last executing test programs: 3.77066727s ago: executing program 0 (id=4367): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x121) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x2, 0x3, 0x84) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xc, 0x1cc, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) r9 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r7, 0x3) socket$kcm(0xa, 0x5, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0xa3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x0) 3.700582144s ago: executing program 2 (id=4368): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8d28}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xba}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000000000)='GPL\x00', 0x8, 0xa1, &(0x7f0000000100)=""/161, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x2, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, 0x3, 0x10, 0x5}, {0x4, 0x100003, 0x4, 0x2}, {0x1, 0x3, 0xb, 0xa}, {0x5, 0x1, 0x6, 0xa}, {0x4, 0x4, 0xd, 0x8}, {0x0, 0x1, 0x10, 0x1}, {0x4, 0x3, 0x1, 0x4}, {0x3, 0x5, 0xd, 0x9}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040)=r1, 0xfffffcfb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x3, @local}}}, 0x80, 0x0}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) ioctl$TUNSETLINK(r0, 0x400454cd, 0x205) 3.162405145s ago: executing program 0 (id=4369): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33, 0x1010000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xc00}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.936617368s ago: executing program 2 (id=4371): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4100}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {0x0}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f0000000280)=""/209, 0xd1}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8990, &(0x7f0000000040)={'ipvlan1\x00', @random="cb3f75253b00"}) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000040) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x42) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000740), 0x4) 2.482225735s ago: executing program 0 (id=4375): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.737723309s ago: executing program 1 (id=4377): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000002100000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20) 1.737279029s ago: executing program 2 (id=4378): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.734523019s ago: executing program 3 (id=4379): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0009000401a80016002000014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.627021795s ago: executing program 1 (id=4380): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000400)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f00000000c0)=""/163, 0xa3, 0x0, &(0x7f0000000200)=""/182, 0xb6}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x13, 0x0, &(0x7f00000018c0)="2cbdd340000000000000000000000341ccaa7b", 0x0, 0xef0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 1.626137815s ago: executing program 0 (id=4381): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.568603898s ago: executing program 3 (id=4382): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000240014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 1.487578273s ago: executing program 3 (id=4383): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0xffff}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.099776086s ago: executing program 3 (id=4384): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) (async) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18410, 0x0, 0xfffffffe, 0x3, 0x100000}, 0x0, 0xffffffffffffffff, r3, 0x0) (async, rerun: 64) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r5, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.061995448s ago: executing program 1 (id=4385): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x7}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)="f4000900062b3325fe80000000000002", 0x10}, {&(0x7f0000000240)="45f289a31a11d10c1101fb2cc62ff73459000ec82c600374", 0x18}], 0x2}, 0x20000884) 1.061061758s ago: executing program 2 (id=4386): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x10, 0x8}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x11, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f00000005c0)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7f2000014000000b7030000000000008500000083000000a50900000000000055"], 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x8, 0x7, 0x0, 0x7fffffff, 0xd3751, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x1, 0x3, 0x8, 0x81, 0x8005, 0x3, 0x0, 0x2cb, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)='\xbf\xe8\x91\xc8\xfe\x814\xe7\xd2\xa1\xc04\x80\x8f\xfb\xd3!\xff\x1bT\f4\xe1\xf3K\x99\t\xa4\xc4\xd4\x93\x9f\x17gP\xab\x05\x03X\xd3\xd4\x8eC\xfe\x91') r7 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="c9", 0x1}], 0x1}, 0x20000800) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r2}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080c1) sendmsg$sock(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840), 0x28}, 0x400c0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, 0x0) 864.57228ms ago: executing program 1 (id=4387): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x25000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 862.27204ms ago: executing program 3 (id=4395): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 779.123835ms ago: executing program 1 (id=4388): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}, 0x4001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004b0692e405ea6d45b796d8125dc000000e27f00f4e5000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x15, &(0x7f00000000c0), 0xb9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x803c, 0x0, 0x0, 0x0, 0x10000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x3, 0x0, 0x0, 0xc00e}, 0x2000c814) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 778.863455ms ago: executing program 2 (id=4389): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0xb30}, 0x2422, 0x32, 0x43a1bd76, 0x1, 0x9, 0xffff2249, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_devices(r0, 0x0, 0xfffffeff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 590.876636ms ago: executing program 0 (id=4390): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 