhb_loop+0x30/0x80 [ 2093.729623][T22736] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2093.735507][T22736] RIP: 0033:0x7fbee522d58e [ 2093.739993][T22736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2093.759743][T22736] RSP: 002b:00007fbee34c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2093.768163][T22736] RAX: ffffffffffffffda RBX: 00007fbee34c86c0 RCX: 00007fbee522d58e [ 2093.776127][T22736] RDX: 000000000000000f RSI: 00007fbee34c80a0 RDI: 0000000000000004 [ 2093.784084][T22736] RBP: 00007fbee34c8090 R08: 0000000000000000 R09: 0000000000000000 [ 2093.792063][T22736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2093.800018][T22736] R13: 00007fbee54e8038 R14: 00007fbee54e7fa0 R15: 00007fff097dea98 [ 2093.807990][T22736] [ 2093.835519][T22740] device syzkaller0 entered promiscuous mode [ 2094.352121][ T6075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.417112][ T6075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.511340][ T6075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.588277][ T6075] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.649267][T22758] chnl_net:caif_netlink_parms(): no params data found [ 2094.755234][T22758] bridge0: port 1(bridge_slave_0) entered blocking state [ 2094.762382][T22758] bridge0: port 1(bridge_slave_0) entered disabled state [ 2094.771228][T22758] device bridge_slave_0 entered promiscuous mode [ 2094.796756][T22781] netlink: 'syz.2.17855': attribute type 21 has an invalid length. [ 2094.827583][T22758] bridge0: port 2(bridge_slave_1) entered blocking state [ 2094.841314][T22758] bridge0: port 2(bridge_slave_1) entered disabled state [ 2094.854370][T22758] device bridge_slave_1 entered promiscuous mode [ 2094.867796][T22785] netlink: 'syz.1.17856': attribute type 10 has an invalid length. [ 2095.035522][T22758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2095.098106][T22758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2095.147268][T22758] team0: Port device team_slave_0 added [ 2095.165498][T22758] team0: Port device team_slave_1 added [ 2095.211688][T22758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2095.226793][T22758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2095.264174][T22758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2095.294738][T22758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2095.301790][T22758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2095.305604][T22800] netlink: 'syz.2.17860': attribute type 29 has an invalid length. [ 2095.356754][T22758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2095.476804][T22811] netlink: 4079 bytes leftover after parsing attributes in process `syz.5.17861'. [ 2095.477205][T22758] device hsr_slave_0 entered promiscuous mode [ 2095.512269][T22758] device hsr_slave_1 entered promiscuous mode [ 2095.545090][T22758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2095.554105][T22758] Cannot create hsr debugfs directory [ 2095.562781][T22800] netlink: 'syz.2.17860': attribute type 29 has an invalid length. [ 2095.791611][T22800] netlink: 'syz.2.17860': attribute type 29 has an invalid length. [ 2095.859143][T22800] netlink: 'syz.2.17860': attribute type 29 has an invalid length. [ 2096.217008][T22831] netlink: 'syz.2.17866': attribute type 21 has an invalid length. [ 2096.353809][T22836] netlink: 'syz.3.17868': attribute type 20 has an invalid length. [ 2096.377781][ T1711] Bluetooth: hci2: command 0x0409 tx timeout [ 2096.593353][T22758] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2096.710078][T22758] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2096.780384][T22758] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2096.821269][T22758] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2096.906468][T22866] netlink: 'syz.5.17874': attribute type 21 has an invalid length. [ 2096.914612][T22866] netlink: 128 bytes leftover after parsing attributes in process `syz.5.17874'. [ 2096.924420][T22866] netlink: 'syz.5.17874': attribute type 4 has an invalid length. [ 2096.932392][T22866] netlink: 3 bytes leftover after parsing attributes in process `syz.5.17874'. [ 2097.099807][T22877] -1: renamed from syzkaller0 [ 2097.324876][T22883] FAULT_INJECTION: forcing a failure. [ 2097.324876][T22883] name failslab, interval 1, probability 0, space 0, times 0 [ 2097.363049][T22883] CPU: 0 PID: 22883 Comm: syz.1.17879 Not tainted syzkaller #0 [ 2097.370650][T22883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2097.380714][T22883] Call Trace: [ 2097.384000][T22883] [ 2097.386933][T22883] dump_stack_lvl+0x188/0x250 [ 2097.391625][T22883] ? show_regs_print_info+0x20/0x20 [ 2097.396837][T22883] ? load_image+0x400/0x400 [ 2097.401364][T22883] ? __might_sleep+0xf0/0xf0 [ 2097.406142][T22883] ? __lock_acquire+0x7d10/0x7d10 [ 2097.411189][T22883] ? netlink_insert+0xe95/0x11f0 [ 2097.416149][T22883] should_fail+0x38c/0x4c0 [ 2097.420589][T22883] should_failslab+0x5/0x20 [ 2097.425102][T22883] slab_pre_alloc_hook+0x51/0xc0 [ 2097.430053][T22883] kmem_cache_alloc_node+0x47/0x2d0 [ 2097.435363][T22883] ? __alloc_skb+0xf4/0x750 [ 2097.439902][T22883] __alloc_skb+0xf4/0x750 [ 2097.444246][T22883] netlink_sendmsg+0x654/0xbe0 [ 2097.449031][T22883] ? netlink_getsockopt+0x570/0x570 [ 2097.454245][T22883] ? aa_sock_msg_perm+0x94/0x150 [ 2097.459285][T22883] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2097.464586][T22883] ? security_socket_sendmsg+0x7c/0xa0 [ 2097.470209][T22883] ? netlink_getsockopt+0x570/0x570 [ 2097.475424][T22883] ____sys_sendmsg+0x5b7/0x8f0 [ 2097.480212][T22883] ? __sys_sendmsg_sock+0x30/0x30 [ 2097.485261][T22883] ? import_iovec+0x6f/0xa0 [ 2097.489834][T22883] ___sys_sendmsg+0x236/0x2e0 [ 2097.494532][T22883] ? __sys_sendmsg+0x2a0/0x2a0 [ 2097.499315][T22883] ? vfs_write+0x8b2/0xd60 [ 2097.503761][T22883] __se_sys_sendmsg+0x1af/0x290 [ 2097.508627][T22883] ? __x64_sys_sendmsg+0x80/0x80 [ 2097.513622][T22883] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2097.519635][T22883] ? lockdep_hardirqs_on+0x94/0x140 [ 2097.524852][T22883] do_syscall_64+0x4c/0xa0 [ 2097.529462][T22883] ? clear_bhb_loop+0x30/0x80 [ 2097.534148][T22883] ? clear_bhb_loop+0x30/0x80 [ 2097.538837][T22883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2097.544743][T22883] RIP: 0033:0x7fa11eb11cb9 [ 2097.549171][T22883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2097.568786][T22883] RSP: 002b:00007fa11cd6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2097.577215][T22883] RAX: ffffffffffffffda RBX: 00007fa11ed8cfa0 RCX: 00007fa11eb11cb9 [ 2097.585199][T22883] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2097.593181][T22883] RBP: 00007fa11cd6d090 R08: 0000000000000000 R09: 0000000000000000 [ 2097.601277][T22883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2097.609263][T22883] R13: 00007fa11ed8d038 R14: 00007fa11ed8cfa0 R15: 00007fff4a80cd58 [ 2097.617266][T22883] [ 2097.648271][T22758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2097.704028][ T6075] device hsr_slave_0 left promiscuous mode [ 2097.711523][ T6075] device hsr_slave_1 left promiscuous mode [ 2097.758082][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2097.778013][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2097.814060][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2097.826245][T22890] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.17880'. [ 2097.842048][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2097.877143][ T6075] device bridge_slave_1 left promiscuous mode [ 2097.897878][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 2097.909688][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 2097.937581][ T6075] device veth1_vlan left promiscuous mode [ 2097.945929][ T6075] device veth0_vlan left promiscuous mode [ 2098.136017][ T6075] team0 (unregistering): Port device geneve1 removed [ 2098.219178][ T6075] team0 (unregistering): Port device team_slave_1 removed [ 2098.235414][ T6075] team0 (unregistering): Port device team_slave_0 removed [ 2098.359336][T22758] 8021q: adding VLAN 0 to HW filter on device team0 [ 2098.382232][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2098.390807][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2098.415312][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2098.434026][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2098.446719][T24958] bridge0: port 1(bridge_slave_0) entered blocking state [ 2098.453939][T24958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2098.461627][ T2266] Bluetooth: hci2: command 0x041b tx timeout [ 2098.469086][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2098.528792][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2098.580315][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2098.599707][T24958] bridge0: port 2(bridge_slave_1) entered blocking state [ 2098.606868][T24958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2098.621891][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2098.648915][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2098.676881][T22910] FAULT_INJECTION: forcing a failure. [ 2098.676881][T22910] name failslab, interval 1, probability 0, space 0, times 0 [ 2098.714435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2098.740181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2098.753411][T22910] CPU: 1 PID: 22910 Comm: syz.5.17888 Not tainted syzkaller #0 [ 2098.761080][T22910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2098.768776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2098.771140][T22910] Call Trace: [ 2098.771149][T22910] [ 2098.785309][T22910] dump_stack_lvl+0x188/0x250 [ 2098.790009][T22910] ? show_regs_print_info+0x20/0x20 [ 2098.795230][T22910] ? load_image+0x400/0x400 [ 2098.799760][T22910] should_fail+0x38c/0x4c0 [ 2098.804186][T22910] should_failslab+0x5/0x20 [ 2098.808690][T22910] slab_pre_alloc_hook+0x51/0xc0 [ 2098.813645][T22910] kmem_cache_alloc_trace+0x47/0x2a0 [ 2098.818936][T22910] ? sctp_add_bind_addr+0x89/0x350 [ 2098.824065][T22910] sctp_add_bind_addr+0x89/0x350 [ 2098.829012][T22910] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 2098.834723][T22910] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 2098.840794][T22910] ? sctp_v4_is_any+0x31/0x50 [ 2098.845564][T22910] ? sctp_copy_one_addr+0x93/0x660 [ 2098.850705][T22910] sctp_bind_addr_copy+0xaf/0x3c0 [ 2098.855865][T22910] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2098.862215][T22910] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2098.867527][T22910] ? __sctp_connect+0xd80/0xd80 [ 2098.872387][T22910] ? __local_bh_enable_ip+0x136/0x1c0 [ 2098.877907][T22910] ? _local_bh_enable+0xa0/0xa0 [ 2098.882805][T22910] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2098.888357][T22910] ? security_sctp_bind_connect+0x85/0xb0 [ 2098.894087][T22910] sctp_sendmsg+0x158d/0x2900 [ 2098.898788][T22910] ? aa_sk_perm+0x7dc/0x910 [ 2098.903294][T22910] ? sctp_getsockopt+0x8a0/0x8a0 [ 2098.908233][T22910] ? aa_af_perm+0x340/0x340 [ 2098.912735][T22910] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2098.919161][T22910] ? sock_rps_record_flow+0x17/0x3b0 [ 2098.924472][T22910] ? inet_sendmsg+0x78/0x2f0 [ 2098.929072][T22910] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2098.934377][T22910] ? security_socket_sendmsg+0x7c/0xa0 [ 2098.939845][T22910] ? inet_send_prepare+0x260/0x260 [ 2098.944973][T22910] ____sys_sendmsg+0x5b7/0x8f0 [ 2098.949949][T22910] ? __sys_sendmsg_sock+0x30/0x30 [ 2098.954998][T22910] ? import_iovec+0x6f/0xa0 [ 2098.959511][T22910] ___sys_sendmsg+0x236/0x2e0 [ 2098.964199][T22910] ? __sys_sendmsg+0x2a0/0x2a0 [ 2098.968977][T22910] ? trace_event_raw_event_lock+0x270/0x270 [ 2098.974985][T22910] ? vfs_write+0x8b2/0xd60 [ 2098.979437][T22910] __se_sys_sendmsg+0x1af/0x290 [ 2098.984290][T22910] ? __x64_sys_sendmsg+0x80/0x80 [ 2098.989225][T22910] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2098.995216][T22910] ? lockdep_hardirqs_on+0x94/0x140 [ 2099.000432][T22910] do_syscall_64+0x4c/0xa0 [ 2099.004981][T22910] ? clear_bhb_loop+0x30/0x80 [ 2099.009667][T22910] ? clear_bhb_loop+0x30/0x80 [ 2099.014352][T22910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2099.020332][T22910] RIP: 0033:0x7f528d411cb9 [ 2099.024747][T22910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2099.044350][T22910] RSP: 002b:00007f528b66d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2099.052763][T22910] RAX: ffffffffffffffda RBX: 00007f528d68cfa0 RCX: 00007f528d411cb9 [ 2099.060728][T22910] RDX: 0000000000040042 RSI: 0000200000000140 RDI: 0000000000000004 [ 2099.068691][T22910] RBP: 00007f528b66d090 R08: 0000000000000000 R09: 0000000000000000 [ 2099.076659][T22910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2099.084625][T22910] R13: 00007f528d68d038 R14: 00007f528d68cfa0 R15: 00007ffe4dd47a98 [ 2099.092619][T22910] [ 2099.098730][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.105078][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.135016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2099.151765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2099.174207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2099.196133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2099.223646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2099.242521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2099.263561][T22758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2099.953714][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2099.969552][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2099.992812][T22758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2100.094036][T22966] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.17901'. [ 2100.348424][T22982] validate_nla: 3 callbacks suppressed [ 2100.348442][T22982] netlink: 'syz.1.17904': attribute type 3 has an invalid length. [ 2100.392906][T22982] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.17904'. [ 2100.533530][ T1711] Bluetooth: hci2: command 0x040f tx timeout [ 2100.686780][T22999] FAULT_INJECTION: forcing a failure. [ 2100.686780][T22999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2100.708889][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2100.729675][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2100.771005][T22999] CPU: 0 PID: 22999 Comm: syz.1.17906 Not tainted syzkaller #0 [ 2100.778711][T22999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2100.788782][T22999] Call Trace: [ 2100.792084][T22999] [ 2100.795032][T22999] dump_stack_lvl+0x188/0x250 [ 2100.799742][T22999] ? show_regs_print_info+0x20/0x20 [ 2100.804964][T22999] ? load_image+0x400/0x400 [ 2100.809499][T22999] ? __lock_acquire+0x7d10/0x7d10 [ 2100.814556][T22999] ? vfs_write+0x8b2/0xd60 [ 2100.819001][T22999] should_fail+0x38c/0x4c0 [ 2100.823448][T22999] _copy_from_user+0x2e/0x170 [ 2100.828148][T22999] __sys_bpf+0x26d/0x6f0 [ 2100.832419][T22999] ? bpf_link_show_fdinfo+0x380/0x380 [ 2100.837844][T22999] ? vtime_user_exit+0x2c8/0x3e0 [ 2100.842816][T22999] __x64_sys_bpf+0x78/0x90 [ 2100.847262][T22999] do_syscall_64+0x4c/0xa0 [ 2100.851781][T22999] ? clear_bhb_loop+0x30/0x80 [ 2100.856480][T22999] ? clear_bhb_loop+0x30/0x80 [ 2100.861179][T22999] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2100.867086][T22999] RIP: 0033:0x7fa11eb11cb9 [ 2100.871518][T22999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2100.891141][T22999] RSP: 002b:00007fa11cd6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2100.899783][T22999] RAX: ffffffffffffffda RBX: 00007fa11ed8cfa0 RCX: 00007fa11eb11cb9 [ 2100.907786][T22999] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 2100.915804][T22999] RBP: 00007fa11cd6d090 R08: 0000000000000000 R09: 0000000000000000 [ 2100.923810][T22999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2100.931887][T22999] R13: 00007fa11ed8d038 R14: 00007fa11ed8cfa0 R15: 00007fff4a80cd58 [ 2100.939904][T22999] [ 2100.967643][T22684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2100.980419][T22684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2101.005275][T22758] device veth0_vlan entered promiscuous mode [ 2101.020104][T22684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2101.028864][T22684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2101.049003][T22996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2101.059690][T22758] device