last executing test programs: 28.055941847s ago: executing program 3 (id=9333): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xd}, 0x10c006, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r1}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x894b, &(0x7f00000002c0)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) sendmsg$inet(r0, 0x0, 0x0) 27.154713721s ago: executing program 3 (id=9335): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.39025661s ago: executing program 3 (id=9337): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x391, 0x9, 0x1, 0x1008}, 0x50) socket$kcm(0x2, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1d", 0x2d}], 0x1}, 0x20000884) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x6, 0x8, 0xb1, 0x9c, 0x0, 0xccc, 0x10000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100, 0x7, 0x4, 0x4, 0x96dd, 0x8, 0xc00, 0x0, 0x8, 0x0, 0x1}, r2, 0x7, 0xffffffffffffffff, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) 25.416826297s ago: executing program 3 (id=9343): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x9, 0x0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000100400085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e86dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x28, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x20000000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000280)='GPL\x00', 0x10001, 0x0, &(0x7f00000005c0), 0x41000, 0x40, '\x00', r3, @sk_reuseport=0x27, r7, 0x8, &(0x7f0000000640)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xa, 0x1, 0x40000000}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000006c0)=[r5, r5], 0x0, 0x10, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit]}, &(0x7f00000000c0)='GPL\x00', 0xffff, 0x8, &(0x7f0000000100)=""/8, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x5, 0x52}, 0x10, r2, r6, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=[{0x3, 0x2, 0x9, 0x1}, {0x3, 0x1, 0x0, 0x2}, {0x0, 0x2, 0x2, 0x1}, {0x3, 0x1, 0x9, 0x3}, {0x4, 0x2, 0x9, 0x9}, {0x5, 0x3, 0x9, 0x7}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 25.085103374s ago: executing program 3 (id=9348): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e030f00fd"], 0xffdd) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={0x0, r0}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8ab00, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_tracing={0x1a, 0x10, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2ab93398a1bd85}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x4f0, 0x27, &(0x7f0000000840)=""/39, 0x0, 0x41, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0x9, 0x8, 0x7}, 0x10, 0x24cf1, 0xffffffffffffffff, 0x1, &(0x7f00000012c0)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001300)=[{0x5, 0x3, 0x5, 0xb}], 0x10, 0x6}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r6, 0x20, &(0x7f0000000340)={&(0x7f00000005c0)=""/156, 0x9c, 0x0, &(0x7f0000000200)=""/22, 0x16}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0xff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="260a00000000000061109c00000000001800006a386c24860000100000000000950000a4390000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0xfffffffe}}, 0x80, 0x0}, 0x0) 23.758316789s ago: executing program 3 (id=9359): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 20.385516895s ago: executing program 0 (id=9368): recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) 20.232406993s ago: executing program 2 (id=9369): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80010000}, 0x50) 19.931281278s ago: executing program 2 (id=9372): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/mnt\x00') 19.821146203s ago: executing program 1 (id=9373): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x2200000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) socketpair(0x15, 0xa, 0x3, &(0x7f00000001c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 19.603155664s ago: executing program 2 (id=9374): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f970cb70290ae5bf01c07701bfa5a43e01e76685f6d03dea4ba81666ceacd8a3762af80493c061f0571796ae04c6247a9eefa166ff4e4048761daf461e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=r0}, 0x20) 19.368772946s ago: executing program 2 (id=9375): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.265094641s ago: executing program 1 (id=9376): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f0000000380)=""/3, 0x0, 0x3, 0x1, 0x3}, 0x28) 19.264599351s ago: executing program 0 (id=9377): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x5c, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 18.989349144s ago: executing program 1 (id=9378): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 18.847683961s ago: executing program 0 (id=9379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 18.46457877s ago: executing program 1 (id=9380): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063115f0000000000070000000000006ff5cc009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x23) 18.46352319s ago: executing program 2 (id=9382): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x2200000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) socketpair(0x15, 0xa, 0x3, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x7, 0x4, 0x5, 0x6, 0x0, 0xfe8, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x2a00, 0x7, 0x7, 0x6, 0xf1, 0x635, 0x1000, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x5, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x7b) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 18.252616811s ago: executing program 1 (id=9384): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x4}, 0x10041, 0xc8, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x404}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17.85112001s ago: executing program 0 (id=9385): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 17.734493046s ago: executing program 1 (id=9387): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000ea4927d895"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000004c0)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 17.208130792s ago: executing program 2 (id=9388): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2309e}, 0x94) socketpair(0x1e, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, 0x0}, 0x20) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=""/172}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 16.740294665s ago: executing program 0 (id=9389): openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000140), 0x0, 0x101, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x180, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001e40)={'veth1_to_team\x00', 0x200}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x0, 0xd55, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002100)={0x0, 0x7, 0x8, 0x8af}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 16.544652504s ago: executing program 0 (id=9391): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8912, &(0x7f0000000080)) 15.43061647s ago: executing program 4 (id=9393): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x840, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 15.042218739s ago: executing program 4 (id=9394): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x1, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 14.672392497s ago: executing program 4 (id=9395): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r5, r2, 0x4, r0}, 0x10) 11.16602785s ago: executing program 4 (id=9396): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6) 2.433506881s ago: executing program 32 (id=9387): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000ea4927d895"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000004c0)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.424518781s ago: executing program 4 (id=9398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 1.350647674s ago: executing program 33 (id=9391): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8912, &(0x7f0000000080)) 1.260483168s ago: executing program 34 (id=9388): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2309e}, 0x94) socketpair(0x1e, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, 0x0}, 0x20) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=""/172}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 0s ago: executing program 4 (id=9401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) kernel console output (not intermixed with test programs): 3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.192408][T30793] netlink: 'syz.4.7743': attribute type 10 has an invalid length. [ 2021.545067][T30798] netlink: 'syz.1.7744': attribute type 16 has an invalid length. [ 2021.569182][T30798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7744'. [ 2021.652950][T18082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.669360][T18082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2021.716131][T30802] netlink: 'syz.3.7745': attribute type 29 has an invalid length. [ 2021.811882][T24772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2021.857145][T30802] netlink: 'syz.3.7745': attribute type 29 has an invalid length. [ 2021.931715][T18082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.974231][T18082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2022.012838][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2022.668218][T30815] netlink: 'syz.4.7746': attribute type 3 has an invalid length. [ 2022.769819][T30815] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.7746'. [ 2023.710813][T30839] tap0: tun_chr_ioctl cmd 1074025675 [ 2023.716246][T30839] tap0: persist disabled [ 2024.885764][T30869] netlink: 'syz.3.7764': attribute type 10 has an invalid length. [ 2026.541002][T14244] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 2028.505189][T30916] netlink: 'syz.3.7777': attribute type 2 has an invalid length. [ 2028.618422][T30916] netlink: 'syz.3.7777': attribute type 1 has an invalid length. [ 2029.414128][T30916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7777'. [ 2031.425196][T30940] IPv6: Can't replace route, no match found [ 2031.519306][T30941] mac80211_hwsim hwsim167 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2032.037180][T30952] netlink: 'syz.1.7787': attribute type 10 has an invalid length. [ 2032.162738][T30952] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2032.834456][T30975] netlink: 'syz.0.7791': attribute type 2 has an invalid length. [ 2032.903570][T30975] netlink: 'syz.0.7791': attribute type 1 has an invalid length. [ 2033.714455][T30996] netlink: 'syz.3.7800': attribute type 10 has an invalid length. [ 2033.738416][T30996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7800'. [ 2033.774289][T30996] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2033.858613][T30996] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2033.892123][T31005] netlink: 'syz.0.7801': attribute type 29 has an invalid length. [ 2033.997335][T30996] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2034.036296][T30999] netlink: 'syz.0.7801': attribute type 17 has an invalid length. [ 2034.088653][T30999] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7801'. [ 2034.133607][T31005] netlink: 'syz.0.7801': attribute type 29 has an invalid length. [ 2034.203773][T31007] FAULT_INJECTION: forcing a failure. [ 2034.203773][T31007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2034.278646][T31007] CPU: 1 PID: 31007 Comm: syz.1.7803 Not tainted syzkaller #0 [ 2034.286179][T31007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2034.296452][T31007] Call Trace: [ 2034.299761][T31007] [ 2034.302722][T31007] dump_stack_lvl+0x188/0x24e [ 2034.307544][T31007] ? show_regs_print_info+0x12/0x12 [ 2034.312786][T31007] ? load_image+0x400/0x400 [ 2034.317330][T31007] ? __lock_acquire+0x7d10/0x7d10 [ 2034.322406][T31007] should_fail_ex+0x399/0x4d0 [ 2034.327133][T31007] _copy_from_user+0x2c/0x170 [ 2034.331851][T31007] __sys_bpf+0x2ea/0x780 [ 2034.336138][T31007] ? bpf_link_show_fdinfo+0x380/0x380 [ 2034.341828][T31007] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2034.348104][T31007] __x64_sys_bpf+0x78/0x90 [ 2034.352554][T31007] do_syscall_64+0x4c/0xa0 [ 2034.357065][T31007] ? clear_bhb_loop+0x60/0xb0 [ 2034.361761][T31007] ? clear_bhb_loop+0x60/0xb0 [ 2034.366572][T31007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2034.372502][T31007] RIP: 0033:0x7f539319c799 [ 2034.376937][T31007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2034.396731][T31007] RSP: 002b:00007f5393f95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2034.405155][T31007] RAX: ffffffffffffffda RBX: 00007f5393415fa0 RCX: 00007f539319c799 [ 2034.413139][T31007] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000012 [ 2034.421121][T31007] RBP: 00007f5393f95090 R08: 0000000000000000 R09: 0000000000000000 [ 2034.429104][T31007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2034.437171][T31007] R13: 00007f5393416038 R14: 00007f5393415fa0 R15: 00007ffc5d8747c8 [ 2034.445166][T31007] [ 2034.547206][T31011] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.7804'. [ 2034.598493][T31014] netlink: 'syz.0.7807': attribute type 12 has an invalid length. [ 2034.614680][T31014] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.7807'. [ 2035.150868][T31026] netlink: 'syz.3.7808': attribute type 2 has an invalid length. [ 2035.249736][T31026] netlink: 'syz.3.7808': attribute type 1 has an invalid length. [ 2035.270750][T31026] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.7808'. [ 2037.514653][T31059] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7819'. [ 2037.752668][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.759640][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.860595][T31073] netlink: 'syz.0.7824': attribute type 10 has an invalid length. [ 2039.475830][T31071] netlink: 'syz.3.7822': attribute type 3 has an invalid length. [ 2039.505191][T31071] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.7822'. [ 2039.700717][T31089] tipc: Started in network mode [ 2039.705677][T31089] tipc: Node identity 9215a268, cluster identity 4711 [ 2039.730275][T31089] tipc: Node number set to 2450891368 [ 2041.475741][T31111] FAULT_INJECTION: forcing a failure. [ 2041.475741][T31111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2041.798532][T31111] CPU: 0 PID: 31111 Comm: syz.0.7833 Not tainted syzkaller #0 [ 2041.806077][T31111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2041.816249][T31111] Call Trace: [ 2041.819734][T31111] [ 2041.822694][T31111] dump_stack_lvl+0x188/0x24e [ 2041.827412][T31111] ? show_regs_print_info+0x12/0x12 [ 2041.832818][T31111] ? load_image+0x400/0x400 [ 2041.837458][T31111] ? __lock_acquire+0x7d10/0x7d10 [ 2041.842793][T31111] should_fail_ex+0x399/0x4d0 [ 2041.847511][T31111] _copy_from_user+0x2c/0x170 [ 2041.852234][T31111] btf_get_info_by_fd+0x100/0x5b0 [ 2041.857471][T31111] ? __fget_files+0x28/0x4b0 [ 2041.862098][T31111] ? __fget_files+0x28/0x4b0 [ 2041.866731][T31111] ? btf_get_by_fd+0x160/0x160 [ 2041.871722][T31111] ? check_zeroed_user+0x18c/0x210 [ 2041.876888][T31111] bpf_obj_get_info_by_fd+0xc30/0x2f50 [ 2041.882393][T31111] ? trace_event_raw_event_lock+0x250/0x250 [ 2041.888319][T31111] ? verify_lock_unused+0x140/0x140 [ 2041.893559][T31111] ? perf_trace_lock+0xf8/0x390 [ 2041.898540][T31111] ? bpf_map_get_fd_by_id+0x310/0x310 [ 2041.904072][T31111] ? perf_trace_lock+0xf8/0x390 [ 2041.908952][T31111] ? perf_trace_lock+0xf8/0x390 [ 2041.913840][T31111] ? trace_event_raw_event_lock+0x250/0x250 [ 2041.919819][T31111] ? __might_fault+0xa6/0x120 [ 2041.924539][T31111] ? __lock_acquire+0x7d10/0x7d10 [ 2041.929619][T31111] ? __might_fault+0xa6/0x120 [ 2041.934333][T31111] ? __might_fault+0xc2/0x120 [ 2041.939047][T31111] ? __might_fault+0xa6/0x120 [ 2041.943843][T31111] ? bpf_lsm_bpf+0x5/0x10 [ 2041.948213][T31111] ? security_bpf+0x7a/0xa0 [ 2041.952846][T31111] __sys_bpf+0x505/0x780 [ 2041.957145][T31111] ? bpf_link_show_fdinfo+0x380/0x380 [ 2041.962572][T31111] ? lock_chain_count+0x20/0x20 [ 2041.967545][T31111] __x64_sys_bpf+0x78/0x90 [ 2041.971998][T31111] do_syscall_64+0x4c/0xa0 [ 2041.976524][T31111] ? clear_bhb_loop+0x60/0xb0 [ 2041.981224][T31111] ? clear_bhb_loop+0x60/0xb0 [ 2041.985986][T31111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2041.991983][T31111] RIP: 0033:0x7f2d5bd9c799 [ 2041.996495][T31111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2042.016476][T31111] RSP: 002b:00007f2d5cb90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2042.025012][T31111] RAX: ffffffffffffffda RBX: 00007f2d5c016180 RCX: 00007f2d5bd9c799 [ 2042.033185][T31111] RDX: 0000000000000033 RSI: 0000200000000340 RDI: 000000000000000f [ 2042.041198][T31111] RBP: 00007f2d5cb90090 R08: 0000000000000000 R09: 0000000000000000 [ 2042.049186][T31111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2042.057172][T31111] R13: 00007f2d5c016218 R14: 00007f2d5c016180 R15: 00007ffc9f999b98 [ 2042.065208][T31111] [ 2042.889646][T31128] netlink: 'syz.2.7836': attribute type 10 has an invalid length. [ 2043.079226][T31128] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.087045][T31128] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.159568][T31128] bridge0: port 2(bridge_slave_1) entered blocking state [ 2043.166750][T31128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2043.174366][T31128] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.181619][T31128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2043.245213][T31128] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2045.733140][T31172] FAULT_INJECTION: forcing a failure. [ 2045.733140][T31172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2045.824733][T31172] CPU: 1 PID: 31172 Comm: syz.4.7850 Not tainted syzkaller #0 [ 2045.832273][T31172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2045.842557][T31172] Call Trace: [ 2045.845863][T31172] [ 2045.848834][T31172] dump_stack_lvl+0x188/0x24e [ 2045.853559][T31172] ? show_regs_print_info+0x12/0x12 [ 2045.858797][T31172] ? load_image+0x400/0x400 [ 2045.863335][T31172] ? __lock_acquire+0x7d10/0x7d10 [ 2045.868395][T31172] should_fail_ex+0x399/0x4d0 [ 2045.873114][T31172] _copy_to_user+0x2c/0x130 [ 2045.877829][T31172] bpf_verifier_vlog+0x172/0x390 [ 2045.882915][T31172] __btf_verifier_log+0xdf/0x130 [ 2045.887997][T31172] ? btf_check_sec_info+0x350/0x350 [ 2045.893231][T31172] ? __virt_addr_valid+0x188/0x540 [ 2045.898377][T31172] ? btf_parse_hdr+0x1e0/0x7e0 [ 2045.903180][T31172] btf_parse_hdr+0x3db/0x7e0 [ 2045.907816][T31172] btf_new_fd+0x3c6/0x780 [ 2045.912198][T31172] __sys_bpf+0x612/0x780 [ 2045.916566][T31172] ? bpf_link_show_fdinfo+0x380/0x380 [ 2045.922087][T31172] ? lock_chain_count+0x20/0x20 [ 2045.927159][T31172] __x64_sys_bpf+0x78/0x90 [ 2045.931611][T31172] do_syscall_64+0x4c/0xa0 [ 2045.936058][T31172] ? clear_bhb_loop+0x60/0xb0 [ 2045.940755][T31172] ? clear_bhb_loop+0x60/0xb0 [ 2045.945440][T31172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2045.951428][T31172] RIP: 0033:0x7f7ff819c799 [ 2045.955941][T31172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2045.975902][T31172] RSP: 002b:00007f7ff910e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2045.984527][T31172] RAX: ffffffffffffffda RBX: 00007f7ff8415fa0 RCX: 00007f7ff819c799 [ 2045.992614][T31172] RDX: 0000000000000028 RSI: 0000200000000580 RDI: 0000000000000012 [ 2046.000690][T31172] RBP: 00007f7ff910e090 R08: 0000000000000000 R09: 0000000000000000 [ 2046.009232][T31172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2046.017223][T31172] R13: 00007f7ff8416038 R14: 00007f7ff8415fa0 R15: 00007fffe7fb31a8 [ 2046.025407][T31172] [ 2046.124468][T31174] tap0: tun_chr_ioctl cmd 1074025675 [ 2046.141383][T31174] tap0: persist enabled [ 2046.167965][T31174] tap0: tun_chr_ioctl cmd 1074025675 [ 2046.182694][T31174] tap0: persist disabled [ 2046.209164][T31177] gre0: mtu less than device minimum [ 2046.856990][T31187] FAULT_INJECTION: forcing a failure. [ 2046.856990][T31187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2046.908391][T31187] CPU: 1 PID: 31187 Comm: syz.2.7856 Not tainted syzkaller #0 [ 2046.915949][T31187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2046.926129][T31187] Call Trace: [ 2046.929530][T31187] [ 2046.932489][T31187] dump_stack_lvl+0x188/0x24e [ 2046.937310][T31187] ? show_regs_print_info+0x12/0x12 [ 2046.942555][T31187] ? load_image+0x400/0x400 [ 2046.947111][T31187] ? __lock_acquire+0x7d10/0x7d10 [ 2046.952187][T31187] should_fail_ex+0x399/0x4d0 [ 2046.956902][T31187] _copy_from_user+0x2c/0x170 [ 2046.961633][T31187] __sys_bpf+0x2ea/0x780 [ 2046.966020][T31187] ? bpf_link_show_fdinfo+0x380/0x380 [ 2046.971572][T31187] ? lock_chain_count+0x20/0x20 [ 2046.976505][T31187] __x64_sys_bpf+0x78/0x90 [ 2046.981070][T31187] do_syscall_64+0x4c/0xa0 [ 2046.985533][T31187] ? clear_bhb_loop+0x60/0xb0 [ 2046.990430][T31187] ? clear_bhb_loop+0x60/0xb0 [ 2046.995153][T31187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2047.001175][T31187] RIP: 0033:0x7f62cc39c799 [ 2047.005636][T31187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2047.025376][T31187] RSP: 002b:00007f62cd2d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2047.033950][T31187] RAX: ffffffffffffffda RBX: 00007f62cc615fa0 RCX: 00007f62cc39c799 [ 2047.042057][T31187] RDX: 000000000000000c RSI: 0000200000000ac0 RDI: 0000000000000023 [ 2047.050161][T31187] RBP: 00007f62cd2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 2047.058257][T31187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2047.066342][T31187] R13: 00007f62cc616038 R14: 00007f62cc615fa0 R15: 00007ffe9f172268 [ 2047.074450][T31187] [ 2047.161765][T31182] device syzkaller0 entered promiscuous mode [ 2047.230354][T31190] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7855'. [ 2055.137002][T31169] netlink: 'syz.1.7849': attribute type 3 has an invalid length. [ 2055.145014][T31169] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.7849'. [ 2055.165385][T31225] tap1: tun_chr_ioctl cmd 1074025675 [ 2055.209639][T31225] tap1: persist enabled [ 2055.214017][T31226] tap1: tun_chr_ioctl cmd 1074025675 [ 2055.236439][T31226] tap1: persist disabled [ 2055.696484][T14244] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 2056.455724][T31244] netlink: 'syz.2.7868': attribute type 3 has an invalid length. [ 2056.498593][T31244] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.7868'. [ 2057.032292][T31255] netlink: 'syz.1.7874': attribute type 3 has an invalid length. [ 