last executing test programs: 9.138405031s ago: executing program 0 (id=6918): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.991593168s ago: executing program 0 (id=6921): r0 = syz_clone(0x2000, &(0x7f0000000000)="121996dc2e1702c2062ef5fa9826b5292ef5e7dacc957a43a02bba2b504ea3d9f6b28fbec5909b1a8c316b4ea9fe78d47cfbd08650137586c5773686c20dcdc0fe7900aa823f32a182bebbd18ffc94707dbe3413a8eb2ab13f28d015fc9a2aa67b46717889e792db17474f983efe7d94de6408", 0x73, 0x0, &(0x7f0000000100), &(0x7f0000000140)="cc0599ffc5a14827846ad0745fe15e4ea335b1754cc40a2d5dab28dbdcb54871093f8b9e577cd260ce1abbe26b38871ae54b0df157d83d6c8bcc9f660cc54baccb364d6e39696bf0a142d6b4929ee7a94ffbff99a0285406df84a84a68b1c16da3d81f0d2d5b973ba0aad43f270f91d835a8d4af22a071aa761e9939c6da2f95d34f4668f6613d03f9d195f780fa1441f2c83315f71496f182f082bdae0c59b832dac3e35a452591ec4b2ab6ed56a2b6d68bc5a91314b5ba689493b96f07c3372f8690c26bbccb046bcd8d1b288a") syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/time_for_children\x00') perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.889718993s ago: executing program 1 (id=6922): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x40, 0xe99, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.837252655s ago: executing program 4 (id=6924): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x1c) 8.666869704s ago: executing program 1 (id=6925): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0), 0x0, 0x5b, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000ac0), 0x8, 0xaf, 0x8, 0x8, &(0x7f00000002c0)}}, 0xffffffad) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000007000000000000000500000018180000", @ANYRES32=r0, @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x53, &(0x7f0000000a40)=""/83, 0x41000, 0x24, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x10, 0x10000b8, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[r0, r0, r0, r0, r0], &(0x7f0000000700)=[{0x0, 0x5, 0xc, 0x5}, {0x5, 0x2, 0xf, 0x2}, {0x4, 0x4, 0x8, 0x2}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000f888793374aabdc9d800000000000000"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={'pim6reg\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4e}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x20003}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000000000007112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8927, &(0x7f0000000140)='8)\r\xecn(:\xb8;\xd1\x85\xe0.U\xd3\xf6\xd3\xd6\xf7L\f\x0e}\x7f\x9e\x96\xbco\xb4\xeb\x87=\x13x\x88wq_2*E\xc8@\x15\xc7\xfc`\xc6Z\xeb\x9d\xeb\x9cJN\xd14\xeccZ\x8d\xc3\x82H\xceq\x14\xda\x117\xf5*\xfd0\xaf\xb5\xaa\xb4\xda\xbat\xfd\xe9\xb1!R\xf9\xe4\x17\xe9\x92{U\xe6&\xae\xdf\n\x15\xa0U\xb6!\xde9m\xd5\vU\x9fR\x84\xf3N\x83W\xd0\x80') bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/72}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.659639664s ago: executing program 0 (id=6936): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, &(0x7f0000000300)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)='U', 0x1}], 0x1}, 0x20000044) 8.583858518s ago: executing program 4 (id=6926): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) 8.120470131s ago: executing program 0 (id=6929): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc01e4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x4, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8912, &(0x7f0000000080)) 7.818691265s ago: executing program 1 (id=6932): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x2, 0xb4, 0x7f}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8004745a, 0x0) 7.582983197s ago: executing program 4 (id=6933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 7.282229482s ago: executing program 2 (id=6934): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000300, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000a80)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 7.281119762s ago: executing program 0 (id=6945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x3, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local]}) 6.782034677s ago: executing program 3 (id=6935): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70a0000000000008500000095000000b7000000000000009500000000002d00"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1007, &(0x7f0000000440)=""/4103, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb}, 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b3f000000000000000000000000ac1414aa000088be"], 0xcfa4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0xc18f67e3097f9963, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x3, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) socketpair(0x28, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0x92cfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xb}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f00000006c0), 0xf0107ff0780000}, 0x20) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r9, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x100}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r9, r5, 0x4, r5}, 0x10) 2.928942046s ago: executing program 3 (id=6937): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x40, 0xe99, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.928187076s ago: executing program 0 (id=6948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000200008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.927786286s ago: executing program 1 (id=6938): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x1c) 2.927605656s ago: executing program 2 (id=6939): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.781186883s ago: executing program 4 (id=6940): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2.706106027s ago: executing program 1 (id=6941): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15a", 0x6}], 0x1}, 0x20040000) 2.542664605s ago: executing program 3 (id=6942): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) 2.470565928s ago: executing program 1 (id=6943): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x40fd) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.42231886s ago: executing program 3 (id=6944): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) 1.42203501s ago: executing program 4 (id=6946): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000080000000000, 0x802}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18006000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 1.41160429s ago: executing program 2 (id=6956): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.043638888s ago: executing program 2 (id=6947): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x10, 0x10, &(0x7f0000000080)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) 828.305919ms ago: executing program 4 (id=6949): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)="c888f359dda90dec57fec8c7cc80890d82031840dbde892739ad59ff97ac145bac248fa47619b4b4a08178b72d02a688f661528580543fd424cd326e07d7bf323f90aa054e3987fd4c89a7408f711fcf7d8f53d2436e90f3e4cfe27548a2568cf659e999b68c042a9a27382cfea0205024bdbc5f55ec6bda22ef335a7d0181cfa3", 0x81, 0x4048000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000600)=0xd, 0x18) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) syz_clone(0x4000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 613.20303ms ago: executing program 2 (id=6950): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x104, 0x0, 0xfffffffd, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/136, 0x88}], 0x1}, 0x0) close(r1) 327.973304ms ago: executing program 3 (id=6951): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70a0000000000008500000095000000b7000000000000009500000000002d00"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1007, &(0x7f0000000440)=""/4103, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb}, 0x24) 171.349011ms ago: executing program 2 (id=6952): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=6953): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}], 0x10, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x1c) kernel console output (not intermixed with test programs): 316][T20106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 862.587408][T20106] Call Trace: [ 862.590754][T20106] [ 862.593779][T20106] dump_stack_lvl+0x188/0x24e [ 862.598517][T20106] ? show_regs_print_info+0x12/0x12 [ 862.603769][T20106] ? load_image+0x400/0x400 [ 862.608409][T20106] ? __might_sleep+0xd0/0xd0 [ 862.613039][T20106] ? __lock_acquire+0x7d10/0x7d10 [ 862.618109][T20106] should_fail_ex+0x399/0x4d0 [ 862.622832][T20106] should_failslab+0x5/0x20 [ 862.627378][T20106] slab_pre_alloc_hook+0x59/0x310 [ 862.632447][T20106] ? tomoyo_encode+0x27e/0x540 [ 862.637256][T20106] __kmem_cache_alloc_node+0x4f/0x260 [ 862.642687][T20106] ? tomoyo_encode+0x27e/0x540 [ 862.647501][T20106] __kmalloc+0xa0/0x240 [ 862.651798][T20106] tomoyo_encode+0x27e/0x540 [ 862.656526][T20106] tomoyo_realpath_from_path+0x58e/0x5d0 [ 862.662236][T20106] ? tomoyo_path_number_perm+0x205/0x650 [ 862.668099][T20106] tomoyo_path_number_perm+0x22f/0x650 [ 862.673615][T20106] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 862.679135][T20106] ? ksys_write+0x1c0/0x250 [ 862.683695][T20106] ? common_file_perm+0x171/0x1c0 [ 862.688909][T20106] ? __fget_files+0x28/0x4b0 [ 862.693538][T20106] ? __fget_files+0x28/0x4b0 [ 862.698275][T20106] security_file_ioctl+0x6c/0xa0 [ 862.703272][T20106] __se_sys_ioctl+0x48/0x170 [ 862.707982][T20106] do_syscall_64+0x4c/0xa0 [ 862.712447][T20106] ? clear_bhb_loop+0x60/0xb0 [ 862.717162][T20106] ? clear_bhb_loop+0x60/0xb0 [ 862.721872][T20106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.727808][T20106] RIP: 0033:0x7f7933f9c799 [ 862.732261][T20106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.751896][T20106] RSP: 002b:00007f7934e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.760515][T20106] RAX: ffffffffffffffda RBX: 00007f7934215fa0 RCX: 00007f7933f9c799 [ 862.768704][T20106] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000f [ 862.776730][T20106] RBP: 00007f7934e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 862.784745][T20106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.792759][T20106] R13: 00007f7934216038 R14: 00007f7934215fa0 R15: 00007ffd96ff5b28 [ 862.800886][T20106] [ 863.089992][T20106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 863.107135][T20117] __nla_validate_parse: 22 callbacks suppressed [ 863.107190][T20117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5414'. [ 863.134223][T20117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5414'. [ 863.163461][T20123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5414'. [ 863.199343][T20117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5414'. [ 863.257634][T20126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5417'. [ 863.429312][T20134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5421'. [ 863.454263][T20135] netlink: 'syz.0.5420': attribute type 10 has an invalid length. [ 863.463369][T20135] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5420'. [ 863.753463][ T5238] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 864.334386][T20162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5430'. [ 865.734766][T20186] netlink: 763 bytes leftover after parsing attributes in process `syz.1.5436'. [ 865.753139][T20182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5434'. [ 866.607839][T20219] FAULT_INJECTION: forcing a failure. [ 866.607839][T20219] name failslab, interval 1, probability 0, space 0, times 0 [ 866.624114][T20219] CPU: 0 PID: 20219 Comm: syz.2.5450 Not tainted syzkaller #0 [ 866.631627][T20219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.641877][T20219] Call Trace: [ 866.645152][T20219] [ 866.648067][T20219] dump_stack_lvl+0x188/0x24e [ 866.652767][T20219] ? show_regs_print_info+0x12/0x12 [ 866.658156][T20219] ? load_image+0x400/0x400 [ 866.662651][T20219] ? __might_sleep+0xd0/0xd0 [ 866.667444][T20219] ? __lock_acquire+0x7d10/0x7d10 [ 866.672654][T20219] ? mark_lock+0x94/0x320 [ 866.677076][T20219] should_fail_ex+0x399/0x4d0 [ 866.681766][T20219] should_failslab+0x5/0x20 [ 866.686296][T20219] slab_pre_alloc_hook+0x59/0x310 [ 866.691547][T20219] kmem_cache_alloc_node+0x5a/0x320 [ 866.696812][T20219] ? __alloc_skb+0xfc/0x7e0 [ 866.701374][T20219] __alloc_skb+0xfc/0x7e0 [ 866.705757][T20219] inet_netconf_notify_devconf+0x16f/0x230 [ 866.711626][T20219] inetdev_event+0x702/0x1400 [ 866.716365][T20219] ? devinet_exit_net+0x220/0x220 [ 866.721435][T20219] ? arp_netdev_event+0xd4/0x320 [ 866.726499][T20219] raw_notifier_call_chain+0xcb/0x160 [ 866.731896][T20219] unregister_netdevice_many+0x1086/0x1930 [ 866.737797][T20219] ? lockdep_hardirqs_on+0x94/0x140 [ 866.742995][T20219] ? alloc_netdev_mqs+0xf00/0xf00 [ 866.748016][T20219] ? aa_get_newest_label+0xf9/0x5b0 [ 866.753209][T20219] ? end_current_label_crit_section+0x170/0x170 [ 866.759452][T20219] ? net_generic+0x1e/0x240 [ 866.763951][T20219] unregister_netdevice_queue+0x324/0x370 [ 866.769668][T20219] ? list_netdevice+0x6c0/0x6c0 [ 866.774520][T20219] ? security_capable+0x85/0xb0 [ 866.779372][T20219] ip_tunnel_ctl+0x139/0x1910 [ 866.784055][T20219] ? __might_fault+0xa6/0x120 [ 866.788818][T20219] vti_tunnel_ctl+0x1f5/0x380 [ 866.793527][T20219] ip_tunnel_siocdevprivate+0x134/0x1e0 [ 866.799070][T20219] ? ip_tunnel_update+0xaa0/0xaa0 [ 866.804094][T20219] ? full_name_hash+0x8e/0xe0 [ 866.808772][T20219] dev_ifsioc+0xa4a/0xd40 [ 866.813097][T20219] ? dev_ioctl+0xe80/0xe80 [ 866.817498][T20219] ? lockdep_hardirqs_on+0x94/0x140 [ 866.822693][T20219] ? full_name_hash+0x8e/0xe0 [ 866.827641][T20219] ? dev_load+0x1d/0x1e0 [ 866.831885][T20219] ? dev_load+0x1d/0x1e0 [ 866.836127][T20219] dev_ioctl+0x5f8/0xe80 [ 866.840359][T20219] ? get_user_ifreq+0xc7/0x170 [ 866.845118][T20219] sock_ioctl+0x691/0x710 [ 866.849439][T20219] ? sock_poll+0x410/0x410 [ 866.853876][T20219] ? bpf_lsm_file_ioctl+0x5/0x10 [ 866.858820][T20219] ? security_file_ioctl+0x7c/0xa0 [ 866.863925][T20219] ? sock_poll+0x410/0x410 [ 866.868331][T20219] __se_sys_ioctl+0xfa/0x170 [ 866.872930][T20219] do_syscall_64+0x4c/0xa0 [ 866.877438][T20219] ? clear_bhb_loop+0x60/0xb0 [ 866.882216][T20219] ? clear_bhb_loop+0x60/0xb0 [ 866.886937][T20219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 866.892846][T20219] RIP: 0033:0x7f4c51f9c799 [ 866.897260][T20219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.916871][T20219] RSP: 002b:00007f4c52ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.925334][T20219] RAX: ffffffffffffffda RBX: 00007f4c52215fa0 RCX: 00007f4c51f9c799 [ 866.933390][T20219] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 000000000000000d [ 866.941441][T20219] RBP: 00007f4c52ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 866.949516][T20219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.957518][T20219] R13: 00007f4c52216038 R14: 00007f4c52215fa0 R15: 00007ffd953779e8 [ 866.965622][T20219] [ 867.023911][T20225] netlink: 'syz.1.5453': attribute type 10 has an invalid length. [ 867.036278][T20225] bond0: (slave team0): Releasing backup interface [ 867.061067][T20225] bridge0: port 4(team0) entered blocking state [ 867.067637][T20225] bridge0: port 4(team0) entered disabled state [ 