veth1_vlan entered promiscuous mode [ 2101.135612][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2101.154219][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2101.213746][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2101.239192][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2101.271484][T22758] device veth0_macvtap entered promiscuous mode [ 2101.289788][T23011] netlink: 180 bytes leftover after parsing attributes in process `syz.3.17910'. [ 2101.308968][T23019] netlink: 'syz.1.17918': attribute type 9 has an invalid length. [ 2101.332868][T23013] netlink: 'syz.1.17918': attribute type 21 has an invalid length. [ 2101.342537][T23018] delete_channel: no stack [ 2101.355700][T23019] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.17918'. [ 2101.389393][T22758] device veth1_macvtap entered promiscuous mode [ 2101.491707][T22758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2101.549645][T22758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.580298][T22758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2101.598801][T22758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.627039][T22758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2101.659629][T22758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.681866][T22758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2101.705017][T22758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.730927][T22758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2101.760967][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2101.796608][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2101.838942][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2101.858609][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2101.886222][T22758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2101.913503][T23042] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.17917'. [ 2101.952436][T23042] openvswitch: netlink: Flow key attribute not present in set flow. [ 2101.953161][T22758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2102.042009][T22758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2102.099143][T22758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2102.120344][T22758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2102.131433][T22758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2102.152492][T22758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2102.169615][T22758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2102.181936][T22758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2102.199606][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2102.231565][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2102.280316][T22758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.300291][T22758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.332711][T22758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.378595][T22758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.487552][T23039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2102.579498][T23061] netlink: 'syz.1.17921': attribute type 10 has an invalid length. [ 2102.633202][ T2266] Bluetooth: hci2: command 0x0419 tx timeout [ 2102.639857][T23061] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.673365][T23061] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.703012][T23061] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.720830][T23061] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.785008][T23064] netlink: 'syz.1.17921': attribute type 10 has an invalid length. [ 2102.824818][T24958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2102.883501][T24958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2102.939584][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2102.965426][T23080] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.17927'. [ 2102.999201][T23080] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2103.016834][T23081] netlink: 'syz.1.17926': attribute type 21 has an invalid length. [ 2103.026534][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2103.050281][T23085] netlink: 'syz.1.17926': attribute type 9 has an invalid length. [ 2103.050983][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2103.079364][T23085] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.17926'. [ 2103.080021][T23084] netlink: 'syz.2.17928': attribute type 21 has an invalid length. [ 2103.170616][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2103.243026][T23089] netlink: 'syz.2.17928': attribute type 9 has an invalid length. [ 2103.268018][T23089] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.17928'. [ 2103.316238][T23094] netlink: 'syz.4.17844': attribute type 10 has an invalid length. [ 2103.360441][T23094] netlink: 55 bytes leftover after parsing attributes in process `syz.4.17844'. [ 2103.450464][T23097] FAULT_INJECTION: forcing a failure. [ 2103.450464][T23097] name failslab, interval 1, probability 0, space 0, times 0 [ 2103.479870][T23097] CPU: 0 PID: 23097 Comm: syz.1.17931 Not tainted syzkaller #0 [ 2103.487566][T23097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2103.497820][T23097] Call Trace: [ 2103.501107][T23097] [ 2103.504056][T23097] dump_stack_lvl+0x188/0x250 [ 2103.508756][T23097] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2103.514936][T23097] ? show_regs_print_info+0x20/0x20 [ 2103.520294][T23097] ? load_image+0x400/0x400 [ 2103.524688][T23101] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.17933'. [ 2103.524811][T23097] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2103.540138][T23097] should_fail+0x38c/0x4c0 [ 2103.544573][T23097] should_failslab+0x5/0x20 [ 2103.549082][T23097] slab_pre_alloc_hook+0x51/0xc0 [ 2103.554026][T23097] ? skb_clone+0x1bd/0x350 [ 2103.558464][T23097] kmem_cache_alloc+0x3d/0x290 [ 2103.563245][T23097] skb_clone+0x1bd/0x350 [ 2103.567505][T23097] __netlink_deliver_tap+0x3cd/0x7c0 [ 2103.572805][T23097] netlink_deliver_tap+0x16c/0x180 [ 2103.577921][T23097] netlink_unicast+0x74f/0x920 [ 2103.582708][T23097] netlink_sendmsg+0x8ba/0xbe0 [ 2103.587488][T23097] ? netlink_getsockopt+0x570/0x570 [ 2103.592728][T23097] ? aa_sock_msg_perm+0x94/0x150 [ 2103.597675][T23097] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2103.602970][T23097] ? security_socket_sendmsg+0x7c/0xa0 [ 2103.608526][T23097] ? netlink_getsockopt+0x570/0x570 [ 2103.613730][T23097] ____sys_sendmsg+0x5b7/0x8f0 [ 2103.618622][T23097] ? __sys_sendmsg_sock+0x30/0x30 [ 2103.623750][T23097] ? import_iovec+0x6f/0xa0 [ 2103.628251][T23097] ___sys_sendmsg+0x236/0x2e0 [ 2103.632920][T23097] ? __sys_sendmsg+0x2a0/0x2a0 [ 2103.637699][T23097] __se_sys_sendmsg+0x1af/0x290 [ 2103.642717][T23097] ? __x64_sys_sendmsg+0x80/0x80 [ 2103.647641][T23097] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2103.653618][T23097] ? lockdep_hardirqs_on+0x94/0x140 [ 2103.658805][T23097] do_syscall_64+0x4c/0xa0 [ 2103.663215][T23097] ? clear_bhb_loop+0x30/0x80 [ 2103.667876][T23097] ? clear_bhb_loop+0x30/0x80 [ 2103.672548][T23097] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2103.678425][T23097] RIP: 0033:0x7fa11eb11cb9 [ 2103.682871][T23097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2103.702463][T23097] RSP: 002b:00007fa11cd6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2103.710879][T23097] RAX: ffffffffffffffda RBX: 00007fa11ed8cfa0 RCX: 00007fa11eb11cb9 [ 2103.718839][T23097] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2103.726822][T23097] RBP: 00007fa11cd6d090 R08: 0000000000000000 R09: 0000000000000000 [ 2103.734790][T23097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.742746][T23097] R13: 00007fa11ed8d038 R14: 00007fa11ed8cfa0 R15: 00007fff4a80cd58 [ 2103.751149][T23097] [ 2104.184083][T23127] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.17942'. [ 2104.380349][T23129] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.17941'. [ 2106.119884][T23168] validate_nla: 9 callbacks suppressed [ 2106.119902][T23168] netlink: 'syz.5.17955': attribute type 9 has an invalid length. [ 2107.776867][T23158] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 2107.790262][T23167] netlink: 'syz.5.17955': attribute type 21 has an invalid length. [ 2107.790786][T23158] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 2107.822043][T23158] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2107.912218][T23175] netlink: set zone limit has 8 unknown bytes [ 2108.222924][T23189] FAULT_INJECTION: forcing a failure. [ 2108.222924][T23189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2108.244623][T23189] CPU: 1 PID: 23189 Comm: syz.1.17963 Not tainted syzkaller #0 [ 2108.252207][T23189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2108.262273][T23189] Call Trace: [ 2108.265558][T23189] [ 2108.268589][T23189] dump_stack_lvl+0x188/0x250 [ 2108.273261][T23189] ? show_regs_print_info+0x20/0x20 [ 2108.278448][T23189] ? load_image+0x400/0x400 [ 2108.283074][T23189] ? __lock_acquire+0x7d10/0x7d10 [ 2108.288120][T23189] should_fail+0x38c/0x4c0 [ 2108.292710][T23189] _copy_to_user+0x2e/0x130 [ 2108.297218][T23189] simple_read_from_buffer+0xe3/0x150 [ 2108.302585][T23189] proc_fail_nth_read+0x1a6/0x220 [ 2108.307603][T23189] ? proc_fault_inject_write+0x310/0x310 [ 2108.313229][T23189] ? fsnotify_perm+0x254/0x560 [ 2108.317982][T23189] ? proc_fault_inject_write+0x310/0x310 [ 2108.323599][T23189] vfs_read+0x301/0xd60 [ 2108.327748][T23189] ? kernel_read+0x1e0/0x1e0 [ 2108.332323][T23189] ? __fget_files+0x40f/0x480 [ 2108.336990][T23189] ? mutex_lock_nested+0x17/0x20 [ 2108.341909][T23189] ? __fdget_pos+0x2bf/0x370 [ 2108.346479][T23189] ? ksys_read+0x71/0x260 [ 2108.350793][T23189] ksys_read+0x152/0x260 [ 2108.355025][T23189] ? vfs_write+0xd60/0xd60 [ 2108.359432][T23189] ? lockdep_hardirqs_on+0x94/0x140 [ 2108.364618][T23189] do_syscall_64+0x4c/0xa0 [ 2108.369018][T23189] ? clear_bhb_loop+0x30/0x80 [ 2108.373675][T23189] ? clear_bhb_loop+0x30/0x80 [ 2108.378336][T23189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2108.384220][T23189] RIP: 0033:0x7fa11ead258e [ 2108.388708][T23189] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2108.408296][T23189] RSP: 002b:00007fa11cd6cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2108.416707][T23189] RAX: ffffffffffffffda RBX: 00007fa11cd6d6c0 RCX: 00007fa11ead258e [ 2108.424671][T23189] RDX: 000000000000000f RSI: 00007fa11cd6d0a0 RDI: 0000000000000004 [ 2108.432645][T23189] RBP: 00007fa11cd6d090 R08: 0000000000000000 R09: 0000000000000000 [ 2108.440606][T23189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2108.448563][T23189] R13: 00007fa11ed8d038 R14: 00007fa11ed8cfa0 R15: 00007fff4a80cd58 [ 2108.456552][T23189] [ 2108.671506][T23198] netlink: 'syz.1.17967': attribute type 21 has an invalid length. [ 2108.742669][T23204] netlink: 'syz.1.17967': attribute type 9 has an invalid length. [ 2108.760467][T23206] netlink: 'syz.4.17968': attribute type 39 has an invalid length. [ 2108.785659][T23204] __nla_validate_parse: 3 callbacks suppressed [ 2108.785676][T23204] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.17967'. [ 2108.816763][T23208] FAULT_INJECTION: forcing a failure. [ 2108.816763][T23208] name failslab, interval 1, probability 0, space 0, times 0 [ 2108.840758][T23208] CPU: 1 PID: 23208 Comm: syz.2.17969 Not tainted syzkaller #0 [ 2108.848347][T23208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2108.858411][T23208] Call Trace: [ 2108.861708][T23208] [ 2108.864644][T23208] dump_stack_lvl+0x188/0x250 [ 2108.869335][T23208] ? show_regs_print_info+0x20/0x20 [ 2108.874543][T23208] ? load_image+0x400/0x400 [ 2108.879067][T23208] ? __might_sleep+0xf0/0xf0 [ 2108.883669][T23208] ? __lock_acquire+0x7d10/0x7d10 [ 2108.888706][T23208] ? netlink_insert+0xe95/0x11f0 [ 2108.893657][T23208] should_fail+0x38c/0x4c0 [ 2108.893688][T23208] should_failslab+0x5/0x20 [ 2108.893704][T23208] slab_pre_alloc_hook+0x51/0xc0 [ 2108.893723][T23208] kmem_cache_alloc_node+0x47/0x2d0 [ 2108.893736][T23208] ? __alloc_skb+0xf4/0x750 [ 2108.893758][T23208] __alloc_skb+0xf4/0x750 [ 2108.893777][T23208] netlink_sendmsg+0x654/0xbe0 [ 2108.893803][T23208] ? netlink_getsockopt+0x570/0x570 [ 2108.893821][T23208] ? aa_sock_msg_perm+0x94/0x150 [ 2108.893840][T23208] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2108.893858][T23208] ? security_socket_sendmsg+0x7c/0xa0 [ 2108.893875][T23208] ? netlink_getsockopt+0x570/0x570 [ 2108.893890][T23208] ____sys_sendmsg+0x5b7/0x8f0 [ 2108.893917][T23208] ? __sys_sendmsg_sock+0x30/0x30 [ 2108.893942][T23208] ? import_iovec+0x6f/0xa0 [ 2108.893964][T23208] ___sys_sendmsg+0x236/0x2e0 [ 2108.893990][T23208] ? __sys_sendmsg+0x2a0/0x2a0 [ 2108.894031][T23208] ? rcu_is_watching+0x11/0xa0 [ 2108.894076][T23208] __se_sys_sendmsg+0x1af/0x290 [ 2108.894097][T23208] ? __x64_sys_sendmsg+0x80/0x80 [ 2108.991127][T23208] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2108.997141][T23208] ? lockdep_hardirqs_on+0x94/0x140 [ 2109.002363][T23208] do_syscall_64+0x4c/0xa0 [ 2109.006787][T23208] ? clear_bhb_loop+0x30/0x80 [ 2109.011452][T23208] ? clear_bhb_loop+0x30/0x80 [ 2109.016114][T23208] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2109.021991][T23208] RIP: 0033:0x7fc75e6f7cb9 [ 2109.026395][T23208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2109.045983][T23208] RSP: 002b:00007fc75c953028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2109.054384][T23208] RAX: ffffffffffffffda RBX: 00007fc75e972fa0 RCX: 00007fc75e6f7cb9 [ 2109.062343][T23208] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 2109.070301][T23208] RBP: 00007fc75c953090 R08: 0000000000000000 R09: 0000000000000000 [ 2109.078260][T23208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.086223][T23208] R13: 00007fc75e973038 R14: 00007fc75e972fa0 R15: 00007ffd1d2c4ca8 [ 2109.094199][T23208] [ 2110.121544][T23226] chnl_net:caif_netlink_parms(): no params data found [ 2110.491429][T23226] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.557478][T23226] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.571604][T23257] netlink: 'syz.4.17984': attribute type 9 has an invalid length. [ 2110.578866][T23226] device bridge_slave_0 entered promiscuous mode [ 2110.610222][T23253] netlink: 'syz.4.17984': attribute type 21 has an invalid length. [ 2110.623396][T23257] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.17984'. [ 2110.647165][T23226] bridge0: port 2(bridge_slave_1) entered blocking state [ 2110.664848][T23226] bridge0: port 2(bridge_slave_1) entered disabled state [ 2110.673008][T23226] device bridge_slave_1 entered promiscuous mode [ 2110.847307][T23226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2110.878759][T23226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2111.034773][T23226] team0: Port device team_slave_0 added [ 2111.096939][T23226] team0: Port device team_slave_1 added [ 2111.101945][T23275] FAULT_INJECTION: forcing a failure. [ 2111.101945][T23275] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.203264][T23275] CPU: 1 PID: 23275 Comm: syz.4.17989 Not tainted syzkaller #0 [ 2111.203750][T23226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2111.210847][T23275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2111.210860][T23275] Call Trace: [ 2111.210868][T23275] [ 2111.210876][T23275] dump_stack_lvl+0x188/0x250 [ 2111.238907][T23275] ? show_regs_print_info+0x20/0x20 [ 2111.244136][T23275] ? load_image+0x400/0x400 [ 2111.248657][T23275] ? __might_sleep+0xf0/0xf0 [ 2111.253267][T23275] ? __lock_acquire+0x7d10/0x7d10 [ 2111.258473][T23275] ? mark_lock+0x94/0x320 [ 2111.258538][T23226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2111.262811][T23275] should_fail+0x38c/0x4c0 [ 2111.262841][T23275] should_failslab+0x5/0x20 [ 2111.262857][T23275] slab_pre_alloc_hook+0x51/0xc0 [ 2111.302636][T23275] __kmalloc+0x6b/0x330 [ 2111.306809][T23275] ? tomoyo_realpath_from_path+0x118/0x610 [ 2111.312642][T23275] tomoyo_realpath_from_path+0x118/0x610 [ 2111.318312][T23275] tomoyo_path_number_perm+0x242/0x660 [ 2111.323789][T23275] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2111.330406][T23275] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2111.336025][T23275] security_file_ioctl+0x6c/0xa0 [ 2111.341327][T23275] __se_sys_ioctl+0x48/0x170 [ 2111.345936][T23275] do_syscall_64+0x4c/0xa0 [ 2111.350457][T23275] ? clear_bhb_loop+0x30/0x80 [ 2111.355167][T23275] ? clear_bhb_loop+0x30/0x80 [ 2111.359952][T23275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2111.366129][T23275] RIP: 0033:0x7f78597accb9 [ 2111.370554][T23275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2111.390175][T23275] RSP: 002b:00007f78579e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2111.398696][T23275] RAX: ffffffffffffffda RBX: 00007f7859a28090 RCX: 00007f78597accb9 [ 2111.403800][T23226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2111.406674][T23275] RDX: 0000200000000640 RSI: 000000000000541b RDI: 0000000000000004 [ 2111.406691][T23275] RBP: 00007f78579e7090 R08: 0000000000000000 R09: 0000000000000000 [ 2111.406702][T23275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.441248][T23275] R13: 00007f7859a28128 R14: 00007f7859a28090 R15: 00007ffe9cbdbec8 [ 2111.449251][T23275] [ 2111.466107][T23226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2111.491055][T23226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2111.526950][T23226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2111.624357][T23226] device hsr_slave_0 entered promiscuous mode [ 2111.643648][T17947] Bluetooth: hci3: command 0x0409 tx timeout [ 2111.650923][T23226] device hsr_slave_1 entered promiscuous mode [ 2111.677740][T23226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2111.693295][T23226] Cannot create hsr debugfs directory [ 2111.823690][T23275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2112.179388][T23285] netlink: 'syz.1.17992': attribute type 2 has an invalid length. [ 2112.273594][T23288] netlink: 'syz.4.17995': attribute type 39 has an invalid length. [ 2112.526666][T23303] netlink: set zone limit has 8 unknown bytes [ 2112.591229][T23298] netlink: 'syz.4.17997': attribute type 3 has an invalid length. [ 2112.761720][T23226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2112.846840][T23226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2112.988470][T23226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2113.057235][T23302] netlink: 'syz.2.17999': attribute type 9 has an invalid length. [ 2113.062475][T23226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2113.106781][T23302] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.17999'. [ 2113.723351][ T2843] Bluetooth: hci3: command 0x041b tx timeout [ 2113.868624][T23226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2113.940628][T23226] 8021q: adding VLAN 0 to HW filter on device team0 [ 2113.969251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2113.996196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2114.043531][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2114.093971][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2114.120547][T22928] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.127686][T22928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2114.155277][T23331] FAULT_INJECTION: forcing a failure. [ 2114.155277][T23331] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.193778][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2114.236418][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2114.263629][T23331] CPU: 0 PID: 23331 Comm: syz.2.18008 Not tainted syzkaller #0 [ 2114.271315][T23331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2114.281370][T23331] Call Trace: [ 2114.284822][T23331] [ 2114.287754][T23331] dump_stack_lvl+0x188/0x250 [ 2114.292436][T23331] ? show_regs_print_info+0x20/0x20 [ 2114.297635][T23331] ? load_image+0x400/0x400 [ 2114.302144][T23331] ? __might_sleep+0xf0/0xf0 [ 2114.306788][T23331] ? __lock_acquire+0x7d10/0x7d10 [ 2114.311824][T23331] should_fail+0x38c/0x4c0 [ 2114.316247][T23331] should_failslab+0x5/0x20 [ 2114.320743][T23331] slab_pre_alloc_hook+0x51/0xc0 [ 2114.325680][T23331] kmem_cache_alloc_node+0x47/0x2d0 [ 2114.330864][T23331] ? dup_task_struct+0x57/0xb30 [ 2114.335723][T23331] dup_task_struct+0x57/0xb30 [ 2114.340487][T23331] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2114.345681][T23331] ? lockdep_hardirqs_on+0x94/0x140 [ 2114.350880][T23331] copy_process+0x5f0/0x3e20 [ 2114.355460][T23331] ? migrate_enable+0x13e/0x200 [ 2114.360324][T23331] ? trace_call_bpf+0x515/0x5b0 [ 2114.365181][T23331] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2114.371088][T23331] ? __pidfd_prepare+0x140/0x140 [ 2114.376034][T23331] ? perf_trace_lock+0x301/0x390 [ 2114.380979][T23331] kernel_clone+0x23f/0x990 [ 2114.385476][T23331] ? trace_event_raw_event_lock+0x270/0x270 [ 2114.391403][T23331] ? trace_event_raw_event_lock+0x270/0x270 [ 2114.397287][T23331] ? vfs_write+0x8b2/0xd60 [ 2114.401699][T23331] ? create_io_thread+0x180/0x180 [ 2114.406760][T23331] __x64_sys_clone+0x19a/0x210 [ 2114.411524][T23331] ? __ia32_sys_vfork+0x130/0x130 [ 2114.416577][T23331] ? lockdep_hardirqs_on+0x94/0x140 [ 2114.421783][T23331] do_syscall_64+0x4c/0xa0 [ 2114.426193][T23331] ? clear_bhb_loop+0x30/0x80 [ 2114.430864][T23331] ? clear_bhb_loop+0x30/0x80 [ 2114.435537][T23331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2114.441467][T23331] RIP: 0033:0x7fc75e6f7cb9 [ 2114.445876][T23331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2114.465474][T23331] RSP: 002b:00007fc75c952fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2114.473884][T23331] RAX: ffffffffffffffda RBX: 00007fc75e972fa0 RCX: 00007fc75e6f7cb9 [ 2114.481848][T23331] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000100000 [ 2114.489814][T23331] RBP: 00007fc75c953090 R08: 0000000000000000 R09: 0000000000000000 [ 2114.497776][T23331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2114.505837][T23331] R13: 00007fc75e973038 R14: 00007fc75e972fa0 R15: 00007ffd1d2c4ca8 [ 2114.513836][T23331] [ 2114.550039][T22928] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.557293][T22928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2114.589435][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2114.608979][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2114.681554][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2114.694412][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2114.701580][T23342] delete_channel: no stack [ 2114.720894][T23342] delete_channel: no stack [ 2114.726043][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2114.764750][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2114.785127][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2114.804354][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2114.823960][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2114.881914][T23226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2114.907501][T23226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2114.931199][T23351] netlink: 'syz.5.18012': attribute type 9 has an invalid length. [ 2114.978479][T23347] netlink: 'syz.5.18012': attribute type 21 has an invalid length. [ 2115.000391][T23351] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.18012'. [ 2115.033561][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2115.046312][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2115.083790][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2115.196497][T23354] netlink: 'syz.2.18013': attribute type 21 has an invalid length. [ 2115.319342][T23356] netlink: 'syz.2.18013': attribute type 21 has an invalid length. [ 2115.439929][T23356] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18013'. [ 2115.784994][T23226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2115.792479][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2115.803568][ T2843] Bluetooth: hci3: command 0x040f tx timeout [ 2115.830645][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2115.891537][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2115.927649][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2116.264657][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2116.273063][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2116.307578][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2116.353906][T24958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2116.372953][T23226] device veth0_vlan entered promiscuous mode [ 2116.389111][T23382] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.18023'. [ 2116.440748][T23226] device veth1_vlan entered promiscuous mode [ 2116.535893][T23385] netlink: 'syz.2.18024': attribute type 10 has an invalid length. [ 2116.623798][T23385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2116.644730][T23385] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2116.738402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2116.754131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2116.779947][T23226] device veth0_macvtap entered promiscuous mode [ 2116.837470][T23226] device veth1_macvtap entered promiscuous mode [ 2116.911901][T23226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2116.952229][T23226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.977758][T23226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2116.997477][T23398] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.18027'. [ 2117.029784][T23226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.079816][T23226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.105235][T23226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.142989][T23226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.182827][T23226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.210905][T23226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.235467][T23226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.270403][T23226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2117.301316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2117.320183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2117.352235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2117.392278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2117.432182][T23406] netlink: 'syz.5.18029': attribute type 3 has an invalid length. [ 2117.460520][T23226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.482985][T23406] netlink: 'syz.5.18029': attribute type 1 has an invalid length. [ 2117.490404][T23226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.513239][T23406] netlink: 142168 bytes leftover after parsing attributes in process `syz.5.18029'. [ 2117.536330][T23226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.589043][T23226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.614929][T23226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.648726][T23226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.669305][T23226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.676715][T23415] netlink: 'syz.2.18030': attribute type 9 has an invalid length. [ 2117.694319][T23226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.706294][T23415] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.18030'. [ 2117.719861][T23226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.751144][T23226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.774814][T23226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2117.806711][T23412] netlink: 10 bytes leftover after parsing attributes in process `syz.1.18040'. [ 2117.878947][T23411] netlink: 'syz.2.18030': attribute type 21 has an invalid length. [ 2117.883592][ T2843] Bluetooth: hci3: command 0x0419 tx timeout [ 2117.901838][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2117.918910][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2117.964495][T23226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.983808][T23226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.992559][T23226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.040947][T23226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.107802][T23429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18036'. [ 2118.235555][T23429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18036'. [ 2118.512966][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2118.531984][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2118.548000][T23430] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18036'. [ 2118.625530][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2118.666929][T22928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2118.681127][T22928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2118.736774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2118.909905][T23441] netlink: 'syz.1.18039': attribute type 39 has an invalid length. [ 2119.080362][T23444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2119.685862][T23463] netlink: 'syz.5.18057': attribute type 21 has an invalid length. [ 2119.705573][T23457] netlink: 'syz.3.18045': attribute type 9 has an invalid length. [ 2119.767917][T23463] netlink: 'syz.5.18057': attribute type 21 has an invalid length. [ 2120.208947][ T4255] device veth0_to_bridge left promiscuous mode [ 2120.246265][ T4255] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 2120.318487][ T4255] device hsr_slave_0 left promiscuous mode [ 2120.358289][ T4255] device hsr_slave_1 left promiscuous mode [ 2120.378701][ T4255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2120.393230][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2120.446254][ T4255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2120.471975][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2120.527675][ T4255] device veth1_macvtap left promiscuous mode [ 2120.547980][ T4255] device veth0_macvtap left promiscuous mode [ 2120.561990][T23492] __nla_validate_parse: 2 callbacks suppressed [ 2120.562027][T23492] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.18056'. [ 2120.589099][ T4255] device veth0_vlan left promiscuous mode [ 2120.972298][ T4255] team0 (unregistering): Port device geneve1 removed [ 2121.109041][ T4255] team0 (unregistering): Port device macvlan0 removed [ 2121.292718][ T4255] team0 (unregistering): Port device team_slave_1 removed [ 2121.342814][ T4255] team0 (unregistering): Port device team_slave_0 removed [ 2121.596361][T23490] FAULT_INJECTION: forcing a failure. [ 2121.596361][T23490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2121.630508][T23490] CPU: 0 PID: 23490 Comm: syz.3.18055 Not tainted syzkaller #0 [ 2121.638092][T23490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2121.648146][T23490] Call Trace: [ 2121.651424][T23490] [ 2121.654346][T23490] dump_stack_lvl+0x188/0x250 [ 2121.659174][T23490] ? show_regs_print_info+0x20/0x20 [ 2121.664376][T23490] ? load_image+0x400/0x400 [ 2121.668877][T23490] ? __lock_acquire+0x7d10/0x7d10 [ 2121.673889][T23490] ? __rwlock_init+0x140/0x140 [ 2121.678657][T23490] should_fail+0x38c/0x4c0 [ 2121.683189][T23490] _copy_from_user+0x2e/0x170 [ 2121.687860][T23490] dev_ethtool+0xd7/0xfe0 [ 2121.692182][T23490] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2121.698412][T23490] ? mutex_lock_io_nested+0x60/0x60 [ 2121.703597][T23490] ? dev_load+0xc3/0x1b0 [ 2121.707825][T23490] dev_ioctl+0x457/0xe30 [ 2121.712049][T23490] ? _copy_from_user+0x111/0x170 [ 2121.716967][T23490] sock_do_ioctl+0x245/0x320 [ 2121.721546][T23490] ? sock_show_fdinfo+0xb0/0xb0 [ 2121.726387][T23490] sock_ioctl+0x4d2/0x710 [ 2121.730702][T23490] ? sock_poll+0x410/0x410 [ 2121.735105][T23490] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2121.740023][T23490] ? security_file_ioctl+0x7c/0xa0 [ 2121.745118][T23490] ? sock_poll+0x410/0x410 [ 2121.749516][T23490] __se_sys_ioctl+0xfa/0x170 [ 2121.754101][T23490] do_syscall_64+0x4c/0xa0 [ 2121.758500][T23490] ? clear_bhb_loop+0x30/0x80 [ 2121.763155][T23490] ? clear_bhb_loop+0x30/0x80 [ 2121.767815][T23490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2121.773693][T23490] RIP: 0033:0x7f7aa9c2ecb9 [ 2121.778096][T23490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2121.797682][T23490] RSP: 002b:00007f7aa7e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2121.806081][T23490] RAX: ffffffffffffffda RBX: 00007f7aa9ea9fa0 RCX: 00007f7aa9c2ecb9 [ 2121.814074][T23490] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000f [ 2121.822027][T23490] RBP: 00007f7aa7e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 2121.829979][T23490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2121.837930][T23490] R13: 