2057.069862][T31254] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7875'. [ 2057.127112][T31255] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7874'. [ 2057.453484][T31258] netlink: 'syz.2.7876': attribute type 1 has an invalid length. [ 2057.554724][T31258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7876'. [ 2057.968185][T31270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7882'. [ 2059.394363][T31289] netlink: 'syz.3.7887': attribute type 10 has an invalid length. [ 2059.473698][T31285] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7885'. [ 2059.587145][T31285] openvswitch: netlink: Message has 6 unknown bytes. [ 2059.669465][T31289] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.800932][T31289] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.860945][T31289] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.923607][T31289] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.961188][T31291] netlink: 'syz.0.7879': attribute type 3 has an invalid length. [ 2059.978475][T31291] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.7879'. [ 2060.108683][T31284] netlink: 'syz.1.7886': attribute type 3 has an invalid length. [ 2060.188627][T31284] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.7886'. [ 2061.407308][T31325] FAULT_INJECTION: forcing a failure. [ 2061.407308][T31325] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.634469][T31325] CPU: 1 PID: 31325 Comm: syz.1.7897 Not tainted syzkaller #0 [ 2061.642117][T31325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2061.652192][T31325] Call Trace: [ 2061.655491][T31325] [ 2061.658436][T31325] dump_stack_lvl+0x188/0x24e [ 2061.663135][T31325] ? show_regs_print_info+0x12/0x12 [ 2061.668355][T31325] ? load_image+0x400/0x400 [ 2061.672882][T31325] ? __might_sleep+0xd0/0xd0 [ 2061.677502][T31325] ? __lock_acquire+0x7d10/0x7d10 [ 2061.682886][T31325] ? __lock_acquire+0x13cf/0x7d10 [ 2061.688102][T31325] should_fail_ex+0x399/0x4d0 [ 2061.692802][T31325] should_failslab+0x5/0x20 [ 2061.697322][T31325] slab_pre_alloc_hook+0x59/0x310 [ 2061.702446][T31325] ? __kernfs_new_node+0xa6/0x810 [ 2061.707481][T31325] __kmem_cache_alloc_node+0x4f/0x260 [ 2061.712868][T31325] ? __kernfs_new_node+0xa6/0x810 [ 2061.717900][T31325] __kmalloc_node_track_caller+0x9e/0x230 [ 2061.723639][T31325] kstrdup_const+0x56/0x90 [ 2061.728071][T31325] __kernfs_new_node+0xa6/0x810 [ 2061.732949][T31325] ? verify_lock_unused+0x140/0x140 [ 2061.738163][T31325] ? kernfs_new_node+0x250/0x250 [ 2061.743122][T31325] ? make_kgid+0x1c4/0x660 [ 2061.747693][T31325] ? from_kuid_munged+0x6b0/0x6b0 [ 2061.752730][T31325] kernfs_new_node+0x148/0x250 [ 2061.757507][T31325] kernfs_create_dir_ns+0x40/0x120 [ 2061.762629][T31325] sysfs_create_dir_ns+0x12c/0x290 [ 2061.767857][T31325] ? sysfs_warn_dup+0xa0/0xa0 [ 2061.772635][T31325] ? do_raw_spin_unlock+0x11d/0x230 [ 2061.777876][T31325] kobject_add_internal+0x61c/0xcc0 [ 2061.783112][T31325] kobject_add+0x160/0x230 [ 2061.787542][T31325] ? __lock_acquire+0x7d10/0x7d10 [ 2061.792599][T31325] ? kobject_init+0x1d0/0x1d0 [ 2061.797298][T31325] ? do_raw_spin_unlock+0x11d/0x230 [ 2061.802519][T31325] ? get_device_parent+0x288/0x3f0 [ 2061.807731][T31325] device_add+0x483/0xfb0 [ 2061.812085][T31325] netdev_register_kobject+0x184/0x320 [ 2061.817560][T31325] register_netdevice+0x12dc/0x1b00 [ 2061.822780][T31325] ? netif_stacked_transfer_operstate+0x200/0x200 [ 2061.829214][T31325] ? tun_net_initialize+0x154/0x430 [ 2061.834432][T31325] ? tun_setup+0x2b0/0x2b0 [ 2061.838878][T31325] ? alloc_netdev_mqs+0xb64/0xf00 [ 2061.844109][T31325] tun_set_iff+0x848/0xed0 [ 2061.848609][T31325] __tun_chr_ioctl+0x781/0x1e60 [ 2061.853494][T31325] ? tun_flow_create+0x310/0x310 [ 2061.858460][T31325] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2061.865800][T31325] ? security_file_ioctl+0x7c/0xa0 [ 2061.870945][T31325] ? tun_chr_poll+0x630/0x630 [ 2061.875644][T31325] __se_sys_ioctl+0xfa/0x170 [ 2061.880263][T31325] do_syscall_64+0x4c/0xa0 [ 2061.884694][T31325] ? clear_bhb_loop+0x60/0xb0 [ 2061.889386][T31325] ? clear_bhb_loop+0x60/0xb0 [ 2061.894172][T31325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2061.900187][T31325] RIP: 0033:0x7f539319c799 [ 2061.904720][T31325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2061.924706][T31325] RSP: 002b:00007f5393f95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2061.933145][T31325] RAX: ffffffffffffffda RBX: 00007f5393415fa0 RCX: 00007f539319c799 [ 2061.941209][T31325] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000003 [ 2061.949202][T31325] RBP: 00007f5393f95090 R08: 0000000000000000 R09: 0000000000000000 [ 2061.957196][T31325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2061.965271][T31325] R13: 00007f5393416038 R14: 00007f5393415fa0 R15: 00007ffc5d8747c8 [ 2061.973267][T31325] [ 2062.078350][T31325] kobject_add_internal failed for pimreg0 (error: -12 parent: net) [ 2062.908528][T31350] netlink: 'syz.3.7899': attribute type 10 has an invalid length. [ 2063.485738][T31362] netlink: 'syz.0.7913': attribute type 10 has an invalid length. [ 2063.586518][T31365] netlink: 'syz.3.7904': attribute type 21 has an invalid length. [ 2063.628542][T31354] netlink: 'syz.2.7901': attribute type 3 has an invalid length. [ 2063.809614][T31354] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.7901'. [ 2064.329209][T31372] netlink: 'syz.4.7903': attribute type 3 has an invalid length. [ 2064.337105][T31372] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.7903'. [ 2064.591889][T31376] netlink: 'syz.0.7907': attribute type 1 has an invalid length. [ 2064.657868][T31376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7907'. [ 2066.383729][T31411] netlink: 'syz.1.7920': attribute type 21 has an invalid length. [ 2066.473731][T31409] netlink: 'syz.4.7918': attribute type 10 has an invalid length. [ 2066.715746][T31402] ÿÿÿÿÿÿ: renamed from syzkaller0 [ 2070.214264][T31452] netlink: 'syz.2.7934': attribute type 29 has an invalid length. [ 2070.363156][T31459] netlink: 'syz.3.7936': attribute type 10 has an invalid length. [ 2070.415658][T31449] netlink: 'syz.4.7933': attribute type 3 has an invalid length. [ 2070.528510][T31449] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7933'. [ 2070.726693][T31459] team0: Device wg1 is of different type [ 2070.776627][T31452] netlink: 'syz.2.7934': attribute type 29 has an invalid length. [ 2072.312168][T31486] netlink: 'syz.2.7943': attribute type 1 has an invalid length. [ 2072.398535][T31486] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.7943'. [ 2073.506828][T31488] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7945'. [ 2073.549362][T31493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7948'. [ 2073.588117][T31493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7948'. [ 2073.830638][T31499] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7948'. [ 2073.980557][T31503] netlink: 'syz.0.7950': attribute type 10 has an invalid length. [ 2074.021075][T31502] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7948'. [ 2075.434238][T31510] netlink: 'syz.4.7951': attribute type 10 has an invalid length. [ 2075.448469][T31510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7951'. [ 2076.616898][T31510] netlink: 'syz.4.7951': attribute type 10 has an invalid length. [ 2076.635169][T31510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7951'. [ 2077.008441][T31521] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7955'. [ 2078.022496][T31540] netlink: 'syz.0.7959': attribute type 3 has an invalid length. [ 2078.095678][T31540] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7959'. [ 2078.151136][T31542] netlink: 'syz.0.7959': attribute type 3 has an invalid length. [ 2078.216649][T31542] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7959'. [ 2078.547046][T31544] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7963'. [ 2078.661767][T31553] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7966'. [ 2078.729944][T31553] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7966'. [ 2078.762512][T31554] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7966'. [ 2079.695033][T31569] netlink: 'syz.0.7969': attribute type 3 has an invalid length. [ 2080.615993][T31569] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7969'. [ 2082.383906][T31566] netlink: 'syz.3.7970': attribute type 10 has an invalid length. [ 2082.568746][T31579] netlink: 'syz.2.7971': attribute type 25 has an invalid length. [ 2083.454896][T31607] netlink: 'syz.4.7977': attribute type 3 has an invalid length. [ 2083.590994][T31606] netlink: 'syz.1.7981': attribute type 10 has an invalid length. [ 2083.595860][T31597] netlink: 'syz.4.7977': attribute type 3 has an invalid length. [ 2083.599354][T31607] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7977'. [ 2083.878731][T31597] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7977'. [ 2085.744909][T31626] netlink: 'syz.2.7985': attribute type 10 has an invalid length. [ 2085.953889][T31626] bond0: (slave team0): Enslaving as an active interface with an up link [ 2086.221373][T31619] netlink: 'syz.3.7984': attribute type 10 has an invalid length. [ 2086.565452][T31619] team0: Device ipvlan1 failed to register rx_handler [ 2087.122130][T31635] netlink: 'syz.1.7987': attribute type 10 has an invalid length. [ 2087.691204][T31651] mac80211_hwsim hwsim172 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2088.050852][T31664] netlink: 'syz.1.7995': attribute type 10 has an invalid length. [ 2088.426300][T31675] netlink: 'syz.2.7998': attribute type 3 has an invalid length. [ 2088.432987][T31679] netlink: 'syz.2.7998': attribute type 3 has an invalid length. [ 2088.455949][T31675] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7998'. [ 2088.477913][T31679] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7998'. [ 2089.675867][T31687] netlink: 'syz.3.8003': attribute type 10 has an invalid length. [ 2089.947352][T31687] team0: Device wg1 is of different type [ 2090.189000][T31710] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.8008'. [ 2091.157449][T31734] netlink: 'syz.3.8014': attribute type 4 has an invalid length. [ 2091.182135][T31734] netlink: 'syz.3.8014': attribute type 21 has an invalid length. [ 2091.205100][T31736] netlink: 'syz.2.8015': attribute type 10 has an invalid length. [ 2092.023874][T31736] team0: Device wg1 is of different type [ 2092.470710][T31757] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8021'. [ 2092.499888][T31757] netlink: 'syz.2.8021': attribute type 1 has an invalid length. [ 2093.321861][T31775] netlink: 'syz.0.8025': attribute type 10 has an invalid length. [ 2094.251232][T31784] netlink: 'syz.4.8027': attribute type 10 has an invalid length. [ 2095.247639][T31798] netlink: 'syz.4.8032': attribute type 10 has an invalid length. [ 2099.191452][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.198175][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.909321][T31861] : port 1(ip6gretap0) entered blocking state [ 2099.951906][T31861] : port 1(ip6gretap0) entered disabled state [ 2099.972950][T31861] device ip6gretap0 entered promiscuous mode [ 2100.022860][T31865] netlink: 'syz.3.8053': attribute type 10 has an invalid length. [ 2100.043023][T31865] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8053'. [ 2100.083814][T31872] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.8052'. [ 2100.158490][T31872] netlink: zone id is out of range [ 2100.200145][T31872] netlink: del zone limit has 4 unknown bytes [ 2101.758885][T31894] netlink: 'syz.0.8057': attribute type 10 has an invalid length. [ 2103.603680][T31930] netlink: 'syz.0.8067': attribute type 10 has an invalid length. [ 2103.685595][T31930] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8067'. [ 2103.918441][T31933] netlink: 'syz.4.8065': attribute type 10 has an invalid length. [ 2103.948697][T31933] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8065'. [ 2104.066900][T31943] netlink: 'syz.3.8070': attribute type 7 has an invalid length. [ 2105.741812][T31950] netlink: 'syz.1.8071': attribute type 10 has an invalid length. [ 2107.222684][T31982] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.8080'. [ 2107.268539][T31982] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2108.537685][T32003] netlink: 'syz.1.8087': attribute type 7 has an invalid length. [ 2109.035122][T32005] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.8086'. [ 2109.704624][T31999] netlink: 'syz.3.8086': attribute type 10 has an invalid length. [ 2109.748565][T31999] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8086'. [ 2110.962074][T32016] netlink: 'syz.2.8090': attribute type 25 has an invalid length. [ 2111.553485][T32029] netlink: 'syz.0.8095': attribute type 10 has an invalid length. [ 2111.830267][T32040] netlink: 'syz.1.8099': attribute type 40 has an invalid length. [ 2111.949962][T32045] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.8100'. [ 2111.960659][T32045] netlink: zone id is out of range [ 2111.970724][T32045] netlink: zone id is out of range [ 2111.980171][T32045] netlink: zone id is out of range [ 2111.985834][T32045] netlink: zone id is out of range [ 2111.993643][T32045] netlink: get zone limit has 8 unknown bytes [ 2112.945347][T32066] netlink: 'syz.0.8103': attribute type 7 has an invalid length. [ 2114.573480][T32070] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.8105'. [ 2114.608757][T32069] netlink: 'syz.2.8105': attribute type 10 has an invalid length. [ 2114.617918][T32069] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8105'. [ 2114.705413][T32086] IPv6: Can't replace route, no match found [ 2114.735983][T32084] netlink: 'syz.1.8109': attribute type 21 has an invalid length. [ 2114.779484][T32092] mac80211_hwsim hwsim156 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2114.841967][T32089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8111'. [ 2117.762665][T32105] netlink: 'syz.1.8116': attribute type 10 has an invalid length. [ 2117.805024][T32126] tap1: tun_chr_ioctl cmd 1074025677 [ 2117.819012][T32126] tap1: linktype set to 0 [ 2118.181270][T32138] netlink: 'syz.3.8123': attribute type 3 has an invalid length. [ 2118.207598][T32137] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8124'. [ 2118.220257][T32138] netlink: 'syz.3.8123': attribute type 4 has an invalid length. [ 2118.228138][T32138] netlink: 'syz.3.8123': attribute type 6 has an invalid length. [ 2118.260032][T32138] netlink: 'syz.3.8123': attribute type 15 has an invalid length. [ 2118.355232][T32138] netlink: 'syz.3.8123': attribute type 16 has an invalid length. [ 2118.398455][T32138] netlink: 'syz.3.8123': attribute type 20 has an invalid length. [ 2118.449804][T32138] netlink: 'syz.3.8123': attribute type 21 has an invalid length. [ 2118.483797][T32138] netlink: 'syz.3.8123': attribute type 23 has an invalid length. [ 2118.522584][T32138] netlink: 'syz.3.8123': attribute type 25 has an invalid length. [ 2118.930142][T32150] IPv6: Can't replace route, no match found [ 2119.121854][T32151] mac80211_hwsim hwsim172 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2119.184266][T32151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8128'. [ 2119.742976][T32160] team0: Device wg1 is of different type [ 2121.748446][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 2122.036846][T32210] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.8144'. [ 2122.128992][T32210] openvswitch: netlink: Key type 386 is out of range max 32 [ 2123.562404][T32232] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.8152'. [ 2123.618695][T32232] bridge_slave_1: default FDB implementation only supports local addresses [ 2124.788162][T32267] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.8162'. [ 2124.957286][T32267] openvswitch: netlink: Key type 386 is out of range max 32 [ 2125.780105][T32300] validate_nla: 5 callbacks suppressed [ 2125.780126][T32300] netlink: 'syz.2.8168': attribute type 7 has an invalid length. [ 2125.884360][T32300] netlink: 'syz.2.8168': attribute type 1 has an invalid length. [ 2125.920853][T32300] netlink: 'syz.2.8168': attribute type 1 has an invalid length. [ 2125.932744][T32300] netlink: 'syz.2.8168': attribute type 2 has an invalid length. [ 2125.951206][T32300] netlink: 'syz.2.8168': attribute type 14 has an invalid length. [ 2125.969641][T32300] netlink: 'syz.2.8168': attribute type 3 has an invalid length. [ 2125.989154][T32300] netlink: 'syz.2.8168': attribute type 4 has an invalid length. [ 2126.012690][T32300] netlink: 'syz.2.8168': attribute type 6 has an invalid length. [ 2126.031405][T32300] netlink: 'syz.2.8168': attribute type 7 has an invalid length. [ 2126.050897][T32300] netlink: 'syz.2.8168': attribute type 5 has an invalid length. [ 2126.079081][T32300] netlink: 207236 bytes leftover after parsing attributes in process `syz.2.8168'. [ 2126.735143][T32312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8171'. [ 2127.022500][T32316] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8176'. [ 2127.071099][T32316] bridge_slave_1: default FDB implementation only supports local addresses [ 2127.273273][T32325] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8177'. [ 2133.613025][T32405] IPv6: Can't replace route, no match found [ 2133.728735][T32406] mac80211_hwsim hwsim167 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2134.645808][T32431] validate_nla: 6 callbacks suppressed [ 2134.645831][T32431] netlink: 'syz.4.8199': attribute type 21 has an invalid length. [ 2135.380274][T32441] FAULT_INJECTION: forcing a failure. [ 2135.380274][T32441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2135.381480][T32439] netlink: 'syz.3.8202': attribute type 10 has an invalid length. [ 2135.797485][T32441] CPU: 1 PID: 32441 Comm: syz.0.8201 Not tainted syzkaller #0 [ 2135.805124][T32441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2135.815340][T32441] Call Trace: [ 2135.818663][T32441] [ 2135.821643][T32441] dump_stack_lvl+0x188/0x24e [ 2135.826423][T32441] ? show_regs_print_info+0x12/0x12 [ 2135.831704][T32441] ? load_image+0x400/0x400 [ 2135.836268][T32441] ? __lock_acquire+0x7d10/0x7d10 [ 2135.841358][T32441] should_fail_ex+0x399/0x4d0 [ 2135.846098][T32441] _copy_to_user+0x2c/0x130 [ 2135.850660][T32441] perf_event_query_prog_array+0x2be/0x3b0 [ 2135.856617][T32441] ? perf_event_detach_bpf_prog+0x310/0x310 [ 2135.862556][T32441] ? perf_event_update_sibling_time+0x4c0/0x4c0 [ 2135.868933][T32441] ? tomoyo_path_number_perm+0x4fb/0x650 [ 2135.874621][T32441] ? __kmem_cache_free+0xb6/0x1f0 [ 2135.879712][T32441] perf_ioctl+0x242/0x2420 [ 2135.884184][T32441] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2135.889718][T32441] ? perf_poll+0x1b0/0x1b0 [ 2135.894323][T32441] ? __fget_files+0x28/0x4b0 [ 2135.898962][T32441] ? __fget_files+0x28/0x4b0 [ 2135.903639][T32441] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2135.908629][T32441] ? security_file_ioctl+0x7c/0xa0 [ 2135.913787][T32441] ? perf_poll+0x1b0/0x1b0 [ 2135.918262][T32441] __se_sys_ioctl+0xfa/0x170 [ 2135.923012][T32441] do_syscall_64+0x4c/0xa0 [ 2135.927586][T32441] ? clear_bhb_loop+0x60/0xb0 [ 2135.932318][T32441] ? clear_bhb_loop+0x60/0xb0 [ 2135.937045][T32441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2135.942984][T32441] RIP: 0033:0x7f2d5bd9c799 [ 2135.947443][T32441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2135.967099][T32441] RSP: 002b:00007f2d5cbd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2135.975572][T32441] RAX: ffffffffffffffda RBX: 00007f2d5c015fa0 RCX: 00007f2d5bd9c799 [ 2135.983768][T32441] RDX: 0000200000000080 RSI: 00000000c008240a RDI: 0000000000000005 [ 2135.991789][T32441] RBP: 00007f2d5cbd2090 R08: 0000000000000000 R09: 0000000000000000 [ 2135.999805][T32441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2136.007820][T32441] R13: 00007f2d5c016038 R14: 00007f2d5c015fa0 R15: 00007ffc9f999b98 [ 2136.015962][T32441] [ 2137.900102][T32439] team0: Device wg1 is of different type [ 2138.763472][T32474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8208'. [ 2140.038524][T32501] netlink: 'syz.0.8219': attribute type 10 has an invalid length. [ 2142.130393][T32515] FAULT_INJECTION: forcing a failure. [ 2142.130393][T32515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2142.178510][T32515] CPU: 1 PID: 32515 Comm: syz.2.8223 Not tainted syzkaller #0 [ 2142.186047][T32515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2142.196231][T32515] Call Trace: [ 2142.199568][T32515] [ 2142.202547][T32515] dump_stack_lvl+0x188/0x24e [ 2142.207292][T32515] ? show_regs_print_info+0x12/0x12 [ 2142.212614][T32515] ? load_image+0x400/0x400 [ 2142.217417][T32515] ? __lock_acquire+0x7d10/0x7d10 [ 2142.222678][T32515] should_fail_ex+0x399/0x4d0 [ 2142.227408][T32515] _copy_to_user+0x2c/0x130 [ 2142.231972][T32515] simple_read_from_buffer+0xe3/0x150 [ 2142.237628][T32515] proc_fail_nth_read+0x1a6/0x220 [ 2142.242696][T32515] ? proc_fault_inject_write+0x310/0x310 [ 2142.248547][T32515] ? vfs_read+0x2c9/0xa00 [ 2142.252936][T32515] ? proc_fault_inject_write+0x310/0x310 [ 2142.258651][T32515] vfs_read+0x2de/0xa00 [ 2142.262883][T32515] ? kernel_read+0x1e0/0x1e0 [ 2142.267501][T32515] ? __fget_files+0x28/0x4b0 [ 2142.272114][T32515] ? __fget_files+0x28/0x4b0 [ 2142.276726][T32515] ? __fget_files+0x43d/0x4b0 [ 2142.281440][T32515] ? __fdget_pos+0x2ae/0x360 [ 2142.286130][T32515] ? ksys_read+0x71/0x250 [ 2142.290500][T32515] ksys_read+0x14c/0x250 [ 2142.294770][T32515] ? vfs_write+0xa30/0xa30 [ 2142.299204][T32515] ? lockdep_hardirqs_on+0x94/0x140 [ 2142.304414][T32515] do_syscall_64+0x4c/0xa0 [ 2142.308848][T32515] ? clear_bhb_loop+0x60/0xb0 [ 2142.313539][T32515] ? clear_bhb_loop+0x60/0xb0 [ 2142.318259][T32515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2142.324164][T32515] RIP: 0033:0x7f62cc35cfce [ 2142.328693][T32515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2142.348314][T32515] RSP: 002b:00007f62cd2d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2142.356749][T32515] RAX: ffffffffffffffda RBX: 00007f62cd2d46c0 RCX: 00007f62cc35cfce [ 2142.364824][T32515] RDX: 000000000000000f RSI: 00007f62cd2d40a0 RDI: 0000000000000006 [ 2142.372978][T32515] RBP: 00007f62cd2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 2142.380962][T32515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2142.389113][T32515] R13: 00007f62cc616038 R14: 00007f62cc615fa0 R15: 00007ffe9f172268 [ 2142.397477][T32515] [ 2143.931258][T32542] netlink: 'syz.1.8232': attribute type 2 has an invalid length. [ 2144.785235][T32542] device 0 