867.384655][T20244] netlink: 'syz.1.5458': attribute type 4 has an invalid length. [ 867.873379][T20265] netlink: 'syz.4.5468': attribute type 10 has an invalid length. [ 867.900819][T20265] team0: Port device wlan1 removed [ 867.918118][T20265] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 868.424011][T20285] __nla_validate_parse: 22 callbacks suppressed [ 868.424057][T20285] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5475'. [ 868.458302][T20285] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5475'. [ 868.472290][T20285] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5475'. [ 868.502964][T20285] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5475'. [ 868.732187][T20298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5481'. [ 868.892616][T20300] sock: sock_timestamping_bind_phc: sock not bind to device [ 868.967482][T20307] netlink: 'syz.3.5484': attribute type 4 has an invalid length. [ 869.246680][T20314] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5488'. [ 869.267017][T20314] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5488'. [ 869.300357][T20319] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5488'. [ 869.347830][T20314] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5488'. [ 869.997820][T20324] netlink: 'syz.4.5492': attribute type 4 has an invalid length. [ 870.043473][T20330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5495'. [ 870.103950][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.110483][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.321668][T20339] FAULT_INJECTION: forcing a failure. [ 870.321668][T20339] name failslab, interval 1, probability 0, space 0, times 0 [ 870.355096][T20339] CPU: 0 PID: 20339 Comm: syz.1.5497 Not tainted syzkaller #0 [ 870.362627][T20339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 870.372684][T20339] Call Trace: [ 870.375961][T20339] [ 870.378887][T20339] dump_stack_lvl+0x188/0x24e [ 870.383579][T20339] ? show_regs_print_info+0x12/0x12 [ 870.388781][T20339] ? load_image+0x400/0x400 [ 870.393288][T20339] ? __might_sleep+0xd0/0xd0 [ 870.397873][T20339] ? __lock_acquire+0x7d10/0x7d10 [ 870.402910][T20339] should_fail_ex+0x399/0x4d0 [ 870.407585][T20339] should_failslab+0x5/0x20 [ 870.412088][T20339] slab_pre_alloc_hook+0x59/0x310 [ 870.417293][T20339] ? __inet_diag_dump_start+0x8b/0x970 [ 870.422752][T20339] __kmem_cache_alloc_node+0x4f/0x260 [ 870.428149][T20339] ? __netlink_dump_start+0x11f/0x6f0 [ 870.433518][T20339] ? __inet_diag_dump_start+0x8b/0x970 [ 870.438972][T20339] kmalloc_trace+0x26/0xe0 [ 870.443397][T20339] __inet_diag_dump_start+0x8b/0x970 [ 870.448730][T20339] ? netlink_lookup+0x30/0x200 [ 870.453520][T20339] __netlink_dump_start+0x3f9/0x6f0 [ 870.458728][T20339] inet_diag_rcv_msg_compat+0x207/0x420 [ 870.464309][T20339] ? __inet_diag_dump+0x380/0x380 [ 870.469540][T20339] ? sock_diag_rcv_msg+0x142/0x5f0 [ 870.474653][T20339] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 870.480367][T20339] ? inet_diag_dump_start_compat+0x20/0x20 [ 870.486202][T20339] ? inet_diag_dump+0x50/0x50 [ 870.491050][T20339] ? __inet_diag_dump+0x380/0x380 [ 870.496192][T20339] sock_diag_rcv_msg+0x3cc/0x5f0 [ 870.501135][T20339] netlink_rcv_skb+0x1fb/0x450 [ 870.505908][T20339] ? sock_diag_bind+0xa0/0xa0 [ 870.510588][T20339] ? netlink_ack+0x1170/0x1170 [ 870.515364][T20339] ? netlink_deliver_tap+0x2e/0x1b0 [ 870.520566][T20339] sock_diag_rcv+0x26/0x40 [ 870.524996][T20339] netlink_unicast+0x74d/0x8d0 [ 870.529937][T20339] netlink_sendmsg+0x8ad/0xbd0 [ 870.534708][T20339] ? netlink_getsockopt+0x550/0x550 [ 870.539914][T20339] ? aa_sock_msg_perm+0x94/0x150 [ 870.544846][T20339] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 870.550136][T20339] ? security_socket_sendmsg+0x7c/0xa0 [ 870.555599][T20339] ? netlink_getsockopt+0x550/0x550 [ 870.560876][T20339] ____sys_sendmsg+0x5be/0x970 [ 870.565743][T20339] ? __sys_sendmsg_sock+0x30/0x30 [ 870.570763][T20339] ? __import_iovec+0x315/0x500 [ 870.575610][T20339] ? import_iovec+0x6f/0xa0 [ 870.580108][T20339] ___sys_sendmsg+0x2a2/0x360 [ 870.584791][T20339] ? __sys_sendmsg+0x290/0x290 [ 870.589566][T20339] ? __lock_acquire+0x7d10/0x7d10 [ 870.594605][T20339] __se_sys_sendmsg+0x1bb/0x2a0 [ 870.599455][T20339] ? __x64_sys_sendmsg+0x80/0x80 [ 870.604400][T20339] ? lockdep_hardirqs_on+0x94/0x140 [ 870.609594][T20339] do_syscall_64+0x4c/0xa0 [ 870.614015][T20339] ? clear_bhb_loop+0x60/0xb0 [ 870.618696][T20339] ? clear_bhb_loop+0x60/0xb0 [ 870.623370][T20339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.629258][T20339] RIP: 0033:0x7fb50a39c799 [ 870.633666][T20339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.653308][T20339] RSP: 002b:00007fb50b286028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.661824][T20339] RAX: ffffffffffffffda RBX: 00007fb50a615fa0 RCX: 00007fb50a39c799 [ 870.669911][T20339] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 870.677976][T20339] RBP: 00007fb50b286090 R08: 0000000000000000 R09: 0000000000000000 [ 870.685946][T20339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.693950][T20339] R13: 00007fb50a616038 R14: 00007fb50a615fa0 R15: 00007ffd5bddff08 [ 870.701948][T20339] [ 871.633129][T20374] tap0: tun_chr_ioctl cmd 1074025677 [ 871.652616][T20374] tap0: linktype set to 773 [ 871.861210][ T46] wlan1: Trigger new scan to find an IBSS to join [ 872.064736][T20389] netlink: 'syz.3.5520': attribute type 1 has an invalid length. [ 872.153538][T20389] netlink: 'syz.3.5520': attribute type 1 has an invalid length. [ 872.181658][T20395] netlink: 'syz.3.5520': attribute type 29 has an invalid length. [ 872.221074][T20395] netlink: 'syz.3.5520': attribute type 29 has an invalid length. [ 872.254773][T20389] netlink: 'syz.3.5520': attribute type 29 has an invalid length. [ 872.578333][T20398] IPv6: Can't replace route, no match found [ 872.691155][T20400] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 874.740076][T20447] netlink: 'syz.2.5537': attribute type 10 has an invalid length. [ 874.748056][T20447] __nla_validate_parse: 12 callbacks suppressed [ 874.748073][T20447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5537'. [ 874.774133][T20447] device team0 entered promiscuous mode [ 874.799613][T20447] device team_slave_0 entered promiscuous mode [ 874.817296][T20447] device team_slave_1 entered promiscuous mode [ 874.821399][ T4317] wlan1: Trigger new scan to find an IBSS to join [ 874.829384][T20447] device geneve1 entered promiscuous mode [ 874.850391][T20447] device wlan1 entered promiscuous mode [ 874.857372][T20447] net_ratelimit: 147 callbacks suppressed [ 874.857390][T20447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 875.026229][T20456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5540'. [ 875.055993][T20456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5540'. [ 875.091718][T20464] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5540'. [ 875.122378][T20456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5540'. [ 875.632952][T20482] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5550'. [ 875.715794][T20484] IPv6: Can't replace route, no match found [ 875.730111][T20484] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 875.761328][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5551'. [ 875.775886][ T75] wlan1: Creating new IBSS network, BSSID ea:f1:ab:1e:2f:1e [ 876.690224][T20507] FAULT_INJECTION: forcing a failure. [ 876.690224][T20507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.708050][T20507] CPU: 1 PID: 20507 Comm: syz.3.5558 Not tainted syzkaller #0 [ 876.715592][T20507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 876.726034][T20507] Call Trace: [ 876.729340][T20507] [ 876.732289][T20507] dump_stack_lvl+0x188/0x24e [ 876.737167][T20507] ? show_regs_print_info+0x12/0x12 [ 876.742397][T20507] ? load_image+0x400/0x400 [ 876.746921][T20507] ? __lock_acquire+0x7d10/0x7d10 [ 876.751985][T20507] should_fail_ex+0x399/0x4d0 [ 876.756703][T20507] _copy_from_user+0x2c/0x170 [ 876.761412][T20507] addrconf_add_ifaddr+0x102/0x1b0 [ 876.766554][T20507] ? addrconf_set_dstaddr+0x320/0x320 [ 876.771953][T20507] inet6_ioctl+0x16b/0x280 [ 876.776396][T20507] ? inet6_getname+0x640/0x640 [ 876.781184][T20507] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 876.787246][T20507] sock_do_ioctl+0xfb/0x320 [ 876.791772][T20507] ? sock_show_fdinfo+0xb0/0xb0 [ 876.796653][T20507] sock_ioctl+0x4d2/0x710 [ 876.800997][T20507] ? sock_poll+0x410/0x410 [ 876.805445][T20507] ? bpf_lsm_file_ioctl+0x5/0x10 [ 876.810423][T20507] ? security_file_ioctl+0x7c/0xa0 [ 876.815587][T20507] ? sock_poll+0x410/0x410 [ 876.820025][T20507] __se_sys_ioctl+0xfa/0x170 [ 876.824640][T20507] do_syscall_64+0x4c/0xa0 [ 876.829171][T20507] ? clear_bhb_loop+0x60/0xb0 [ 876.833895][T20507] ? clear_bhb_loop+0x60/0xb0 [ 876.838604][T20507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.844609][T20507] RIP: 0033:0x7fcbb019c799 [ 876.849042][T20507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.868776][T20507] RSP: 002b:00007fcbb1130028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.877336][T20507] RAX: ffffffffffffffda RBX: 00007fcbb0415fa0 RCX: 00007fcbb019c799 [ 876.885323][T20507] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000041 [ 876.893303][T20507] RBP: 00007fcbb1130090 R08: 0000000000000000 R09: 0000000000000000 [ 876.901371][T20507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.909359][T20507] R13: 00007fcbb0416038 R14: 00007fcbb0415fa0 R15: 00007ffc987ceb38 [ 876.917354][T20507] [ 876.944007][T20516] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5560'. [ 876.969697][T20516] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5560'. [ 876.987702][T20516] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5560'. [ 877.350057][T20523] device wg2 entered promiscuous mode [ 877.430863][T20525] netlink: 'syz.0.5566': attribute type 10 has an invalid length. [ 877.474333][T20525] team0: Device vxcan1 is of different type [ 877.888050][T20545] tap0: tun_chr_ioctl cmd 1074025680 [ 879.291587][T20566] netlink: 'syz.0.5580': attribute type 29 has an invalid length. [ 879.359947][T20566] netlink: 'syz.0.5580': attribute type 29 has an invalid length. [ 879.379718][T20571] netlink: 'syz.0.5580': attribute type 29 has an invalid length. [ 879.772748][T20587] __nla_validate_parse: 7 callbacks suppressed [ 879.772794][T20587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5597'. [ 879.820227][T20587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5597'. [ 879.839331][T20593] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5597'. [ 879.876461][T20587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5597'. [ 881.223733][T20620] FAULT_INJECTION: forcing a failure. [ 881.223733][T20620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.271443][T20620] CPU: 0 PID: 20620 Comm: syz.0.5599 Not tainted syzkaller #0 [ 881.279000][T20620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 881.289438][T20620] Call Trace: [ 881.292760][T20620] [ 881.295724][T20620] dump_stack_lvl+0x188/0x24e [ 881.300463][T20620] ? show_regs_print_info+0x12/0x12 [ 881.305702][T20620] ? load_image+0x400/0x400 [ 881.310346][T20620] ? __lock_acquire+0x7d10/0x7d10 [ 881.315406][T20620] ? __virt_addr_valid+0x188/0x540 [ 881.320578][T20620] should_fail_ex+0x399/0x4d0 [ 881.325304][T20620] _copy_from_user+0x2c/0x170 [ 881.330035][T20620] bpf_test_init+0xde/0x140 [ 881.334684][T20620] bpf_prog_test_run_xdp+0x484/0xf10 [ 881.340045][T20620] ? dev_put+0x80/0x80 [ 881.344276][T20620] ? dev_put+0x80/0x80 [ 881.348397][T20620] bpf_prog_test_run+0x31e/0x390 [ 881.353397][T20620] __sys_bpf+0x62b/0x780 [ 881.357786][T20620] ? bpf_link_show_fdinfo+0x380/0x380 [ 881.363266][T20620] ? lock_chain_count+0x20/0x20 [ 881.368265][T20620] __x64_sys_bpf+0x78/0x90 [ 881.372727][T20620] do_syscall_64+0x4c/0xa0 [ 881.377185][T20620] ? clear_bhb_loop+0x60/0xb0 [ 881.381909][T20620] ? clear_bhb_loop+0x60/0xb0 [ 881.386633][T20620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.392570][T20620] RIP: 0033:0x7f4dc459c799 [ 881.397311][T20620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.416971][T20620] RSP: 002b:00007f4dc54e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 881.425435][T20620] RAX: ffffffffffffffda RBX: 00007f4dc4815fa0 RCX: 00007f4dc459c799 [ 881.433538][T20620] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 881.441656][T20620] RBP: 00007f4dc54e5090 R08: 0000000000000000 R09: 0000000000000000 [ 881.449668][T20620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.457681][T20620] R13: 00007f4dc4816038 R14: 00007f4dc4815fa0 R15: 00007ffe24da8eb8 [ 881.465736][T20620] [ 881.482874][T20623] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5601'. [ 883.733158][T20622] device wg2 entered promiscuous mode [ 883.773361][T20632] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5612'. [ 884.197458][T20641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5604'. [ 884.203072][T20636] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.5603'. [ 884.232391][T20636] netlink: 'syz.2.5603': attribute type 10 has an invalid length. [ 884.277888][T20636] device vxcan1 entered promiscuous mode [ 884.288139][T20636] team0: Device vxcan1 is of different type [ 884.328707][T20641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5604'. [ 884.372066][T20645] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5604'. [ 885.064291][T20668] __nla_validate_parse: 1 callbacks suppressed [ 885.064332][T20668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5616'. [ 885.293342][T20673] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5617'. [ 885.403301][T20673] device wg2 entered promiscuous mode [ 885.758688][T20679] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.5621'. [ 885.785792][T20679] netlink: 'syz.3.5621': attribute type 10 has an invalid length. [ 885.820542][T20679] team0: Device vxcan1 is of different type [ 885.949025][T20688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5623'. [ 885.965390][T20688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5623'. [ 886.028471][T20685] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5623'. [ 886.051406][T20685] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5623'. [ 886.093510][T20699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5627'. [ 887.602506][T20739] netlink: 'syz.1.5639': attribute type 3 has an invalid length. [ 887.634039][T20739] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5639'. [ 887.668186][T20739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5639'. [ 887.688345][T20739] tc_dump_action: action bad kind [ 890.257148][T20753] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5643'. [ 892.216834][T20804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5665'. [ 892.237870][T20804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5665'. [ 892.260178][T20804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5665'. [ 892.276879][T20804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5665'. [ 892.294070][T20811] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5666'. [ 892.315691][T20811] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5666'. [ 