00007f7aa9eaa038 R14: 00007f7aa9ea9fa0 R15: 00007fffb0f56608 [ 2121.845896][T23490] [ 2121.869985][T23495] netlink: 168 bytes leftover after parsing attributes in process `syz.5.18059'. [ 2122.606814][T23530] bridge0: port 3(team0) entered blocking state [ 2122.659499][T23530] bridge0: port 3(team0) entered disabled state [ 2122.731405][T23530] device team0 entered promiscuous mode [ 2122.796538][T23530] device team_slave_0 entered promiscuous mode [ 2122.892612][T23530] device team_slave_1 entered promiscuous mode [ 2122.933723][T23530] device geneve1 entered promiscuous mode [ 2122.971869][T23530] bridge0: port 3(team0) entered blocking state [ 2122.978344][T23530] bridge0: port 3(team0) entered forwarding state [ 2123.369353][T23548] FAULT_INJECTION: forcing a failure. [ 2123.369353][T23548] name failslab, interval 1, probability 0, space 0, times 0 [ 2123.478225][T23556] netlink: 132 bytes leftover after parsing attributes in process `syz.5.18077'. [ 2123.534533][T23548] CPU: 0 PID: 23548 Comm: syz.2.18073 Not tainted syzkaller #0 [ 2123.542155][T23548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2123.552216][T23548] Call Trace: [ 2123.555499][T23548] [ 2123.558446][T23548] dump_stack_lvl+0x188/0x250 [ 2123.563135][T23548] ? show_regs_print_info+0x20/0x20 [ 2123.568348][T23548] ? load_image+0x400/0x400 [ 2123.572864][T23548] ? __might_sleep+0xf0/0xf0 [ 2123.577458][T23548] ? __lock_acquire+0x7d10/0x7d10 [ 2123.582495][T23548] should_fail+0x38c/0x4c0 [ 2123.586923][T23548] should_failslab+0x5/0x20 [ 2123.591429][T23548] slab_pre_alloc_hook+0x51/0xc0 [ 2123.596374][T23548] __kmalloc+0x6b/0x330 [ 2123.600530][T23548] ? tomoyo_encode+0x27e/0x540 [ 2123.605303][T23548] tomoyo_encode+0x27e/0x540 [ 2123.609910][T23548] tomoyo_realpath_from_path+0x5cd/0x610 [ 2123.615570][T23548] tomoyo_path_number_perm+0x242/0x660 [ 2123.621035][T23548] ? verify_lock_unused+0x140/0x140 [ 2123.626244][T23548] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2123.631705][T23548] ? ksys_write+0x1c6/0x260 [ 2123.636259][T23548] security_file_ioctl+0x6c/0xa0 [ 2123.641220][T23548] __se_sys_ioctl+0x48/0x170 [ 2123.646015][T23548] do_syscall_64+0x4c/0xa0 [ 2123.650447][T23548] ? clear_bhb_loop+0x30/0x80 [ 2123.655218][T23548] ? clear_bhb_loop+0x30/0x80 [ 2123.659902][T23548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2123.665804][T23548] RIP: 0033:0x7fc75e6f7cb9 [ 2123.670223][T23548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2123.689836][T23548] RSP: 002b:00007fc75c953028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2123.698266][T23548] RAX: ffffffffffffffda RBX: 00007fc75e972fa0 RCX: 00007fc75e6f7cb9 [ 2123.706275][T23548] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 0000000000000004 [ 2123.714269][T23548] RBP: 00007fc75c953090 R08: 0000000000000000 R09: 0000000000000000 [ 2123.722246][T23548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2123.730224][T23548] R13: 00007fc75e973038 R14: 00007fc75e972fa0 R15: 00007ffd1d2c4ca8 [ 2123.738222][T23548] [ 2124.095219][T23548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2124.109483][T23568] netlink: 'syz.5.18081': attribute type 9 has an invalid length. [ 2124.212614][T23568] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.18081'. [ 2124.636587][T23575] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.18084'. [ 2125.282919][T23599] netlink: 'syz.3.18091': attribute type 3 has an invalid length. [ 2125.297988][T23599] netlink: 'syz.3.18091': attribute type 1 has an invalid length. [ 2125.313287][T23599] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.18091'. [ 2125.621590][T23602] device wlan0 left promiscuous mode [ 2125.656437][T23607] netlink: 'syz.1.18092': attribute type 9 has an invalid length. [ 2125.670811][T23606] device wlan0 entered promiscuous mode [ 2125.697807][T23607] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.18092'. [ 2125.769282][T23602] netlink: 'syz.1.18092': attribute type 1 has an invalid length. [ 2125.792467][T23602] netlink: 'syz.1.18092': attribute type 4 has an invalid length. [ 2125.833564][T23602] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.18092'. [ 2126.168968][T23619] device veth1_macvtap left promiscuous mode [ 2126.597648][T23637] netlink: 'syz.1.18104': attribute type 21 has an invalid length. [ 2126.627831][T23637] IPv6: NLM_F_CREATE should be specified when creating new route [ 2126.878797][T23643] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18106'. [ 2127.547601][T23654] netlink: 'syz.1.18109': attribute type 9 has an invalid length. [ 2127.621758][T23654] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.18109'. [ 2128.534014][T23690] sctp: [Deprecated]: syz.2.18121 (pid 23690) Use of int in max_burst socket option deprecated. [ 2128.534014][T23690] Use struct sctp_assoc_value instead [ 2129.077381][T23704] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.18126'. [ 2129.790741][T23726] FAULT_INJECTION: forcing a failure. [ 2129.790741][T23726] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.830113][T23726] CPU: 0 PID: 23726 Comm: syz.3.18132 Not tainted syzkaller #0 [ 2129.837765][T23726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2129.847844][T23726] Call Trace: [ 2129.851140][T23726] [ 2129.854082][T23726] dump_stack_lvl+0x188/0x250 [ 2129.858971][T23726] ? show_regs_print_info+0x20/0x20 [ 2129.864210][T23726] ? load_image+0x400/0x400 [ 2129.868772][T23726] ? __might_sleep+0xf0/0xf0 [ 2129.873388][T23726] ? __lock_acquire+0x7d10/0x7d10 [ 2129.878456][T23726] should_fail+0x38c/0x4c0 [ 2129.882906][T23726] should_failslab+0x5/0x20 [ 2129.887423][T23726] slab_pre_alloc_hook+0x51/0xc0 [ 2129.892395][T23726] __kmalloc_node_track_caller+0x68/0x3a0 [ 2129.898136][T23726] ? netlink_dump+0x1e8/0xcf0 [ 2129.902840][T23726] ? kmem_cache_alloc_node+0x162/0x2d0 [ 2129.908403][T23726] ? __alloc_skb+0xf4/0x750 [ 2129.912932][T23726] ? netlink_dump+0x1e8/0xcf0 [ 2129.917638][T23726] __alloc_skb+0x22c/0x750 [ 2129.922098][T23726] netlink_dump+0x1e8/0xcf0 [ 2129.926675][T23726] ? netlink_lookup+0x1d0/0x1d0 [ 2129.931565][T23726] ? __inet_diag_dump_start+0x80c/0x970 [ 2129.937164][T23726] __netlink_dump_start+0x523/0x700 [ 2129.942414][T23726] inet_diag_rcv_msg_compat+0x207/0x420 [ 2129.948017][T23726] ? inet_diag_unregister+0xb0/0xb0 [ 2129.953240][T23726] ? __mutex_trylock_common+0x155/0x260 [ 2129.958815][T23726] ? mutex_lock_io_nested+0x60/0x60 [ 2129.964051][T23726] ? __inet_diag_dump+0x380/0x380 [ 2129.969096][T23726] ? inet_diag_dump_start_compat+0x20/0x20 [ 2129.975013][T23726] ? inet_diag_dump+0x50/0x50 [ 2129.979801][T23726] ? inet_diag_unregister+0xb0/0xb0 [ 2129.985033][T23726] sock_diag_rcv_msg+0x164/0x3e0 [ 2129.990017][T23726] netlink_rcv_skb+0x1f5/0x440 [ 2129.994882][T23726] ? sock_diag_bind+0xa0/0xa0 [ 2129.999592][T23726] ? netlink_ack+0xb50/0xb50 [ 2130.004220][T23726] ? __lock_acquire+0x7d10/0x7d10 [ 2130.009317][T23726] sock_diag_rcv+0x26/0x40 [ 2130.013847][T23726] netlink_unicast+0x774/0x920 [ 2130.018669][T23726] netlink_sendmsg+0x8ba/0xbe0 [ 2130.023480][T23726] ? netlink_getsockopt+0x570/0x570 [ 2130.028717][T23726] ? aa_sock_msg_perm+0x94/0x150 [ 2130.033891][T23726] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2130.039193][T23726] ? security_socket_sendmsg+0x7c/0xa0 [ 2130.044664][T23726] ? netlink_getsockopt+0x570/0x570 [ 2130.049888][T23726] ____sys_sendmsg+0x5b7/0x8f0 [ 2130.054678][T23726] ? __sys_sendmsg_sock+0x30/0x30 [ 2130.059726][T23726] ? import_iovec+0x6f/0xa0 [ 2130.064250][T23726] ___sys_sendmsg+0x236/0x2e0 [ 2130.069036][T23726] ? __sys_sendmsg+0x2a0/0x2a0 [ 2130.073824][T23726] ? ktime_get_real_ts64+0x440/0x440 [ 2130.079161][T23726] __se_sys_sendmsg+0x1af/0x290 [ 2130.084103][T23726] ? __x64_sys_sendmsg+0x80/0x80 [ 2130.089037][T23726] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2130.095051][T23726] ? lockdep_hardirqs_on+0x94/0x140 [ 2130.100251][T23726] do_syscall_64+0x4c/0xa0 [ 2130.104671][T23726] ? clear_bhb_loop+0x30/0x80 [ 2130.109337][T23726] ? clear_bhb_loop+0x30/0x80 [ 2130.114013][T23726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2130.119987][T23726] RIP: 0033:0x7f7aa9c2ecb9 [ 2130.124402][T23726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2130.144018][T23726] RSP: 002b:00007f7aa7e8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2130.152432][T23726] RAX: ffffffffffffffda RBX: 00007f7aa9ea9fa0 RCX: 00007f7aa9c2ecb9 [ 2130.160572][T23726] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000004 [ 2130.168535][T23726] RBP: 00007f7aa7e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 2130.176498][T23726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2130.184460][T23726] R13: 00007f7aa9eaa038 R14: 00007f7aa9ea9fa0 R15: 00007fffb0f56608 [ 2130.192459][T23726] [ 2130.480378][T23735] delete_channel: no stack [ 2131.205844][T23754] netlink: 'syz.4.18141': attribute type 9 has an invalid length. [ 2131.347030][T23754] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.18141'. [ 2131.801978][T23753] device wlan0 entered promiscuous mode [ 2131.913602][T23759] netlink: 'syz.4.18141': attribute type 1 has an invalid length. [ 2131.921451][T23759] netlink: 'syz.4.18141': attribute type 4 has an invalid length. [ 2132.096806][T23759] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.18141'. [ 2133.109565][T23787] FAULT_INJECTION: forcing a failure. [ 2133.109565][T23787] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.220139][T23787] CPU: 1 PID: 23787 Comm: syz.4.18149 Not tainted syzkaller #0 [ 2133.227837][T23787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2133.237994][T23787] Call Trace: [ 2133.241279][T23787] [ 2133.244211][T23787] dump_stack_lvl+0x188/0x250 [ 2133.248902][T23787] ? show_regs_print_info+0x20/0x20 [ 2133.254390][T23787] ? load_image+0x400/0x400 [ 2133.258906][T23787] ? perf_trace_lock+0xe4/0x390 [ 2133.263765][T23787] ? perf_trace_lock+0xe4/0x390 [ 2133.268635][T23787] should_fail+0x38c/0x4c0 [ 2133.273073][T23787] should_failslab+0x5/0x20 [ 2133.277587][T23787] slab_pre_alloc_hook+0x51/0xc0 [ 2133.282533][T23787] ? skb_clone+0x1bd/0x350 [ 2133.287047][T23787] kmem_cache_alloc+0x3d/0x290 [ 2133.291915][T23787] skb_clone+0x1bd/0x350 [ 2133.296268][T23787] __netlink_deliver_tap+0x3cd/0x7c0 [ 2133.301575][T23787] netlink_deliver_tap+0x16c/0x180 [ 2133.306691][T23787] netlink_unicast+0x74f/0x920 [ 2133.311531][T23787] netlink_sendmsg+0x8ba/0xbe0 [ 2133.316302][T23787] ? netlink_getsockopt+0x570/0x570 [ 2133.321510][T23787] ? aa_sock_msg_perm+0x94/0x150 [ 2133.326461][T23787] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2133.331760][T23787] ? security_socket_sendmsg+0x7c/0xa0 [ 2133.337230][T23787] ? netlink_getsockopt+0x570/0x570 [ 2133.342429][T23787] ____sys_sendmsg+0x5b7/0x8f0 [ 2133.347211][T23787] ? __sys_sendmsg_sock+0x30/0x30 [ 2133.352254][T23787] ? import_iovec+0x6f/0xa0 [ 2133.356764][T23787] ___sys_sendmsg+0x236/0x2e0 [ 2133.361457][T23787] ? __sys_sendmsg+0x2a0/0x2a0 [ 2133.366240][T23787] ? trace_event_raw_event_lock+0x270/0x270 [ 2133.372147][T23787] ? vfs_write+0x8b2/0xd60 [ 2133.376603][T23787] __se_sys_sendmsg+0x1af/0x290 [ 2133.381474][T23787] ? __x64_sys_sendmsg+0x80/0x80 [ 2133.386424][T23787] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2133.392455][T23787] ? lockdep_hardirqs_on+0x94/0x140 [ 2133.397676][T23787] do_syscall_64+0x4c/0xa0 [ 2133.402220][T23787] ? clear_bhb_loop+0x30/0x80 [ 2133.406909][T23787] ? clear_bhb_loop+0x30/0x80 [ 2133.411594][T23787] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2133.417491][T23787] RIP: 0033:0x7f78597accb9 [ 2133.421910][T23787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2133.441834][T23787] RSP: 002b:00007f78579e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2133.450267][T23787] RAX: ffffffffffffffda RBX: 00007f7859a28090 RCX: 00007f78597accb9 [ 2133.458254][T23787] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2133.466242][T23787] RBP: 00007f78579e7090 R08: 0000000000000000 R09: 0000000000000000 [ 2133.474230][T23787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2133.482308][T23787] R13: 00007f7859a28128 R14: 00007f7859a28090 R15: 00007ffe9cbdbec8 [ 2133.490438][T23787] [ 2133.598485][T23787] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18149'. [ 2133.683580][T23798] netlink: 'syz.1.18151': attribute type 3 has an invalid length. [ 2133.702110][T23798] netlink: 'syz.1.18151': attribute type 1 has an invalid length. [ 2133.711238][T23787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2133.721842][T23798] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.18151'. [ 2133.757093][T23787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2133.860776][T23787] bond0 (unregistering): Released all slaves [ 2134.085814][T23815] device syzkaller0 entered promiscuous mode [ 2135.183717][ T4244] Bluetooth: hci4: Malicious advertising data. [ 2136.043203][T17947] Bluetooth: hci4: command 0x0409 tx timeout [ 2136.251455][T23896] tap0: tun_chr_ioctl cmd 1074025680 [ 2139.642171][ T4244] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 2141.054364][T24074] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2141.119084][T24074] device syzkaller0 entered promiscuous mode [ 2141.625578][T24092] device syzkaller0 entered promiscuous mode [ 2142.664764][T24154] mac80211_hwsim hwsim132 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2143.026816][T24169] device wlan1 entered promiscuous mode [ 2143.664476][T24208] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2144.393206][ T4244] Bluetooth: hci2: Dropping invalid advertising data [ 2144.400558][ T4244] Bluetooth: hci2: Malicious advertising data. [ 2145.514768][T24272] device veth1_to_bond entered promiscuous mode [ 2145.780143][T24282] device wg2 entered promiscuous mode [ 2145.972716][T24292] device veth1_to_bond entered promiscuous mode [ 2147.715563][T24350] device wg2 entered promiscuous mode [ 2148.577739][T24380] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2148.640167][T24380] device syzkaller0 entered promiscuous mode [ 2150.217283][T24411] device veth1_to_bond entered promiscuous mode [ 2150.945020][T24447] device wg2 left promiscuous mode [ 2151.070348][T24448] device wg2 entered promiscuous mode [ 2151.955207][T24487] device wg2 entered promiscuous mode [ 2153.157753][T24528] device syzkaller0 entered promiscuous mode [ 2153.597265][T24541] device wg2 entered promiscuous mode [ 2153.898995][T24565] device veth1_to_bond left promiscuous mode [ 2153.947904][T24565] device veth1_to_bond entered promiscuous mode [ 2155.922143][T24603] device wg2 left promiscuous mode [ 2156.047599][T24603] device wg2 entered promiscuous mode [ 2156.243634][T24611] device veth1_to_bond left promiscuous mode [ 2156.634838][T24629] bridge0: port 1(bridge_slave_0) entered disabled state [ 2157.566006][T24685] device wg2 left promiscuous mode [ 2157.612460][T24685] device wg2 entered promiscuous mode [ 2159.704549][T24777] device pim6reg1 entered promiscuous mode [ 2160.256471][T24780] device syzkaller0 entered promiscuous mode [ 2160.285043][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.291401][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.916421][T24858] device wlan1 entered promiscuous mode [ 2163.312993][T24880] device syzkaller0 entered promiscuous mode [ 2164.926978][T24935] device pim6reg1 entered promiscuous mode [ 2165.717046][T24976] device pim6reg1 entered promiscuous mode [ 2167.704004][T24996] chnl_net:caif_netlink_parms(): no params data found [ 2167.971435][T24996] bridge0: port 1(bridge_slave_0) entered blocking state [ 2168.010379][T24996] bridge0: port 1(bridge_slave_0) entered disabled state [ 2168.044894][T24996] device bridge_slave_0 entered promiscuous mode [ 2168.088036][T24996] bridge0: port 2(bridge_slave_1) entered blocking state [ 2168.126134][T24996] bridge0: port 2(bridge_slave_1) entered disabled state [ 2168.160617][T24996] device bridge_slave_1 entered promiscuous mode [ 2168.199126][T25051] device veth1_to_bond left promiscuous mode [ 2168.317460][T24996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2168.400436][T24996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2168.519350][T24996] team0: Port device team_slave_0 added [ 2168.563928][T24996] team0: Port device team_slave_1 