entered promiscuous mode [ 2145.618689][T32558] netlink: 'syz.2.8235': attribute type 10 has an invalid length. [ 2145.713764][T32558] team0: Device wg1 is of different type [ 2146.860151][T32578] device syzkaller0 entered promiscuous mode [ 2148.101660][T32594] FAULT_INJECTION: forcing a failure. [ 2148.101660][T32594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2148.130909][T32594] CPU: 0 PID: 32594 Comm: syz.0.8248 Not tainted syzkaller #0 [ 2148.138441][T32594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2148.148883][T32594] Call Trace: [ 2148.152202][T32594] [ 2148.155185][T32594] dump_stack_lvl+0x188/0x24e [ 2148.159906][T32594] ? show_regs_print_info+0x12/0x12 [ 2148.165150][T32594] ? load_image+0x400/0x400 [ 2148.169779][T32594] ? __lock_acquire+0x7d10/0x7d10 [ 2148.174860][T32594] ? __fget_files+0x28/0x4b0 [ 2148.179546][T32594] should_fail_ex+0x399/0x4d0 [ 2148.184356][T32594] _copy_from_user+0x2c/0x170 [ 2148.189167][T32594] generic_map_update_batch+0x4f3/0x810 [ 2148.194866][T32594] ? rcu_read_unlock+0xa0/0xa0 [ 2148.199685][T32594] ? __fdget+0x17c/0x200 [ 2148.203985][T32594] ? rcu_read_unlock+0xa0/0xa0 [ 2148.208796][T32594] bpf_map_do_batch+0x466/0x600 [ 2148.213701][T32594] __sys_bpf+0x6f7/0x780 [ 2148.218079][T32594] ? bpf_link_show_fdinfo+0x380/0x380 [ 2148.223619][T32594] ? lock_chain_count+0x20/0x20 [ 2148.228699][T32594] __x64_sys_bpf+0x78/0x90 [ 2148.233345][T32594] do_syscall_64+0x4c/0xa0 [ 2148.237800][T32594] ? clear_bhb_loop+0x60/0xb0 [ 2148.242609][T32594] ? clear_bhb_loop+0x60/0xb0 [ 2148.247433][T32594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2148.253364][T32594] RIP: 0033:0x7f2d5bd9c799 [ 2148.257811][T32594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2148.277556][T32594] RSP: 002b:00007f2d5cbd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2148.286026][T32594] RAX: ffffffffffffffda RBX: 00007f2d5c015fa0 RCX: 00007f2d5bd9c799 [ 2148.294037][T32594] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 2148.302132][T32594] RBP: 00007f2d5cbd2090 R08: 0000000000000000 R09: 0000000000000000 [ 2148.310143][T32594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2148.318241][T32594] R13: 00007f2d5c016038 R14: 00007f2d5c015fa0 R15: 00007ffc9f999b98 [ 2148.326278][T32594] [ 2152.845880][T32590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8246'. [ 2152.866669][T32592] netlink: 'syz.4.8247': attribute type 29 has an invalid length. [ 2152.898539][T32600] netlink: 'syz.0.8251': attribute type 10 has an invalid length. [ 2153.341661][T32607] netlink: 'syz.0.8262': attribute type 10 has an invalid length. [ 2154.649677][T32627] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8258'. [ 2154.701334][T32627] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8258'. [ 2155.072754][T32631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8258'. [ 2155.158720][T32637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8258'. [ 2156.288805][T32646] netlink: 'syz.2.8263': attribute type 10 has an invalid length. [ 2156.330769][T32646] team0: Device wg1 is of different type [ 2156.770259][T32664] netlink: 'syz.1.8269': attribute type 11 has an invalid length. [ 2156.798477][T32664] netlink: 'syz.1.8269': attribute type 6 has an invalid length. [ 2156.806635][T32664] netlink: 125060 bytes leftover after parsing attributes in process `syz.1.8269'. [ 2156.863409][T32663] netlink: 'syz.2.8270': attribute type 10 has an invalid length. [ 2156.913958][T32663] team0: Device ipvlan1 failed to register rx_handler [ 2157.386299][T32676] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2157.622562][T32685] netlink: 'syz.3.8275': attribute type 21 has an invalid length. [ 2157.701126][T32685] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8275'. [ 2157.843080][T32685] netlink: 'syz.3.8275': attribute type 4 has an invalid length. [ 2158.135717][T32691] netlink: 'syz.4.8278': attribute type 10 has an invalid length. [ 2158.313711][T32691] device hsr0 entered promiscuous mode [ 2158.612511][T32691] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2158.643655][T32691] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2158.695102][T32691] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2158.731552][T32691] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2159.241376][T32701] netlink: 'syz.1.8281': attribute type 10 has an invalid length. [ 2160.999590][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.006343][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.776978][T32732] netlink: 'syz.2.8289': attribute type 6 has an invalid length. [ 2161.852375][T32732] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8289'. [ 2161.990400][T32731] netlink: 'syz.1.8288': attribute type 10 has an invalid length. [ 2162.066011][T32741] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8291'. [ 2162.365560][T32736] delete_channel: no stack [ 2164.512677][ T315] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2164.542218][ T315] device syzkaller0 entered promiscuous mode [ 2165.671361][ T318] delete_channel: no stack [ 2165.688545][ T319] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8306'. [ 2168.685500][ T373] netlink: 'syz.0.8320': attribute type 4 has an invalid length. [ 2168.737558][ T373] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8320'. [ 2169.563691][ T385] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8324'. [ 2169.612019][ T383] delete_channel: no stack [ 2170.201243][ T398] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.8328'. [ 2170.344368][ T398] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2170.610260][ T404] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.8331'. [ 2171.292194][ T417] netlink: 'syz.3.8335': attribute type 4 has an invalid length. [ 2171.340707][ T417] netlink: 'syz.3.8335': attribute type 7 has an invalid length. [ 2171.421213][ T420] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.8336'. [ 2173.561039][ T432] netlink: 'syz.3.8340': attribute type 21 has an invalid length. [ 2173.576211][ T432] netlink: 'syz.3.8340': attribute type 1 has an invalid length. [ 2173.608950][ T432] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8340'. [ 2173.725841][ T434] netlink: 'syz.1.8342': attribute type 22 has an invalid length. [ 2173.768504][ T434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8342'. [ 2175.122307][ T472] FAULT_INJECTION: forcing a failure. [ 2175.122307][ T472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2175.237564][ T472] CPU: 1 PID: 472 Comm: syz.2.8352 Not tainted syzkaller #0 [ 2175.245010][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2175.255259][ T472] Call Trace: [ 2175.258562][ T472] [ 2175.261502][ T472] dump_stack_lvl+0x188/0x24e [ 2175.266207][ T472] ? show_regs_print_info+0x12/0x12 [ 2175.271435][ T472] ? load_image+0x400/0x400 [ 2175.275958][ T472] ? __lock_acquire+0x7d10/0x7d10 [ 2175.281002][ T472] should_fail_ex+0x399/0x4d0 [ 2175.285696][ T472] _copy_from_user+0x2c/0x170 [ 2175.290476][ T472] iovec_from_user+0x143/0x360 [ 2175.295265][ T472] __import_iovec+0x6d/0x500 [ 2175.299872][ T472] import_iovec+0x6f/0xa0 [ 2175.304225][ T472] ___sys_sendmsg+0x252/0x360 [ 2175.308926][ T472] ? __sys_sendmsg+0x290/0x290 [ 2175.313900][ T472] ? __lock_acquire+0x7d10/0x7d10 [ 2175.318965][ T472] __se_sys_sendmsg+0x1bb/0x2a0 [ 2175.323840][ T472] ? ct_nmi_exit+0x145/0x1c0 [ 2175.328446][ T472] ? __x64_sys_sendmsg+0x80/0x80 [ 2175.333418][ T472] ? lockdep_hardirqs_on+0x94/0x140 [ 2175.338630][ T472] do_syscall_64+0x4c/0xa0 [ 2175.343059][ T472] ? clear_bhb_loop+0x60/0xb0 [ 2175.347744][ T472] ? clear_bhb_loop+0x60/0xb0 [ 2175.352529][ T472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2175.358457][ T472] RIP: 0033:0x7f62cc39c799 [ 2175.362915][ T472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2175.382714][ T472] RSP: 002b:00007f62cd2b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2175.391147][ T472] RAX: ffffffffffffffda RBX: 00007f62cc616090 RCX: 00007f62cc39c799 [ 2175.399225][ T472] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d [ 2175.407292][ T472] RBP: 00007f62cd2b3090 R08: 0000000000000000 R09: 0000000000000000 [ 2175.415282][ T472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2175.423351][ T472] R13: 00007f62cc616128 R14: 00007f62cc616090 R15: 00007ffe9f172268 [ 2175.431352][ T472] [ 2176.528319][ T487] syz.1.8359[487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2176.528469][ T487] syz.1.8359[487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2176.641736][ T491] netlink: 'syz.0.8361': attribute type 10 has an invalid length. [ 2177.360332][ T506] netlink: 'syz.2.8364': attribute type 21 has an invalid length. [ 2177.435213][ T506] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8364'. [ 2178.028075][ T521] FAULT_INJECTION: forcing a failure. [ 2178.028075][ T521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.065733][ T521] CPU: 1 PID: 521 Comm: syz.1.8368 Not tainted syzkaller #0 [ 2178.073091][ T521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2178.083467][ T521] Call Trace: [ 2178.086885][ T521] [ 2178.089854][ T521] dump_stack_lvl+0x188/0x24e [ 2178.094680][ T521] ? show_regs_print_info+0x12/0x12 [ 2178.099937][ T521] ? load_image+0x400/0x400 [ 2178.104605][ T521] ? __lock_acquire+0x7d10/0x7d10 [ 2178.109682][ T521] should_fail_ex+0x399/0x4d0 [ 2178.114400][ T521] _copy_from_iter+0x1c0/0x1130 [ 2178.119483][ T521] ? rcu_is_watching+0x11/0xa0 [ 2178.124370][ T521] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2178.130549][ T521] ? copyout_mc+0x110/0x110 [ 2178.135165][ T521] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2178.141338][ T521] ? __check_object_size+0x500/0xa40 [ 2178.146691][ T521] kernfs_fop_write_iter+0x1a0/0x520 [ 2178.152173][ T521] ? __get_task_ioprio+0x180/0x250 [ 2178.157302][ T521] vfs_write+0x4b1/0xa30 [ 2178.161564][ T521] ? file_end_write+0x250/0x250 [ 2178.166450][ T521] ? __fdget_pos+0x2ae/0x360 [ 2178.171147][ T521] ? ksys_write+0x71/0x250 [ 2178.175578][ T521] ksys_write+0x14c/0x250 [ 2178.179926][ T521] ? __ia32_sys_read+0x80/0x80 [ 2178.184743][ T521] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2178.190790][ T521] do_syscall_64+0x4c/0xa0 [ 2178.195307][ T521] ? clear_bhb_loop+0x60/0xb0 [ 2178.200000][ T521] ? clear_bhb_loop+0x60/0xb0 [ 2178.204688][ T521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2178.210773][ T521] RIP: 0033:0x7f539319c799 [ 2178.215197][ T521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2178.235012][ T521] RSP: 002b:00007f5393f95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2178.243458][ T521] RAX: ffffffffffffffda RBX: 00007f5393415fa0 RCX: 00007f539319c799 [ 2178.251654][ T521] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000006 [ 2178.259736][ T521] RBP: 00007f5393f95090 R08: 0000000000000000 R09: 0000000000000000 [ 2178.268005][ T521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2178.276160][ T521] R13: 00007f5393416038 R14: 00007f5393415fa0 R15: 00007ffc5d8747c8 [ 2178.284160][ T521] [ 2178.521754][ T530] netlink: 'syz.0.8371': attribute type 7 has an invalid length. [ 2178.618074][ T530] netlink: 208404 bytes leftover after parsing attributes in process `syz.0.8371'. [ 2178.667948][ T540] netlink: 'syz.0.8371': attribute type 10 has an invalid length. [ 2179.102732][ T542] netlink: 'syz.3.8374': attribute type 29 has an invalid length. [ 2179.206418][ T542] netlink: 'syz.3.8374': attribute type 29 has an invalid length. [ 2181.841411][ T562] netlink: 'syz.3.8380': attribute type 2 has an invalid length. [ 2181.880162][ T562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8380'. [ 2182.803707][ T589] netlink: 'syz.4.8389': attribute type 1 has an invalid length. [ 2182.819289][ T589] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.8389'. [ 2183.073952][ T597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8392'. [ 2183.112413][ T597] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8392'. [ 2183.541189][ T608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8394'. [ 2183.663031][ T610] netlink: 'syz.4.8395': attribute type 17 has an invalid length. [ 2183.729356][ T610] netlink: 'syz.4.8395': attribute type 41 has an invalid length. [ 2183.790426][ T610] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8395'. [ 2183.913685][ T616] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8397'. [ 2184.641626][ T630] netlink: 'syz.4.8401': attribute type 21 has an invalid length. [ 2184.718153][ T630] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8401'. [ 2184.858444][ T630] netlink: 'syz.4.8401': attribute type 4 has an invalid length. [ 2184.974058][ T630] netlink: 'syz.4.8401': attribute type 5 has an invalid length. [ 2184.998492][ T630] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8401'. [ 2185.475548][ T641] netlink: 'syz.0.8414': attribute type 1 has an invalid length. [ 2185.530175][ T641] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.8414'. [ 2185.626402][ T642] netlink: 'syz.2.8404': attribute type 10 has an invalid length. [ 2185.763597][ T642] device geneve0 entered promiscuous mode [ 2187.008063][ T642] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2187.037231][ T644] netlink: 'syz.4.8405': attribute type 22 has an invalid length. [ 2187.077512][ T644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8405'. [ 2187.117571][ T650] netlink: 'syz.3.8406': attribute type 10 has an invalid length. [ 2187.158009][ T650] team0: Device wg1 is of different type [ 2187.201705][ T656] netlink: 'syz.1.8407': attribute type 10 has an invalid length. [ 2187.304690][ T660] netlink: 'syz.4.8408': attribute type 27 has an invalid length. [ 2187.335359][ T660] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8408'. [ 2187.732594][ T673] FAULT_INJECTION: forcing a failure. [ 2187.732594][ T673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2187.766901][ T673] CPU: 1 PID: 673 Comm: syz.4.8413 Not tainted syzkaller #0 [ 2187.774530][ T673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2187.784628][ T673] Call Trace: [ 2187.788012][ T673] [ 2187.790975][ T673] dump_stack_lvl+0x188/0x24e [ 2187.795703][ T673] ? show_regs_print_info+0x12/0x12 [ 2187.800969][ T673] ? load_image+0x400/0x400 [ 2187.805513][ T673] ? __lock_acquire+0x7d10/0x7d10 [ 2187.810769][ T673] should_fail_ex+0x399/0x4d0 [ 2187.815498][ T673] _copy_from_user+0x2c/0x170 [ 2187.820369][ T673] ___sys_sendmsg+0x1c3/0x360 [ 2187.825101][ T673] ? __sys_sendmsg+0x290/0x290 [ 2187.830026][ T673] ? __lock_acquire+0x7d10/0x7d10 [ 2187.835118][ T673] __se_sys_sendmsg+0x1bb/0x2a0 [ 2187.840016][ T673] ? __x64_sys_sendmsg+0x80/0x80 [ 2187.845195][ T673] ? lockdep_hardirqs_on+0x94/0x140 [ 2187.850521][ T673] do_syscall_64+0x4c/0xa0 [ 2187.854975][ T673] ? clear_bhb_loop+0x60/0xb0 [ 2187.859773][ T673] ? clear_bhb_loop+0x60/0xb0 [ 2187.864573][ T673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2187.870507][ T673] RIP: 0033:0x7f7ff819c799 [ 2187.874987][ T673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2187.894735][ T673] RSP: 002b:00007f7ff910e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2187.903279][ T673] RAX: ffffffffffffffda RBX: 00007f7ff8415fa0 RCX: 00007f7ff819c799 [ 2187.911482][ T673] RDX: 0000000004008050 RSI: 0000200000000280 RDI: 0000000000000003 [ 2187.919494][ T673] RBP: 00007f7ff910e090 R08: 0000000000000000 R09: 0000000000000000 [ 2187.928036][ T673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.936139][ T673] R13: 00007f7ff8416038 R14: 00007f7ff8415fa0 R15: 00007fffe7fb31a8 [ 2187.944438][ T673] [ 2188.812713][ T692] netlink: 'syz.0.8422': attribute type 10 has an invalid length. [ 2189.142226][ T699] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.8426'. [ 2192.344316][ T733] validate_nla: 2 callbacks suppressed [ 2192.344354][ T733] netlink: 'syz.1.8436': attribute type 2 has an invalid length. [ 2192.386092][ T733] netlink: 'syz.1.8436': attribute type 1 has an invalid length. [ 2192.422083][ T733] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.8436'. [ 2192.542735][ T735] netlink: 'syz.3.8437': attribute type 10 has an invalid length. [ 2193.382152][ T735] team0: Device wg1 is of different type [ 2193.977571][ T755] netlink: 'syz.2.8443': attribute type 10 has an invalid length. [ 2194.316017][ T768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8446'. [ 2194.566854][ T755] team0: Device wg1 is of different type [ 2194.610656][ T763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8446'. [ 2194.638785][ T763] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8446'. [ 2195.094122][ T788] netlink: 'syz.3.8454': attribute type 29 has an invalid length. [ 2196.424944][ T789] tipc: Started in network mode [ 2196.440886][ T789] tipc: Node identity 9215a268, cluster identity 4711 [ 2196.459063][ T789] tipc: Node number set to 2450891368 [ 2196.493723][ T788] netlink: 'syz.3.8454': attribute type 29 has an invalid length. [ 2197.315327][ T806] netlink: 'syz.2.8457': attribute type 29 has an invalid length. [ 2197.391141][ T806] netlink: 'syz.2.8457': attribute type 29 has an invalid length. [ 2197.448971][ T807] netlink: 'syz.2.8457': attribute type 29 has an invalid length. [ 2202.335059][ T852] FAULT_INJECTION: forcing a failure. [ 2202.335059][ T852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2202.375201][ T852] CPU: 0 PID: 852 Comm: syz.3.8469 Not tainted syzkaller #0 [ 2202.382706][ T852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2202.392834][ T852] Call Trace: [ 2202.396169][ T852] [ 2202.399162][ T852] dump_stack_lvl+0x188/0x24e [ 2202.403922][ T852] ? show_regs_print_info+0x12/0x12 [ 2202.409176][ T852] ? load_image+0x400/0x400 [ 2202.413728][ T852] ? __lock_acquire+0x7d10/0x7d10 [ 2202.418823][ T852] should_fail_ex+0x399/0x4d0 [ 2202.423552][ T852] _copy_to_user+0x2c/0x130 [ 2202.428195][ T852] bpf_verifier_vlog+0x172/0x390 [ 2202.433287][ T852] __btf_verifier_log+0xdf/0x130 [ 2202.438284][ T852] ? btf_check_sec_info+0x350/0x350 [ 2202.443531][ T852] ? __virt_addr_valid+0x188/0x540 [ 2202.448688][ T852] ? btf_parse_hdr+0x1e0/0x7e0 [ 2202.453512][ T852] btf_parse_hdr+0x406/0x7e0 [ 2202.458156][ T852] btf_new_fd+0x3c6/0x780 [ 2202.462648][ T852] __sys_bpf+0x612/0x780 [ 2202.466970][ T852] ? bpf_link_show_fdinfo+0x380/0x380 [ 2202.472443][ T852] ? lock_chain_count+0x20/0x20 [ 2202.477724][ T852] __x64_sys_bpf+0x78/0x90 [ 2202.482185][ T852] do_syscall_64+0x4c/0xa0 [ 2202.486736][ T852] ? clear_bhb_loop+0x60/0xb0 [ 2202.491462][ T852] ? clear_bhb_loop+0x60/0xb0 [ 2202.496286][ T852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2202.502216][ T852] RIP: 0033:0x7fb23cd9c799 [ 2202.506665][ T852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2202.526512][ T852] RSP: 002b:00007fb23dc00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2202.534969][ T852] RAX: ffffffffffffffda RBX: 00007fb23d015fa0 RCX: 00007fb23cd9c799 [ 2202.543063][ T852] RDX: 0000000000000028 RSI: 0000200000000580 RDI: 0000000000000012 [ 2202.551080][ T852] RBP: 00007fb23dc00090 R08: 0000000000000000 R09: 0000000000000000 [ 2202.559086][ T852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2202.567208][ T852] R13: 00007fb23d016038 R14: 00007fb23d015fa0 R15: 00007fff4ac3db78 [ 2202.575357][ T852] [ 2203.601277][ T857] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.8471'. [ 2204.966609][ T866] netlink: 'syz.3.8473': attribute type 29 has an invalid length. [ 2205.043302][ T868] netlink: 'syz.1.8472': attribute type 10 has an invalid length. [ 2205.168876][ T866] netlink: 'syz.3.8473': attribute type 29 has an invalid length. [ 2205.740958][ T870] netlink: 'syz.3.8473': attribute type 29 has an invalid length. [ 2208.804630][ T896] delete_channel: no stack [ 2209.253042][ T909] netlink: 'syz.2.8484': attribute type 11 has an invalid length. [ 2209.293817][ T909] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8484'. [ 2210.481110][ T931] netlink: 'syz.4.8487': attribute type 10 has an invalid length. [ 2210.983797][ T929] netlink: 'syz.2.8489': attribute type 10 has an invalid length. [ 2211.682328][ T929] team0: Device wg1 is of different type [ 2212.136322][ T918] netlink: 'syz.3.8482': attribute type 13 has an invalid length. [ 2212.207854][ T918] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8482'. [ 2212.264428][ T918] syz_tun: refused to change device tx_queue_len [ 2212.308681][ T918] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2212.420976][ T942] netlink: 'syz.3.8482': attribute type 13 has an invalid length. [ 2212.488950][ T942] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8482'. [ 2212.539660][ T942] syz_tun: refused to change device tx_queue_len [ 2212.546110][ T942] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2212.678483][ T943] netlink: 'syz.3.8482': attribute type 10 has an invalid length. [ 2212.720114][ T943] team0: Port device netdevsim0 added [ 2212.942629][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 2216.363542][ T993] netlink: 'syz.2.8500': attribute type 10 has an invalid length. [ 2218.442172][ T993] team0: Device wg1 is of different type [ 2218.790887][ T984] delete_channel: no stack [ 2219.098738][ T1006] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.8502'. [ 2219.317252][ T1013] device veth0_to_team entered promiscuous mode [ 2219.615209][ T1014] netlink: 'syz.2.8505': attribute type 10 has an invalid length. [ 2220.083312][ T1014] team0: Port device geneve1 added [ 2220.138417][ T1032] netlink: 'syz.1.8506': attribute type 21 has an invalid length. [ 2220.187300][ T1032] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8506'. [ 2221.688615][ T1063] netlink: 'syz.3.8515': attribute type 10 has an invalid length. [ 2222.022299][ T1063] team0: Device wg1 is of different type [ 2222.197531][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.204408][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.934446][ T1075] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2223.000605][ T1075] device syzkaller0 entered promiscuous mode [ 2228.400418][ T1083] netlink: 'syz.4.8507': attribute type 13 has an invalid length. [ 2228.408644][ T1083] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8507'. [ 2228.421919][ T1083] syz_tun: refused to change device tx_queue_len [ 2228.428475][ T1083] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2228.462923][ T1084] netlink: 'syz.4.8507': attribute type 13 has an invalid length. [ 2228.488329][ T1084] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8507'. [ 2228.519461][ T1084] syz_tun: refused to change device tx_queue_len [ 2228.525955][ T1084] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2228.568344][ T1085] netlink: 'syz.4.8507': attribute type 10 has an invalid length. [ 2230.226491][ T1095] delete_channel: no stack [ 2230.607288][ T1128] netlink: 'syz.3.8523': attribute type 29 has an invalid length. [ 2230.678744][ T1128] netlink: 'syz.3.8523': attribute type 29 has an invalid length. [ 2230.692595][ T1134] netlink: 'syz.3.8523': attribute type 29 has an invalid length. [ 2230.710767][ T1132] FAULT_INJECTION: forcing a failure. [ 2230.710767][ T1132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2230.718548][ T1133] netlink: 'syz.1.8524': attribute type 19 has an invalid length. [ 2230.770013][ T1132] CPU: 0 PID: 1132 Comm: syz.0.8525 Not tainted syzkaller #0 [ 2230.777645][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2230.787964][ T1132] Call Trace: [ 2230.791284][ T1132] [ 2230.794338][ T1132] dump_stack_lvl+0x188/0x24e [ 2230.799156][ T1132] ? show_regs_print_info+0x12/0x12 [ 2230.804405][ T1132] ? load_image+0x400/0x400 [ 2230.809037][ T1132] ? __lock_acquire+0x7d10/0x7d10 [ 2230.814097][ T1132] ? perf_trace_lock+0xf8/0x390 [ 2230.818992][ T1132] should_fail_ex+0x399/0x4d0 [ 2230.823707][ T1132] _copy_from_user+0x2c/0x170 [ 2230.828434][ T1132] ___sys_sendmsg+0x1c3/0x360 [ 2230.833606][ T1132] ? __sys_sendmsg+0x290/0x290 [ 2230.838533][ T1132] ? ktime_get_real_ts64+0x440/0x440 [ 2230.843988][ T1132] __se_sys_sendmsg+0x1bb/0x2a0 [ 2230.848884][ T1132] ? __x64_sys_sendmsg+0x80/0x80 [ 2230.853891][ T1132] ? lockdep_hardirqs_on+0x94/0x140 [ 2230.859129][ T1132] do_syscall_64+0x4c/0xa0 [ 2230.863773][ T1132] ? clear_bhb_loop+0x60/0xb0 [ 2230.868489][ T1132] ? clear_bhb_loop+0x60/0xb0 [ 2230.873292][ T1132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2230.879259][ T1132] RIP: 0033:0x7f2d5bd9c799 [ 2230.883751][ T1132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2230.903755][ T1132] RSP: 002b:00007f2d5cbd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2230.912314][ T1132] RAX: ffffffffffffffda RBX: 00007f2d5c015fa0 RCX: 00007f2d5bd9c799 [ 2230.920347][ T1132] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000007 [ 2230.928584][ T1132] RBP: 00007f2d5cbd2090 R08: 0000000000000000 R09: 0000000000000000 [ 2230.937035][ T1132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.945065][ T1132] R13: 00007f2d5c016038 R14: 00007f2d5c015fa0 R15: 00007ffc9f999b98 [ 2230.953112][ T1132] [ 2231.479604][ T1137] netlink: 'syz.0.8525': attribute type 3 has an invalid length. [ 2231.780760][ T1137] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.8525'. [ 2231.821533][ T1141] netlink: 'syz.1.8528': attribute type 10 has an invalid length. [ 2231.840641][ T1142] netlink: 'syz.3.8526': attribute type 3 has an invalid length. [ 2231.861850][ T1142] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.8526'. [ 2231.991002][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 2233.738907][ T1182] netlink: 'syz.2.8537': attribute type 11 has an invalid length. [ 2234.019624][ T1190] netlink: 'syz.1.8540': attribute type 2 has an invalid length. [ 2234.058374][ T1190] netlink: 'syz.1.8540': attribute type 1 has an invalid length. [ 2234.187876][ T1199] netlink: 'syz.1.8540': attribute type 10 has an invalid length. [ 2234.324799][ T1199] device veth0_macvtap left promiscuous mode [ 2235.379100][ T1217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2235.553719][ T1217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2235.899846][ T1217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2235.943881][ T1217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2237.062485][ T1232] netlink: 'syz.0.8544': attribute type 10 has an invalid length. [ 2238.398766][ T1276] netlink: 'syz.3.8552': attribute type 10 has an invalid length. [ 2239.125105][ T1276] team0: Device wg1 is of different type [ 2240.133865][ T1296] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8559'. [ 2240.621153][ T1303] netlink: 'syz.3.8562': attribute type 1 has an invalid length. [ 2240.658353][ T1303] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.8562'. [ 2242.445611][ T1334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8569'. [ 2247.550834][ T1334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8569'. [ 2247.846824][ T1339] netlink: 'syz.1.8570': attribute type 10 has an invalid length. [ 2248.032679][ T1348] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.8574'. [ 2248.133007][ T1349] netlink: 'syz.2.8574': attribute type 39 has an invalid length. [ 2248.401015][ T1349] device hsr_slave_1 left promiscuous mode [ 2248.960994][ T1366] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2249.233582][ T1366] device syzkaller0 entered promiscuous mode [ 2250.227263][ T1388] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8587'. [ 2254.988376][ T1370] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8581'. [ 2254.997830][ T1388] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8587'. [ 2255.592806][ T1411] netlink: 'syz.1.8594': attribute type 16 has an invalid length. [ 2255.613871][ T1411] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8594'. [ 2255.780125][ T1417] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.8593'. [ 2256.138683][ T1420] netlink: 'syz.0.8597': attribute type 10 has an invalid length. [ 2256.281306][ T1422] netlink: 'syz.1.8599': attribute type 10 has an invalid length. [ 2256.313343][ T1424] tun0: tun_chr_ioctl cmd 1074025675 [ 2256.345690][ T1424] tun0: persist enabled [ 2256.376634][ T1427] tun0: tun_chr_ioctl cmd 1074025675 [ 2256.386754][ T1427] tun0: persist enabled [ 2256.474726][ T1429] netlink: 'syz.2.8600': attribute type 1 has an invalid length. [ 2256.620678][ T1429] netlink: 'syz.2.8600': attribute type 10 has an invalid length. [ 2256.720939][ T4285] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2256.907282][ T1429] device veth1_macvtap left promiscuous mode [ 2257.675363][ T1447] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.8607'. [ 2258.114584][ T1447] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.8607'. [ 2258.289535][ T1447] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8607'. [ 2258.344235][ T1451] tun0: tun_chr_ioctl cmd 1074025675 [ 2258.358341][ T1451] tun0: persist enabled [ 2258.393657][ T1453] tun0: tun_chr_ioctl cmd 1074025675 [ 2258.419675][ T1453] tun0: persist enabled [ 2258.800474][ T1459] netlink: 'syz.3.8608': attribute type 10 has an invalid length. [ 2258.932141][ T4285] Bluetooth: hci3: command 0x2016 tx timeout [ 2259.942848][ T1474] netlink: 'syz.0.8622': attribute type 12 has an invalid length. [ 2260.085299][ T1474] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8622'. [ 2260.202121][ T1479] netlink: 'syz.4.8612': attribute type 10 has an invalid length. [ 2260.238311][ T1478] netlink: 'syz.3.8613': attribute type 10 has an invalid length. [ 2260.411173][ T1478] team0: Device wg1 is of different type [ 2261.018627][ T1482] mac80211_hwsim hwsim172 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2261.365082][T14244] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2261.916196][ T1500] netlink: 'syz.0.8620': attribute type 1 has an invalid length. [ 2261.973216][ T1496] netlink: 'syz.3.8619': attribute type 10 has an invalid length. [ 2262.402458][ T1496] team0: Device wg1 is of different type [ 2262.626285][ T1504] netlink: 'syz.0.8620': attribute type 10 has an invalid length. [ 2262.649947][ T1504] device veth1_macvtap left promiscuous mode [ 2262.849151][ T1508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8623'. [ 2262.876546][ T1498] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8617'. [ 2263.295867][ T1526] netlink: 'syz.2.8627': attribute type 10 has an invalid length. [ 2263.428705][T14244] Bluetooth: hci1: command 0x2016 tx timeout [ 2264.442980][ T1526] team0: Device wg1 is of different type [ 2266.816241][ T1550] netlink: 'syz.3.8634': attribute type 10 has an invalid length. [ 2266.956542][ T1550] team0: Device wg1 is of different type [ 2267.087313][ T1548] netlink: 'syz.1.8637': attribute type 1 has an invalid length. [ 2267.309652][ T1553] netlink: 'syz.1.8637': attribute type 10 has an invalid length. [ 2267.398951][ T1553] device veth1_macvtap left promiscuous mode [ 2267.899908][ T1565] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8640'. [ 2268.420489][ T1574] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8644'. [ 2269.159576][ T1574] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2269.817797][ T1595] netlink: 'syz.2.8649': attribute type 12 has an invalid length. [ 2269.920274][ T1595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8649'. [ 2271.557623][ T1621] FAULT_INJECTION: forcing a failure. [ 2271.557623][ T1621] name failslab, interval 1, probability 0, space 0, times 0 [ 2271.626161][ T1621] CPU: 0 PID: 1621 Comm: syz.3.8658 Not tainted syzkaller #0 [ 2271.633623][ T1621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2271.643722][ T1621] Call Trace: [ 2271.647059][ T1621] [ 2271.650051][ T1621] dump_stack_lvl+0x188/0x24e [ 2271.654784][ T1621] ? show_regs_print_info+0x12/0x12 [ 2271.660090][ T1621] ? load_image+0x400/0x400 [ 2271.664641][ T1621] ? __might_sleep+0xd0/0xd0 [ 2271.669275][ T1621] ? __lock_acquire+0x7d10/0x7d10 [ 2271.674344][ T1621] should_fail_ex+0x399/0x4d0 [ 2271.679156][ T1621] should_failslab+0x5/0x20 [ 2271.683704][ T1621] slab_pre_alloc_hook+0x59/0x310 [ 2271.688771][ T1621] ? tomoyo_encode+0x27e/0x540 [ 2271.691724][ T1627] netlink: 'syz.0.8661': attribute type 10 has an invalid length. [ 2271.693564][ T1621] __kmem_cache_alloc_node+0x4f/0x260 [ 2271.693599][ T1621] ? tomoyo_encode+0x27e/0x540 [ 2271.693625][ T1621] __kmalloc+0xa0/0x240 [ 2271.693657][ T1621] tomoyo_encode+0x27e/0x540 [ 2271.693689][ T1621] tomoyo_realpath_from_path+0x58e/0x5d0 [ 2271.716093][ T1630] netlink: 'syz.1.8660': attribute type 29 has an invalid length. [ 2271.720543][ T1621] ? tomoyo_path_number_perm+0x205/0x650 [ 2271.720581][ T1621] tomoyo_path_number_perm+0x22f/0x650 [ 2271.720609][ T1621] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2271.720635][ T1621] ? ksys_write+0x1c0/0x250 [ 2271.720662][ T1621] ? common_file_perm+0x171/0x1c0 [ 2271.720718][ T1621] ? __fget_files+0x28/0x4b0 [ 2271.720742][ T1621] ? __fget_files+0x28/0x4b0 [ 2271.720780][ T1621] security_file_ioctl+0x6c/0xa0 [ 2271.720809][ T1621] __se_sys_ioctl+0x48/0x170 [ 2271.720838][ T1621] do_syscall_64+0x4c/0xa0 [ 2271.720863][ T1621] ? clear_bhb_loop+0x60/0xb0 [ 2271.720886][ T1621] ? clear_bhb_loop+0x60/0xb0 [ 2271.720911][ T1621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2271.720934][ T1621] RIP: 0033:0x7fb23cd9c799 [ 2271.720954][ T1621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2271.720971][ T1621] RSP: 002b:00007fb23dc00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2271.720996][ T1621] RAX: ffffffffffffffda RBX: 00007fb23d015fa0 RCX: 00007fb23cd9c799 [ 2271.721011][ T1621] RDX: 0000200000000000 RSI: 0000000000008943 RDI: 0000000000000003 [ 2271.721026][ T1621] RBP: 00007fb23dc00090 R08: 0000000000000000 R09: 0000000000000000 [ 2271.721048][ T1621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2271.721060][ T1621] R13: 00007fb23d016038 R14: 00007fb23d015fa0 R15: 00007fff4ac3db78 [ 2271.721092][ T1621] [ 2271.842075][ T1625] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8660'. [ 2271.847840][ T1621] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2271.905098][ T1624] netlink: 'syz.2.8657': attribute type 10 has an invalid length. [ 2272.101367][ T1624] team0: Device wg1 is of different type [ 2272.299002][ T1630] netlink: 'syz.1.8660': attribute type 29 has an invalid length. [ 2272.354927][ T1635] netlink: 'syz.4.8663': attribute type 1 has an invalid length. [ 2272.672146][ T1641] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.8666'. [ 2273.581625][ T1659] FAULT_INJECTION: forcing a failure. [ 2273.581625][ T1659] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.644079][ T1659] CPU: 1 PID: 1659 Comm: syz.0.8674 Not tainted syzkaller #0 [ 2273.651533][ T1659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2273.661629][ T1659] Call Trace: [ 2273.664948][ T1659] [ 2273.667920][ T1659] dump_stack_lvl+0x188/0x24e [ 2273.672649][ T1659] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2273.678863][ T1659] ? show_regs_print_info+0x12/0x12 [ 2273.684189][ T1659] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2273.690473][ T1659] ? dump_stack+0x5/0x12 [ 2273.694777][ T1659] should_fail_ex+0x399/0x4d0 [ 2273.699586][ T1659] should_failslab+0x5/0x20 [ 2273.704128][ T1659] slab_pre_alloc_hook+0x59/0x310 [ 2273.709191][ T1659] ? lockdep_hardirqs_on+0x94/0x140 [ 2273.714519][ T1659] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2273.720285][ T1659] __kmem_cache_alloc_node+0x4f/0x260 [ 2273.725797][ T1659] ? tomoyo_path_perm+0x244/0x610 [ 2273.731026][ T1659] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2273.736801][ T1659] __kmalloc+0xa0/0x240 [ 2273.741015][ T1659] tomoyo_realpath_from_path+0xdf/0x5d0 [ 2273.746706][ T1659] ? __sanitizer_cov_trace_pc+0x2c/0x60 [ 2273.752390][ T1659] ? tomoyo_path_perm+0x244/0x610 [ 2273.757473][ T1659] tomoyo_path_perm+0x26f/0x610 [ 2273.762460][ T1659] ? tomoyo_path_permission+0x380/0x380 [ 2273.768233][ T1659] ? ct_irq_enter_irqson+0x170/0x170 [ 2273.773601][ T1659] ? lock_chain_count+0x20/0x20 [ 2273.778590][ T1659] ? rcu_is_watching+0x11/0xa0 [ 2273.783491][ T1659] ? lockdep_hardirqs_on+0x94/0x140 [ 2273.788740][ T1659] tomoyo_path_unlink+0xa7/0xf0 [ 2273.793653][ T1659] ? tomoyo_path_truncate+0x20/0x20 [ 2273.798992][ T1659] ? tomoyo_path_unlink+0x1/0xf0 [ 2273.803976][ T1659] security_path_unlink+0xd8/0x130 [ 2273.809223][ T1659] do_unlinkat+0x2af/0x580 [ 2273.813685][ T1659] ? fsnotify_link_count+0xf0/0xf0 [ 2273.818945][ T1659] ? getname_flags+0x206/0x500 [ 2273.823849][ T1659] __x64_sys_unlink+0x45/0x50 [ 2273.828575][ T1659] do_syscall_64+0x4c/0xa0 [ 2273.833039][ T1659] ? clear_bhb_loop+0x60/0xb0 [ 2273.837754][ T1659] ? clear_bhb_loop+0x60/0xb0 [ 2273.842557][ T1659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2273.848493][ T1659] RIP: 0033:0x7f2d5bd9c799 [ 2273.852950][ T1659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2273.872620][ T1659] RSP: 002b:00007f2d5cbd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 2273.881088][ T1659] RAX: ffffffffffffffda RBX: 00007f2d5c015fa0 RCX: 00007f2d5bd9c799 [ 2273.889104][ T1659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 2273.897116][ T1659] RBP: 00007f2d5cbd2090 R08: 0000000000000000 R09: 0000000000000000 [ 2273.905296][ T1659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2273.913399][ T1659] R13: 00007f2d5c016038 R14: 00007f2d5c015fa0 R15: 00007ffc9f999b98 [ 2273.921517][ T1659] [ 2273.998711][ T1659] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2274.045637][ T1675] netlink: 'syz.4.8679': attribute type 1 has an invalid length. [ 2274.304705][ T1677] netlink: 'syz.4.8681': attribute type 29 has an invalid length. [ 2274.329954][ T1677] netlink: 'syz.4.8681': attribute type 29 has an invalid length. [ 2274.680884][ T1687] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.8683'. [ 2274.905778][ T1690] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8684'. [ 2274.993246][ T1690] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2275.110342][ T1690] CPU: 0 PID: 1690 Comm: syz.3.8684 Not tainted syzkaller #0 [ 2275.117980][ T1690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2275.128099][ T1690] Call Trace: [ 2275.131429][ T1690] [ 2275.134394][ T1690] dump_stack_lvl+0x188/0x24e [ 2275.139316][ T1690] ? show_regs_print_info+0x12/0x12 [ 2275.144757][ T1690] ? load_image+0x400/0x400 [ 2275.149399][ T1690] sysfs_warn_dup+0x8a/0xa0 [ 2275.154012][ T1690] sysfs_do_create_link_sd+0xc0/0x110 [ 2275.159410][ T1690] device_add+0x7ed/0xfb0 [ 2275.163801][ T1690] wiphy_register+0x1d9f/0x2ac0 [ 2275.168696][ T1690] ? cfg80211_event_work+0x40/0x40 [ 2275.173924][ T1690] ? minstrel_ht_alloc+0x894/0xa20 [ 2275.179062][ T1690] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2275.185149][ T1690] ieee80211_register_hw+0x2d00/0x39f0 [ 2275.190655][ T1690] ? ieee80211_register_hw+0xee1/0x39f0 [ 2275.196259][ T1690] ? ieee80211_register_hw+0xee1/0x39f0 [ 2275.201879][ T1690] ? ieee80211_tasklet_handler+0x20/0x20 [ 2275.207644][ T1690] ? memset+0x1e/0x40 [ 2275.211756][ T1690] ? __hrtimer_init+0x186/0x270 [ 2275.216817][ T1690] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2275.222592][ T1690] hwsim_new_radio_nl+0xafa/0xce0 [ 2275.227740][ T1690] genl_family_rcv_msg_doit+0x22a/0x330 [ 2275.233301][ T1690] ? end_current_label_crit_section+0x170/0x170 [ 2275.239656][ T1690] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2275.245569][ T1690] ? bpf_lsm_capable+0x5/0x10 [ 2275.250344][ T1690] ? security_capable+0x85/0xb0 [ 2275.255213][ T1690] genl_rcv_msg+0x604/0x790 [ 2275.259835][ T1690] ? genl_bind+0x360/0x360 [ 2275.264349][ T1690] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2275.270712][ T1690] netlink_rcv_skb+0x1fb/0x450 [ 2275.275585][ T1690] ? genl_bind+0x360/0x360 [ 2275.280105][ T1690] ? netlink_ack+0x1170/0x1170 [ 2275.284925][ T1690] ? down_read+0x1a8/0x2d0 [ 2275.289395][ T1690] genl_rcv+0x24/0x40 [ 2275.293405][ T1690] netlink_unicast+0x74d/0x8d0 [ 2275.298206][ T1690] netlink_sendmsg+0x8ad/0xbd0 [ 2275.303018][ T1690] ? netlink_getsockopt+0x550/0x550 [ 2275.308347][ T1690] ? aa_sock_msg_perm+0x94/0x150 [ 2275.313310][ T1690] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2275.318701][ T1690] ? security_socket_sendmsg+0x7c/0xa0 [ 2275.324215][ T1690] ? netlink_getsockopt+0x550/0x550 [ 2275.329582][ T1690] ____sys_sendmsg+0x5be/0x970 [ 2275.334393][ T1690] ? __sys_sendmsg_sock+0x30/0x30 [ 2275.339531][ T1690] ? __import_iovec+0x315/0x500 [ 2275.344583][ T1690] ? import_iovec+0x6f/0xa0 [ 2275.349190][ T1690] ___sys_sendmsg+0x2a2/0x360 [ 2275.353890][ T1690] ? try_to_wake_up+0x6ae/0x1080 [ 2275.358854][ T1690] ? __sys_sendmsg+0x290/0x290 [ 2275.363702][ T1690] __se_sys_sendmsg+0x1bb/0x2a0 [ 2275.368583][ T1690] ? __x64_sys_sendmsg+0x80/0x80 [ 2275.373560][ T1690] ? lockdep_hardirqs_on+0x94/0x140 [ 2275.378817][ T1690] do_syscall_64+0x4c/0xa0 [ 2275.383339][ T1690] ? clear_bhb_loop+0x60/0xb0 [ 2275.388030][ T1690] ? clear_bhb_loop+0x60/0xb0 [ 2275.392731][ T1690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2275.398732][ T1690] RIP: 0033:0x7fb23cd9c799 [ 2275.403174][ T1690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2275.422799][ T1690] RSP: 002b:00007fb23dbdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2275.431263][ T1690] RAX: ffffffffffffffda RBX: 00007fb23d016090 RCX: 00007fb23cd9c799 [ 2275.439528][ T1690] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2275.447522][ T1690] RBP: 00007fb23ce32c99 R08: 0000000000000000 R09: 0000000000000000 [ 2275.455765][ T1690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2275.463837][ T1690] R13: 00007fb23d016128 R14: 00007fb23d016090 R15: 00007fff4ac3db78 [ 2275.471847][ T1690] [ 2276.133743][ T1711] netlink: 'syz.3.8692': attribute type 1 has an invalid length. [ 2277.119472][ T1715] netlink: 'syz.3.8695': attribute type 10 has an invalid length. [ 2277.312863][ T1715] team0: Device wg1 is of different type [ 2278.197755][ T1736] netlink: 99944 bytes leftover after parsing attributes in process `syz.1.8703'. [ 2278.515868][ T1736] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2278.737808][ T1754] netlink: 'syz.3.8706': attribute type 1 has an invalid length. [ 2279.538666][ T1772] netlink: 'syz.4.8712': attribute type 10 has an invalid length. [ 2280.058873][ T1778] netlink: 'syz.3.8714': attribute type 10 has an invalid length. [ 2280.066849][ T1778] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8714'. [ 2280.147244][ T1782] netlink: 'syz.0.8716': attribute type 29 has an invalid length. [ 2280.249418][ T1782] netlink: 'syz.0.8716': attribute type 29 has an invalid length. [ 2280.590029][ T1799] netlink: 'syz.4.8721': attribute type 1 has an invalid length. [ 2281.823143][ T1831] netlink: 'syz.1.8727': attribute type 10 has an invalid length. [ 2282.218873][ T1842] netlink: 'syz.2.8730': attribute type 21 has an invalid length. [ 2282.264244][ T1844] netlink: 'syz.4.8731': attribute type 10 has an invalid length. [ 2282.350339][ T1844] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8731'. [ 2283.261235][ T1862] netlink: 'syz.3.8735': attribute type 1 has an invalid length. [ 2283.325975][ T1862] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.8735'. [ 2283.511199][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.517934][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.715213][ T1861] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.8735'. [ 2284.234345][ T1868] validate_nla: 1 callbacks suppressed [ 2284.234386][ T1868] netlink: 'syz.2.8737': attribute type 3 has an invalid length. [ 2284.339403][ T1868] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8737'. [ 2285.098370][ T1886] netlink: 'syz.0.8742': attribute type 10 has an invalid length. [ 2285.340403][ T1894] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8746'. [ 2285.673823][ T1903] netlink: 'syz.1.8750': attribute type 3 has an invalid length. [ 2285.702370][ T1903] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.8750'. [ 2286.123744][ T1914] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8755'. [ 2286.473759][ T1922] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8757'. [ 2287.195775][ T1933] netlink: 'syz.2.8763': attribute type 1 has an invalid length. [ 2287.482997][ T1940] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2287.516498][ T1940] syzkaller0: linktype set to 769 [ 2287.549230][ T1942] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8766'. [ 2287.618835][ T1943] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 2287.693164][ T1940] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2290.125801][ T1982] FAULT_INJECTION: forcing a failure. [ 2290.125801][ T1982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2290.183689][ T1982] CPU: 1 PID: 1982 Comm: syz.4.8776 Not tainted syzkaller #0 [ 2290.191314][ T1982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2290.201403][ T1982] Call Trace: [ 2290.204712][ T1982] [ 2290.207701][ T1982] dump_stack_lvl+0x188/0x24e [ 2290.212419][ T1982] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2290.218785][ T1982] ? show_regs_print_info+0x12/0x12 [ 2290.224017][ T1982] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2290.230235][ T1982] should_fail_ex+0x399/0x4d0 [ 2290.234950][ T1982] _copy_from_user+0x2c/0x170 [ 2290.239742][ T1982] __copy_msghdr+0x3b7/0x580 [ 2290.244383][ T1982] ___sys_sendmsg+0x210/0x360 [ 2290.249105][ T1982] ? __sys_sendmsg+0x290/0x290 [ 2290.253946][ T1982] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2290.260072][ T1982] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2290.266258][ T1982] ? lockdep_hardirqs_on+0x94/0x140 [ 2290.271497][ T1982] ? __se_sys_sendmsg+0xf4/0x2a0 [ 2290.276492][ T1982] ? kasan_check_range+0x80/0x290 [ 2290.281562][ T1982] __se_sys_sendmsg+0x1bb/0x2a0 [ 2290.286455][ T1982] ? __x64_sys_sendmsg+0x80/0x80 [ 2290.291536][ T1982] ? lockdep_hardirqs_on+0x94/0x140 [ 2290.296766][ T1982] do_syscall_64+0x4c/0xa0 [ 2290.301213][ T1982] ? clear_bhb_loop+0x60/0xb0 [ 2290.306095][ T1982] ? clear_bhb_loop+0x60/0xb0 [ 2290.310988][ T1982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2290.317004][ T1982] RIP: 0033:0x7f7ff819c799 [ 2290.321452][ T1982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2290.341194][ T1982] RSP: 002b:00007f7ff90ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2290.349906][ T1982] RAX: ffffffffffffffda RBX: 00007f7ff8416090 RCX: 00007f7ff819c799 [ 2290.357916][ T1982] RDX: 0000000000000b00 RSI: 0000200000001180 RDI: 0000000000000005 [ 2290.365929][ T1982] RBP: 00007f7ff90ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2290.374440][ T1982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2290.382450][ T1982] R13: 00007f7ff8416128 R14: 00007f7ff8416090 R15: 00007fffe7fb31a8 [ 2290.390565][ T1982] [ 2290.449891][ T1983] €Â0: renamed from pim6reg1 [ 2290.905808][ T1988] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8781'. [ 2292.066813][ T2023] netlink: 'syz.2.8793': attribute type 10 has an invalid length. [ 2292.490875][ T2023] team0: Device wg1 is of different type [ 2292.769643][ T2036] netlink: 'syz.0.8795': attribute type 10 has an invalid length. [ 2292.798765][ T2039] netlink: 'syz.1.8797': attribute type 1 has an invalid length. [ 2293.065406][ T2046] netlink: 'syz.3.8799': attribute type 1 has an invalid length. [ 2293.381209][ T2057] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8805'. [ 2293.419175][ T2057] bridge_slave_1: default FDB implementation only supports local addresses [ 2294.290257][ T2077] FAULT_INJECTION: forcing a failure. [ 2294.290257][ T2077] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.324445][ T2077] CPU: 1 PID: 2077 Comm: syz.3.8811 Not tainted syzkaller #0 [ 2294.332331][ T2077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2294.342702][ T2077] Call Trace: [ 2294.346099][ T2077] [ 2294.349062][ T2077] dump_stack_lvl+0x188/0x24e [ 2294.353784][ T2077] ? show_regs_print_info+0x12/0x12 [ 2294.359025][ T2077] ? load_image+0x400/0x400 [ 2294.363591][ T2077] ? __might_sleep+0xd0/0xd0 [ 2294.368311][ T2077] ? __lock_acquire+0x7d10/0x7d10 [ 2294.373467][ T2077] should_fail_ex+0x399/0x4d0 [ 2294.378275][ T2077] should_failslab+0x5/0x20 [ 2294.382892][ T2077] slab_pre_alloc_hook+0x59/0x310 [ 2294.387939][ T2077] kmem_cache_alloc_node+0x5a/0x320 [ 2294.393155][ T2077] ? __alloc_skb+0xfc/0x7e0 [ 2294.398038][ T2077] __alloc_skb+0xfc/0x7e0 [ 2294.402558][ T2077] netlink_ack+0x372/0x1170 [ 2294.407224][ T2077] ? verify_lock_unused+0x140/0x140 [ 2294.412449][ T2077] ? netlink_dump+0xd00/0xd00 [ 2294.417355][ T2077] netlink_rcv_skb+0x280/0x450 [ 2294.422230][ T2077] ? rtnetlink_bind+0x80/0x80 [ 2294.427099][ T2077] ? netlink_ack+0x1170/0x1170 [ 2294.431985][ T2077] ? netlink_deliver_tap+0x2e/0x1b0 [ 2294.437294][ T2077] netlink_unicast+0x74d/0x8d0 [ 2294.442449][ T2077] netlink_sendmsg+0x8ad/0xbd0 [ 2294.447414][ T2077] ? netlink_getsockopt+0x550/0x550 [ 2294.452801][ T2077] ? aa_sock_msg_perm+0x94/0x150 [ 2294.457847][ T2077] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2294.463149][ T2077] ? security_socket_sendmsg+0x7c/0xa0 [ 2294.469065][ T2077] ? netlink_getsockopt+0x550/0x550 [ 2294.474398][ T2077] ____sys_sendmsg+0x5be/0x970 [ 2294.479706][ T2077] ? __sys_sendmsg_sock+0x30/0x30 [ 2294.484776][ T2077] ? __import_iovec+0x315/0x500 [ 2294.489641][ T2077] ? import_iovec+0x6f/0xa0 [ 2294.494165][ T2077] ___sys_sendmsg+0x2a2/0x360 [ 2294.498947][ T2077] ? __sys_sendmsg+0x290/0x290 [ 2294.503750][ T2077] ? __lock_acquire+0x7d10/0x7d10 [ 2294.508935][ T2077] __se_sys_sendmsg+0x1bb/0x2a0 [ 2294.514244][ T2077] ? __x64_sys_sendmsg+0x80/0x80 [ 2294.519211][ T2077] ? lockdep_hardirqs_on+0x94/0x140 [ 2294.524420][ T2077] do_syscall_64+0x4c/0xa0 [ 2294.528967][ T2077] ? clear_bhb_loop+0x60/0xb0 [ 2294.533656][ T2077] ? clear_bhb_loop+0x60/0xb0 [ 2294.538345][ T2077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2294.544255][ T2077] RIP: 0033:0x7fb23cd9c799 [ 2294.548781][ T2077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2294.568398][ T2077] RSP: 002b:00007fb23dc00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2294.577102][ T2077] RAX: ffffffffffffffda RBX: 00007fb23d015fa0 RCX: 00007fb23cd9c799 [ 2294.585082][ T2077] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2294.593236][ T2077] RBP: 00007fb23dc00090 R08: 0000000000000000 R09: 0000000000000000 [ 2294.601303][ T2077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.609631][ T2077] R13: 00007fb23d016038 R14: 00007fb23d015fa0 R15: 00007fff4ac3db78 [ 2294.617715][ T2077] [ 2294.925163][ T2078] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8809'. [ 2295.275344][ T2085] netlink: 'syz.3.8812': attribute type 1 has an invalid length. [ 2296.149758][ T2091] netlink: 'syz.2.8814': attribute type 21 has an invalid length. [ 2296.215074][ T2093] netlink: 'syz.1.8815': attribute type 1 has an invalid length. [ 2296.696693][ T2108] netlink: 'syz.1.8819': attribute type 10 has an invalid length. [ 2297.870812][ T2117] netlink: 'syz.3.8823': attribute type 1 has an invalid length. [ 2298.765516][T14244] Bluetooth: hci1: ISO packet for unknown connection handle 31 [ 2300.738121][ T2166] netlink: 'syz.1.8839': attribute type 1 has an invalid length. [ 2301.298606][ T2181] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8845'. [ 2301.399479][ T2185] netlink: 'syz.3.8846': attribute type 21 has an invalid length. [ 2301.436905][ T2185] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8846'. [ 2301.468428][ T2185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8846'. [ 2301.866719][ T2199] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2301.894626][ T2199] syzkaller0: linktype set to 769 [ 2301.912604][ T2199] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 2301.948374][ T2199] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2302.334688][ T2207] netlink: 'syz.1.8854': attribute type 1 has an invalid length. [ 2302.787976][ T2214] netlink: 'syz.1.8857': attribute type 2 has an invalid length. [ 2303.533916][ T2228] netlink: 'syz.1.8862': attribute type 10 has an invalid length. [ 2304.930158][ T2244] netlink: 'syz.2.8861': attribute type 10 has an invalid length. [ 2305.103328][ T2244] bond0: (slave team0): Releasing backup interface [ 2305.206093][ T2244] team0 (unregistering): Port device team_slave_0 removed [ 2305.246075][ T2244] team0 (unregistering): Port device team_slave_1 removed [ 2305.275064][ T2244] team0 (unregistering): Port device geneve1 removed [ 2305.362778][ T2256] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.8872'. [ 2305.944238][ T2269] FAULT_INJECTION: forcing a failure. [ 2305.944238][ T2269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2305.957909][ T2270] netlink: 'syz.0.8875': attribute type 10 has an invalid length. [ 2305.968629][ T2269] CPU: 1 PID: 2269 Comm: syz.4.8876 Not tainted syzkaller #0 [ 2305.976243][ T2269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2305.986440][ T2269] Call Trace: [ 2305.989744][ T2269] [ 2305.992786][ T2269] dump_stack_lvl+0x188/0x24e [ 2305.997520][ T2269] ? show_regs_print_info+0x12/0x12 [ 2306.002767][ T2269] ? load_image+0x400/0x400 [ 2306.007406][ T2269] ? __lock_acquire+0x7d10/0x7d10 [ 2306.012488][ T2269] should_fail_ex+0x399/0x4d0 [ 2306.017298][ T2269] _copy_from_user+0x2c/0x170 [ 2306.022014][ T2269] iovec_from_user+0x143/0x360 [ 2306.026880][ T2269] __import_iovec+0x6d/0x500 [ 2306.031632][ T2269] import_iovec+0x6f/0xa0 [ 2306.036013][ T2269] ___sys_sendmsg+0x252/0x360 [ 2306.040743][ T2269] ? __sys_sendmsg+0x290/0x290 [ 2306.045583][ T2269] ? __lock_acquire+0x7d10/0x7d10 [ 2306.050684][ T2269] __se_sys_sendmsg+0x1bb/0x2a0 [ 2306.055833][ T2269] ? __x64_sys_sendmsg+0x80/0x80 [ 2306.060830][ T2269] ? lockdep_hardirqs_on+0x94/0x140 [ 2306.066076][ T2269] do_syscall_64+0x4c/0xa0 [ 2306.070710][ T2269] ? clear_bhb_loop+0x60/0xb0 [ 2306.075421][ T2269] ? clear_bhb_loop+0x60/0xb0 [ 2306.080176][ T2269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2306.086113][ T2269] RIP: 0033:0x7f7ff819c799 [ 2306.090653][ T2269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2306.110526][ T2269] RSP: 002b:00007f7ff90ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2306.118983][ T2269] RAX: ffffffffffffffda RBX: 00007f7ff8416090 RCX: 00007f7ff819c799 [ 2306.127773][ T2269] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2306.135777][ T2269] RBP: 00007f7ff90ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2306.143874][ T2269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2306.151899][ T2269] R13: 00007f7ff8416128 R14: 00007f7ff8416090 R15: 00007fffe7fb31a8 [ 2306.160079][ T2269] [ 2306.757005][ T2278] netlink: 'syz.2.8879': attribute type 1 has an invalid length. [ 2307.639902][ T2293] netlink: 'syz.3.8885': attribute type 29 has an invalid length. [ 2307.689353][ T2293] netlink: 'syz.3.8885': attribute type 29 has an invalid length. [ 2307.896958][ T2298] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8887'. [ 2308.639225][ T2310] netlink: 'syz.1.8891': attribute type 10 has an invalid length. [ 2308.732624][ T2314] netlink: 'syz.0.8893': attribute type 1 has an invalid length. [ 2309.113404][ T2319] netlink: 'syz.1.8896': attribute type 39 has an invalid length. [ 2309.226176][ T2327] netlink: 'syz.2.8898': attribute type 2 has an invalid length. [ 2309.835525][ T2337] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.8902'. [ 2309.938379][ T2337] netlink: 'syz.1.8902': attribute type 21 has an invalid length. [ 2309.946282][ T2337] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8902'. [ 2310.038636][ T2337] netlink: 'syz.1.8902': attribute type 4 has an invalid length. [ 2310.060825][ T2337] netlink: 'syz.1.8902': attribute type 5 has an invalid length. [ 2310.086384][ T2337] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8902'. [ 2310.920708][ T2346] netlink: 'syz.0.8906': attribute type 10 has an invalid length. [ 2311.174717][ T2348] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8904'. [ 2311.470252][ T2373] netlink: 'syz.2.8912': attribute type 21 has an invalid length. [ 2311.559608][ T2373] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8912'. [ 2311.682020][ T2373] netlink: 'syz.2.8912': attribute type 4 has an invalid length. [ 2311.729678][ T2379] FAULT_INJECTION: forcing a failure. [ 2311.729678][ T2379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2311.730208][ T2374] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8912'. [ 2311.788451][ T2379] CPU: 0 PID: 2379 Comm: syz.0.8913 Not tainted syzkaller #0 [ 2311.796161][ T2379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2311.806264][ T2379] Call Trace: [ 2311.809677][ T2379] [ 2311.812641][ T2379] dump_stack_lvl+0x188/0x24e [ 2311.817383][ T2379] ? show_regs_print_info+0x12/0x12 [ 2311.822642][ T2379] ? load_image+0x400/0x400 [ 2311.827281][ T2379] ? __lock_acquire+0x7d10/0x7d10 [ 2311.832430][ T2379] ? __fget_files+0x28/0x4b0 [ 2311.837073][ T2379] should_fail_ex+0x399/0x4d0 [ 2311.841878][ T2379] _copy_from_user+0x2c/0x170 [ 2311.846784][ T2379] generic_map_update_batch+0x4a1/0x810 [ 2311.852381][ T2379] ? rcu_read_unlock+0xa0/0xa0 [ 2311.857254][ T2379] ? __fdget+0x17c/0x200 [ 2311.861603][ T2379] ? rcu_read_unlock+0xa0/0xa0 [ 2311.866383][ T2379] bpf_map_do_batch+0x466/0x600 [ 2311.871429][ T2379] __sys_bpf+0x6f7/0x780 [ 2311.875693][ T2379] ? bpf_link_show_fdinfo+0x380/0x380 [ 2311.881090][ T2379] ? lock_chain_count+0x20/0x20 [ 2311.885978][ T2379] __x64_sys_bpf+0x78/0x90 [ 2311.890423][ T2379] do_syscall_64+0x4c/0xa0 [ 2311.894861][ T2379] ? clear_bhb_loop+0x60/0xb0 [ 2311.899557][ T2379] ? clear_bhb_loop+0x60/0xb0 [ 2311.904342][ T2379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2311.910343][ T2379] RIP: 0033:0x7f2d5bd9c799 [ 2311.915031][ T2379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2311.934654][ T2379] RSP: 002b:00007f2d5cbd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2311.943702][ T2379] RAX: ffffffffffffffda RBX: 00007f2d5c015fa0 RCX: 00007f2d5bd9c799 [ 2311.951693][ T2379] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 2311.959688][ T2379] RBP: 00007f2d5cbd2090 R08: 0000000000000000 R09: 0000000000000000 [ 2311.967667][ T2379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2311.975827][ T2379] R13: 00007f2d5c016038 R14: 00007f2d5c015fa0 R15: 00007ffc9f999b98 [ 2311.983913][ T2379] [ 2311.987121][ T2373] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8912'. [ 2312.214450][ T2381] IPv6: Can't replace route, no match found [ 2312.235612][ T2381] mac80211_hwsim hwsim167 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2313.396850][ T2406] Â: renamed from pim6reg1 [ 2313.752494][ T2415] validate_nla: 2 callbacks suppressed [ 2313.752536][ T2415] netlink: 'syz.2.8922': attribute type 10 has an invalid length. [ 2313.807909][ T2418] netlink: 'syz.3.8921': attribute type 10 has an invalid length. [ 2313.899759][ T2417] netlink: 'syz.4.8924': attribute type 1 has an invalid length. [ 2314.596879][ T2437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8929'. [ 2314.694278][ T2433] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8927'. [ 2314.780441][ T2437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8929'. [ 2314.810347][ T2439] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8929'. [ 2314.842059][ T2443] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8929'. [ 2315.265501][ T2451] netlink: 'syz.2.8933': attribute type 10 has an invalid length. [ 2315.314399][ T2451] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.346408][ T2451] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.453716][ T2451] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.473289][ T2451] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.871084][ T2468] netlink: 'syz.1.8937': attribute type 1 has an invalid length. [ 2317.036971][ T2497] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2317.257924][ T2494] netlink: 'syz.1.8945': attribute type 10 has an invalid length. [ 2317.268738][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2317.279576][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2317.287762][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2317.293715][ T2494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8945'. [ 2317.363712][ T2507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2317.372474][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2317.381577][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2318.134627][ T2499] chnl_net:caif_netlink_parms(): no params data found [ 2318.365991][ T2534] netlink: 'syz.2.8952': attribute type 10 has an invalid length. [ 2318.583676][ T2534] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2318.612479][ T2534] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2318.643983][ T2534] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2318.659069][ T2534] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2318.669665][ T2527] netlink: 'syz.3.8949': attribute type 1 has an invalid length. [ 2318.713769][ T2499] bridge0: port 1(bridge_slave_0) entered blocking state [ 2318.744293][ T2499] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.753217][ T2499] device bridge_slave_0 entered promiscuous mode [ 2318.783734][ T2499] bridge0: port 2(bridge_slave_1) entered blocking state [ 2318.834940][ T2499] bridge0: port 2(bridge_slave_1) entered disabled state [ 2318.861547][ T2499] device bridge_slave_1 entered promiscuous mode [ 2318.896390][ T2541] netlink: 'syz.2.8962': attribute type 1 has an invalid length. [ 2318.984168][ T2499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2319.023471][ T2499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2319.164477][ T2499] team0: Port device team_slave_0 added [ 2319.244593][ T2499] team0: Port device team_slave_1 added [ 2319.345160][ T2548] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8955'. [ 2319.390214][ T2499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2319.397256][ T2499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.508851][ T2507] Bluetooth: hci1: command 0x0409 tx timeout [ 2319.530601][ T2499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2319.643380][ T2499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2319.673084][ T2499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.762872][ T2499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2320.051378][ T2499] device hsr_slave_0 entered promiscuous mode [ 2320.241219][ T2499] device hsr_slave_1 entered promiscuous mode [ 2320.268415][ T2499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2320.276199][ T2499] Cannot create hsr debugfs directory [ 2321.588490][ T2507] Bluetooth: hci1: command 0x041b tx timeout [ 2321.674055][ T2499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.911612][ T2499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.989004][ T2590] netlink: 'syz.4.8966': attribute type 1 has an invalid length. [ 2322.191155][ T2499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2322.436564][ T2609] netlink: 'syz.4.8971': attribute type 1 has an invalid length. [ 2322.476299][ T2609] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.8971'. [ 2322.497840][ T2499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2322.544547][ T2608] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.8971'. [ 2322.603475][ T2614] FAULT_INJECTION: forcing a failure. [ 2322.603475][ T2614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2322.651901][ T2614] CPU: 0 PID: 2614 Comm: syz.1.8972 Not tainted syzkaller #0 [ 2322.659343][ T2614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2322.669444][ T2614] Call Trace: [ 2322.672765][ T2614] [ 2322.675741][ T2614] dump_stack_lvl+0x188/0x24e [ 2322.680511][ T2614] ? show_regs_print_info+0x12/0x12 [ 2322.685769][ T2614] ? load_image+0x400/0x400 [ 2322.690401][ T2614] ? __lock_acquire+0x7d10/0x7d10 [ 2322.695649][ T2614] ? snprintf+0xe5/0x140 [ 2322.700028][ T2614] should_fail_ex+0x399/0x4d0 [ 2322.704846][ T2614] _copy_to_user+0x2c/0x130 [ 2322.709394][ T2614] simple_read_from_buffer+0xe3/0x150 [ 2322.714819][ T2614] proc_fail_nth_read+0x1a6/0x220 [ 2322.719887][ T2614] ? proc_fault_inject_write+0x310/0x310 [ 2322.725589][ T2614] ? fsnotify_perm+0x248/0x550 [ 2322.730576][ T2614] ? proc_fault_inject_write+0x310/0x310 [ 2322.736262][ T2614] vfs_read+0x2de/0xa00 [ 2322.740557][ T2614] ? kernel_read+0x1e0/0x1e0 [ 2322.745185][ T2614] ? __fget_files+0x28/0x4b0 [ 2322.749799][ T2614] ? __fget_files+0x28/0x4b0 [ 2322.754507][ T2614] ? __fget_files+0x43d/0x4b0 [ 2322.759247][ T2614] ? __fdget_pos+0x2ae/0x360 [ 2322.763857][ T2614] ? ksys_read+0x71/0x250 [ 2322.768205][ T2614] ksys_read+0x14c/0x250 [ 2322.772562][ T2614] ? vfs_write+0xa30/0xa30 [ 2322.779132][ T2614] ? lockdep_hardirqs_on+0x94/0x140 [ 2322.784457][ T2614] do_syscall_64+0x4c/0xa0 [ 2322.788919][ T2614] ? clear_bhb_loop+0x60/0xb0 [ 2322.793643][ T2614] ? clear_bhb_loop+0x60/0xb0 [ 2322.798429][ T2614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2322.804343][ T2614] RIP: 0033:0x7f539315cfce [ 2322.808860][ T2614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2322.828580][ T2614] RSP: 002b:00007f5393f73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2322.837296][ T2614] RAX: ffffffffffffffda RBX: 00007f5393f746c0 RCX: 00007f539315cfce [ 2322.845280][ T2614] RDX: 000000000000000f RSI: 00007f5393f740a0 RDI: 0000000000000004 [ 2322.853265][ T2614] RBP: 00007f5393f74090 R08: 0000000000000000 R09: 0000000000000000 [ 2322.861331][ T2614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2322.869335][ T2614] R13: 00007f5393416128 R14: 00007f5393416090 R15: 00007ffc5d8747c8 [ 2322.877447][ T2614] [ 2323.243222][ T2624] netlink: 'syz.1.8975': attribute type 29 has an invalid length. [ 2323.288365][ T2624] netlink: 'syz.1.8975': attribute type 29 has an invalid length. [ 2323.310844][ T2499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2323.350114][ T2499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2323.380097][ T2499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2323.417924][ T2499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2323.647709][ T2630] netlink: 'syz.4.8977': attribute type 6 has an invalid length. [ 2323.672903][ T2507] Bluetooth: hci1: command 0x040f tx timeout [ 2323.918996][ T2499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2324.000129][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2324.033315][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2324.110244][ T2499] 8021q: adding VLAN 0 to HW filter on device team0 [ 2324.159703][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2324.189302][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2324.231305][T24777] bridge0: port 1(bridge_slave_0) entered blocking state [ 2324.238626][T24777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2325.008595][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2325.066974][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2325.099536][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2325.169645][T24777] bridge0: port 2(bridge_slave_1) entered blocking state [ 2325.176857][T24777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2325.227142][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2325.256940][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2325.342311][ T2660] netlink: 763 bytes leftover after parsing attributes in process `syz.2.8983'. [ 2325.389620][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2325.421210][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2325.460949][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2325.574970][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2325.607872][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2325.657013][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2325.700252][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2325.748734][ T2507] Bluetooth: hci1: command 0x0419 tx timeout [ 2325.761651][T24767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2325.778994][T24767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2325.840708][ T2499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2326.045403][ T2675] netlink: 'syz.4.8987': attribute type 29 has an invalid length. [ 2326.079759][ T2675] netlink: 'syz.4.8987': attribute type 29 has an invalid length. [ 2327.385975][ T2691] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8990'. [ 2327.520407][ T2691] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2327.623974][ T2695] netlink: 'syz.3.8991': attribute type 3 has an invalid length. [ 2327.697761][ T2694] netlink: 'syz.2.8992': attribute type 1 has an invalid length. [ 2327.709569][ T2695] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8991'. [ 2328.014956][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2328.023062][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2328.094705][ T2499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2328.348698][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2328.379689][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2328.542862][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2328.611864][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2328.661163][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2328.699550][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2328.772463][ T2499] device veth0_vlan entered promiscuous mode [ 2328.843270][ T2499] device veth1_vlan entered promiscuous mode [ 2328.904737][ T2720] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.8997'. [ 2329.236659][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2329.273200][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2329.346353][ T2725] netlink: 'syz.2.8998': attribute type 29 has an invalid length. [ 2329.471391][ T2499] device veth0_macvtap entered promiscuous mode [ 2329.540000][ T2725] netlink: 'syz.2.8998': attribute type 29 has an invalid length. [ 2329.599769][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2329.669417][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2329.719979][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2329.771091][ T2499] device veth1_macvtap entered promiscuous mode [ 2329.960966][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.002320][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.070055][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.122663][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.163620][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.205315][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.256326][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.298024][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.370310][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.432445][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.557172][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.654803][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.689687][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.709026][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.726544][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.756283][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.787732][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.845995][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.909335][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.920077][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.961714][ T2499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2331.009019][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2331.018985][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2331.049228][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2331.105566][ T2499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2331.157478][ T2499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2331.200687][ T2499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2331.229234][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2331.248905][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2331.334009][ T2499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.378289][ T2499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.387064][ T2499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.455879][ T2499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.605842][ T2750] netlink: 'syz.2.9004': attribute type 3 has an invalid length. [ 2331.641019][ T2752] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9003'. [ 2331.698361][ T2750] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9004'. [ 2331.773104][ T2752] netlink: 'syz.3.9003': attribute type 28 has an invalid length. [ 2331.919405][T24794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2331.949801][T24794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2332.042012][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2332.177187][ T2759] device bridge0 entered promiscuous mode [ 2332.205743][T24764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2332.235110][T24764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2332.296715][T24767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2332.405984][ T2768] netlink: 'syz.4.9009': attribute type 29 has an invalid length. [ 2332.417853][ T2768] netlink: 'syz.4.9009': attribute type 29 has an invalid length. [ 2332.435662][ T2774] netlink: 'syz.4.9009': attribute type 29 has an invalid length. [ 2332.929295][ T2784] netlink: 'syz.0.8938': attribute type 10 has an invalid length. [ 2333.679640][ T2798] netlink: 'syz.2.9012': attribute type 1 has an invalid length. [ 2333.752046][ T2798] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.9012'. [ 2335.462773][ T2784] team0: Device wg1 is of different type [ 2335.924086][ T2794] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.9012'. [ 2337.486762][ T2833] netlink: 'syz.1.9018': attribute type 3 has an invalid length. [ 2337.568316][ T2833] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9018'. [ 2338.113121][ T2843] netlink: 'syz.3.9022': attribute type 29 has an invalid length. [ 2338.157457][ T2843] netlink: 'syz.3.9022': attribute type 29 has an invalid length. [ 2338.207053][ T2845] netlink: 'syz.3.9022': attribute type 29 has an invalid length. [ 2338.791531][ T2853] netlink: 'syz.4.9028': attribute type 3 has an invalid length. [ 2338.823757][ T2850] netlink: 'syz.1.9026': attribute type 10 has an invalid length. [ 2338.851706][ T2853] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.9028'. [ 2340.408385][ T2864] netlink: 'syz.0.9029': attribute type 5 has an invalid length. [ 2340.499355][ T2864] netlink: 'syz.0.9029': attribute type 9 has an invalid length. [ 2342.202909][ T2894] netlink: 'syz.2.9036': attribute type 29 has an invalid length. [ 2342.214626][ T2892] netlink: 'syz.1.9035': attribute type 1 has an invalid length. [ 2342.291206][ T2897] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.9038'. [ 2343.202204][ T2900] mac80211_hwsim hwsim182 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2343.412797][ T2922] validate_nla: 3 callbacks suppressed [ 2343.412834][ T2922] netlink: 'syz.3.9045': attribute type 2 has an invalid length. [ 2343.725659][ T2922] device 2 entered promiscuous mode [ 2343.792759][ T2935] netlink: 'syz.4.9051': attribute type 29 has an invalid length. [ 2343.827551][ T2935] netlink: 'syz.4.9051': attribute type 29 has an invalid length. [ 2343.855301][ T2938] netlink: 'syz.4.9051': attribute type 29 has an invalid length. [ 2344.950934][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.957366][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.721533][ T2975] netlink: 'syz.0.9062': attribute type 29 has an invalid length. [ 2345.778805][ T2975] netlink: 'syz.0.9062': attribute type 29 has an invalid length. [ 2347.843766][ T3019] mac80211_hwsim hwsim172 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2347.905681][ T3020] IPv6: Can't replace route, no match found [ 2348.375177][ T3014] mac80211_hwsim hwsim167 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2348.402089][ T3029] netlink: 'syz.1.9076': attribute type 10 has an invalid length. [ 2348.565819][ T3034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9088'. [ 2348.737245][ T3036] netlink: 'syz.3.9077': attribute type 29 has an invalid length. [ 2348.769372][ T3042] netlink: 'syz.1.9080': attribute type 3 has an invalid length. [ 2348.798325][ T3042] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9080'. [ 2348.880242][ T3036] netlink: 'syz.3.9077': attribute type 29 has an invalid length. [ 2349.065752][ T3049] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9083'. [ 2349.161983][ T3042] device ip6gretap0 entered promiscuous mode [ 2349.417773][ T3060] netlink: 'syz.4.9084': attribute type 11 has an invalid length. [ 2349.448616][ T3060] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9084'. [ 2350.669368][ T3083] netlink: 'syz.2.9093': attribute type 10 has an invalid length. [ 2351.053841][ T3090] netlink: 'syz.0.9098': attribute type 10 has an invalid length. [ 2351.269902][ T3090] team0: Port device wlan1 added [ 2351.299404][ T3095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9099'. [ 2351.333439][ T3095] netlink: 'syz.4.9099': attribute type 10 has an invalid length. [ 2351.484457][ T3099] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2351.571382][ T3099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2351.659525][ T3094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9100'. [ 2352.270714][ T3105] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9103'. [ 2352.772262][ T3105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2352.786989][ T3105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2353.262218][ T3105] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2353.288539][ T3105] bond0 (unregistering): Released all slaves [ 2353.324532][ T3117] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.9108'. [ 2353.790861][ T3135] netlink: 'syz.2.9110': attribute type 10 has an invalid length. [ 2354.064973][ T3142] netlink: 'syz.4.9113': attribute type 29 has an invalid length. [ 2354.119047][ T3142] netlink: 'syz.4.9113': attribute type 29 has an invalid length. [ 2354.644774][ T3161] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9120'. [ 2355.092300][ T3172] netlink: 'syz.1.9125': attribute type 21 has an invalid length. [ 2355.122020][ T3172] netlink: 'syz.1.9125': attribute type 2 has an invalid length. [ 2355.176505][ T3170] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9122'. [ 2356.676521][ T3194] netlink: 'syz.3.9133': attribute type 2 has an invalid length. [ 2356.836218][ T3194] device 3 entered promiscuous mode [ 2357.425161][ T3202] netlink: 'syz.0.9136': attribute type 29 has an invalid length. [ 2357.468778][ T3202] netlink: 'syz.0.9136': attribute type 29 has an invalid length. [ 2357.486726][T14244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2357.499062][T14244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2357.507247][T14244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2357.508263][ T3202] netlink: 'syz.0.9136': attribute type 29 has an invalid length. [ 2357.532767][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2357.540459][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2357.547773][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2358.035584][ T3211] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9137'. [ 2358.361791][ T3203] chnl_net:caif_netlink_parms(): no params data found [ 2358.748428][ T3219] netlink: 'syz.3.9140': attribute type 10 has an invalid length. [ 2358.906258][ T3219] team0: Device wg1 is of different type [ 2359.029232][ T3203] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.036515][ T3203] bridge0: port 1(bridge_slave_0) entered disabled state [ 2359.046394][ T3203] device bridge_slave_0 entered promiscuous mode [ 2359.056704][ T3203] bridge0: port 2(bridge_slave_1) entered blocking state [ 2359.064086][ T3203] bridge0: port 2(bridge_slave_1) entered disabled state [ 2359.073276][ T3203] device bridge_slave_1 entered promiscuous mode [ 2359.102948][ T3203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2359.116782][ T3203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2359.252552][ T3203] team0: Port device team_slave_0 added [ 2359.301016][ T3203] team0: Port device team_slave_1 added [ 2359.310417][ T3232] netlink: 'syz.3.9144': attribute type 1 has an invalid length. [ 2359.448455][ T3232] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9144'. [ 2359.608476][ T2507] Bluetooth: hci4: command 0x0409 tx timeout [ 2360.734549][ T3203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2360.778637][ T3203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2360.880435][ T3203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2360.932943][ T3203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2360.946866][ T3203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2360.974712][ T3203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2361.197714][ T3203] device hsr_slave_0 entered promiscuous mode [ 2361.351473][ T3203] device hsr_slave_1 entered promiscuous mode [ 2361.374165][ T3203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2361.455465][ T3203] Cannot create hsr debugfs directory [ 2361.621063][ T3246] netlink: 'syz.2.9149': attribute type 10 has an invalid length. [ 2361.668956][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 2361.676777][ T3255] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9151'. [ 2361.777135][ T3255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2362.379739][ T3203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.807108][ T3203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2363.009227][ T3203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2363.197298][ T3203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2363.347348][ T3282] netlink: 'syz.0.9162': attribute type 10 has an invalid length. [ 2363.679732][ T3282] team0: Device wg1 is of different type [ 2363.750095][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 2364.114790][ T3294] netlink: 'syz.3.9165': attribute type 10 has an invalid length. [ 2364.392414][ T3203] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2364.477416][ T3203] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2364.577276][ T3203] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2364.650644][ T3303] netlink: 'syz.4.9168': attribute type 1 has an invalid length. [ 2364.683423][ T3203] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2365.397732][ T3311] netlink: 'syz.4.9170': attribute type 3 has an invalid length. [ 2365.463860][ T3311] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9170'. [ 2365.571421][ T3203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2365.670218][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2365.687680][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2365.732220][ T3203] 8021q: adding VLAN 0 to HW filter on device team0 [ 2365.879890][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 2365.953184][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2365.998918][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2366.048965][T24764] bridge0: port 1(bridge_slave_0) entered blocking state [ 2366.056137][T24764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2366.140274][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2366.165353][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2366.210106][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2366.253393][T24764] bridge0: port 2(bridge_slave_1) entered blocking state [ 2366.260654][T24764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2366.321891][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2366.377321][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2366.415369][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2366.468594][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2366.521641][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2366.552703][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2366.599813][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2366.635252][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2366.681105][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2366.738701][ T3203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2366.793624][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2366.833379][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2366.856085][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2367.180426][ T3314] netlink: 'syz.0.9171': attribute type 3 has an invalid length. [ 2367.228435][ T3314] netlink: 'syz.0.9171': attribute type 4 has an invalid length. [ 2367.236439][ T3314] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.9171'. [ 2367.383025][ T2507] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 2368.401410][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2368.425676][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2368.531350][ T3331] netlink: 'syz.0.9185': attribute type 10 has an invalid length. [ 2369.013295][ T3331] team0: Device wg1 is of different type [ 2369.129532][ T3203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2369.281357][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2369.350432][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2369.474078][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2369.512793][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2369.567931][ T3203] device veth0_vlan entered promiscuous mode [ 2369.597940][ T3351] netlink: 'syz.4.9179': attribute type 1 has an invalid length. [ 2369.641384][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2369.700524][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2369.743217][ T3203] device veth1_vlan entered promiscuous mode [ 2369.775460][ T3355] netlink: 'syz.2.9181': attribute type 33 has an invalid length. [ 2369.789713][ T3355] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9181'. [ 2369.930116][ T3353] netlink: 'syz.0.9180': attribute type 10 has an invalid length. [ 2370.722286][ T3353] team0: Device wg1 is of different type [ 2370.810642][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2370.844567][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2370.912124][ T3203] device veth0_macvtap entered promiscuous mode [ 2370.945942][ T3203] device veth1_macvtap entered promiscuous mode [ 2370.960032][ T3373] netlink: 'syz.4.9187': attribute type 29 has an invalid length. [ 2371.011779][ T3373] netlink: 'syz.4.9187': attribute type 29 has an invalid length. [ 2371.044272][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.082664][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.158370][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.191653][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.220431][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.248267][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.278563][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.295107][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.316395][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.342373][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.376295][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.398089][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.418649][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.466138][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.487308][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.510790][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.531331][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.542177][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.553098][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.565289][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.575698][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.586663][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.600447][ T3203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2371.609369][ T3379] netlink: 'syz.4.9187': attribute type 29 has an invalid length. [ 2371.619122][ T3378] netlink: 'syz.2.9186': attribute type 10 has an invalid length. [ 2371.643249][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2371.672113][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2371.739308][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2371.779674][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2371.821681][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2371.888257][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.918319][ T3203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2371.948196][ T3203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.990926][ T3203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2372.060551][ T3402] netlink: 'syz.4.9192': attribute type 12 has an invalid length. [ 2372.228485][ T3402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9192'. [ 2372.285568][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2372.301371][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2372.333028][ T3203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.347715][ T3203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.387408][ T3203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.409729][ T3399] netlink: 'syz.4.9192': attribute type 29 has an invalid length. [ 2372.417941][ T3203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.429218][ T3413] netlink: 'syz.3.9198': attribute type 10 has an invalid length. [ 2372.728177][ T3413] team0: Device wg1 is of different type [ 2372.897295][ T3399] netlink: 'syz.4.9192': attribute type 29 has an invalid length. [ 2373.407849][T24764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2373.449380][T24764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2373.559612][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2373.659498][T24764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2373.688463][T24764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2373.718876][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2374.271954][ T3455] team0: Device wg1 is of different type [ 2374.739329][ T3469] FAULT_INJECTION: forcing a failure. [ 2374.739329][ T3469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2374.786903][ T3473] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9218'. [ 