434.550175ms ago: executing program 2 (id=4391): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x3c}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) recvmsg$kcm(r3, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8990, &(0x7f0000000040)={'ipvlan1\x00', @random="cb3f75253b00"}) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x42) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x6, &(0x7f0000000740)=r5, 0x4) 245.783276ms ago: executing program 3 (id=4392): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x7, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000e3ff00fe7f000079f22000010000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYRESDEC=r3, @ANYRES8=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x60000000}, 0x10}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0x5}, {0x2, 0x0, 0x6}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000)=r8, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000006488695e000000000000000000000093a46b67bcc47b325f90768d2dc09034ceb4b50b8ec0141c5665c6fb89e26dc0b916c617f7d677600009e691c23de7d3b7668bd6a698e4098df5b5fb2438d9ae331a7e8f3e932758e66a360a50d6282161fcc575877af1bcc032f142d8bd1c5c3a608f83661936c1f1778d9fdc7555a302154661889444d5044b9be08f34a52fc7f7767df768aed548ace7be45861b5f820e560d0d7da0d96446d4f86c3de1465e4644", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6, 0x0, 0x0, 0x4bef}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x1, 0x4, 0x0, 0x3}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1d, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000424745e2de1d804a85ae9f1edaaa777301c6e842000000004e0e00009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xfffffec5, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x4a}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r9, 0x0, 0x1, 0xc, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map=r9, r4, 0x2a, 0x11, r4, @void, @value=r12, @void, @void, r13}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={r14, &(0x7f0000000500)="3b35a04d0859da64b387d0e7a388637033b45318eb68b00ab01bfef40fbb08c1e6e27d00caa3ca414ac2139a2e699fbee3ff2fb13921bdd0c38197046a7990f4fe975ae47bc2871e1a0f7028763b3a147f6b9387f468f78ded94c545527adb92d58f31bd81de084d1ecd14e49d76dc466d6b8abdd7c77bbe264c7f550023496c75947df9d6e901000000d565f0cf2898778e17c7374adb1c511ae3e83c94a6c914e30ba9118c06bfce23bc84a0e3f07321e99e94876cb837e2d7", &(0x7f00000008c0)=""/177}, 0x20) 175.91257ms ago: executing program 0 (id=4393): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="15000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="10003d39fcffffff0000000000000000000000000000000000000000d2ec87f6e3de160774583cca1ae91c187408b081631a71890cd214f24a8d2aa4911517a7d59d2af0df277f49b42807e845d7a6c4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002e9b72ffd1744eb82dbd2278bc9c6da2395c45258632cc9e1f674e295ce21fe42c82190203af7dab948b1f51661ad54c3b67540d7e210d40afe0894c637ddd99b668505d49d5", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000004a00000000000000020b000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018510000040000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x65b2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r1, r1], &(0x7f00000003c0)=[{0x2, 0x4, 0xb, 0xc}, {0x2, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x8, 0x9}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x4, 0xe, 0x4}, {0x5, 0x3, 0x6, 0xa}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a4693989c36ffffffffffffd0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1530f8d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c11090000000000000000b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c8565117fcb8ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17911540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc240000000000127535a468702cac97b6b82a6e65d4cf1200"/2694], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ab, 0x0, @perf_bp={&(0x7f00000001c0)}, 0xc4c1, 0x10000, 0x0, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000044"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa}, 0x94) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x0, 0x1010000}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15afde5b3403f50018bf3a8", 0xffeb}], 0x1}, 0x20040000) 0s ago: executing program 1 (id=4394): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1}, 0x48) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000070000000400000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) kernel console output (not intermixed with test programs): ve_0): Enslaving as an active interface with an up link [ 451.063073][T12396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.198689][ T5774] Bluetooth: hci0: command tx timeout [ 451.255353][T12396] team0: Port device team_slave_0 added [ 451.436397][T12396] team0: Port device team_slave_1 added [ 451.574300][T12396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.588104][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.615110][T12396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.635259][T12396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.644210][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.670860][T12396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.897962][T12396] hsr_slave_0: entered promiscuous mode [ 451.905383][T12396] hsr_slave_1: entered promiscuous mode [ 452.758800][T12502] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2380'. [ 452.950237][T12510] netlink: 'syz.2.2383': attribute type 10 has an invalid length. [ 453.006206][T12510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2383'. [ 453.049518][T12510] bridge0: port 5(ipvlan1) entered blocking state [ 453.056149][T12510] bridge0: port 5(ipvlan1) entered disabled state [ 453.079799][T12510] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 453.283337][ T5774] Bluetooth: hci0: command tx timeout [ 453.383084][T12524] netlink: 'syz.2.2386': attribute type 1 has an invalid length. [ 453.412510][T12524] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2386'. [ 453.697605][T12526] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2388'. [ 453.772944][T12524] netlink: 'syz.2.2386': attribute type 21 has an invalid length. [ 453.887945][T12524] netlink: 'syz.2.2386': attribute type 1 has an invalid length. [ 453.919406][T12524] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2386'. [ 