added [ 2168.596460][T25061] device pim6reg1 entered promiscuous mode [ 2168.882787][T24996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2168.901743][T24996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2168.933215][T24919] Bluetooth: hci5: command 0x0409 tx timeout [ 2168.985809][T24996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2169.012777][T24996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2169.026210][T24996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2169.059102][T24996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2169.247774][T24996] device hsr_slave_0 entered promiscuous mode [ 2169.256341][T24996] device hsr_slave_1 entered promiscuous mode [ 2169.263032][T24996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2169.271098][T24996] Cannot create hsr debugfs directory [ 2169.872033][T24996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2169.900480][T24996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2169.912776][T24996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2169.936632][T24996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2170.180062][T24996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2170.229411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2170.258800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2170.285997][T24996] 8021q: adding VLAN 0 to HW filter on device team0 [ 2170.309449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2170.337295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2170.352139][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2170.359326][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2170.375231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2170.417238][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2170.454525][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2170.509976][T22928] bridge0: port 2(bridge_slave_1) entered blocking state [ 2170.517149][T22928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2170.587666][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2170.666676][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2170.784353][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2170.867067][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2170.943862][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2170.972382][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2170.996665][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2171.024542][ T2266] Bluetooth: hci5: command 0x041b tx timeout [ 2171.033723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2171.047563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2171.101575][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2171.124305][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2171.174164][T24996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2171.428285][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2171.445791][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2171.471499][T24996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2171.586067][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2171.608589][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2171.656031][T25136] device veth1_to_bond left promiscuous mode [ 2171.698161][T24996] device veth0_vlan entered promiscuous mode [ 2171.730506][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2171.744209][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2171.776874][T24996] device veth1_vlan entered promiscuous mode [ 2171.811777][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2171.832358][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2171.841073][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2171.866309][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2171.896475][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2171.913473][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2171.925661][T24996] device veth0_macvtap entered promiscuous mode [ 2171.976553][T24996] device veth1_macvtap entered promiscuous mode [ 2172.084866][T24996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.113499][T24996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.141729][T24996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.152651][T24996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.168789][T24996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.179692][T24996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.199939][T24996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.215276][T24996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.225472][T24996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.236256][T24996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.253687][T24996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2172.266858][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2172.279088][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2172.317391][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2172.340731][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2172.352768][T24996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.363648][T24996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.380102][T24996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.390901][T24996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.407484][T24996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.421761][T24996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.438228][T24996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.450965][T24996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.468122][T24996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.481048][T24996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.499004][T24996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2172.850442][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2172.878948][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2172.921783][T24996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.955158][T24996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.978089][T24996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.991376][T24996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2173.163698][ T1711] Bluetooth: hci5: command 0x040f tx timeout [ 2173.221510][ T6075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2173.255073][ T6075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.315714][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2173.873477][T22928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2173.893690][T22928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.932230][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2175.244344][ T4305] Bluetooth: hci5: command 0x0419 tx timeout [ 2175.970681][T24933] device hsr_slave_0 left promiscuous mode [ 2175.987324][T24933] device hsr_slave_1 left promiscuous mode [ 2175.999902][T24933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2176.020849][T24933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2176.049592][T24933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2176.073267][T24933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2176.111478][T24933] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2176.134886][T24933] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2176.317952][T24933] device veth1_macvtap left promiscuous mode [ 2176.338078][T24933] device veth0_macvtap left promiscuous mode [ 2176.361242][T24933] device veth1_vlan left promiscuous mode [ 2176.402264][T24933] device veth0_vlan left promiscuous mode [ 2176.790216][T24933] team0 (unregistering): Port device geneve1 removed [ 2177.189904][T24933] team0 (unregistering): Port device team_slave_1 removed [ 2177.228936][T24933] team0 (unregistering): Port device team_slave_0 removed [ 2178.244010][T25414] device wlan0 left promiscuous mode [ 2185.516364][T25645] device syzkaller0 entered promiscuous mode [ 2186.012973][T25659] mac80211_hwsim hwsim146 »»»»»»: renamed from wlan0 [ 2187.973366][ T3359] Bluetooth: hci0: command 0x0406 tx timeout [ 2191.072489][T25774] bridge0: port 1(bridge_slave_0) entered disabled state [ 2191.146875][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2191.210385][T22928] bridge0: port 1(bridge_slave_0) entered blocking state [ 2191.217594][T22928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2192.968949][T25851] device syzkaller0 entered promiscuous mode [ 2193.503926][T25883] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19024'. [ 2193.960047][T25900] netlink: 'syz.5.19031': attribute type 3 has an invalid length. [ 2193.973574][T25900] netlink: 'syz.5.19031': attribute type 1 has an invalid length. [ 2193.996820][T25900] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.19031'. [ 2194.355613][T25912] netlink: 'syz.5.19035': attribute type 21 has an invalid length. [ 2194.417153][T25920] netlink: 'syz.5.19035': attribute type 9 has an invalid length. [ 2194.460455][T25920] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.19035'. [ 2195.711761][T25957] netlink: 'syz.2.19055': attribute type 21 has an invalid length. [ 2195.772611][T25965] netlink: 'syz.2.19055': attribute type 9 has an invalid length. [ 2195.790855][T25965] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19055'. [ 2197.263046][T26008] netlink: 'syz.4.19075': attribute type 21 has an invalid length. [ 2197.346290][T26011] netlink: 'syz.4.19075': attribute type 9 has an invalid length. [ 2197.393754][T26011] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19075'. [ 2197.431196][T26015] device syzkaller0 entered promiscuous mode [ 2199.442732][T26079] netlink: 'syz.1.19102': attribute type 21 has an invalid length. [ 2199.502327][T26084] netlink: 'syz.1.19102': attribute type 9 has an invalid length. [ 2199.603249][T26084] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19102'. [ 2201.708663][T26146] netlink: 'syz.3.19129': attribute type 21 has an invalid length. [ 2201.763475][T26152] netlink: 'syz.3.19129': attribute type 9 has an invalid length. [ 2201.787901][T26152] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.19129'. [ 2203.375863][T26190] netlink: 'syz.4.19145': attribute type 21 has an invalid length. [ 2204.498682][T26226] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19159'. [ 2204.807956][T26239] netlink: 'syz.2.19165': attribute type 21 has an invalid length. [ 2205.458866][T26237] netlink: 'syz.2.19165': attribute type 9 has an invalid length. [ 2205.468690][T26237] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19165'. [ 2205.969800][T26266] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19175'. [ 2206.001828][T26267] device syzkaller0 entered promiscuous mode [ 2207.428991][T26308] netlink: 'syz.3.19191': attribute type 21 has an invalid length. [ 2208.326920][T26317] device syzkaller0 entered promiscuous mode [ 2208.453492][ T3359] Bluetooth: hci4: command 0x0406 tx timeout [ 2208.706482][T26341] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19199'. [ 2209.485341][T26368] netlink: 'syz.3.19206': attribute type 21 has an invalid length. [ 2209.539159][T26372] netlink: 'syz.3.19206': attribute type 9 has an invalid length. [ 2209.693223][T26372] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.19206'. [ 2210.766839][T26386] device syzkaller0 entered promiscuous mode [ 2212.744235][T26441] device syzkaller0 entered promiscuous mode [ 2212.913046][T26455] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19237'. [ 2213.589248][T26483] netlink: 'syz.4.19251': attribute type 21 has an invalid length. [ 2213.794735][T26488] netlink: 'syz.4.19251': attribute type 9 has an invalid length. [ 2213.922977][T26488] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19251'. [ 2214.391787][T26504] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19256'. [ 2214.705308][T26520] device syzkaller0 entered promiscuous mode [ 2215.092732][T26534] netlink: 'syz.4.19268': attribute type 21 has an invalid length. [ 2215.217203][T26538] netlink: 'syz.4.19268': attribute type 9 has an invalid length. [ 2215.306137][T26538] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19268'. [ 2215.875742][T26544] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19273'. [ 2216.396154][T26565] device syzkaller0 entered promiscuous mode [ 2216.934257][T26589] netlink: 'syz.2.19287': attribute type 21 has an invalid length. [ 2216.951665][T26588] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19288'. [ 2217.021125][T26593] netlink: 'syz.2.19287': attribute type 9 has an invalid length. [ 2217.049984][T26593] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19287'. [ 2217.354413][T26606] device syzkaller0 entered promiscuous mode [ 2217.891572][T26633] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19307'. [ 2217.974063][T26639] netlink: 'syz.4.19311': attribute type 21 has an invalid length. [ 2218.068254][T26639] netlink: 'syz.4.19311': attribute type 9 has an invalid length. [ 2218.110880][T26639] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19311'. [ 2218.118297][T26643] device syzkaller0 entered promiscuous mode [ 2218.683340][T25560] Bluetooth: hci2: command 0x0406 tx timeout [ 2218.797543][T26666] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19322'. [ 2218.992500][T26672] device syzkaller0 entered promiscuous mode [ 2219.198869][T26681] netlink: 'syz.3.19329': attribute type 21 has an invalid length. [ 2219.249391][T26686] netlink: 'syz.3.19329': attribute type 9 has an invalid length. [ 2219.352814][T26686] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.19329'. [ 2219.779359][T26706] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19340'. [ 2220.318594][T26725] device syzkaller0 entered promiscuous mode [ 2220.856894][T26751] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19360'. [ 2221.661598][T26797] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19378'. [ 2221.734466][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.740794][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.664022][T26833] device syzkaller0 entered promiscuous mode [ 2222.907720][T26845] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19397'. [ 2223.089457][T26848] netlink: 'syz.4.19398': attribute type 21 has an invalid length. [ 2223.159772][T26852] netlink: 'syz.4.19398': attribute type 9 has an invalid length. [ 2223.259453][T26852] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19398'. [ 2223.717245][T26878] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19409'. [ 2224.592487][T26887] device syzkaller0 entered promiscuous mode [ 2226.653985][T26936] device syzkaller0 entered promiscuous mode [ 2232.803266][T27061] device syzkaller0 entered promiscuous mode [ 2234.043347][T25558] Bluetooth: hci3: command 0x0406 tx timeout [ 2234.461506][T27094] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19495'. [ 2235.280520][T27102] device syzkaller0 entered promiscuous mode [ 2235.905858][T27123] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19507'. [ 2236.542009][T27135] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19509'. [ 2238.334485][T27165] device syzkaller0 entered promiscuous mode [ 2238.421725][T27167] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19522'. [ 2239.364750][T27183] netlink: 'syz.4.19527': attribute type 21 has an invalid length. [ 2239.437594][T27185] netlink: 'syz.4.19527': attribute type 9 has an invalid length. [ 2239.504153][T27185] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19527'. [ 2240.341808][T27209] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19536'. [ 2240.391195][T27212] netlink: 'syz.3.19537': attribute type 21 has an invalid length. [ 2240.482417][T27213] netlink: 'syz.3.19537': attribute type 9 has an invalid length. [ 2240.536142][T27205] netlink: 'syz.1.19535': attribute type 21 has an invalid length. [ 2240.544853][T27213] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.19537'. [ 2240.907031][T27211] netlink: 'syz.1.19535': attribute type 9 has an invalid length. [ 2240.946722][T27211] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19535'. [ 2241.257389][T27216] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19540'. [ 2241.592793][T27232] netlink: 'syz.3.19553': attribute type 21 has an invalid length. [ 