892.352981][T20812] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5666'. [ 892.391365][T20811] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5666'. [ 892.869038][T20832] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5674'. [ 892.895078][T20832] netlink: 'syz.0.5674': attribute type 2 has an invalid length. [ 892.913560][T20832] netlink: 'syz.0.5674': attribute type 8 has an invalid length. [ 893.133925][T20836] bˆ¡cÊRݘOC‰ÿæ: renamed from lo [ 895.230089][T20859] delete_channel: no stack [ 895.397905][T20885] device syzkaller0 entered promiscuous mode [ 896.452630][T20904] netlink: 'syz.1.5695': attribute type 2 has an invalid length. [ 896.479678][T20904] netlink: 'syz.1.5695': attribute type 8 has an invalid length. [ 896.494276][T20904] __nla_validate_parse: 5 callbacks suppressed [ 896.494308][T20904] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5695'. [ 896.551960][T20903] netlink: 'syz.1.5695': attribute type 2 has an invalid length. [ 896.584623][T20903] netlink: 'syz.1.5695': attribute type 8 has an invalid length. [ 896.617145][T20903] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5695'. [ 896.634481][T20910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5697'. [ 896.709548][T20910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5697'. [ 896.763913][T20913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5697'. [ 899.697916][T20924] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5701'. [ 899.708422][T20924] device hsr_slave_0 left promiscuous mode [ 899.715140][T20924] device hsr_slave_1 left promiscuous mode [ 899.730620][T20924] bridge0: port 3(hsr0) entered disabled state [ 899.760960][T20924] bridge0: port 3(hsr0) entered disabled state [ 899.770691][T20930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5705'. [ 899.780992][T20933] netlink: 'syz.1.5705': attribute type 41 has an invalid length. [ 900.619182][T20966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5714'. [ 901.170907][T20976] netlink: 'syz.4.5718': attribute type 2 has an invalid length. [ 901.178697][T20976] netlink: 'syz.4.5718': attribute type 8 has an invalid length. [ 901.334815][T20976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5718'. [ 901.439988][T20979] netlink: 'syz.4.5718': attribute type 2 has an invalid length. [ 901.485055][T20979] netlink: 'syz.4.5718': attribute type 8 has an invalid length. [ 901.512480][T20979] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5718'. [ 901.856989][T20981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5721'. [ 901.941278][T20981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5721'. [ 901.960651][T20983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5721'. [ 902.085452][T20990] device veth1_macvtap left promiscuous mode [ 902.215691][T20989] netlink: 'syz.0.5724': attribute type 29 has an invalid length. [ 902.306524][T20989] netlink: 'syz.0.5724': attribute type 29 has an invalid length. [ 903.023572][T21004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5730'. [ 903.564514][T21020] netlink: 'syz.2.5734': attribute type 2 has an invalid length. [ 903.678031][T21020] netlink: 'syz.2.5734': attribute type 8 has an invalid length. [ 903.730205][T21020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5734'. [ 903.786902][T21021] netlink: 'syz.2.5734': attribute type 2 has an invalid length. [ 903.825720][T21021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5734'. [ 904.047039][T21028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5739'. [ 904.352387][T21034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5740'. [ 904.553690][T21036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5741'. [ 905.527194][T21060] FAULT_INJECTION: forcing a failure. [ 905.527194][T21060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.558734][T21060] CPU: 0 PID: 21060 Comm: syz.2.5749 Not tainted syzkaller #0 [ 905.566269][T21060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 905.576541][T21060] Call Trace: [ 905.579842][T21060] [ 905.582805][T21060] dump_stack_lvl+0x188/0x24e [ 905.587636][T21060] ? show_regs_print_info+0x12/0x12 [ 905.592899][T21060] ? load_image+0x400/0x400 [ 905.597697][T21060] ? __lock_acquire+0x7d10/0x7d10 [ 905.602939][T21060] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 905.608743][T21060] should_fail_ex+0x399/0x4d0 [ 905.613476][T21060] _copy_from_user+0x2c/0x170 [ 905.618290][T21060] ___sys_sendmsg+0x1c3/0x360 [ 905.623368][T21060] ? __sys_sendmsg+0x290/0x290 [ 905.628210][T21060] ? __lock_acquire+0x7d10/0x7d10 [ 905.633313][T21060] __se_sys_sendmsg+0x1bb/0x2a0 [ 905.638281][T21060] ? __x64_sys_sendmsg+0x80/0x80 [ 905.643717][T21060] ? lockdep_hardirqs_on+0x94/0x140 [ 905.649427][T21060] do_syscall_64+0x4c/0xa0 [ 905.653986][T21060] ? clear_bhb_loop+0x60/0xb0 [ 905.658676][T21060] ? clear_bhb_loop+0x60/0xb0 [ 905.663461][T21060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.669496][T21060] RIP: 0033:0x7f4c51f9c799 [ 905.673977][T21060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.693777][T21060] RSP: 002b:00007f4c52ebf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.702199][T21060] RAX: ffffffffffffffda RBX: 00007f4c52215fa0 RCX: 00007f4c51f9c799 [ 905.710184][T21060] RDX: 0000000000000000 RSI: 0000200000001a40 RDI: 0000000000000005 [ 905.718326][T21060] RBP: 00007f4c52ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 905.726302][T21060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.734405][T21060] R13: 00007f4c52216038 R14: 00007f4c52215fa0 R15: 00007ffd953779e8 [ 905.742417][T21060] [ 905.921376][T21069] validate_nla: 3 callbacks suppressed [ 905.921395][T21069] netlink: 'syz.0.5751': attribute type 2 has an invalid length. [ 905.967408][T21069] netlink: 'syz.0.5751': attribute type 8 has an invalid length. [ 906.126427][T21064] netlink: 'syz.0.5751': attribute type 2 has an invalid length. [ 906.175257][T21064] netlink: 'syz.0.5751': attribute type 8 has an invalid length. [ 906.689690][T21083] netlink: 'syz.2.5757': attribute type 10 has an invalid length. [ 906.841097][T21083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.874166][T21083] device bond0 entered promiscuous mode [ 906.893868][T21083] device bond_slave_0 entered promiscuous mode [ 906.911897][T21083] device bond_slave_1 entered promiscuous mode [ 906.921450][T21083] team0: Port device bond0 added [ 906.930522][T21085] netlink: 'syz.1.5759': attribute type 10 has an invalid length. [ 906.939891][T21085] __nla_validate_parse: 6 callbacks suppressed [ 906.939931][T21085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5759'. [ 907.003404][T21085] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.011664][T21079] delete_channel: no stack [ 907.100670][T21094] FAULT_INJECTION: forcing a failure. [ 907.100670][T21094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.151249][T21094] CPU: 1 PID: 21094 Comm: syz.4.5762 Not tainted syzkaller #0 [ 907.158777][T21094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 907.168955][T21094] Call Trace: [ 907.172250][T21094] [ 907.175198][T21094] dump_stack_lvl+0x188/0x24e [ 907.179906][T21094] ? show_regs_print_info+0x12/0x12 [ 907.185133][T21094] ? load_image+0x400/0x400 [ 907.189649][T21094] ? __lock_acquire+0x7d10/0x7d10 [ 907.194681][T21094] ? __virt_addr_valid+0x188/0x540 [ 907.199809][T21094] should_fail_ex+0x399/0x4d0 [ 907.204507][T21094] _copy_from_user+0x2c/0x170 [ 907.209181][T21094] bpf_test_init+0xde/0x140 [ 907.213714][T21094] bpf_prog_test_run_xdp+0x484/0xf10 [ 907.219012][T21094] ? dev_put+0x80/0x80 [ 907.223087][T21094] ? dev_put+0x80/0x80 [ 907.227147][T21094] bpf_prog_test_run+0x31e/0x390 [ 907.232196][T21094] __sys_bpf+0x62b/0x780 [ 907.236439][T21094] ? bpf_link_show_fdinfo+0x380/0x380 [ 907.241822][T21094] ? lock_chain_count+0x20/0x20 [ 907.246671][T21094] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 907.252659][T21094] __x64_sys_bpf+0x78/0x90 [ 907.257163][T21094] do_syscall_64+0x4c/0xa0 [ 907.261679][T21094] ? clear_bhb_loop+0x60/0xb0 [ 907.266355][T21094] ? clear_bhb_loop+0x60/0xb0 [ 907.271032][T21094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.277020][T21094] RIP: 0033:0x7f7933f9c799 [ 907.281430][T21094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.301376][T21094] RSP: 002b:00007f7934e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 907.309787][T21094] RAX: ffffffffffffffda RBX: 00007f7934215fa0 RCX: 00007f7933f9c799 [ 907.317757][T21094] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 907.325724][T21094] RBP: 00007f7934e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 907.333791][T21094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.341931][T21094] R13: 00007f7934216038 R14: 00007f7934215fa0 R15: 00007ffd96ff5b28 [ 907.349916][T21094] [ 908.723692][T21122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5770'. [ 909.999258][T21142] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5785'. [ 910.221053][T21145] netlink: 'syz.3.5774': attribute type 10 has an invalid length. [ 910.605610][T21145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.678494][T21145] team0: Port device bond0 added [ 910.870860][T21140] delete_channel: no stack [ 911.441216][T21169] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5784'. [ 911.632561][T21176] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 911.659852][ T4271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 911.670154][ T4271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 911.678152][ T4271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 911.686403][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 911.694151][ T4271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 911.935740][ T5238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.243546][ T5238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.546445][ T5238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.857088][ T5238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.003847][T21194] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5793'. [ 913.040002][T21194] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5793'. [ 913.065528][T21203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5793'. [ 913.333814][ T5238] tipc: Left network mode [ 913.368303][T21174] chnl_net:caif_netlink_parms(): no params data found [ 913.574169][T21211] netlink: 'syz.0.5796': attribute type 10 has an invalid length. [ 913.608335][T21206] delete_channel: no stack [ 913.745644][T21218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5798'. [ 913.780156][T12451] Bluetooth: hci2: command 0x0409 tx timeout [ 914.092133][T21174] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.102490][T21174] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.131177][T21174] device bridge_slave_0 entered promiscuous mode [ 914.317669][T21174] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.333967][T21174] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.367527][T21174] device bridge_slave_1 entered promiscuous mode [ 915.379802][T21258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5810'. [ 915.491675][T21174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.512603][T21258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5810'. [ 915.528408][T21260] netlink: 'syz.4.5811': attribute type 10 has an invalid length. [ 915.594741][T21260] team0: Device bond0 is already an upper device of the team interface [ 915.619963][T21263] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5812'. [ 915.681167][T21259] delete_channel: no stack [ 915.691300][T21174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.807639][T21264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5810'. [ 915.859877][T12451] Bluetooth: hci2: command 0x041b tx timeout [ 915.886955][T21174] team0: Port device team_slave_0 added [ 915.898122][T21174] team0: Port device team_slave_1 added [ 915.921617][T21174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.928795][T21174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.963049][T21174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.019221][T21174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.027155][T21174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.054662][T21174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.228617][T21174] device hsr_slave_0 entered promiscuous mode [ 916.251094][T21174] device hsr_slave_1 entered promiscuous mode [ 916.285793][T21174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 916.319701][T21174] Cannot create hsr debugfs directory [ 916.332412][T21291] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 916.379803][T21295] FAULT_INJECTION: forcing a failure. [ 916.379803][T21295] name failslab, interval 1, probability 0, space 0, times 0 [ 916.462477][T21295] CPU: 1 PID: 21295 Comm: syz.2.5818 Not tainted syzkaller #0 [ 916.469997][T21295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.480252][T21295] Call Trace: [ 916.483566][T21295] [ 916.486517][T21295] dump_stack_lvl+0x188/0x24e [ 916.491318][T21295] ? show_regs_print_info+0x12/0x12 [ 916.496561][T21295] ? load_image+0x400/0x400 [ 916.501154][T21295] ? verify_lock_unused+0x140/0x140 [ 916.506432][T21295] should_fail_ex+0x399/0x4d0 [ 916.511327][T21295] should_failslab+0x5/0x20 [ 916.515877][T21295] slab_pre_alloc_hook+0x59/0x310 [ 916.521787][T21295] kmem_cache_alloc+0x56/0x2f0 [ 916.527220][T21295] ? skb_clone+0x1e7/0x370 [ 916.532118][T21295] skb_clone+0x1e7/0x370 [ 916.536414][T21295] __netlink_deliver_tap+0x3ed/0x800 [ 916.541925][T21295] ? netlink_deliver_tap+0x2e/0x1b0 [ 916.547167][T21295] netlink_deliver_tap+0x19c/0x1b0 [ 916.552497][T21295] __netlink_sendskb+0x4b/0x90 [ 916.557308][T21295] netlink_dump+0x957/0xd00 [ 916.561862][T21295] ? netlink_lookup+0x200/0x200 [ 916.566759][T21295] ? netlink_recvmsg+0x5e3/0xe00 [ 916.571734][T21295] ? kmem_cache_free+0xf7/0x290 [ 916.576630][T21295] netlink_recvmsg+0x68f/0xe00 [ 916.581526][T21295] ? netlink_sendmsg+0xbd0/0xbd0 [ 916.586504][T21295] ? mark_lock+0x94/0x320 [ 916.590871][T21295] ? aa_af_perm+0x340/0x340 [ 916.595415][T21295] ? __lock_acquire+0x12f4/0x7d10 [ 916.600484][T21295] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 916.606077][T21295] ? security_socket_recvmsg+0x85/0xb0 [ 916.611589][T21295] ? netlink_sendmsg+0xbd0/0xbd0 [ 916.616577][T21295] ____sys_recvmsg+0x2cb/0x5e0 [ 916.621417][T21295] ? __sys_recvmsg_sock+0x40/0x40 [ 916.626505][T21295] ? import_iovec+0x6f/0xa0 [ 916.631050][T21295] ___sys_recvmsg+0x212/0x590 [ 916.635778][T21295] ? __sys_recvmsg+0x290/0x290 [ 916.640591][T21295] ? common_file_perm+0x171/0x1c0 [ 916.645666][T21295] ? __fget_files+0x43d/0x4b0 [ 916.650419][T21295] __x64_sys_recvmsg+0x205/0x2e0 [ 916.655404][T21295] ? ___sys_recvmsg+0x590/0x590 [ 916.660335][T21295] ? lockdep_hardirqs_on+0x94/0x140 [ 916.665585][T21295] do_syscall_64+0x4c/0xa0 [ 916.670046][T21295] ? clear_bhb_loop+0x60/0xb0 [ 916.674852][T21295] ? clear_bhb_loop+0x60/0xb0 [ 916.679583][T21295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.685607][T21295] RIP: 0033:0x7f4c51f9c799 [ 916.690152][T21295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.709889][T21295] RSP: 002b:00007f4c52e9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 916.718343][T21295] RAX: ffffffffffffffda RBX: 00007f4c52216090 RCX: 00007f4c51f9c799 [ 916.726354][T21295] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000004 [ 916.734369][T21295] RBP: 00007f4c52e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 916.742375][T21295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.750380][T21295] R13: 00007f4c52216128 R14: 00007f4c52216090 R15: 00007ffd953779e8 [ 916.758668][T21295] [ 916.976361][T21309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5824'. [ 917.584529][T21330] netlink: 'syz.2.5830': attribute type 1 has an invalid length. [ 917.631206][T21330] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.5830'. [ 917.939992][T12451] Bluetooth: hci2: command 0x040f tx timeout [ 918.011824][T21331] __nla_validate_parse: 1 callbacks suppressed [ 918.011867][T21331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5828'. [ 918.041127][T21337] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5828'. [ 918.093488][ T5238] device hsr_slave_0 left promiscuous mode [ 918.111573][ T5238] device hsr_slave_1 left promiscuous mode [ 918.120528][ T5238] bridge0: port 4(team0) entered disabled state [ 918.139748][ T5238] bridge0: port 3(bond0) entered disabled state [ 918.152477][ T5238] device bridge_slave_1 left promiscuous mode [ 918.158771][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.192183][ T5238] device bridge_slave_0 left promiscuous mode [ 918.208690][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.240144][ T5238] device veth1_macvtap left promiscuous mode [ 918.246510][ T5238] device veth0_macvtap left promiscuous mode [ 918.457672][ T5238] device geneve1 left promiscuous mode [ 918.469429][ T5238] team0 (unregistering): Port device geneve1 removed [ 919.472457][ T5238] device team_slave_1 left promiscuous mode [ 920.047329][T12451] Bluetooth: hci2: command 0x0419 tx timeout [ 921.131620][ T5238] team0 (unregistering): Port device team_slave_1 removed [ 921.591218][ T5238] device team_slave_0 left promiscuous mode [ 921.599203][ T5238] team0 (unregistering): Port device team_slave_0 removed [ 922.028117][ T5238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.039139][ T5238] device bond_slave_1 left promiscuous mode [ 922.171528][ T5238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.203491][ T5238] device bond_slave_0 left promiscuous mode [ 923.003750][ T5238] bond0 (unregistering): Released all slaves [ 923.393124][T21174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 924.098819][T21174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 924.137177][T21174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 924.171500][T21174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 924.482817][T21174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.581592][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 924.593495][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 924.632345][T21174] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.666412][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 924.680809][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 924.699862][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.707021][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.763015][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 924.772085][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 924.792503][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 924.830231][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.837494][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.860207][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 924.880547][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 924.933258][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 924.973334][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 925.021327][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 925.052298][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 925.100880][T21174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 925.151515][T21174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 925.211468][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 925.232940][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 925.272051][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 925.310937][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 925.320108][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 925.356584][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 925.885568][T21466] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5859'. [ 925.991536][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 925.999193][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 926.040737][T21174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.104995][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 926.121581][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 926.159535][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 926.174122][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 926.197149][T21174] device veth0_vlan entered promiscuous mode [ 926.211167][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 926.224197][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 926.240955][T21174] device veth1_vlan entered promiscuous mode [ 926.287316][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 926.303377][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 926.320354][T21174] device veth0_macvtap entered promiscuous mode [ 926.345268][T21174] device veth1_macvtap entered promiscuous mode [ 926.407314][T21174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.436009][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 926.450648][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 926.459115][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 926.477011][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 926.505749][T21174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.521660][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 926.540728][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 926.563041][T21174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.575763][T21174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.585253][T21174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.595357][T21174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.762130][ T5238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.777909][ T5238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.838188][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 926.865716][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.891700][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.917608][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 927.087644][T21503] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.5868'. [ 927.567176][T21512] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.5871'. [ 927.653558][T21514] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.5871'. [ 928.700930][T21540] FAULT_INJECTION: forcing a failure. [ 928.700930][T21540] name failslab, interval 1, probability 0, space 0, times 0 [ 928.730016][T21540] CPU: 1 PID: 21540 Comm: syz.1.5878 Not tainted syzkaller #0 [ 928.737711][T21540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 928.747791][T21540] Call Trace: [ 928.751086][T21540] [ 928.754033][T21540] dump_stack_lvl+0x188/0x24e [ 928.758745][T21540] ? show_regs_print_info+0x12/0x12 [ 928.764098][T21540] ? load_image+0x400/0x400 [ 928.768619][T21540] ? __might_sleep+0xd0/0xd0 [ 928.773292][T21540] ? __lock_acquire+0x7d10/0x7d10 [ 928.778335][T21540] should_fail_ex+0x399/0x4d0 [ 928.783073][T21540] should_failslab+0x5/0x20 [ 928.787607][T21540] slab_pre_alloc_hook+0x59/0x310 [ 928.792660][T21540] ? fib_trie_unmerge+0x8f/0xcd0 [ 928.797607][T21540] __kmem_cache_alloc_node+0x4f/0x260 [ 928.802990][T21540] ? fib_trie_unmerge+0x8f/0xcd0 [ 928.807946][T21540] kmalloc_trace+0x26/0xe0 [ 928.812378][T21540] fib_trie_unmerge+0x8f/0xcd0 [ 928.817485][T21540] ? fib_nl2rule+0x11ea/0x1b20 [ 928.822257][T21540] ? __lock_acquire+0x7d10/0x7d10 [ 928.827289][T21540] fib_unmerge+0xbc/0x350 [ 928.831619][T21540] ? fib_nl_newrule+0x1db0/0x1db0 [ 928.836656][T21540] fib4_rule_delete+0x41/0x3e0 [ 928.841417][T21540] fib_nl_delrule+0x152b/0x1da0 [ 928.846275][T21540] ? notify_rule_change+0x210/0x210 [ 928.851464][T21540] ? rcu_is_watching+0x11/0xa0 [ 928.856258][T21540] ? trace_contention_end+0x5f/0x170 [ 928.861557][T21540] ? notify_rule_change+0x210/0x210 [ 928.866747][T21540] rtnetlink_rcv_msg+0x87c/0xfc0 [ 928.871683][T21540] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 928.876792][T21540] ? rtnetlink_bind+0x80/0x80 [ 928.881531][T21540] ? __local_bh_enable_ip+0x136/0x1c0 [ 928.886947][T21540] ? lockdep_hardirqs_on+0x94/0x140 [ 928.892247][T21540] ? __local_bh_enable_ip+0x136/0x1c0 [ 928.897712][T21540] ? _local_bh_enable+0xa0/0xa0 [ 928.902571][T21540] ? __dev_queue_xmit+0x26b/0x37c0 [ 928.907685][T21540] ? __dev_queue_xmit+0x26b/0x37c0 [ 928.912819][T21540] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 928.918130][T21540] ? __dev_queue_xmit+0x26b/0x37c0 [ 928.923250][T21540] ? ref_tracker_free+0x68c/0x840 [ 928.928274][T21540] ? __copy_skb_header+0x3ba/0x4f0 [ 928.933382][T21540] ? refcount_inc+0x70/0x70 [ 928.938101][T21540] ? memcpy+0x3c/0x60 [ 928.942138][T21540] ? __copy_skb_header+0x3ba/0x4f0 [ 928.947451][T21540] ? __skb_clone+0x480/0x790 [ 928.952052][T21540] netlink_rcv_skb+0x1fb/0x450 [ 928.956827][T21540] ? rtnetlink_bind+0x80/0x80 [ 928.961530][T21540] ? netlink_ack+0x1170/0x1170 [ 928.966364][T21540] ? netlink_deliver_tap+0x2e/0x1b0 [ 928.971587][T21540] netlink_unicast+0x74d/0x8d0 [ 928.976364][T21540] netlink_sendmsg+0x8ad/0xbd0 [ 928.981147][T21540] ? netlink_getsockopt+0x550/0x550 [ 928.986436][T21540] ? aa_sock_msg_perm+0x94/0x150 [ 928.991375][T21540] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 928.996658][T21540] ? security_socket_sendmsg+0x7c/0xa0 [ 929.002129][T21540] ? netlink_getsockopt+0x550/0x550 [ 929.007325][T21540] ____sys_sendmsg+0x5be/0x970 [ 929.012107][T21540] ? __sys_sendmsg_sock+0x30/0x30 [ 929.017225][T21540] ? __import_iovec+0x315/0x500 [ 929.022164][T21540] ? import_iovec+0x6f/0xa0 [ 929.026660][T21540] ___sys_sendmsg+0x2a2/0x360 [ 929.031343][T21540] ? __sys_sendmsg+0x290/0x290 [ 929.036585][T21540] ? trace_call_bpf+0xbf/0x6b0 [ 929.041361][T21540] __se_sys_sendmsg+0x1bb/0x2a0 [ 929.046215][T21540] ? ct_nmi_exit+0x145/0x1c0 [ 929.050803][T21540] ? __x64_sys_sendmsg+0x80/0x80 [ 929.055743][T21540] ? lockdep_hardirqs_on+0x94/0x140 [ 929.060933][T21540] do_syscall_64+0x4c/0xa0 [ 929.065344][T21540] ? clear_bhb_loop+0x60/0xb0 [ 929.070028][T21540] ? clear_bhb_loop+0x60/0xb0 [ 929.074703][T21540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 929.080628][T21540] RIP: 0033:0x7f435c19c799 [ 929.085171][T21540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.104812][T21540] RSP: 002b:00007f435cfa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.113232][T21540] RAX: ffffffffffffffda RBX: 00007f435c415fa0 RCX: 00007f435c19c799 [ 929.121227][T21540] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 929.129286][T21540] RBP: 00007f435cfa8090 R08: 0000000000000000 R09: 0000000000000000 [ 929.137448][T21540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.145417][T21540] R13: 00007f435c416038 R14: 00007f435c415fa0 R15: 00007ffea77dba58 [ 929.153568][T21540] [ 930.008081][T21545] delete_channel: no stack [ 930.250831][T21561] netlink: 'syz.2.5881': attribute type 10 has an invalid length. [ 930.258795][T21561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5881'. [ 931.310770][T21578] delete_channel: no stack [ 931.505813][T21590] netlink: 'syz.3.5893': attribute type 10 has an invalid length. [ 931.559678][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.566183][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.599904][T21590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5893'. [ 931.789178][T21596] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.5894'. [ 931.992844][T21600] netlink: 'syz.1.5896': attribute type 10 has an invalid length. [ 932.008179][T21600] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5896'. [ 932.483980][T21606] netlink: 'syz.0.5899': attribute type 21 has an invalid length. [ 932.579106][T21609] netlink: 'syz.1.5898': attribute type 16 has an invalid length. [ 932.619768][T21609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5898'. [ 933.697420][T21628] FAULT_INJECTION: forcing a failure. [ 933.697420][T21628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.757965][T21628] CPU: 1 PID: 21628 Comm: syz.2.5905 Not tainted syzkaller #0 [ 933.765494][T21628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 933.775589][T21628] Call Trace: [ 933.778898][T21628] [ 933.781843][T21628] dump_stack_lvl+0x188/0x24e [ 933.786542][T21628] ? show_regs_print_info+0x12/0x12 [ 933.791759][T21628] ? load_image+0x400/0x400 [ 933.796271][T21628] ? __lock_acquire+0x7d10/0x7d10 [ 933.801476][T21628] should_fail_ex+0x399/0x4d0 [ 933.806190][T21628] strncpy_from_user+0x32/0x350 [ 933.811086][T21628] bpf_prog_load+0x1f3/0x1560 [ 933.815788][T21628] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 933.821869][T21628] ? lock_chain_count+0x20/0x20 [ 933.826834][T21628] ? map_freeze+0x390/0x390 [ 933.831341][T21628] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 933.837611][T21628] ? lockdep_hardirqs_on+0x94/0x140 [ 933.842943][T21628] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 933.848416][T21628] ? bpf_lsm_bpf+0x5/0x10 [ 933.852767][T21628] ? security_bpf+0x7a/0xa0 [ 933.857532][T21628] __sys_bpf+0x5b8/0x780 [ 933.861898][T21628] ? bpf_link_show_fdinfo+0x380/0x380 [ 933.867398][T21628] ? lock_chain_count+0x20/0x20 [ 933.872348][T21628] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 933.878382][T21628] __x64_sys_bpf+0x78/0x90 [ 933.882847][T21628] do_syscall_64+0x4c/0xa0 [ 933.887268][T21628] ? clear_bhb_loop+0x60/0xb0 [ 933.891953][T21628] ? clear_bhb_loop+0x60/0xb0 [ 933.896812][T21628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 933.902702][T21628] RIP: 0033:0x7f4c51f9c799 [ 933.907125][T21628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.927102][T21628] RSP: 002b:00007f4c52ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 933.935588][T21628] RAX: ffffffffffffffda RBX: 00007f4c52215fa0 RCX: 00007f4c51f9c799 [ 933.943657][T21628] RDX: 0000000000000042 RSI: 00002000000006c0 RDI: 0000000000000005 [ 933.952091][T21628] RBP: 00007f4c52ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 933.960069][T21628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.968046][T21628] R13: 00007f4c52216038 R14: 00007f4c52215fa0 R15: 00007ffd953779e8 [ 933.976044][T21628] [ 934.139111][T21637] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.5909'. [ 934.337105][T21636] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.5908'. [ 935.133904][T21660] netlink: 'syz.4.5917': attribute type 21 has an invalid length. [ 935.599850][T21675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5919'. [ 935.634672][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5919'. [ 935.670834][T21675] netlink: 33 bytes leftover