453.979162][T12529] netlink: 'syz.2.2386': attribute type 10 has an invalid length. [ 453.999683][T12529] veth0_vlan: left promiscuous mode [ 454.006888][T12529] veth0_vlan: entered promiscuous mode [ 454.016996][T12529] team0: Device veth0_vlan failed to register rx_handler [ 454.208331][T12535] netlink: 'syz.1.2390': attribute type 4 has an invalid length. [ 454.216393][T12535] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2390'. [ 454.391152][ T9276] hsr_slave_0: left promiscuous mode [ 454.404925][ T9276] hsr_slave_1: left promiscuous mode [ 454.420587][ T9276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.432705][ T9276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.450716][ T9276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.458698][ T9276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.474615][ T9276] bridge0: port 3(team0) entered disabled state [ 454.485392][ T9276] bridge_slave_1: left allmulticast mode [ 454.491451][ T9276] bridge_slave_1: left promiscuous mode [ 454.497304][ T9276] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.521116][ T9276] bridge_slave_0: left promiscuous mode [ 454.526955][ T9276] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.611369][ T9276] veth0_macvtap: left promiscuous mode [ 454.617616][ T9276] veth1_vlan: left promiscuous mode [ 455.366313][ T5774] Bluetooth: hci0: command tx timeout [ 455.589382][ T9276] team_slave_1 (unregistering): left promiscuous mode [ 455.596657][ T9276] team_slave_1 (unregistering): left allmulticast mode [ 455.611267][ T9276] team0 (unregistering): Port device team_slave_1 removed [ 455.657350][ T9276] team_slave_0 (unregistering): left promiscuous mode [ 455.664365][ T9276] team_slave_0 (unregistering): left allmulticast mode [ 455.675473][ T9276] team0 (unregistering): Port device team_slave_0 removed [ 456.292362][T12539] netlink: 'syz.1.2391': attribute type 21 has an invalid length. [ 456.308779][T12539] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2391'. [ 456.382601][T12555] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 456.394247][T12555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2397'. [ 456.408623][T12555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 456.442921][T12557] bridge0: port 4(dummy0) entered disabled state [ 456.449622][T12557] bridge0: port 3(team0) entered disabled state [ 456.456336][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.464074][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.499305][T12557] bridge0: entered allmulticast mode [ 456.506392][T12558] bridge0: port 4(dummy0) entered blocking state [ 456.513122][T12558] bridge0: port 4(dummy0) entered forwarding state [ 456.520047][T12558] bridge0: port 3(team0) entered blocking state [ 456.526537][T12558] bridge0: port 3(team0) entered forwarding state [ 456.533453][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.540742][T12558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.548192][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.555479][T12558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.574833][T12558] bridge0: entered promiscuous mode [ 456.781974][T12564] netlink: 'syz.3.2399': attribute type 1 has an invalid length. [ 456.821741][T12564] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.2399'. [ 456.872141][T12396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 456.892743][T12396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 456.922743][T12564] netlink: 'syz.3.2399': attribute type 29 has an invalid length. [ 456.942885][T12396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 456.998595][T12396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 457.155005][T12577] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2401'. [ 457.439174][ T5774] Bluetooth: hci0: command tx timeout [ 457.537722][T12577] veth0_vlan: left promiscuous mode [ 457.553437][T12577] veth0_vlan: entered promiscuous mode [ 457.596823][T12577] team0: Device veth0_vlan failed to register rx_handler [ 457.734898][T12396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.801287][T12396] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.846736][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.854213][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.914784][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.922290][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.540009][T12609] validate_nla: 4 callbacks suppressed [ 458.540027][T12609] netlink: 'syz.3.2405': attribute type 10 has an invalid length. [ 458.651225][T12609] bridge0: port 3(dummy0) entered disabled state [ 458.657860][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.687640][T12609] bridge0: port 3(dummy0) entered blocking state [ 458.694222][T12609] bridge0: port 3(dummy0) entered forwarding state [ 458.701214][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.708543][T12609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.727745][T12609] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 458.771698][T12396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.900008][T12396] veth0_vlan: entered promiscuous mode [ 458.951688][T12396] veth1_vlan: entered promiscuous mode [ 459.061896][T12396] veth0_macvtap: entered promiscuous mode [ 459.107344][T12396] veth1_macvtap: entered promiscuous mode [ 459.213329][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.239285][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.288832][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.311253][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.335094][T12396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.386219][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.424247][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.460651][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.491656][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.529261][T12396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.591818][T12396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.629867][T12396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.672577][T12396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.694600][T12396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.989213][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.997225][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.142448][ T9288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.188492][ T9288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.711344][T12673] __nla_validate_parse: 1 callbacks suppressed [ 460.711367][T12673] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2421'. [ 461.715552][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.734002][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.745536][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.771452][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.789401][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 461.799533][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.236754][T12722] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2435'. [ 462.463780][T12703] chnl_net:caif_netlink_parms(): no params data found [ 463.313271][T12732] syzkaller0: entered promiscuous mode [ 463.318881][T12732] syzkaller0: entered allmulticast mode [ 463.338060][T12743] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 463.361844][T12743] batman_adv: batadv0: Adding interface: wlan0 [ 463.368985][T12743] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.395619][T12743] batman_adv: batadv0: Interface activated: wlan0 [ 463.841221][ T5772] Bluetooth: hci3: command tx timeout [ 465.719587][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.726911][T12703] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.734556][T12703] bridge_slave_0: entered allmulticast mode [ 465.744726][T12703] bridge_slave_0: entered promiscuous mode [ 465.755102][T12703] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.764064][T12703] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.771435][T12703] bridge_slave_1: entered allmulticast mode [ 465.779677][T12703] bridge_slave_1: entered promiscuous mode [ 465.788298][T12764] netlink: 'syz.1.2447': attribute type 21 has an invalid length. [ 465.797328][T12764] netlink: 'syz.1.2447': attribute type 29 has an invalid length. [ 465.805623][T12764] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2447'. [ 465.915434][T12703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.942745][ T5772] Bluetooth: hci3: command tx timeout [ 465.953218][T12703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.076623][T12703] team0: Port device team_slave_0 added [ 466.110258][T12703] team0: Port device team_slave_1 added [ 466.192989][T12703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.207450][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.235581][T12703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.247609][T12781] netlink: 'syz.1.2453': attribute type 10 has an invalid length. [ 466.284221][T12703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.297214][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.326081][T12703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.432424][T12703] hsr_slave_0: entered promiscuous mode [ 466.445438][T12703] hsr_slave_1: entered promiscuous mode [ 466.461003][T12703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.484747][T12703] Cannot create hsr debugfs directory [ 467.355364][T12788] syzkaller0: entered promiscuous mode [ 467.361342][T12788] syzkaller0: entered allmulticast mode [ 467.998861][ T5774] Bluetooth: hci3: command tx timeout [ 469.460129][T12800] netlink: 'syz.2.2461': attribute type 10 has an invalid length. [ 469.468229][T12800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2461'. [ 469.652385][T12703] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.834247][T12703] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.876990][T12817] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2467'. [ 469.888078][T12818] netlink: 'syz.2.2468': attribute type 10 has an invalid length. [ 469.917055][T12818] batman_adv: batadv0: Adding interface: wlan0 [ 469.936997][T12818] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.979027][T12818] batman_adv: batadv0: Interface activated: wlan0 [ 470.002077][T12817] netlink: 'syz.1.2467': attribute type 10 has an invalid length. [ 470.078963][ T5774] Bluetooth: hci3: command tx timeout [ 470.111776][T12703] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.157690][T12827] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2471'. [ 470.378171][T12703] team0: Port device netdevsim0 removed [ 470.401864][T12703] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.037701][T12837] netlink: 'syz.2.2474': attribute type 10 has an invalid length. [ 473.097777][T12703] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 473.135962][T12703] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 473.147404][T12703] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 473.164457][T12703] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 473.353901][T12703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.421276][T12703] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.435978][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.443240][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.494712][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.501950][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.532031][T12854] Dead loop on virtual device ip6_vti0, fix it urgently! [ 473.591360][T12856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2479'. [ 473.603207][T12703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.637773][T12856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2479'. [ 473.656500][T12857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2479'. [ 473.701640][T12856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2479'. [ 473.976500][T12868] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2481'. [ 474.221587][T12703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.513201][T12703] veth0_vlan: entered promiscuous mode [ 474.566628][T12703] veth1_vlan: entered promiscuous mode [ 474.672756][T12703] veth0_macvtap: entered promiscuous mode [ 474.709675][T12703] veth1_macvtap: entered promiscuous mode [ 