2241.686143][T27235] netlink: 'syz.1.19545': attribute type 21 has an invalid length. [ 2241.714403][T27236] netlink: 'syz.3.19553': attribute type 9 has an invalid length. [ 2241.722258][T27236] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.19553'. [ 2242.231404][T27240] netlink: 'syz.1.19545': attribute type 9 has an invalid length. [ 2242.266616][T27240] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19545'. [ 2242.720671][T27252] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19550'. [ 2244.115242][T27285] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19560'. [ 2244.460986][T27293] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19563'. [ 2244.659893][T27298] validate_nla: 2 callbacks suppressed [ 2244.659934][T27298] netlink: 'syz.1.19564': attribute type 21 has an invalid length. [ 2244.740396][T27308] netlink: 'syz.1.19564': attribute type 9 has an invalid length. [ 2244.855770][T27308] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19564'. [ 2246.016041][T27325] netlink: 'syz.5.19572': attribute type 21 has an invalid length. [ 2246.148026][T27332] netlink: 'syz.5.19572': attribute type 9 has an invalid length. [ 2246.181728][T27335] netlink: 'syz.4.19576': attribute type 3 has an invalid length. [ 2246.236727][T27332] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.19572'. [ 2246.248934][T27337] netlink: 'syz.1.19577': attribute type 21 has an invalid length. [ 2246.273999][T27335] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.19576'. [ 2246.717092][T27341] netlink: 'syz.1.19577': attribute type 9 has an invalid length. [ 2246.760430][T27341] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19577'. [ 2247.152905][T27344] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19578'. [ 2247.984069][T27368] netlink: 'syz.4.19586': attribute type 21 has an invalid length. [ 2248.724957][T27380] netlink: 'syz.4.19590': attribute type 21 has an invalid length. [ 2248.864558][T27381] netlink: 'syz.4.19590': attribute type 9 has an invalid length. [ 2248.951065][T27381] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19590'. [ 2250.014297][T27393] netlink: 'syz.4.19596': attribute type 21 has an invalid length. [ 2250.137888][T27399] netlink: 'syz.4.19596': attribute type 9 has an invalid length. [ 2250.231540][T27399] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19596'. [ 2251.282551][T27412] device syzkaller0 entered promiscuous mode [ 2251.372124][T27417] netlink: 'syz.2.19602': attribute type 21 has an invalid length. [ 2251.498308][T27418] netlink: 'syz.2.19602': attribute type 9 has an invalid length. [ 2251.540559][T27418] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19602'. [ 2252.033008][T27421] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19605'. [ 2252.326983][T27430] netlink: 'syz.1.19608': attribute type 3 has an invalid length. [ 2252.423209][T27430] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.19608'. [ 2253.075021][T27443] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19613'. [ 2253.693467][T27458] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19620'. [ 2254.073962][T27461] device syzkaller0 entered promiscuous mode [ 2254.667748][T27471] netlink: 'syz.1.19623': attribute type 21 has an invalid length. [ 2254.743671][T27477] netlink: 'syz.1.19623': attribute type 9 has an invalid length. [ 2254.763530][T27477] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19623'. [ 2255.272405][T27481] netlink: 'syz.2.19626': attribute type 3 has an invalid length. [ 2255.343006][T27481] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19626'. [ 2256.521151][T27497] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19632'. [ 2256.952393][T27517] netlink: 'syz.3.19641': attribute type 3 has an invalid length. [ 2256.990798][T27505] device syzkaller0 entered promiscuous mode [ 2257.017871][T27517] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.19641'. [ 2257.186128][T27523] netlink: 'syz.1.19642': attribute type 21 has an invalid length. [ 2257.254374][T27528] netlink: 'syz.1.19642': attribute type 9 has an invalid length. [ 2257.319345][T27528] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19642'. [ 2258.296477][T27549] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19650'. [ 2258.654046][T27556] €Â0: renamed from pim6reg1 [ 2259.063978][T27570] device syzkaller0 entered promiscuous mode [ 2259.300022][T27582] FAULT_INJECTION: forcing a failure. [ 2259.300022][T27582] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.442745][T27582] CPU: 0 PID: 27582 Comm: syz.2.19659 Not tainted syzkaller #0 [ 2259.450342][T27582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2259.460408][T27582] Call Trace: [ 2259.463804][T27582] [ 2259.466741][T27582] dump_stack_lvl+0x188/0x250 [ 2259.471530][T27582] ? show_regs_print_info+0x20/0x20 [ 2259.476747][T27582] ? load_image+0x400/0x400 [ 2259.481264][T27582] ? __lock_acquire+0x7d10/0x7d10 [ 2259.486308][T27582] should_fail+0x38c/0x4c0 [ 2259.490749][T27582] should_failslab+0x5/0x20 [ 2259.495263][T27582] slab_pre_alloc_hook+0x51/0xc0 [ 2259.500213][T27582] kmem_cache_alloc_node_trace+0x4a/0x300 [ 2259.505962][T27582] ? __get_vm_area_node+0x119/0x2d0 [ 2259.511182][T27582] __get_vm_area_node+0x119/0x2d0 [ 2259.516363][T27582] __vmalloc_node_range+0xef/0x8b0 [ 2259.521647][T27582] ? copy_process+0x5f0/0x3e20 [ 2259.526436][T27582] ? rcu_is_watching+0x11/0xa0 [ 2259.531216][T27582] ? kmem_cache_alloc_node+0x162/0x2d0 [ 2259.536806][T27582] dup_task_struct+0x3f5/0xb30 [ 2259.541595][T27582] ? copy_process+0x5f0/0x3e20 [ 2259.546374][T27582] copy_process+0x5f0/0x3e20 [ 2259.551004][T27582] ? __pidfd_prepare+0x140/0x140 [ 2259.555975][T27582] kernel_clone+0x23f/0x990 [ 2259.560488][T27582] ? __lock_acquire+0x7d10/0x7d10 [ 2259.565525][T27582] ? vfs_write+0x8b2/0xd60 [ 2259.569961][T27582] ? create_io_thread+0x180/0x180 [ 2259.575019][T27582] __x64_sys_clone+0x19a/0x210 [ 2259.579800][T27582] ? __ia32_sys_vfork+0x130/0x130 [ 2259.584943][T27582] ? lockdep_hardirqs_on+0x94/0x140 [ 2259.590156][T27582] do_syscall_64+0x4c/0xa0 [ 2259.594581][T27582] ? clear_bhb_loop+0x30/0x80 [ 2259.599269][T27582] ? clear_bhb_loop+0x30/0x80 [ 2259.603967][T27582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2259.609867][T27582] RIP: 0033:0x7fc75e6f7cb9 [ 2259.614301][T27582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2259.634257][T27582] RSP: 002b:00007fc75c952fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2259.642691][T27582] RAX: ffffffffffffffda RBX: 00007fc75e972fa0 RCX: 00007fc75e6f7cb9 [ 2259.650681][T27582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 2259.658667][T27582] RBP: 00007fc75c953090 R08: 0000000000000000 R09: 0000000000000000 [ 2259.666654][T27582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2259.674644][T27582] R13: 00007fc75e973038 R14: 00007fc75e972fa0 R15: 00007ffd1d2c4ca8 [ 2259.682651][T27582] [ 2260.095475][T27582] syz.2.19659: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2260.521021][T27582] CPU: 1 PID: 27582 Comm: syz.2.19659 Not tainted syzkaller #0 [ 2260.528806][T27582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2260.538880][T27582] Call Trace: [ 2260.542253][T27582] [ 2260.545185][T27582] dump_stack_lvl+0x188/0x250 [ 2260.549868][T27582] ? rcu_lock_release+0x5/0x20 [ 2260.554641][T27582] ? show_regs_print_info+0x20/0x20 [ 2260.559849][T27582] ? load_image+0x400/0x400 [ 2260.564370][T27582] warn_alloc+0x243/0x320 [ 2260.568704][T27582] ? zone_watermark_ok_safe+0x240/0x240 [ 2260.574248][T27582] ? rcu_is_watching+0x11/0xa0 [ 2260.579022][T27582] ? __get_vm_area_node+0x119/0x2d0 [ 2260.584342][T27582] ? __get_vm_area_node+0x2b5/0x2d0 [ 2260.589552][T27582] __vmalloc_node_range+0x2b1/0x8b0 [ 2260.594872][T27582] ? rcu_is_watching+0x11/0xa0 [ 2260.599732][T27582] ? kmem_cache_alloc_node+0x162/0x2d0 [ 2260.605201][T27582] dup_task_struct+0x3f5/0xb30 [ 2260.609981][T27582] ? copy_process+0x5f0/0x3e20 [ 2260.614966][T27582] copy_process+0x5f0/0x3e20 [ 2260.619586][T27582] ? __pidfd_prepare+0x140/0x140 [ 2260.624535][T27582] kernel_clone+0x23f/0x990 [ 2260.629042][T27582] ? __lock_acquire+0x7d10/0x7d10 [ 2260.634070][T27582] ? vfs_write+0x8b2/0xd60 [ 2260.638494][T27582] ? create_io_thread+0x180/0x180 [ 2260.643535][T27582] __x64_sys_clone+0x19a/0x210 [ 2260.648306][T27582] ? __ia32_sys_vfork+0x130/0x130 [ 2260.653452][T27582] ? lockdep_hardirqs_on+0x94/0x140 [ 2260.658667][T27582] do_syscall_64+0x4c/0xa0 [ 2260.663091][T27582] ? clear_bhb_loop+0x30/0x80 [ 2260.667773][T27582] ? clear_bhb_loop+0x30/0x80 [ 2260.672470][T27582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2260.678379][T27582] RIP: 0033:0x7fc75e6f7cb9 [ 2260.682809][T27582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2260.702737][T27582] RSP: 002b:00007fc75c952fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2260.711165][T27582] RAX: ffffffffffffffda RBX: 00007fc75e972fa0 RCX: 00007fc75e6f7cb9 [ 2260.719147][T27582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 2260.727128][T27582] RBP: 00007fc75c953090 R08: 0000000000000000 R09: 0000000000000000 [ 2260.735103][T27582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2260.743079][T27582] R13: 00007fc75e973038 R14: 00007fc75e972fa0 R15: 00007ffd1d2c4ca8 [ 2260.751069][T27582] [ 2260.823330][T27582] Mem-Info: [ 2260.833984][T27582] active_anon:294 inactive_anon:71196 isolated_anon:0 [ 2260.833984][T27582] active_file:27150 inactive_file:41213 isolated_file:0 [ 2260.833984][T27582] unevictable:768 dirty:195 writeback:0 [ 2260.833984][T27582] slab_reclaimable:22389 slab_unreclaimable:101841 [ 2260.833984][T27582] mapped:42342 shmem:61346 pagetables:1029 bounce:0 [ 2260.833984][T27582] kernel_misc_reclaimable:0 [ 2260.833984][T27582] free:1283821 free_pcp:5986 free_cma:0 [ 2261.384262][T27582] Node 0 active_anon:1144kB inactive_anon:302856kB active_file:108396kB inactive_file:164852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:169432kB dirty:780kB writeback:0kB shmem:261688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12080kB pagetables:4220kB all_unreclaimable? no [ 2261.808868][T27582] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 2262.263173][T27582] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2262.463240][T27582] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 2262.469058][T27582] Node 0 DMA32 free:1131864kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1148kB inactive_anon:354152kB active_file:108404kB inactive_file:164852kB unevictable:1536kB writepending:792kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:19264kB local_pcp:8644kB free_cma:0kB [ 2262.727388][T27646] netlink: 'syz.5.19683': attribute type 21 has an invalid length. [ 2262.771091][T27649] netlink: 'syz.5.19683': attribute type 9 has an invalid length. [ 2262.795559][T27582] lowmem_reserve[]: 0 0 0 0 0 [ 2262.800318][T27582] Node 0 Normal free:8kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 2262.836670][T27649] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.19683'. [ 2262.899875][T27582] lowmem_reserve[]: 0 0 0 0 0 [ 2262.964457][T27582] Node 1 Normal free:3926060kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2263.156076][T27582] lowmem_reserve[]: 0 0 0 0 0 [ 2263.160847][T27582] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2263.428501][T27582] Node 0 DMA32: 21*4kB (UE) 971*8kB (UE) 600*16kB (U) 2*32kB (ME) 491*64kB (UM) 913*128kB (UME) 358*256kB (UM) 117*512kB (UME) 46*1024kB (UME) 13*2048kB (UM) 168*4096kB (UM) = 1079212kB [ 2263.708022][T27582] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2263.869786][T27582] Node 1 Normal: 239*4kB (UE) 60*8kB (UME) 29*16kB (UME) 192*32kB (UE) 89*64kB (UME) 29*128kB (UME) 12*256kB (UM) 4*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 952*4096kB (M) = 3926060kB [ 2264.100861][T27582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2264.238640][T27582] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2264.267023][T27678] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19695'. [ 2264.365883][T27582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2264.423201][T27582] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2264.548868][T27582] 171768 total pagecache pages [ 2264.594077][T27582] 0 pages in swap cache [ 2264.623334][T27582] Swap cache stats: add 78, delete 78, find 6/14 [ 2264.722239][T27582] Free swap = 124728kB [ 2264.760108][T27582] Total swap = 124996kB [ 2264.819816][T27582] 2097051 pages RAM [ 2264.869179][T27582] 0 pages HighMem/MovableOnly [ 2264.924562][T27582] 411488 pages reserved [ 2264.928759][T27582] 0 pages cma reserved [ 2265.817105][T27710] device syzkaller0 entered promiscuous mode [ 2266.148402][T27728] netlink: 'syz.4.19711': attribute type 9 has an invalid length. [ 2266.223311][T27728] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19711'. [ 2266.452913][T27726] netlink: 'syz.4.19711': attribute type 21 has an invalid length. [ 2267.926282][T27761] device syzkaller0 entered promiscuous mode [ 2268.861853][T27780] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19728'. [ 2268.931261][T27785] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19730'. [ 2269.801033][T27814] device syzkaller0 entered promiscuous mode [ 2269.864611][T27817] netlink: 164 bytes leftover after parsing attributes in process `syz.1.19742'. [ 2270.271378][T27822] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19744'. [ 2270.859274][T27839] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19751'. [ 2271.211243][T27853] netlink: 'syz.1.19757': attribute type 10 has an invalid length. [ 2271.307984][T27856] netlink: 'syz.3.19758': attribute type 3 has an invalid length. [ 2271.369137][T27856] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.19758'. [ 2272.027904][T27860] netlink: 'syz.3.19758': attribute type 10 has an invalid length. [ 2272.557762][T27870] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19761'. [ 2273.870476][T27894] netlink: 'syz.1.19781': attribute type 21 has an invalid length. [ 2273.971636][T27899] netlink: 164 bytes leftover after parsing attributes in process `syz.2.19771'. [ 2273.985795][T27900] netlink: 'syz.1.19781': attribute type 9 has an invalid length. [ 2274.033337][T27900] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19781'. [ 2274.321889][T27906] netlink: 'syz.2.19773': attribute type 1 has an invalid length. [ 2274.337487][T27906] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.19773'. [ 2274.434522][T27908] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19774'. [ 2275.726774][T27932] netlink: 164 bytes leftover after parsing attributes in process `syz.3.19785'. [ 2276.284475][T27947] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19790'. [ 2276.898011][T27976] netlink: 'syz.2.19804': attribute type 10 has an invalid length. [ 2276.966961][T27979] netlink: 'syz.5.19805': attribute type 9 has an invalid length. [ 2277.003267][T27978] netlink: 'syz.5.19805': attribute type 21 has an invalid length. [ 2277.020311][T27979] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.19805'. [ 2277.255165][T27987] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19807'. [ 2278.192741][T28007] device syzkaller0 entered promiscuous mode [ 2278.382328][T28022] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19819'. [ 2278.722399][T28028] device syzkaller0 entered promiscuous mode [ 2278.988327][T28053] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19833'. [ 2279.300364][T28071] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19840'. [ 2279.510679][T28074] device syzkaller0 entered promiscuous mode [ 2280.052671][T28090] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19847'. [ 2280.392273][T28110] device syzkaller0 entered promiscuous mode [ 2280.504833][T28122] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19860'. [ 2281.145728][T28145] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19869'. [ 2281.581374][T28158] device syzkaller0 entered promiscuous mode [ 2281.970697][T28177] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19881'. [ 2282.251344][T28192] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19887'. [ 2283.034554][T28210] device syzkaller0 entered promiscuous mode [ 2283.104312][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19897'. [ 