after parsing attributes in process `syz.2.5919'. [ 935.710205][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5919'. [ 936.616580][T21704] device syzkaller0 entered promiscuous mode [ 937.756314][T21725] device syzkaller0 entered promiscuous mode [ 938.913935][ T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 940.652151][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 941.960665][T21778] device syzkaller0 entered promiscuous mode [ 946.672916][T21814] device syzkaller0 entered promiscuous mode [ 950.668243][T21843] device syzkaller0 entered promiscuous mode [ 951.768310][T21858] syz.2.5981[21858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 951.768427][T21858] syz.2.5981[21858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 956.009752][T21904] device sit0 entered promiscuous mode [ 956.598401][T21924] device syzkaller0 entered promiscuous mode [ 959.609256][T21927] device syzkaller0 entered promiscuous mode [ 962.512051][T21933] device syzkaller0 entered promiscuous mode [ 967.955548][T21952] device syzkaller0 entered promiscuous mode [ 967.991200][T21966] device syzkaller0 entered promiscuous mode [ 969.943750][ T4339] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 971.681076][ T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 979.611231][T22049] device syzkaller0 entered promiscuous mode [ 986.316086][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 986.330307][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 986.339680][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 986.348268][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 986.356550][T21176] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 986.365044][T21176] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 987.901249][T22160] chnl_net:caif_netlink_parms(): no params data found [ 988.016697][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.174223][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.408267][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.419673][T21176] Bluetooth: hci1: command 0x0409 tx timeout [ 988.636419][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.707098][T22160] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.720181][T22160] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.773245][T22160] device bridge_slave_0 entered promiscuous mode [ 988.822402][T22160] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.854679][T22160] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.906916][T22160] device bridge_slave_1 entered promiscuous mode [ 989.185446][T22160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.210451][T22160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.356705][T22160] team0: Port device team_slave_0 added [ 989.394775][T22160] team0: Port device team_slave_1 added [ 989.464494][T22160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.480818][T22160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.537570][T22160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.553674][T22160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.561156][T22160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.618025][T22160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.719873][ T46] tipc: Left network mode [ 989.845154][T22160] device hsr_slave_0 entered promiscuous mode [ 989.858674][T22160] device hsr_slave_1 entered promiscuous mode [ 989.992734][T22197] device syzkaller0 entered promiscuous mode [ 990.499628][T21176] Bluetooth: hci1: command 0x041b tx timeout [ 992.589771][T21176] Bluetooth: hci1: command 0x040f tx timeout [ 992.980927][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.989190][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.659862][T21176] Bluetooth: hci1: command 0x0419 tx timeout [ 994.829638][ T46] device wlan1 left promiscuous mode [ 994.851724][ T46] team0: Port device wlan1 removed [ 995.375780][ T46] device hsr_slave_0 left promiscuous mode [ 995.403852][ T46] device hsr_slave_1 left promiscuous mode [ 995.468754][ T46] device veth1_macvtap left promiscuous mode [ 995.476045][ T46] device veth0_macvtap left promiscuous mode [ 995.725609][ T46] device geneve1 left promiscuous mode [ 995.746793][ T46] team0 (unregistering): Port device geneve1 removed [ 996.797797][ T46] device team_slave_1 left promiscuous mode [ 996.806922][ T46] team0 (unregistering): Port device team_slave_1 removed [ 996.865734][ T46] device team_slave_0 left promiscuous mode [ 996.876821][ T46] team0 (unregistering): Port device team_slave_0 removed [ 996.937012][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.946397][ T46] device bond_slave_1 left promiscuous mode [ 997.001715][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.012605][ T46] device bond_slave_0 left promiscuous mode [ 997.415137][ T46] device bond0 left promiscuous mode [ 997.422610][ T46] team0 (unregistering): Port device bond0 removed [ 997.471162][ T46] bond0 (unregistering): Released all slaves [ 997.677749][T22160] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 997.704942][T22160] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 997.722631][T22160] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 997.756373][T22160] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 997.908420][T22260] device lo entered promiscuous mode [ 997.940274][T22260] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 998.174154][T22160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.339285][T22160] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.381106][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 998.412679][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.503303][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 998.527252][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 998.556602][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.563807][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.693570][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 998.879579][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 998.939373][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.012298][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.019584][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.158693][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 999.282649][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.411252][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 999.590410][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 999.676445][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.276322][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1000.313298][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.335417][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1000.354957][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.863847][ T4317] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1000.913173][T22160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1000.947504][T22160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.956713][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.979350][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1002.216430][T22322] device lo entered promiscuous mode [ 1002.319968][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1002.347487][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1002.395499][T22160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.590525][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1002.618588][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1002.965724][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1002.998071][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1003.030731][T22160] device veth0_vlan entered promiscuous mode [ 1003.061861][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1003.090332][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1003.155421][T22160] device veth1_vlan entered promiscuous mode [ 1003.319221][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1003.340710][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1003.404106][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1003.571820][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1003.697256][T22160] device veth0_macvtap entered promiscuous mode [ 1003.801646][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1003.913874][T22160] device veth1_macvtap entered promiscuous mode [ 1004.191631][T22160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.229579][T22160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.278284][T22160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.303652][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1004.315418][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1004.364002][T22160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.413296][T22160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.443772][T22160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.457248][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1004.477181][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1004.535006][T22160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.564531][T22160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.631656][T22160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.679600][T22160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.320307][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.328548][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.348115][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1005.383195][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.403477][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.476137][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1008.083519][T12451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1008.097324][T12451] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1008.108153][ T4271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1008.165698][T12451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1008.175842][ T4271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1008.183249][ T4271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1009.167201][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.409020][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.773379][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.936825][T22384] chnl_net:caif_netlink_parms(): no params data found [ 1010.291185][ T4271] Bluetooth: hci4: command 0x0409 tx timeout [ 1010.326560][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.082743][T22428] GPL: port 1(erspan0) entered blocking state [ 1011.114916][T22428] GPL: port 1(erspan0) entered disabled state [ 1011.201285][T22428] device erspan0 entered promiscuous mode [ 1011.240280][T22384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.247439][T22384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.308349][T22384] device bridge_slave_0 entered promiscuous mode [ 1011.331375][T22434] GPL: port 1(erspan0) entered blocking state [ 1011.337636][T22434] GPL: port 1(erspan0) entered forwarding state [ 1011.607606][T22384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.628705][T22384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.739426][T22384] device bridge_slave_1 entered promiscuous mode [ 1011.952294][T22384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.046686][T22384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.353404][T21176] Bluetooth: hci4: command 0x041b tx timeout [ 1012.496535][T22384] team0: Port device team_slave_0 added [ 1012.613443][T22384] team0: Port device team_slave_1 added [ 1012.754274][T22384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.780478][T22384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.866685][T22384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.924198][ T46] tipc: Left network mode [ 1012.938483][T22384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.951961][T22384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.026028][T22384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.172791][T22471] device sit0 entered promiscuous mode [ 1013.234676][T22462] device syzkaller0 entered promiscuous mode [ 1014.438949][ T4271] Bluetooth: hci4: command 0x040f tx timeout [ 1016.507767][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 1016.752153][T22384] device hsr_slave_0 entered promiscuous mode [ 1016.759544][T22384] device hsr_slave_1 entered promiscuous mode [ 1016.766256][T22384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1016.774219][T22384] Cannot create hsr debugfs directory [ 1017.743242][T22501] GPL: port 1(erspan0) entered blocking state [ 1017.759847][T22501] GPL: port 1(erspan0) entered disabled state [ 1017.771281][T22501] device erspan0 entered promiscuous mode [ 1018.448738][T22513] device syzkaller0 entered promiscuous mode [ 1018.763887][ T46] bond0: (slave wlan1): Releasing backup interface [ 1022.364561][ T46] device bridge_slave_1 left promiscuous mode [ 1022.375725][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.403647][ T46] device bridge_slave_0 left promiscuous mode [ 1022.442626][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.201850][ T46] device veth1_macvtap left promiscuous mode [ 1023.226243][ T46] device veth0_macvtap left promiscuous mode [ 1023.463903][ T46] team0 (unregistering): Port device geneve1 removed [ 1023.996346][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1024.056234][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1024.114429][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.174489][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.554119][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 1024.596910][ T46] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1024.606322][ T46] bond0 (unregistering): Released all slaves [ 1024.770262][T22384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1024.794559][T22558] GPL: port 1(erspan0) entered blocking state [ 1024.810739][T22558] GPL: port 1(erspan0) entered disabled state [ 1024.818173][T22558] device erspan0 entered promiscuous mode [ 1024.850750][T22558] GPL: port 1(erspan0) entered blocking state [ 1024.857426][T22558] GPL: port 1(erspan0) entered forwarding state [ 1024.878999][T22384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1024.932828][T22384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1024.977534][T22384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1025.560151][T22384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.785138][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1025.812851][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1025.825338][T22384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.869704][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1025.891721][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1025.907707][ T5444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.914927][ T5444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.963421][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1025.990535][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1026.030445][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1026.071667][ T5444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.078839][ T5444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.131860][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1026.165548][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1026.218201][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1026.264506][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1026.317871][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1026.350384][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1026.418775][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1026.453367][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1026.484814][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.531989][T22384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1026.577223][T22384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1026.616204][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1026.655866][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.897625][T22630] GPL: port 1(erspan0) entered blocking state [ 1026.956598][T22630] GPL: port 1(erspan0) entered disabled state [ 1027.010882][T22630] device erspan0 entered promiscuous mode [ 1027.104662][T22623] GPL: port 1(erspan0) entered blocking state [ 1027.123705][T22623] GPL: port 1(erspan0) entered forwarding state [ 1027.858091][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1027.872223][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1027.899705][T22384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.599120][T22704] __nla_validate_parse: 3 callbacks suppressed [ 1030.599155][T22704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6202'. [ 1030.813179][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1030.867261][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1031.032414][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1031.052295][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1031.167375][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1031.176758][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1031.205453][T22384] device veth0_vlan entered promiscuous mode [ 1031.342307][T22384] device veth1_vlan entered promiscuous mode [ 1031.623971][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1031.654007][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1031.718402][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1031.778055][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1031.824086][T22384] device veth0_macvtap entered promiscuous mode [ 1031.884576][T22384] device veth1_macvtap entered promiscuous mode [ 1031.958618][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1031.992562][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1032.103762][T22384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.175722][T22384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.288989][T22384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.369616][T22384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.445124][T22384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.626382][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1032.709025][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1032.803707][T22384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.947417][T22384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.080466][T22384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.353912][T22384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.539589][T22384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.761699][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1033.854381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1033.908052][T22384] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.002614][T22384] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.032695][T22384] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.058131][T22384] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.563363][T22749] netlink: 'syz.2.6217': attribute type 10 has an invalid length. [ 1034.582130][T22749] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.6217'. [ 1034.794195][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.815822][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.888137][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1034.930898][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.958690][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.033496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1036.029615][T21176] Bluetooth: hci2: command 0x0406 tx timeout [ 1036.662439][ T4322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.891542][T21176] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1036.908597][T21176] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.918722][T21176] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.976782][T21176] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1036.985292][T21176] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1037.037665][T21176] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1037.205719][ T4322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.963293][ T4322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.285126][ T4322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.189220][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 1039.288710][ T4322] tipc: Left network mode [ 1039.297756][T22793] chnl_net:caif_netlink_parms(): no params data found [ 1040.512273][T22793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.559609][T22793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.567832][T22793] device bridge_slave_0 entered promiscuous mode [ 1040.715716][T22793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.747594][T22793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.764079][T22793] device bridge_slave_1 entered promiscuous mode [ 1040.817594][T22849] netlink: 'syz.1.6242': attribute type 13 has an invalid length. [ 1040.839745][T22849] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1040.862285][T22849] syz_tun: refused to change device tx_queue_len [ 1040.942300][T22854] netlink: 'syz.1.6242': attribute type 2 has an invalid length. [ 1040.954886][T22854] netlink: 'syz.1.6242': attribute type 8 has an invalid length. [ 1040.963797][T22854] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1041.023652][T22793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.130503][T22793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.213306][ T4322] GPL: port 1(erspan0) entered disabled state [ 1041.219763][ T4271] Bluetooth: hci0: command 0x041b tx timeout [ 1041.366444][ T4322] device erspan0 left promiscuous mode [ 1041.394711][ T4322] GPL: port 1(erspan0) entered disabled state [ 1041.450438][T22793] team0: Port device team_slave_0 added [ 1041.498049][T22793] team0: Port device team_slave_1 added [ 1041.804963][T22793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.832880][T22793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.928213][T22793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.981888][T22793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.992502][T22793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.061896][T22793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.406344][T22793] device hsr_slave_0 entered promiscuous mode [ 1042.440915][T22793] device hsr_slave_1 entered promiscuous mode [ 1042.508421][T22793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1042.575566][T22793] Cannot create hsr debugfs directory [ 1042.764177][T22903] netlink: 'syz.2.6256': attribute type 21 has an invalid length. [ 1042.789790][T22903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1043.309823][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 1043.488874][ T4322] device veth0_macvtap left promiscuous mode [ 1043.506271][ T4322] device veth1_vlan left promiscuous mode [ 1043.524951][ T4322] device veth0_vlan left promiscuous mode [ 1045.097374][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 1045.162026][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 1045.389604][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 1046.037649][T22964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6273'. [ 1046.059980][T22961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6270'. [ 1046.213755][T22961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6270'. [ 1046.426859][T22966] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6270'. [ 1046.455476][T22967] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6270'. [ 1047.011830][T22998] netlink: 'syz.3.6284': attribute type 1 has an invalid length. [ 1047.019977][T22998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.164732][T23000] netlink: 'syz.1.6283': attribute type 1 has an invalid length. [ 1047.182505][T23000] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.6283'. [ 1047.267328][ T4271] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1 [ 1047.267435][ T4271] Bluetooth: hci4: hardware error 0x00 [ 1047.336604][T22793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1047.411675][T22793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1047.431654][T23013] netlink: 'syz.3.6289': attribute type 29 has an invalid length. [ 1047.460107][T23010] netlink: 'syz.1.6288': attribute type 10 has an invalid length. [ 1047.478388][T23010] team0: Device wlan1 is up. Set it down before adding it as a team port [ 1047.500938][T23013] netlink: 'syz.3.6289': attribute type 29 has an invalid length. [ 1047.530102][T22793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1047.566256][T23016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.598634][T23016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.624828][T23016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.651741][T23016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.779374][T22793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1049.301631][ T4271] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1051.551972][T22793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.614533][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1051.625905][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1051.664627][T22793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.715896][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1051.732434][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1051.753371][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.760806][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.791328][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1051.802847][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1051.814790][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1051.863566][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.871096][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.920132][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1051.954408][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1051.981791][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1052.024072][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1052.214140][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1052.237037][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1052.276910][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1054.423551][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.431125][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.892093][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1055.901010][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1055.910259][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1055.922920][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1055.932450][T22793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1055.954127][T23072] bridge0: port 3(batadv0) entered blocking state [ 1055.961035][T23072] bridge0: port 3(batadv0) entered disabled state [ 1055.971207][T23072] device batadv0 entered promiscuous mode [ 1055.977524][T23072] bridge0: port 3(batadv0) entered blocking state [ 1055.984220][T23072] bridge0: port 3(batadv0) entered forwarding state [ 1056.095666][ T4271] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 1056.112414][ T4317] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1056.129262][ T4317] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1056.234572][T23091] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.6312'. [ 1061.855550][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1061.868154][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1061.919991][T22793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.013782][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1062.051170][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1062.127642][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1062.147556][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1062.171172][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1062.192714][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1062.212206][T23230] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6333'. [ 1062.236796][T22793] device veth0_vlan entered promiscuous mode [ 1062.305309][T22793] device veth1_vlan entered promiscuous mode [ 1062.381896][T23182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1062.407852][T23182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1062.440400][T23182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1062.480501][T23182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1062.516657][T22793] device veth0_macvtap entered promiscuous mode [ 1062.555118][T22793] device veth1_macvtap entered promiscuous mode [ 1062.656726][T22793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.703021][T22793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.751007][T22793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.787818][T22793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.824238][T22793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.854040][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1062.867104][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1062.896323][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1062.926596][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1062.962914][T22793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.993997][T22793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.036250][T22793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.068041][T22793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.110861][T22793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.132551][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1063.149293][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1063.190164][T22793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.209260][T22793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.242524][T22793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.262804][T22793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.456056][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.499832][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.551766][T23186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1063.566789][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.588310][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.804163][T23256] device