2374.838324][ T3469] CPU: 0 PID: 3469 Comm: syz.1.9216 Not tainted syzkaller #0 [ 2374.845861][ T3469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2374.855956][ T3469] Call Trace: [ 2374.859291][ T3469] [ 2374.862250][ T3469] dump_stack_lvl+0x188/0x24e [ 2374.866969][ T3469] ? show_regs_print_info+0x12/0x12 [ 2374.872294][ T3469] ? load_image+0x400/0x400 [ 2374.876831][ T3469] ? __lock_acquire+0x7d10/0x7d10 [ 2374.881899][ T3469] should_fail_ex+0x399/0x4d0 [ 2374.886625][ T3469] _copy_from_user+0x2c/0x170 [ 2374.891423][ T3469] __copy_msghdr+0x3b7/0x580 [ 2374.896068][ T3469] ___sys_sendmsg+0x210/0x360 [ 2374.900795][ T3469] ? __sys_sendmsg+0x290/0x290 [ 2374.905631][ T3469] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2374.911513][ T3469] __se_sys_sendmsg+0x1bb/0x2a0 [ 2374.916407][ T3469] ? __x64_sys_sendmsg+0x80/0x80 [ 2374.921408][ T3469] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2374.927688][ T3469] do_syscall_64+0x4c/0xa0 [ 2374.932317][ T3469] ? clear_bhb_loop+0x60/0xb0 [ 2374.937028][ T3469] ? clear_bhb_loop+0x60/0xb0 [ 2374.941916][ T3469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2374.947847][ T3469] RIP: 0033:0x7f2648d9c799 [ 2374.952307][ T3469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2374.972123][ T3469] RSP: 002b:00007f2649bde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2374.980576][ T3469] RAX: ffffffffffffffda RBX: 00007f2649015fa0 RCX: 00007f2648d9c799 [ 2374.988711][ T3469] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000007 [ 2374.996798][ T3469] RBP: 00007f2649bde090 R08: 0000000000000000 R09: 0000000000000000 [ 2375.004979][ T3469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2375.013075][ T3469] R13: 00007f2649016038 R14: 00007f2649015fa0 R15: 00007ffea0921858 [ 2375.021270][ T3469] [ 2375.742696][ T3489] validate_nla: 9 callbacks suppressed [ 2375.742718][ T3489] netlink: 'syz.4.9217': attribute type 3 has an invalid length. [ 2375.823274][ T3489] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.9217'. [ 2376.955052][ T3504] netlink: 'syz.3.9230': attribute type 10 has an invalid length. [ 2377.320523][ T3504] team0: Device wg1 is of different type [ 2377.441164][ T3507] tipc: Started in network mode [ 2377.446320][ T3507] tipc: Node identity 9215a268, cluster identity 4711 [ 2377.489607][ T3507] tipc: Node number set to 2450891368 [ 2377.563323][ T3516] netlink: 'syz.0.9234': attribute type 10 has an invalid length. [ 2377.853324][ T3528] netlink: 'syz.3.9238': attribute type 29 has an invalid length. [ 2377.877940][ T3516] team0: Device wg1 is of different type [ 2378.363350][ T3528] netlink: 'syz.3.9238': attribute type 29 has an invalid length. [ 2378.373787][ T3531] netlink: 'syz.3.9238': attribute type 29 has an invalid length. [ 2378.385444][ T3537] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9240'. [ 2378.802867][ T3546] netlink: 'syz.0.9245': attribute type 10 has an invalid length. [ 2381.303803][ T3546] team0: Device wg1 is of different type [ 2381.497267][ T3558] netlink: 'syz.1.9247': attribute type 1 has an invalid length. [ 2381.766072][ T3563] netlink: 'syz.3.9249': attribute type 10 has an invalid length. [ 2381.987928][ T3563] team0: Device wg1 is of different type [ 2382.304244][ T3581] netlink: 'syz.2.9256': attribute type 29 has an invalid length. [ 2382.541216][ T3581] netlink: 'syz.2.9256': attribute type 29 has an invalid length. [ 2382.588751][ T3582] netlink: 'syz.2.9256': attribute type 29 has an invalid length. [ 2382.651244][ T3584] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9257'. [ 2382.706649][ T3586] netlink: 'syz.0.9258': attribute type 2 has an invalid length. [ 2382.870719][ T3586] device 0 entered promiscuous mode [ 2382.892555][ T3590] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.9258'. [ 2383.614713][ T3609] netlink: 'syz.2.9263': attribute type 1 has an invalid length. [ 2384.538587][ T3624] netlink: 'syz.3.9268': attribute type 10 has an invalid length. [ 2384.570311][ T3624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9268'. [ 2384.617922][ T3624] device team0 entered promiscuous mode [ 2384.637783][ T3624] device team_slave_0 entered promiscuous mode [ 2384.658545][ T3624] device team_slave_1 entered promiscuous mode [ 2384.672346][ T3624] device geneve1 entered promiscuous mode [ 2384.685400][ T3624] device dummy0 entered promiscuous mode [ 2384.698479][ T3624] device netdevsim0 entered promiscuous mode [ 2384.719713][ T3624] 8021q: adding VLAN 0 to HW filter on device team0 [ 2384.736612][ T3624] bridge0: port 3(team0) entered blocking state [ 2384.753732][ T3624] bridge0: port 3(team0) entered disabled state [ 2384.785364][ T3624] bridge0: port 3(team0) entered blocking state [ 2384.791937][ T3624] bridge0: port 3(team0) entered forwarding state [ 2386.395176][ T3654] netlink: 'syz.2.9276': attribute type 1 has an invalid length. [ 2386.692618][ T3658] device syzkaller0 entered promiscuous mode [ 2393.318208][ T3680] netlink: 'syz.4.9284': attribute type 10 has an invalid length. [ 2395.003627][ T3713] netlink: 'syz.2.9292': attribute type 1 has an invalid length. [ 2395.356678][ T3727] netlink: 'syz.3.9297': attribute type 3 has an invalid length. [ 2395.392646][ T3727] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9297'. [ 2395.497899][ T3725] netlink: 'syz.2.9298': attribute type 10 has an invalid length. [ 2395.576470][ T3726] netlink: 'syz.0.9299': attribute type 10 has an invalid length. [ 2395.944094][ T3726] team0: Device wg1 is of different type [ 2396.918854][ T3760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9305'. [ 2398.997311][ T3768] mac80211_hwsim hwsim182 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2399.595821][ T3773] netlink: 'syz.2.9310': attribute type 1 has an invalid length. [ 2399.654018][ T3775] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9312'. [ 2399.711796][ T3779] netlink: 'syz.0.9313': attribute type 10 has an invalid length. [ 2400.243004][ T3779] team0: Device wg1 is of different type [ 2400.246374][ T3794] netlink: 'syz.1.9316': attribute type 3 has an invalid length. [ 2400.298922][ T3794] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9316'. [ 2400.649876][ T3797] netlink: 'syz.2.9317': attribute type 10 has an invalid length. [ 2400.678944][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 2400.686331][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 2400.718943][ T3797] device bridge0 left promiscuous mode [ 2400.721847][ T3800] netlink: 'syz.0.9318': attribute type 29 has an invalid length. [ 2400.813663][ T3800] netlink: 'syz.0.9318': attribute type 29 has an invalid length. [ 2400.859101][ T3801] netlink: 'syz.0.9318': attribute type 29 has an invalid length. [ 2404.672032][ T3842] netlink: 'syz.1.9332': attribute type 29 has an invalid length. [ 2404.802834][ T3842] netlink: 'syz.1.9332': attribute type 29 has an invalid length. [ 2405.642431][ T3846] netlink: 'syz.1.9332': attribute type 29 has an invalid length. [ 2406.499834][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.506414][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.779119][ T3865] netlink: 'syz.3.9337': attribute type 10 has an invalid length. [ 2406.857108][ T3865] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9337'. [ 2406.966208][ T3868] netlink: 'syz.2.9340': attribute type 1 has an invalid length. [ 2407.311729][ T3880] netlink: 'syz.1.9344': attribute type 17 has an invalid length. [ 2407.357551][ T3880] netlink: 'syz.1.9344': attribute type 16 has an invalid length. [ 2407.418766][ T3887] netlink: 'syz.4.9346': attribute type 29 has an invalid length. [ 2407.446355][ T3880] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9344'. [ 2407.483425][ T3881] netlink: 'syz.2.9345': attribute type 10 has an invalid length. [ 2407.518991][ T3887] netlink: 'syz.4.9346': attribute type 29 has an invalid length. [ 2407.869241][ T3890] tun1: tun_chr_ioctl cmd 1074025675 [ 2407.875595][ T3890] tun1: persist enabled [ 2407.938916][ T3894] tun1: tun_chr_ioctl cmd 1074025675 [ 2407.944347][ T3894] tun1: persist enabled [ 2408.144377][ T3903] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9353'. [ 2409.974606][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2409.989277][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2409.998967][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2410.007316][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2410.017040][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2410.025017][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2410.659850][ T3926] chnl_net:caif_netlink_parms(): no params data found [ 2410.855735][ T3926] bridge0: port 1(bridge_slave_0) entered blocking state [ 2410.888552][ T3926] bridge0: port 1(bridge_slave_0) entered disabled state [ 2410.927216][ T3926] device bridge_slave_0 entered promiscuous mode [ 2410.961043][ T3926] bridge0: port 2(bridge_slave_1) entered blocking state [ 2410.988320][ T3926] bridge0: port 2(bridge_slave_1) entered disabled state [ 2411.008335][ T3926] device bridge_slave_1 entered promiscuous mode [ 2411.085630][ T3926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2411.114912][ T3926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2411.266391][ T3926] team0: Port device team_slave_0 added [ 2411.296952][ T3926] team0: Port device team_slave_1 added [ 2411.352730][ T3926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2411.378289][ T3926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2411.466854][ T3926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2411.785704][ T3926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2411.839580][ T3926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2411.988382][ T3926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2412.068266][ T2507] Bluetooth: hci3: command 0x0409 tx timeout [ 2412.475466][ T3926] device hsr_slave_0 entered promiscuous mode [ 2412.532148][ T3926] device hsr_slave_1 entered promiscuous mode [ 2412.565443][ T3926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2412.607655][ T3926] Cannot create hsr debugfs directory [ 2413.945173][ T3980] tap0: tun_chr_ioctl cmd 1074025675 [ 2413.958339][ T3980] tap0: persist enabled [ 2414.088788][ T3980] tap0: tun_chr_ioctl cmd 1074025675 [ 2414.094430][ T3980] tap0: persist enabled [ 2414.115995][ T3981] tap0: tun_chr_ioctl cmd 2147767520 [ 2414.157064][ T2507] Bluetooth: hci3: command 0x041b tx timeout [ 2414.249241][ T3926] device netdevsim0 left promiscuous mode [ 2414.327092][ T3926] team0: Port device netdevsim0 removed [ 2414.468287][ T2507] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2415.429670][ T3926] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2415.593146][ T3926] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2415.646654][ T3926] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2415.744306][ T3926] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2415.981059][ T4005] device syzkaller0 entered promiscuous mode [ 2416.238229][ T2507] Bluetooth: hci3: command 0x040f tx timeout [ 2418.308305][ T2507] Bluetooth: hci3: command 0x0419 tx timeout [ 2430.608689][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2430.619345][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2430.630950][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2430.640957][T14244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2430.652150][T14244] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2430.659890][T14244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2431.891921][ T2507] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2431.901979][ T2507] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2431.910555][ T2507] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2431.919206][ T2507] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2431.926890][ T2507] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2431.947306][ T4285] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2432.046548][T14244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2432.056282][T14244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2432.076354][T14244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2432.085724][T14244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2432.093449][T14244] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2432.100867][T14244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2432.283462][ T4045] tap1: tun_chr_ioctl cmd 1074025675 [ 2432.318669][ T4045] tap1: persist enabled [ 2432.323054][ T4046] tap1: tun_chr_ioctl cmd 2147767520 [ 2432.683468][ T3926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2432.708393][T14244] Bluetooth: hci5: command 0x0409 tx timeout [ 2432.951036][ T3926] 8021q: adding VLAN 0 to HW filter on device team0 [ 2432.978804][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2432.990720][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2433.483011][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2433.515485][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2433.544808][T24784] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.552299][T24784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2433.624160][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2433.652887][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2433.680310][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2433.698817][T24784] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.706163][T24784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2433.747509][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2433.856426][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2433.914834][ T4056] chnl_net:caif_netlink_parms(): no params data found [ 2433.957602][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2433.988288][T14244] Bluetooth: hci6: command 0x0409 tx timeout [ 2433.988626][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2434.060865][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2434.100510][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2434.141033][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2434.157846][T14244] Bluetooth: hci7: command 0x0409 tx timeout [ 2434.174767][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2434.206794][ T3926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2434.269971][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2434.294902][ T4047] chnl_net:caif_netlink_parms(): no params data found [ 2434.361437][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2434.378035][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2434.400593][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2434.490992][ T4054] chnl_net:caif_netlink_parms(): no params data found [ 2434.788392][T14244] Bluetooth: hci5: command 0x041b tx timeout [ 2434.806743][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 2434.829355][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 2434.878492][ T4056] device bridge_slave_0 entered promiscuous mode [ 2435.060569][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 2435.067747][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 2435.128904][ T4056] device bridge_slave_1 entered promiscuous mode [ 2435.178531][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 2435.185781][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 2435.227182][ T4047] device bridge_slave_0 entered promiscuous mode [ 2435.407797][ T4056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2435.436913][ T4056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2435.552959][ T4056] team0: Port device team_slave_0 added [ 2435.616481][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 2435.632963][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 2435.652870][ T4047] device bridge_slave_1 entered promiscuous mode [ 2435.766252][ T4056] team0: Port device team_slave_1 added [ 2435.787494][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 2435.798362][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 2435.819262][ T4054] device bridge_slave_0 entered promiscuous mode [ 2435.868012][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2435.888722][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2435.904184][ T3926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2435.919253][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 2435.926634][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 2435.952087][ T4054] device bridge_slave_1 entered promiscuous mode [ 2435.974510][ T4047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2435.997288][ T4056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2436.005463][ T4056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2436.032330][ T4056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2436.050141][ T4056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2436.057327][ T4056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2436.068335][T14244] Bluetooth: hci6: command 0x041b tx timeout [ 2436.090141][ T4056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2436.117849][ T4047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2436.212847][ T4054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2436.229395][T14244] Bluetooth: hci7: command 0x041b tx timeout [ 2436.264285][ T4054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2436.294418][ T4047] team0: Port device team_slave_0 added [ 2436.311253][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2436.339298][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2436.363878][ T4056] device hsr_slave_0 entered promiscuous mode [ 2436.374082][ T4056] device hsr_slave_1 entered promiscuous mode [ 2436.391599][ T4056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2436.414429][ T4056] Cannot create hsr debugfs directory [ 2436.446478][ T4047] team0: Port device team_slave_1 added [ 2436.559409][ T4054] team0: Port device team_slave_0 added [ 2436.597480][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2436.611929][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2436.638651][ T4047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2436.666410][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2436.688627][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2436.712639][ T4054] team0: Port device team_slave_1 added [ 2436.726137][ T3926] device veth0_vlan entered promiscuous mode [ 2436.751609][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2436.761929][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2436.790754][ T4047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2436.805969][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2436.831805][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2436.868660][T14244] Bluetooth: hci5: command 0x040f tx timeout [ 2436.971536][ T4047] device hsr_slave_0 entered promiscuous mode [ 2436.986833][ T4047] device hsr_slave_1 entered promiscuous mode [ 2437.000914][ T4047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2437.017060][ T4047] Cannot create hsr debugfs directory [ 2437.024318][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2437.049939][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2437.098156][ T4054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2437.136296][ T3926] device veth1_vlan entered promiscuous mode [ 2437.166363][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2437.177813][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2437.206794][ T4054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2437.342559][ T4054] device hsr_slave_0 entered promiscuous mode [ 2437.350402][ T4054] device hsr_slave_1 entered promiscuous mode [ 2437.357623][ T4054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2437.365445][ T4054] Cannot create hsr debugfs directory [ 2437.440181][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2437.459305][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2437.481785][ T3926] device veth0_macvtap entered promiscuous mode [ 2437.529434][ T3926] device veth1_macvtap entered promiscuous mode [ 2437.689082][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.701865][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.728323][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.750200][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.768306][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.788229][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.818330][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.838153][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.858478][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.878169][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.888054][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.937534][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.947977][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.967748][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2437.978764][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2437.990063][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.000311][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2438.011862][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.022338][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2438.033999][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.044239][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2438.069307][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.098370][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2438.118253][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.140360][ T3926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2438.148832][T14244] Bluetooth: hci6: command 0x040f tx timeout [ 2438.151967][ T4056] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2438.189999][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2438.210354][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2438.231038][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2438.259874][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2438.282123][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2438.303382][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.315175][T14244] Bluetooth: hci7: command 0x040f tx timeout [ 2438.322510][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2438.334431][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.344858][ T3926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2438.355794][ T3926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2438.367939][ T3926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2438.387222][ T4056] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2438.434095][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2438.452874][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2438.486269][ T4056] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2438.529988][ T3926] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.548514][ T3926] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.557273][ T3926] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.566767][ T3926] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.585706][ T4056] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2438.831376][ T4047] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2438.870273][ T4047] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2438.884537][ T4047] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2438.918354][ T4047] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2438.949783][T14244] Bluetooth: hci5: command 0x0419 tx timeout [ 2438.968630][ T5336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2438.976549][ T5336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2439.076960][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2439.154346][T18082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2439.165202][T18082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2439.177608][ T4054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2439.196894][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2439.222112][ T4054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2439.260564][ T4056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2439.291707][ T4054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2439.309764][ T4054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2439.367346][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2439.386008][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2439.509131][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2439.520453][ T4056] 8021q: adding VLAN 0 to HW filter on device team0 [ 2439.716097][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 2439.759507][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2439.795274][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2439.824058][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2439.852440][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2439.882084][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 2439.889295][ T5336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2439.937557][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2439.966973][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2439.990405][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 2439.997615][ T5336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2440.109349][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2440.125187][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2440.165378][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2440.195271][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 2440.202655][ T5336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2440.232883][T14244] Bluetooth: hci6: command 0x0419 tx timeout [ 2440.252876][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2440.284183][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2440.313956][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 2440.321325][ T5336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2440.368903][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2440.390503][T14244] Bluetooth: hci7: command 0x0419 tx timeout [ 2440.399707][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2440.430164][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2440.451918][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2440.461210][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2440.471252][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2440.486000][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2440.638364][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2440.672695][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2440.697413][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2440.717490][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2440.739333][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2440.748369][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2440.757210][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2440.766844][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2440.780251][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2440.790186][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2440.804092][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2440.830249][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2440.851183][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2440.901145][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2440.919246][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2440.939267][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2440.960552][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2440.997737][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2441.080135][ T4054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2441.139147][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2441.147323][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2441.187464][ T4054] 8021q: adding VLAN 0 to HW filter on device team0 [ 2441.227200][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2441.249843][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2441.279639][T24784] bridge0: port 1(bridge_slave_0) entered blocking state [ 2441.295425][T24784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2441.379749][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2441.399791][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2441.426343][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2441.459261][T24784] bridge0: port 2(bridge_slave_1) entered blocking state [ 2441.466525][T24784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2441.491737][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2441.529656][T24784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2441.579656][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2441.600142][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2441.618938][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2441.639306][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2441.666978][ T4056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2441.708426][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2441.717551][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2441.735217][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2441.757381][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2441.774304][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2441.819364][ T4047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2441.838453][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2441.846351][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2441.872595][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2441.888911][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2441.911546][ T4054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2442.611982][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2442.629336][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2442.656829][ T4054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2442.692067][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2442.702207][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2442.783210][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2442.821747][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2442.855981][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2442.879361][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2442.891642][ T4056] device veth0_vlan entered promiscuous mode [ 2442.950199][ T4056] device veth1_vlan entered promiscuous mode [ 2442.974840][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2442.999438][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2443.009494][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2443.081377][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2443.099430][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2443.119594][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2443.144329][ T4047] device veth0_vlan entered promiscuous mode [ 2443.160848][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2443.179428][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2443.206106][ T4056] device veth0_macvtap entered promiscuous mode [ 2443.222653][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2443.250092][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2443.279767][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2443.304853][ T4047] device veth1_vlan entered promiscuous mode [ 2443.337422][ T4056] device veth1_macvtap entered promiscuous mode [ 2443.396236][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2443.412812][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2443.449274][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2443.470097][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2443.490261][T24777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2443.510952][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.528475][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.555425][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.566960][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.577390][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.608966][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.628226][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.648183][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.668731][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.679925][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.690142][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.702337][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.714536][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.726324][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.736743][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.749411][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.759662][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.771472][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.781953][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.793164][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.803435][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.838391][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.858215][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.878929][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.908808][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2443.928286][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2443.949947][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2443.966570][ T4047] device veth0_macvtap entered promiscuous mode [ 2443.975871][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2443.985924][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2443.997676][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2444.012732][ T4047] device veth1_macvtap entered promiscuous mode [ 2444.024759][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2444.037140][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.047650][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2444.062943][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.075383][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2444.086504][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.096777][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2444.118405][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.158782][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2444.167724][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2444.189290][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2444.222123][ T4056] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.244004][ T4056] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.261252][ T4056] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.274345][ T4056] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.317769][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.338865][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.355144][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.388123][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.398013][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.428132][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.448191][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.481914][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.494501][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.518419][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.538171][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.558141][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.570043][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.580662][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.591279][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.601834][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.611757][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.622404][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.648242][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.678529][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.688831][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.709088][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.719478][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.730227][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.758141][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.778141][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.798148][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2444.818143][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.840106][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2444.847724][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2444.879694][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2444.900603][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2444.919439][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2444.936640][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2444.948922][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2444.982087][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2445.006451][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2445.029427][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2445.048153][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2445.058034][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2445.069747][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2445.098278][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2445.118173][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2445.140101][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2445.180347][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2445.209900][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2445.234640][ T4054] device veth0_vlan entered promiscuous mode [ 2445.264364][ T4047] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2445.288949][ T4047] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2445.297719][ T4047] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2445.338348][ T4047] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2445.359514][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2445.369259][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2445.389962][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2445.405587][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2445.472151][ T4054] device veth1_vlan entered promiscuous mode [ 2445.655199][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2445.684529][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2445.701742][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2445.711584][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2445.785274][ T4054] device veth0_macvtap entered promiscuous mode [ 2445.802043][T24764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2445.831042][T24764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2445.903959][ T4054] device veth1_macvtap entered promiscuous mode [ 2445.912107][T24794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2445.929060][T24794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2445.938699][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2445.958429][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2445.970076][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2445.980387][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2446.092220][T24794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2446.104859][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.123724][T24794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2446.128456][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.158336][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.178159][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.188023][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.205227][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.215509][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.226675][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.237976][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.248601][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.258633][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.269898][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.279900][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.297379][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.315962][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.338194][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.348065][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.382272][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.393028][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.405130][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.415164][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.425882][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.436125][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.446676][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.456837][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.467448][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.478882][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.489732][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.500934][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2446.513389][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.525807][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2446.552087][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2446.569602][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2446.589093][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2446.645173][T18082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2446.646206][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2446.658327][T18082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2446.688875][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.728434][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2446.748154][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.762316][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2446.773094][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.783254][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2446.794569][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.804907][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2446.828171][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.858284][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2446.888307][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2446.901043][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2446.921235][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2446.939291][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2446.952223][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2446.986270][ T4054] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2446.995950][ T4054] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2447.020818][ T4054] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2447.038136][ T4054] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2447.345418][ T5336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2447.398509][ T5336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2447.488512][T24794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2447.536077][ T5336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2447.558167][ T5336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2447.566011][T24764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2467.830480][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.837028][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.270197][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.276741][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2536.468672][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 2556.948383][ T2507] Bluetooth: hci5: command 0x0406 tx timeout [ 2556.954476][ T2507] Bluetooth: hci6: command 0x0406 tx timeout [ 2556.960789][T14244] Bluetooth: hci7: command 0x0406 tx timeout [ 2590.711693][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.718101][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.149967][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.156334][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.592273][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.598693][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 Stopping sshd: stopped /usr/sbin/sshd (pid 4026) OK Stopping crond: stopped /usr/sbin/crond (pid 4009) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3931) Stopping network: OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 3619) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff [ 2734.109291][ T4228] kvm: exiting hardware virtualization [ 2734.171096][ T4228] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2734.193504][ T4228] ACPI: PM: Preparing to enter system sleep state S5 [ 2734.228495][ T4228] reboot: Power down serialport: VM disconnected.