2283.166024][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.172401][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.601708][T28234] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19902'. [ 2284.797070][T28265] netlink: 'syz.2.19914': attribute type 21 has an invalid length. [ 2284.866637][T28268] netlink: 'syz.2.19914': attribute type 9 has an invalid length. [ 2284.964319][T28268] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19914'. [ 2285.304590][T28270] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19915'. [ 2287.067879][T28309] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19931'. [ 2288.989650][T28341] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19943'. [ 2290.363225][T25555] Bluetooth: hci5: command 0x0406 tx timeout [ 2290.476979][T28372] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19954'. [ 2292.777175][T28424] netlink: 'syz.5.19972': attribute type 21 has an invalid length. [ 2292.832271][T28426] netlink: 'syz.5.19972': attribute type 9 has an invalid length. [ 2292.860849][T28426] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.19972'. [ 2295.868494][T28506] netlink: 112 bytes leftover after parsing attributes in process `syz.3.19999'. [ 2295.927265][T28506] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2296.040920][T28507] netlink: 'syz.3.19999': attribute type 10 has an invalid length. [ 2296.114013][T28507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2296.160689][T28507] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2297.879650][T28554] netlink: 'syz.2.20013': attribute type 21 has an invalid length. [ 2298.006194][T28558] netlink: 'syz.2.20013': attribute type 9 has an invalid length. [ 2298.084495][T28558] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.20013'. [ 2299.228953][T28585] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20025'. [ 2299.535325][T28596] netlink: 'syz.2.20026': attribute type 9 has an invalid length. [ 2299.614344][T28596] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.20026'. [ 2299.795946][T28591] netlink: 'syz.2.20026': attribute type 21 has an invalid length. [ 2300.568567][T28599] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.20029'. [ 2301.103357][T28626] netlink: 'syz.3.20037': attribute type 21 has an invalid length. [ 2301.190737][T28631] netlink: 'syz.3.20037': attribute type 9 has an invalid length. [ 2301.232622][T28631] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.20037'. [ 2302.164120][T28653] FAULT_INJECTION: forcing a failure. [ 2302.164120][T28653] name failslab, interval 1, probability 0, space 0, times 0 [ 2302.260317][T28653] CPU: 0 PID: 28653 Comm: syz.3.20046 Not tainted syzkaller #0 [ 2302.267913][T28653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2302.277994][T28653] Call Trace: [ 2302.281436][T28653] [ 2302.284380][T28653] dump_stack_lvl+0x188/0x250 [ 2302.289086][T28653] ? show_regs_print_info+0x20/0x20 [ 2302.294306][T28653] ? load_image+0x400/0x400 [ 2302.298848][T28653] ? __might_sleep+0xf0/0xf0 [ 2302.303468][T28653] ? __lock_acquire+0x7d10/0x7d10 [ 2302.308524][T28653] should_fail+0x38c/0x4c0 [ 2302.313079][T28653] should_failslab+0x5/0x20 [ 2302.317628][T28653] slab_pre_alloc_hook+0x51/0xc0 [ 2302.322605][T28653] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 2302.328947][T28653] ? proc_alloc_inode+0x19/0xa0 [ 2302.333820][T28653] kmem_cache_alloc+0x3d/0x290 [ 2302.338606][T28653] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 2302.344953][T28653] proc_alloc_inode+0x19/0xa0 [ 2302.349642][T28653] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 2302.355998][T28653] new_inode_pseudo+0x5f/0x210 [ 2302.360782][T28653] new_inode+0x25/0x1c0 [ 2302.364946][T28653] ? __lock_acquire+0x7d10/0x7d10 [ 2302.369999][T28653] proc_pid_make_inode+0x20/0x1c0 [ 2302.375047][T28653] proc_pident_instantiate+0x69/0x2b0 [ 2302.380440][T28653] proc_pident_lookup+0x1c6/0x260 [ 2302.385493][T28653] __lookup_slow+0x29d/0x410 [ 2302.390109][T28653] ? lookup_one_len+0x2d0/0x2d0 [ 2302.395020][T28653] ? down_read+0x1aa/0x2e0 [ 2302.399461][T28653] lookup_slow+0x53/0x70 [ 2302.403725][T28653] walk_component+0x319/0x460 [ 2302.408428][T28653] link_path_walk+0x665/0xd70 [ 2302.413147][T28653] ? handle_lookup_down+0x130/0x130 [ 2302.418369][T28653] ? percpu_counter_add_batch+0x13b/0x160 [ 2302.424122][T28653] path_openat+0x28d/0x2fa0 [ 2302.428701][T28653] ? do_filp_open+0x410/0x410 [ 2302.433393][T28653] ? perf_trace_lock+0x301/0x390 [ 2302.438357][T28653] ? trace_event_raw_event_lock+0x270/0x270 [ 2302.444279][T28653] do_filp_open+0x1e2/0x410 [ 2302.448812][T28653] ? vfs_tmpfile+0x300/0x300 [ 2302.453442][T28653] ? noop_direct_IO+0x10/0x10 [ 2302.458154][T28653] ? _raw_spin_unlock+0x24/0x40 [ 2302.463022][T28653] ? alloc_fd+0x598/0x630 [ 2302.467385][T28653] do_sys_openat2+0x150/0x4b0 [ 2302.472097][T28653] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 2302.478358][T28653] ? do_sys_open+0xe0/0xe0 [ 2302.482797][T28653] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2302.488811][T28653] ? lock_chain_count+0x20/0x20 [ 2302.493858][T28653] ? vtime_user_exit+0x2c8/0x3e0 [ 2302.498822][T28653] __x64_sys_openat+0x135/0x160 [ 2302.503701][T28653] do_syscall_64+0x4c/0xa0 [ 2302.508131][T28653] ? clear_bhb_loop+0x30/0x80 [ 2302.512826][T28653] ? clear_bhb_loop+0x30/0x80 [ 2302.517524][T28653] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2302.523446][T28653] RIP: 0033:0x7f7aa9bef58e [ 2302.527880][T28653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2302.547620][T28653] RSP: 002b:00007f7aa7e89ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2302.556167][T28653] RAX: ffffffffffffffda RBX: 00007f7aa7e8a6c0 RCX: 00007f7aa9bef58e [ 2302.564162][T28653] RDX: 0000000000000002 RSI: 00007f7aa7e89f90 RDI: ffffffffffffff9c [ 2302.572163][T28653] RBP: 00007f7aa7e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 2302.580158][T28653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2302.588152][T28653] R13: 00007f7aa9eaa038 R14: 00007f7aa9ea9fa0 R15: 00007fffb0f56608 [ 2302.596180][T28653] [ 2302.922548][T28662] netlink: 'syz.1.20049': attribute type 21 has an invalid length. [ 2303.050893][T28666] netlink: 'syz.1.20049': attribute type 9 has an invalid length. [ 2303.148971][T28666] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.20049'. [ 2306.269862][T28721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2306.463742][T28754] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20082'. [ 2307.654718][T28793] FAULT_INJECTION: forcing a failure. [ 2307.654718][T28793] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.675508][T28792] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20095'. [ 2307.757708][T28793] CPU: 1 PID: 28793 Comm: syz.4.20096 Not tainted syzkaller #0 [ 2307.765302][T28793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2307.775413][T28793] Call Trace: [ 2307.778706][T28793] [ 2307.781647][T28793] dump_stack_lvl+0x188/0x250 [ 2307.786341][T28793] ? show_regs_print_info+0x20/0x20 [ 2307.791547][T28793] ? load_image+0x400/0x400 [ 2307.796056][T28793] ? __might_sleep+0xf0/0xf0 [ 2307.800754][T28793] ? __lock_acquire+0x7d10/0x7d10 [ 2307.805784][T28793] ? mark_lock+0x94/0x320 [ 2307.810210][T28793] should_fail+0x38c/0x4c0 [ 2307.814637][T28793] should_failslab+0x5/0x20 [ 2307.819149][T28793] slab_pre_alloc_hook+0x51/0xc0 [ 2307.824101][T28793] __kmalloc+0x6b/0x330 [ 2307.828272][T28793] ? tomoyo_realpath_from_path+0x118/0x610 [ 2307.834100][T28793] tomoyo_realpath_from_path+0x118/0x610 [ 2307.839759][T28793] tomoyo_path_number_perm+0x242/0x660 [ 2307.845229][T28793] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2307.851826][T28793] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2307.857359][T28793] security_file_ioctl+0x6c/0xa0 [ 2307.862312][T28793] __se_sys_ioctl+0x48/0x170 [ 2307.866908][T28793] do_syscall_64+0x4c/0xa0 [ 2307.871330][T28793] ? clear_bhb_loop+0x30/0x80 [ 2307.876012][T28793] ? clear_bhb_loop+0x30/0x80 [ 2307.880689][T28793] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2307.886578][T28793] RIP: 0033:0x7f78597accb9 [ 2307.890997][T28793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2307.910687][T28793] RSP: 002b:00007f7857a08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2307.919117][T28793] RAX: ffffffffffffffda RBX: 00007f7859a27fa0 RCX: 00007f78597accb9 [ 2307.927091][T28793] RDX: 0000200000000000 RSI: 000000004008240b RDI: 0000000000000004 [ 2307.935064][T28793] RBP: 00007f7857a08090 R08: 0000000000000000 R09: 0000000000000000 [ 2307.943028][T28793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2307.950990][T28793] R13: 00007f7859a28038 R14: 00007f7859a27fa0 R15: 00007ffe9cbdbec8 [ 2307.958968][T28793] [ 2308.481695][T28793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2308.900813][T28823] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.20108'. [ 2310.054571][T28855] netlink: 111 bytes leftover after parsing attributes in process `syz.2.20117'. [ 2310.417151][T28866] netlink: 'syz.5.20121': attribute type 21 has an invalid length. [ 2310.518600][T28874] netlink: 'syz.5.20121': attribute type 9 has an invalid length. [ 2310.680456][T28874] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.20121'. [ 2311.014603][T28879] device syzkaller0 entered promiscuous mode [ 2311.560194][T28903] syz.3.20130[28903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2311.560369][T28903] syz.3.20130[28903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2313.224316][T28932] device syzkaller0 entered promiscuous mode [ 2313.415009][T28952] netlink: 'syz.3.20147': attribute type 1 has an invalid length. [ 2313.422860][T28952] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.20147'. [ 2313.633177][T28952] netlink: 9 bytes leftover after parsing attributes in process `syz.3.20147'. [ 2314.667842][T28962] netlink: 'syz.1.20150': attribute type 21 has an invalid length. [ 2314.721831][T28967] netlink: 'syz.1.20150': attribute type 9 has an invalid length. [ 2314.770370][T28967] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.20150'. [ 2314.957539][T28964] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2316.577514][T28994] device syzkaller0 entered promiscuous mode [ 2316.624995][T29013] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.20168'. [ 2318.271673][T29052] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.20182'. [ 2318.807849][T29073] netlink: 'syz.4.20190': attribute type 21 has an invalid length. [ 2318.948966][T29068] device syzkaller0 entered promiscuous mode [ 2318.957622][T29083] netlink: 'syz.4.20190': attribute type 9 has an invalid length. [ 2319.008781][T29083] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.20190'. [ 2319.461568][T29087] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.20194'. [ 2320.480617][T29125] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.20206'. [ 2320.521729][T29129] FAULT_INJECTION: forcing a failure. [ 2320.521729][T29129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2320.564470][T29129] CPU: 1 PID: 29129 Comm: syz.1.20207 Not tainted syzkaller #0 [ 2320.572071][T29129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2320.582236][T29129] Call Trace: [ 2320.585536][T29129] [ 2320.588475][T29129] dump_stack_lvl+0x188/0x250 [ 2320.593176][T29129] ? show_regs_print_info+0x20/0x20 [ 2320.598402][T29129] ? load_image+0x400/0x400 [ 2320.603013][T29129] ? __lock_acquire+0x7d10/0x7d10 [ 2320.608050][T29129] ? vfs_write+0x8b2/0xd60 [ 2320.612488][T29129] should_fail+0x38c/0x4c0 [ 2320.616926][T29129] _copy_from_user+0x2e/0x170 [ 2320.621774][T29129] __sys_bpf+0x26d/0x6f0 [ 2320.626045][T29129] ? bpf_link_show_fdinfo+0x380/0x380 [ 2320.631437][T29129] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 2320.637717][T29129] ? vtime_user_exit+0x2c8/0x3e0 [ 2320.642688][T29129] __x64_sys_bpf+0x78/0x90 [ 2320.647130][T29129] do_syscall_64+0x4c/0xa0 [ 2320.651552][T29129] ? clear_bhb_loop+0x30/0x80 [ 2320.656368][T29129] ? clear_bhb_loop+0x30/0x80 [ 2320.661054][T29129] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2320.666949][T29129] RIP: 0033:0x7f6b19dd3cb9 [ 2320.671380][T29129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2320.691085][T29129] RSP: 002b:00007f6b1802f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2320.699498][T29129] RAX: ffffffffffffffda RBX: 00007f6b1a04efa0 RCX: 00007f6b19dd3cb9 [ 2320.707473][T29129] RDX: 0000000000000020 RSI: 0000200000001380 RDI: 0000000000000003 [ 2320.715521][T29129] RBP: 00007f6b1802f090 R08: 0000000000000000 R09: 0000000000000000 [ 2320.723481][T29129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2320.731449][T29129] R13: 00007f6b1a04f038 R14: 00007f6b1a04efa0 R15: 00007ffd25fd6e08 [ 2320.739467][T29129] [ 2321.178249][T29121] device syzkaller0 entered promiscuous mode [ 2321.331219][T29150] netlink: 'syz.5.20212': attribute type 9 has an invalid length. [ 2321.398524][T29150] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.20212'. [ 2321.556517][T29146] netlink: 'syz.5.20212': attribute type 21 has an invalid length. [ 2322.389213][T29170] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.20220'. [ 2322.907853][T29192] netlink: 'syz.5.20228': attribute type 21 has an invalid length. [ 2322.997712][T29195] netlink: 'syz.5.20228': attribute type 9 has an invalid length. [ 2323.037861][T29195] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.20228'. [ 2323.221065][T29188] device syzkaller0 entered promiscuous mode [ 2323.609642][T29207] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.20232'. [ 2324.499761][T29238] FAULT_INJECTION: forcing a failure. [ 2324.499761][T29238] name failslab, interval 1, probability 0, space 0, times 0 [ 2324.512545][T29238] CPU: 0 PID: 29238 Comm: syz.5.20243 Not tainted syzkaller #0 [ 2324.520127][T29238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2324.530200][T29238] Call Trace: [ 2324.533491][T29238] [ 2324.536436][T29238] dump_stack_lvl+0x188/0x250 [ 2324.541131][T29238] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2324.547736][T29238] ? show_regs_print_info+0x20/0x20 [ 2324.552951][T29238] ? load_image+0x400/0x400 [ 2324.557469][T29238] ? lockdep_hardirqs_on+0x94/0x140 [ 2324.562694][T29238] should_fail+0x38c/0x4c0 [ 2324.567131][T29238] should_failslab+0x5/0x20 [ 2324.571639][T29238] slab_pre_alloc_hook+0x51/0xc0 [ 2324.576602][T29238] ? skb_clone+0x1bd/0x350 [ 2324.581051][T29238] kmem_cache_alloc+0x3d/0x290 [ 2324.585832][T29238] skb_clone+0x1bd/0x350 [ 2324.590246][T29238] ? dev_queue_xmit_nit+0x1df/0xb00 [ 2324.595463][T29238] dev_queue_xmit_nit+0x2cc/0xb00 [ 2324.600505][T29238] ? validate_xmit_skb+0x7b3/0xe40 [ 2324.605630][T29238] dev_hard_start_xmit+0x13e/0x7e0 [ 2324.610768][T29238] __dev_queue_xmit+0x1a78/0x2fd0 [ 2324.615821][T29238] ? dev_queue_xmit+0x20/0x20 [ 2324.620504][T29238] ? memcpy+0x3c/0x60 [ 2324.624496][T29238] ? __copy_skb_header+0x3ba/0x4f0 [ 2324.629618][T29238] ? __skb_clone+0x480/0x790 [ 2324.634224][T29238] ? skb_clone+0x1f1/0x350 [ 2324.638650][T29238] __netlink_deliver_tap+0x53e/0x7c0 [ 2324.643956][T29238] netlink_deliver_tap+0x16c/0x180 [ 2324.649072][T29238] netlink_unicast+0x74f/0x920 [ 2324.653996][T29238] netlink_sendmsg+0x8ba/0xbe0 [ 2324.658782][T29238] ? netlink_getsockopt+0x570/0x570 [ 2324.663998][T29238] ? aa_sock_msg_perm+0x94/0x150 [ 2324.668959][T29238] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2324.674257][T29238] ? security_socket_sendmsg+0x7c/0xa0 [ 2324.679733][T29238] ? netlink_getsockopt+0x570/0x570 [ 2324.684943][T29238] ____sys_sendmsg+0x5b7/0x8f0 [ 2324.689737][T29238] ? __sys_sendmsg_sock+0x30/0x30 [ 2324.694782][T29238] ? import_iovec+0x6f/0xa0 [ 2324.699395][T29238] ___sys_sendmsg+0x236/0x2e0 [ 2324.704092][T29238] ? __sys_sendmsg+0x2a0/0x2a0 [ 2324.708897][T29238] ? vfs_write+0x8b2/0xd60 [ 2324.713348][T29238] __se_sys_sendmsg+0x1af/0x290 [ 2324.718214][T29238] ? __x64_sys_sendmsg+0x80/0x80 [ 2324.723180][T29238] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2324.729090][T29238] do_syscall_64+0x4c/0xa0 [ 2324.733607][T29238] ? clear_bhb_loop+0x30/0x80 [ 2324.738316][T29238] ? clear_bhb_loop+0x30/0x80 [ 2324.743001][T29238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2324.748905][T29238] RIP: 0033:0x7f528d411cb9 [ 