syzkaller0 entered promiscuous mode [ 1063.832473][T23186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1064.140169][T23280] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1064.146708][T23280] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1064.303320][T23288] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6347'. [ 1064.356182][T23291] netlink: 'syz.0.6349': attribute type 10 has an invalid length. [ 1064.369805][T23291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6349'. [ 1064.406756][T23291] device dummy0 entered promiscuous mode [ 1064.422788][T23291] bridge0: port 3(dummy0) entered blocking state [ 1064.452899][T23291] bridge0: port 3(dummy0) entered disabled state [ 1064.484606][T23291] bridge0: port 3(dummy0) entered blocking state [ 1064.491191][T23291] bridge0: port 3(dummy0) entered forwarding state [ 1064.937856][T23307] netlink: 'syz.4.6356': attribute type 10 has an invalid length. [ 1065.008519][T23307] device hsr_slave_0 left promiscuous mode [ 1065.138476][T23307] device hsr_slave_1 left promiscuous mode [ 1065.298023][T12451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1065.324343][T12451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1065.334641][T12451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1065.361622][T12451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1065.372588][T12451] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1065.380441][T12451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1065.662864][T23327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6361'. [ 1065.766625][ T4322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.815055][T23327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6361'. [ 1065.858376][T23333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6361'. [ 1065.953859][ T4322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.142853][ T4322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.311332][ T4322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.245004][T23352] device macsec0 entered promiscuous mode [ 1067.459896][T12451] Bluetooth: hci3: command 0x0409 tx timeout [ 1067.495096][T23389] netlink: 'syz.2.6374': attribute type 29 has an invalid length. [ 1067.538871][T23319] chnl_net:caif_netlink_parms(): no params data found [ 1067.564383][T23389] netlink: 'syz.2.6374': attribute type 29 has an invalid length. [ 1067.666605][T23385] netlink: 'syz.2.6374': attribute type 29 has an invalid length. [ 1067.764344][T23391] netlink: 'syz.2.6374': attribute type 29 has an invalid length. [ 1067.827704][ T4322] tipc: Left network mode [ 1067.910464][T23406] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6378'. [ 1067.972905][T23408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1068.105403][T23408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1068.195273][T23413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1068.218331][T23319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.230945][T23319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.259885][T23319] device bridge_slave_0 entered promiscuous mode [ 1068.296171][T23319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.313624][T23319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.341246][T23319] device bridge_slave_1 entered promiscuous mode [ 1068.358252][T23415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1068.737348][T23319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.781861][T23319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.539776][T12451] Bluetooth: hci3: command 0x041b tx timeout [ 1071.619651][T12451] Bluetooth: hci3: command 0x040f tx timeout [ 1071.764867][T23319] team0: Port device team_slave_0 added [ 1071.786614][T23458] netlink: 'syz.4.6399': attribute type 1 has an invalid length. [ 1071.802895][T23458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.885467][ T4322] GPL: port 1(erspan0) entered disabled state [ 1071.938317][ T4322] device erspan0 left promiscuous mode [ 1071.945248][ T4322] GPL: port 1(erspan0) entered disabled state [ 1071.958014][T23319] team0: Port device team_slave_1 added [ 1072.068662][T23469] netlink: 'syz.2.6404': attribute type 10 has an invalid length. [ 1072.134668][T23469] team0: Device veth1_macvtap failed to register rx_handler [ 1072.225099][T23319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.250444][T23319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.316924][T23319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.408918][T12451] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1072.484451][T23319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.495899][T23319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.526871][T23319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.648094][T23491] netlink: 'syz.0.6412': attribute type 1 has an invalid length. [ 1072.695785][T23491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.995908][T23496] netlink: 'syz.2.6414': attribute type 16 has an invalid length. [ 1073.007670][T23496] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6414'. [ 1073.162382][T23500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6415'. [ 1073.346285][T23319] device hsr_slave_0 entered promiscuous mode [ 1073.520157][T23319] device hsr_slave_1 entered promiscuous mode [ 1073.568738][T23319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1073.594671][T23319] Cannot create hsr debugfs directory [ 1073.699646][T12451] Bluetooth: hci3: command 0x0419 tx timeout [ 1073.975345][ T4271] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1074.008339][T23531] device veth1_macvtap left promiscuous mode [ 1074.499636][ T4271] Bluetooth: hci0: command 0x2016 tx timeout [ 1074.570012][ T4322] device hsr_slave_0 left promiscuous mode [ 1074.577287][ T4322] device hsr_slave_1 left promiscuous mode [ 1074.585071][ T4322] device bridge_slave_1 left promiscuous mode [ 1074.596285][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.655809][ T4322] device bridge_slave_0 left promiscuous mode [ 1074.674195][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.977394][ T4322] device veth1_macvtap left promiscuous mode [ 1075.003871][ T4322] device veth0_macvtap left promiscuous mode [ 1079.120049][ T4322] team0 (unregistering): Port device geneve1 removed [ 1079.611152][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 1079.675512][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 1079.737939][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.803338][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.206558][ T4322] team0 (unregistering): Port device dummy0 removed [ 1080.243638][ T4322] team0 (unregistering): Port device bond0 removed [ 1080.288632][ T4322] bond0 (unregistering): Released all slaves [ 1082.166926][T23625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1082.174356][T23625] IPv6: NLM_F_CREATE should be set when creating new route [ 1082.182505][T23625] IPv6: NLM_F_CREATE should be set when creating new route [ 1082.189910][T23625] IPv6: NLM_F_CREATE should be set when creating new route [ 1082.418767][T23642] netlink: 'syz.1.6459': attribute type 10 has an invalid length. [ 1082.508393][T23642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.540352][T23642] bond0: (slave team0): Enslaving as an active interface with an up link [ 1082.988355][T23663] netlink: 'syz.4.6466': attribute type 10 has an invalid length. [ 1083.113629][T23663] team0: Device veth1_macvtap failed to register rx_handler [ 1083.219563][T23319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1084.015698][T23319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1084.051316][T23319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1084.098332][T23319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1084.487083][T23319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.576889][T23186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1084.606084][T23186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1084.645597][T23319] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.744093][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1084.761305][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1084.774548][T23176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.781961][T23176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.799775][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1084.809134][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1084.828213][T23176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.835513][T23176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.886161][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1084.946068][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1084.975760][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1085.029009][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1085.116535][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1085.164618][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1085.223676][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1085.292452][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1085.378985][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1085.425985][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1085.495366][T23319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1085.609082][T23319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1085.655585][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1085.675196][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1086.550412][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1086.568488][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1086.602745][T23319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.681816][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1086.724213][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1086.887691][T23772] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1087.056658][T23772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1087.160168][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1087.210776][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1087.262690][T23319] device veth0_vlan entered promiscuous mode [ 1087.288366][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1087.325663][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1087.413675][T23319] device veth1_vlan entered promiscuous mode [ 1087.453615][T23787] bridge0: port 3(batadv0) entered blocking state [ 1087.471183][T23787] bridge0: port 3(batadv0) entered disabled state [ 1087.516567][T23787] device batadv0 entered promiscuous mode [ 1087.548555][T23787] bridge0: port 3(batadv0) entered blocking state [ 1087.555641][T23787] bridge0: port 3(batadv0) entered forwarding state [ 1087.705254][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1087.731210][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1087.775007][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1087.837694][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1087.874437][T23319] device veth0_macvtap entered promiscuous mode [ 1087.899533][T23319] device veth1_macvtap entered promiscuous mode [ 1087.900960][ T4271] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1087.914392][T23176] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1087.923817][T23176] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1087.966099][T23319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.999477][T23319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.035761][T23319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.079485][T23319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.107477][T23319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.134549][T23319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.163346][T23319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.188192][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1088.203875][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1088.214489][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1088.229649][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1088.247346][T23319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.269480][T23319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.284474][T23319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.295879][T23319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.351932][T23319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.362794][T23319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.381164][T23319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.798962][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1088.822875][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1088.876404][T23319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.899604][T23319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.939525][T23319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.968865][T23319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.292776][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.320977][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.375574][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1089.396455][T23186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.417656][T23186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.445368][T23176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1089.656274][T23845] netlink: 'syz.3.6348': attribute type 10 has an invalid length. [ 1089.747954][T23845] team0: Device veth1_macvtap failed to register rx_handler [ 1089.790065][T23847] device veth1_macvtap left promiscuous mode [ 1089.808960][T23847] device macsec0 left promiscuous mode [ 1089.943454][T12451] Bluetooth: hci1: command 0x2016 tx timeout [ 1090.505448][T23879] netlink: 'syz.0.6535': attribute type 10 has an invalid length. [ 1090.614959][T23879] team0: Device veth1_macvtap failed to register rx_handler [ 1091.195906][T23910] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.6549'. [ 1091.564501][T23917] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1091.670150][T23917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1091.868696][T23924] netlink: 'syz.2.6554': attribute type 10 has an invalid length. [ 1091.934704][T23924] device veth1_macvtap left promiscuous mode [ 1091.972743][T23924] team0: Device veth1_macvtap failed to register rx_handler [ 1092.784603][T23931] netlink: 'syz.3.6556': attribute type 10 has an invalid length. [ 1092.975205][T23931] team0: Port device wlan1 added [ 1093.433932][T23954] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1093.569175][T23954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1093.838201][T23973] netlink: 'syz.4.6576': attribute type 10 has an invalid length. [ 1093.850916][T23973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6576'. [ 1093.873131][T23973] device team0 entered promiscuous mode [ 1093.878911][T23973] device team_slave_0 entered promiscuous mode [ 1093.900935][T23973] device team_slave_1 entered promiscuous mode [ 1093.919015][T23973] bridge0: port 3(team0) entered blocking state [ 1093.927184][T23973] bridge0: port 3(team0) entered disabled state [ 1093.948294][T23973] bridge0: port 3(team0) entered blocking state [ 1093.954917][T23973] bridge0: port 3(team0) entered forwarding state [ 1093.968972][T23971] netlink: 'syz.2.6575': attribute type 10 has an invalid length. [ 1094.025459][T23971] team0: Port device wlan1 added [ 1094.224233][T23989] netlink: 'syz.0.6581': attribute type 10 has an invalid length. [ 1094.264400][T23989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1094.286869][T23989] batman_adv: batadv0: Adding interface: veth0_vlan [ 1094.310803][T23989] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.354087][T23989] batman_adv: batadv0: Interface activated: veth0_vlan [ 1094.364348][T23992] netlink: 'syz.1.6582': attribute type 10 has an invalid length. [ 1094.380178][T23992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6582'. [ 1094.389221][T23992] device team0 entered promiscuous mode [ 1094.399601][T23992] device team_slave_0 entered promiscuous mode [ 1094.406291][T23992] device team_slave_1 entered promiscuous mode [ 1094.425494][T23992] bond0: (slave team0): Releasing backup interface [ 1094.443301][T23992] bridge0: port 4(team0) entered blocking state [ 1094.445395][T24000] netlink: 'syz.4.6584': attribute type 25 has an invalid length. [ 1094.450166][T23992] bridge0: port 4(team0) entered disabled state [ 1094.469523][T24000] netlink: 'syz.4.6584': attribute type 3 has an invalid length. [ 1094.469952][T23994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6583'. [ 1094.477457][T24000] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6584'. [ 1095.176413][T24026] validate_nla: 2 callbacks suppressed [ 1095.176455][T24026] netlink: 'syz.2.6595': attribute type 16 has an invalid length. [ 1095.195680][T24026] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6595'. [ 1095.208362][T24028] netlink: 'syz.3.6596': attribute type 10 has an invalid length. [ 1095.220544][T24028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6596'. [ 1095.242185][T24028] device caif0 entered promiscuous mode [ 1095.247786][T24028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1095.279764][T24033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6597'. [ 1095.300173][T24023] netlink: 'syz.1.6594': attribute type 10 has an invalid length. [ 1095.337479][T24023] device wlan1 entered promiscuous mode [ 1095.347434][T24023] team0: Port device wlan1 added [ 1095.355669][T24033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6597'. [ 1095.390727][T24035] netlink: 'syz.0.6598': attribute type 10 has an invalid length. [ 1095.409686][T24035] device team0 entered promiscuous mode [ 1095.415308][T24035] device team_slave_0 entered promiscuous mode [ 1095.445097][T24035] device team_slave_1 entered promiscuous mode [ 1095.454675][T24035] bridge0: port 4(team0) entered blocking state [ 1095.499316][T24035] bridge0: port 4(team0) entered disabled state [ 1095.523158][T24035] bridge0: port 4(team0) entered blocking state [ 1095.529557][T24035] bridge0: port 4(team0) entered forwarding state [ 1096.749860][T24075] __nla_validate_parse: 2 callbacks suppressed [ 1096.749885][T24075] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6616'. [ 1097.026499][T24084] netlink: 'syz.3.6618': attribute type 10 has an invalid length. [ 1097.049529][T24084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6618'. [ 1097.076763][T24084] device team0 entered promiscuous mode [ 1097.096588][T24084] device team_slave_0 entered promiscuous mode [ 1097.117238][T24084] device team_slave_1 entered promiscuous mode [ 1097.153978][T24084] device wlan1 entered promiscuous mode [ 1097.154714][T24093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6624'. [ 1097.161213][T24084] bridge0: port 3(team0) entered blocking state [ 1097.205052][T24084] bridge0: port 3(team0) entered disabled state [ 1097.242545][T24084] bridge0: port 3(team0) entered blocking state [ 1097.248936][T24084] bridge0: port 3(team0) entered forwarding state [ 1097.288063][T24093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6624'. [ 1097.361700][T24095] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6624'. [ 1097.392575][T24097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6624'. [ 1097.808284][T24114] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6630'. [ 1099.027514][T24161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6654'. [ 1099.050478][T24165] netlink: 'syz.1.6657': attribute type 10 has an invalid length. [ 1099.069358][T24165] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6657'. [ 1099.106945][T24165] device bond0 entered promiscuous mode [ 1099.116597][T24165] device bond_slave_0 entered promiscuous mode [ 1099.133314][T24165] device bond_slave_1 entered promiscuous mode [ 1099.155417][T24165] bridge0: port 5(bond0) entered blocking state [ 1099.170611][T24165] bridge0: port 5(bond0) entered disabled state [ 1099.195904][T24165] bridge0: port 5(bond0) entered blocking state [ 1099.203089][T24165] bridge0: port 5(bond0) entered forwarding state [ 1100.159013][T24218] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6682'. [ 1100.380049][T24229] device team_slave_0 left promiscuous mode [ 1100.428218][T24229] team0: Port device team_slave_0 removed [ 1100.440329][T24229] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1101.538746][T24292] netlink: 'syz.2.6717': attribute type 10 has an invalid length. [ 1101.559042][T24295] netlink: 'syz.4.6719': attribute type 27 has an invalid length. [ 1101.567500][T24292] device bond0 entered promiscuous mode [ 1101.576098][T24292] device bond_slave_0 entered promiscuous mode [ 1101.598639][T24292] device bond_slave_1 entered promiscuous mode [ 1101.617465][T24292] bridge0: port 4(bond0) entered blocking state [ 1101.635492][T24292] bridge0: port 4(bond0) entered disabled state [ 1101.687776][T24292] bridge0: port 4(bond0) entered blocking state [ 1101.695625][T24292] bridge0: port 4(bond0) entered forwarding state [ 1102.444805][T24338] netlink: 'syz.0.6738': attribute type 10 has an invalid length. [ 1102.457597][T24338] __nla_validate_parse: 7 callbacks suppressed [ 1102.457616][T24338] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6738'. [ 1102.480104][T24338] device bond0 entered promiscuous mode [ 1102.486320][T24338] device bond_slave_0 entered promiscuous mode [ 1102.506385][T24338] device bond_slave_1 entered promiscuous mode [ 1102.524300][T24338] bridge0: port 5(bond0) entered blocking state [ 1102.538572][T24338] bridge0: port 5(bond0) entered disabled state [ 1102.564904][T24338] bridge0: port 5(bond0) entered blocking state [ 1102.571406][T24338] bridge0: port 5(bond0) entered forwarding state [ 1108.725926][T24450] netlink: 'syz.4.6786': attribute type 10 has an invalid length. [ 1108.773073][T24450] bridge0: port 3(team0) entered disabled state [ 1108.780697][T24450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.908674][T24450] bridge0: port 3(team0) entered blocking state [ 1108.916046][T24450] bridge0: port 3(team0) entered forwarding state [ 1108.926400][T24450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.936102][T24450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.945153][T24450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.953435][T24450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.117342][T24450] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1109.544415][T24490] device syzkaller0 entered promiscuous mode [ 1112.829877][T12451] Bluetooth: hci1: command 0x0406 tx timeout [ 1113.217233][T24515] device syzkaller0 entered promiscuous mode [ 1113.324192][T24522] netlink: 'syz.0.6814': attribute type 10 has an invalid length. [ 1113.347557][T24522] bridge0: port 5(bond0) entered disabled state [ 1113.354593][T24522] bridge0: port 4(team0) entered disabled state [ 1113.361003][T24522] bridge0: port 3(dummy0) entered disabled state [ 1113.367457][T24522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.408917][T24522] bridge0: port 5(bond0) entered blocking state [ 1113.415655][T24522] bridge0: port 5(bond0) entered forwarding state [ 1113.422482][T24522] bridge0: port 4(team0) entered blocking state [ 1113.428883][T24522] bridge0: port 4(team0) entered forwarding state [ 1113.435722][T24522] bridge0: port 3(dummy0) entered blocking state [ 1113.442278][T24522] bridge0: port 3(dummy0) entered forwarding state [ 1113.449018][T24522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.456326][T24522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.463905][T24522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.471175][T24522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.503709][T24522] bridge0: port 5(bond0) entered disabled state [ 1113.510337][T24522] bridge0: port 4(team0) entered disabled state [ 1113.516768][T24522] bridge0: port 3(dummy0) entered disabled state [ 1113.523433][T24522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.530781][T24522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.811472][T24542] mac80211_hwsim hwsim41 »»»»»»: renamed from wlan0 [ 1114.409312][T24571] device syzkaller0 entered promiscuous mode [ 1115.864662][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.872856][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.165119][T24580] netlink: 'syz.3.6837': attribute type 10 has an invalid length. [ 1118.175315][T24580] bridge0: port 3(team0) entered disabled state [ 1118.181939][T24580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.189318][T24580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.203527][T24580] bridge0: port 3(team0) entered blocking state [ 1118.209979][T24580] bridge0: port 3(team0) entered forwarding state [ 1118.216688][T24580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.224132][T24580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.231833][T24580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.239150][T24580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.282406][T24580] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1118.637680][T24613] device syzkaller0 entered promiscuous mode [ 1123.031488][T24622] GPL: port 1(erspan0) entered blocking state [ 1123.038603][T24622] GPL: port 1(erspan0) entered disabled state [ 1123.049039][T24622] device erspan0 entered promiscuous mode [ 1123.056979][T24622] GPL: port 1(erspan0) entered blocking state [ 1123.063337][T24622] GPL: port 1(erspan0) entered forwarding state [ 1123.414454][T24656] netlink: 'syz.1.6861': attribute type 10 has an invalid length. [ 1123.464199][T24656] bridge0: port 5(bond0) entered disabled state [ 1123.471685][T24656] bridge0: port 3(batadv0) entered disabled state [ 1123.479036][T24656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.488466][T24656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.722610][T24656] bridge0: port 5(bond0) entered blocking state [ 1123.729473][T24656] bridge0: port 5(bond0) entered forwarding state [ 1123.736878][T24656] bridge0: port 3(batadv0) entered blocking state [ 1123.744154][T24656] bridge0: port 3(batadv0) entered forwarding state [ 1123.752096][T24656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.760021][T24656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.768119][T24656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.775909][T24656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.365266][T24656] bridge0: port 5(bond0) entered disabled state [ 1124.371764][T24656] bridge0: port 3(batadv0) entered disabled state [ 1124.378301][T24656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.385656][T24656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.506628][T24675] mac80211_hwsim hwsim35 »»»»»»: renamed from wlan0 [ 1125.519851][T23187] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1127.727174][T24717] device syzkaller0 entered promiscuous mode [ 1133.113944][T24771] device syzkaller0 entered promiscuous mode [ 1137.997894][T24802] device syzkaller0 entered promiscuous mode [ 1143.906603][T24867] device syzkaller0 entered promiscuous mode [ 1147.747318][T24887] device syzkaller0 entered promiscuous mode [ 1150.585081][T24923] [ 1150.588002][T24923] ============================= [ 1150.593412][T24923] WARNING: suspicious RCU usage [ 1150.598720][T24923] syzkaller #0 Not tainted [ 1150.603260][T24923] ----------------------------- [ 1150.608135][T24923] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1150.616907][T24923] [ 1150.616907][T24923] other info that might help us debug this: [ 1150.616907][T24923] [ 1150.627344][T24923] [ 1150.627344][T24923] rcu_scheduler_active = 2, debug_locks = 1 [ 1150.635604][T24923] 1 lock held by syz.2.6952/24923: [ 1150.640908][T24923] #0: ffffffff8cb2d7a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1150.651614][T24923] [ 1150.651614][T24923] stack backtrace: [ 1150.657560][T24923] CPU: 0 PID: 24923 Comm: syz.2.6952 Not tainted syzkaller #0 [ 1150.665414][T24923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1150.676481][T24923] Call Trace: [ 1150.679942][T24923] [ 1150.682868][T24923] dump_stack_lvl+0x188/0x24e [ 1150.687647][T24923] ? show_regs_print_info+0x12/0x12 [ 1150.692843][T24923] ? load_image+0x400/0x400 [ 1150.697576][T24923] lockdep_rcu_suspicious+0x1dd/0x300 [ 1150.703019][T24923] get_callchain_entry+0x2a5/0x3b0 [ 1150.708167][T24923] get_perf_callchain+0xc4/0x490 [ 1150.713233][T24923] ? put_callchain_entry+0xb0/0xb0 [ 1150.718412][T24923] ? plist_add+0x3d4/0x480 [ 1150.722854][T24923] ? verify_lock_unused+0x140/0x140 [ 1150.728373][T24923] __bpf_get_stack+0x2de/0x520 [ 1150.733368][T24923] ? stack_map_get_build_id_offset+0x970/0x970 [ 1150.739695][T24923] ? __cant_sleep+0x220/0x220 [ 1150.744371][T24923] ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 1150.750233][T24923] bpf_get_stack_raw_tp+0x189/0x1c0 [ 1150.755458][T24923] bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 1150.761286][T24923] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 1150.766819][T24923] bpf_prog_test_run_syscall+0x313/0x4a0 [ 1150.772576][T24923] ? sock_gen_cookie+0x60/0x60 [ 1150.777440][T24923] ? sock_gen_cookie+0x60/0x60 [ 1150.782578][T24923] bpf_prog_test_run+0x31e/0x390 [ 1150.787669][T24923] __sys_bpf+0x62b/0x780 [ 1150.792025][T24923] ? bpf_link_show_fdinfo+0x380/0x380 [ 1150.797443][T24923] ? lock_chain_count+0x20/0x20 [ 1150.802340][T24923] __x64_sys_bpf+0x78/0x90 [ 1150.806794][T24923] do_syscall_64+0x4c/0xa0 [ 1150.811221][T24923] ? clear_bhb_loop+0x60/0xb0 [ 1150.815902][T24923] ? clear_bhb_loop+0x60/0xb0 [ 1150.820617][T24923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1150.826650][T24923] RIP: 0033:0x7fe983d9c799 [ 1150.831087][T24923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.850780][T24923] RSP: 002b:00007fe984bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1150.859263][T24923] RAX: ffffffffffffffda RBX: 00007fe984015fa0 RCX: 00007fe983d9c799 [ 1150.867351][T24923] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1150.875506][T24923] RBP: 00007fe983e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1150.883488][T24923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.891484][T24923] R13: 00007fe984016038 R14: 00007fe984015fa0 R15: 00007ffe13110928 [ 1150.899575][T24923]