2324.753417][T29238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2324.773118][T29238] RSP: 002b:00007f528b66d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2324.781554][T29238] RAX: ffffffffffffffda RBX: 00007f528d68cfa0 RCX: 00007f528d411cb9 [ 2324.789533][T29238] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 2324.797513][T29238] RBP: 00007f528b66d090 R08: 0000000000000000 R09: 0000000000000000 [ 2324.805491][T29238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2324.813467][T29238] R13: 00007f528d68d038 R14: 00007f528d68cfa0 R15: 00007ffe4dd47a98 [ 2324.821466][T29238] [ 2325.021992][T29247] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.20246'. [ 2326.023984][T29287] netlink: 'syz.3.20262': attribute type 21 has an invalid length. [ 2326.119261][T29291] netlink: 'syz.3.20262': attribute type 9 has an invalid length. [ 2326.182660][T29291] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.20262'. [ 2326.406250][T29296] netlink: 132 bytes leftover after parsing attributes in process `syz.5.20265'. [ 2326.520477][T29297] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.20265'. [ 2327.702209][T29331] netlink: 'syz.1.20274': attribute type 9 has an invalid length. [ 2327.752877][T29331] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.20274'. [ 2327.753480][T29326] netlink: 'syz.1.20274': attribute type 21 has an invalid length. [ 2329.010932][T29347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20281'. [ 2329.712190][T29368] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.20289'. [ 2329.903020][T29373] FAULT_INJECTION: forcing a failure. [ 2329.903020][T29373] name failslab, interval 1, probability 0, space 0, times 0 [ 2329.952717][T29373] CPU: 1 PID: 29373 Comm: syz.3.20291 Not tainted syzkaller #0 [ 2329.960308][T29373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2329.970376][T29373] Call Trace: [ 2329.973661][T29373] [ 2329.976596][T29373] dump_stack_lvl+0x188/0x250 [ 2329.981287][T29373] ? show_regs_print_info+0x20/0x20 [ 2329.986497][T29373] ? load_image+0x400/0x400 [ 2329.991002][T29373] ? __might_sleep+0xf0/0xf0 [ 2329.995593][T29373] ? __lock_acquire+0x7d10/0x7d10 [ 2330.000647][T29373] should_fail+0x38c/0x4c0 [ 2330.005084][T29373] should_failslab+0x5/0x20 [ 2330.009595][T29373] slab_pre_alloc_hook+0x51/0xc0 [ 2330.014538][T29373] __kmalloc+0x6b/0x330 [ 2330.018703][T29373] ? tomoyo_encode+0x27e/0x540 [ 2330.023471][T29373] tomoyo_encode+0x27e/0x540 [ 2330.028063][T29373] tomoyo_realpath_from_path+0x5cd/0x610 [ 2330.033708][T29373] tomoyo_path_number_perm+0x242/0x660 [ 2330.039162][T29373] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2330.045740][T29373] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2330.051225][T29373] security_file_ioctl+0x6c/0xa0 [ 2330.056151][T29373] __se_sys_ioctl+0x48/0x170 [ 2330.060727][T29373] do_syscall_64+0x4c/0xa0 [ 2330.065129][T29373] ? clear_bhb_loop+0x30/0x80 [ 2330.069788][T29373] ? clear_bhb_loop+0x30/0x80 [ 2330.074452][T29373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2330.080328][T29373] RIP: 0033:0x7f7aa9c2ecb9 [ 2330.084731][T29373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2330.104324][T29373] RSP: 002b:00007f7aa7e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2330.112721][T29373] RAX: ffffffffffffffda RBX: 00007f7aa9ea9fa0 RCX: 00007f7aa9c2ecb9 [ 2330.120679][T29373] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000006 [ 2330.128634][T29373] RBP: 00007f7aa7e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 2330.136587][T29373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2330.144540][T29373] R13: 00007f7aa9eaa038 R14: 00007f7aa9ea9fa0 R15: 00007fffb0f56608 [ 2330.152508][T29373] [ 2330.300725][T29380] FAULT_INJECTION: forcing a failure. [ 2330.300725][T29380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2330.381434][T29380] CPU: 1 PID: 29380 Comm: syz.1.20293 Not tainted syzkaller #0 [ 2330.389026][T29380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2330.399093][T29380] Call Trace: [ 2330.402378][T29380] [ 2330.405314][T29380] dump_stack_lvl+0x188/0x250 [ 2330.410002][T29380] ? show_regs_print_info+0x20/0x20 [ 2330.415405][T29380] ? load_image+0x400/0x400 [ 2330.419931][T29380] ? __lock_acquire+0x7d10/0x7d10 [ 2330.424969][T29380] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2330.430538][T29380] should_fail+0x38c/0x4c0 [ 2330.434996][T29380] _copy_from_user+0x2e/0x170 [ 2330.439695][T29380] iovec_from_user+0x142/0x370 [ 2330.444492][T29380] __import_iovec+0x70/0x490 [ 2330.449102][T29380] import_iovec+0x6f/0xa0 [ 2330.453539][T29380] ___sys_sendmsg+0x1fd/0x2e0 [ 2330.458238][T29380] ? __sys_sendmsg+0x2a0/0x2a0 [ 2330.463029][T29380] ? vfs_write+0x8b2/0xd60 [ 2330.467473][T29380] __se_sys_sendmsg+0x1af/0x290 [ 2330.472342][T29380] ? __x64_sys_sendmsg+0x80/0x80 [ 2330.477291][T29380] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2330.483293][T29380] ? lockdep_hardirqs_on+0x94/0x140 [ 2330.488510][T29380] do_syscall_64+0x4c/0xa0 [ 2330.493022][T29380] ? clear_bhb_loop+0x30/0x80 [ 2330.497798][T29380] ? clear_bhb_loop+0x30/0x80 [ 2330.502497][T29380] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2330.508416][T29380] RIP: 0033:0x7f6b19dd3cb9 [ 2330.512844][T29380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2330.532467][T29380] RSP: 002b:00007f6b1800e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2330.540898][T29380] RAX: ffffffffffffffda RBX: 00007f6b1a04f090 RCX: 00007f6b19dd3cb9 [ 2330.548882][T29380] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 2330.556954][T29380] RBP: 00007f6b1800e090 R08: 0000000000000000 R09: 0000000000000000 [ 2330.564925][T29380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2330.572899][T29380] R13: 00007f6b1a04f128 R14: 00007f6b1a04f090 R15: 00007ffd25fd6e08 [ 2330.580866][T29380] [ 2330.793575][T29373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2331.067343][T29388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20295'. [ 2331.347258][T29399] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.20295'. [ 2333.955666][T29472] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20317'. [ 2334.132697][T29478] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.20317'. [ 2334.908085][T29502] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20334'. [ 2335.955733][T29520] chnl_net:caif_netlink_parms(): no params data found [ 2336.250660][T29520] bridge0: port 1(bridge_slave_0) entered blocking state [ 2336.279416][T29520] bridge0: port 1(bridge_slave_0) entered disabled state [ 2336.308654][T29520] device bridge_slave_0 entered promiscuous mode [ 2336.364953][T29520] bridge0: port 2(bridge_slave_1) entered blocking state [ 2336.398257][T29520] bridge0: port 2(bridge_slave_1) entered disabled state [ 2336.434886][T29520] device bridge_slave_1 entered promiscuous mode [ 2336.541999][T29520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2336.646918][T29520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2336.778802][T29549] netlink: 'syz.1.20343': attribute type 4 has an invalid length. [ 2337.403542][T25562] Bluetooth: hci1: command 0x0409 tx timeout [ 2337.626478][T29520] team0: Port device team_slave_0 added [ 2337.778038][T29520] team0: Port device team_slave_1 added [ 2337.885413][T29520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2337.892397][T29520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2338.033160][T29520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2338.074380][T29520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2338.081437][T29520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2338.183148][T29520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2338.307043][T29520] device hsr_slave_0 entered promiscuous mode [ 2338.331208][T29520] device hsr_slave_1 entered promiscuous mode [ 2338.864823][T29520] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2339.022963][T29520] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2339.047962][T29520] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2339.073406][T29520] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2339.279018][T29520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2339.301406][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2339.325160][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2339.347044][T29520] 8021q: adding VLAN 0 to HW filter on device team0 [ 2339.367008][T24933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2339.399632][T24933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2339.420962][T24933] bridge0: port 1(bridge_slave_0) entered blocking state [ 2339.428126][T24933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2339.453618][T24933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2339.492484][T25562] Bluetooth: hci1: command 0x041b tx timeout [ 2339.573016][T24933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2339.584431][T24933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2339.614214][T24933] bridge0: port 2(bridge_slave_1) entered blocking state [ 2339.621482][T24933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2339.643780][T24933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2339.674599][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2339.684417][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2339.696188][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2339.714465][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2339.724359][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2339.736408][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2339.745083][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2339.753872][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2339.785354][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2339.794210][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2339.804491][T29520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2339.909573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2339.917621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2339.930559][T29520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2340.057698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2340.067166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2340.102338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2340.111205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2340.120063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2340.128738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2340.141073][T29520] device veth0_vlan entered promiscuous mode [ 2340.165378][T29520] device veth1_vlan entered promiscuous mode [ 2340.187091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2340.196073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2340.207893][T29520] device veth0_macvtap entered promiscuous mode [ 2340.229282][T29520] device veth1_macvtap entered promiscuous mode [ 2340.245618][T29520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.256345][T29520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.266553][T29520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.277009][T29520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.287507][T29520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.299373][T29520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.310603][T29520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.321605][T29520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.331883][T29520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.342395][T29520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.353632][T29520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2340.364799][T29520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.375303][T29520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.385916][T29520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.397026][T29520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.407150][T29520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.418658][T29520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.428752][T29520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.439540][T29520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.449645][T29520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.460910][T29520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.471917][T29520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2340.480839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2340.489312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2340.498514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2340.507789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2340.517709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2340.528244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2340.557163][T29520] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.566132][T29520] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.575151][T29520] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.584979][T29520] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.660873][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2340.681096][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2340.704118][T22928] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2340.727253][T22928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2340.738493][T22928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2340.750668][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2341.564044][ T2269] Bluetooth: hci1: command 0x040f tx timeout [ 2342.020479][ T6075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2342.081692][ T6075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2342.141265][ T6075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2342.224352][ T6075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.649298][ T2269] Bluetooth: hci1: command 0x0419 tx timeout [ 2343.957777][ T6075] device hsr_slave_0 left promiscuous mode [ 2343.965361][ T6075] device hsr_slave_1 left promiscuous mode [ 2343.971941][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2343.979489][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2343.988089][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2343.995773][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2344.003993][ T6075] device team0 left promiscuous mode [ 2344.009284][ T6075] device team_slave_0 left promiscuous mode [ 2344.015560][ T6075] device team_slave_1 left promiscuous mode [ 2344.021518][ T6075] device geneve1 left promiscuous mode [ 2344.027265][ T6075] bridge0: port 3(team0) entered disabled state [ 2344.038777][ T6075] device bridge_slave_1 left promiscuous mode [ 2344.045090][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 2344.053322][ T6075] device bridge_slave_0 left promiscuous mode [ 2344.059574][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 2344.069954][ T6075] device veth1_macvtap left promiscuous mode [ 2344.076274][ T6075] device veth0_macvtap left promiscuous mode [ 2344.082304][ T6075] device veth1_vlan left promiscuous mode [ 2344.088323][ T6075] device veth0_vlan left promiscuous mode [ 2344.230333][ T6075] team0 (unregistering): Port device geneve1 removed [ 2344.299563][ T6075] team0 (unregistering): Port device team_slave_1 removed [ 2344.312099][ T6075] team0 (unregistering): Port device team_slave_0 removed [ 2344.326533][ T6075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2344.340815][ T6075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2344.383467][ T6075] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2344.415254][ T6075] bond0 (unregistering): Released all slaves [ 2344.615655][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.621988][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.045164][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.051465][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2459.323260][T25555] Bluetooth: hci1: command 0x0406 tx timeout [ 2467.486149][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.492478][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.925782][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.932305][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.365201][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.371489][ T1421] ieee802154 phy1 wpan1: encryption failed: -22