474.776221][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.804326][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.829715][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.855574][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.888723][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.928486][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.966022][T12703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.002867][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.036482][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.071516][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.083877][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.095099][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.105855][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.118191][T12703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.130098][T12890] netlink: 8953 bytes leftover after parsing attributes in process `syz.0.2490'. [ 475.167845][T12703] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.197561][T12703] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.208310][T12703] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.227033][T12703] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.443248][T12703] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 475.530006][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.558492][T12703] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 475.587218][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.657645][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.685180][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.729602][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.737492][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.937907][T12905] syzkaller0: entered promiscuous mode [ 476.954575][T12905] syzkaller0: entered allmulticast mode [ 477.086987][T12906] syzkaller0: entered promiscuous mode [ 477.092841][T12906] syzkaller0: entered allmulticast mode [ 477.093203][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.108012][T12921] netlink: 'syz.3.2500': attribute type 10 has an invalid length. [ 477.117838][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.125136][T12921] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2500'. [ 477.125167][T12921] dummy0: entered promiscuous mode [ 477.125184][T12921] dummy0: entered allmulticast mode [ 477.127415][T12921] bridge0: port 3(dummy0) entered blocking state [ 477.158883][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.169908][T12921] bridge0: port 3(dummy0) entered disabled state [ 477.177451][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.186540][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 477.194189][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.222200][T12921] bridge0: port 3(dummy0) entered blocking state [ 477.228793][T12921] bridge0: port 3(dummy0) entered forwarding state [ 479.283224][ T5774] Bluetooth: hci1: command tx timeout [ 481.164121][T12916] netlink: 'syz.3.2500': attribute type 21 has an invalid length. [ 481.322224][T12934] netlink: 'syz.2.2504': attribute type 10 has an invalid length. [ 481.366711][ T5774] Bluetooth: hci1: command tx timeout [ 481.642494][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.702934][T12939] netlink: 'syz.3.2505': attribute type 10 has an invalid length. [ 481.802538][T12939] veth0_vlan: left promiscuous mode [ 481.869632][T12939] veth0_vlan: entered promiscuous mode [ 481.911510][T12939] team0: Device veth0_vlan failed to register rx_handler [ 482.144992][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.345618][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.501195][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 482.519892][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 482.557728][ T144] team0: Port device netdevsim0 removed [ 482.577554][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.633071][T12955] netlink: 'syz.2.2518': attribute type 21 has an invalid length. [ 482.845520][T12917] chnl_net:caif_netlink_parms(): no params data found [ 482.938974][T12963] syzkaller0: entered promiscuous mode [ 482.945978][T12963] syzkaller0: entered allmulticast mode [ 483.094389][T12957] syzkaller0: entered promiscuous mode [ 483.100170][T12957] syzkaller0: entered allmulticast mode [ 483.446416][ T5774] Bluetooth: hci1: command tx timeout [ 485.523706][ T5774] Bluetooth: hci1: command tx timeout [ 487.821296][ T144] ip6gretap0 (unregistering): left allmulticast mode [ 487.829662][ T144] ip6gretap0 (unregistering): left promiscuous mode [ 487.841634][ T144] Ÿë: port 1(ip6gretap0) entered disabled state [ 488.010321][T12917] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.017692][T12917] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.057090][T12917] bridge_slave_0: entered allmulticast mode [ 488.065401][T12917] bridge_slave_0: entered promiscuous mode [ 488.092794][T12917] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.119616][T12917] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.126939][T12917] bridge_slave_1: entered allmulticast mode [ 488.150884][T12917] bridge_slave_1: entered promiscuous mode [ 488.359510][T12989] netlink: 'syz.0.2521': attribute type 10 has an invalid length. [ 488.420216][T12989] team0: Port device geneve1 added [ 488.602094][T12917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.662652][T12917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.162104][T12917] team0: Port device team_slave_0 added [ 489.176363][T12917] team0: Port device team_slave_1 added [ 489.241007][T13011] netlink: 142556 bytes leftover after parsing attributes in process `syz.2.2527'. [ 489.374915][T13001] syzkaller0: entered promiscuous mode [ 489.384940][T13001] syzkaller0: entered allmulticast mode [ 489.426828][T13009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2527'. [ 489.438834][T13009] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 489.494142][T13011] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 489.505670][T13011] netlink: 'syz.2.2527': attribute type 2 has an invalid length. [ 489.513822][T13011] netlink: 'syz.2.2527': attribute type 3 has an invalid length. [ 489.522447][T13011] netlink: 'syz.2.2527': attribute type 4 has an invalid length. [ 489.533677][T13011] netlink: 142556 bytes leftover after parsing attributes in process `syz.2.2527'. [ 489.544298][ T11] bridge0: port 3(team0) entered disabled state [ 489.611761][T12917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.623680][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.655394][T12917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.669825][T13011] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 489.677808][T13011] netlink: 'syz.2.2527': attribute type 2 has an invalid length. [ 489.696247][T13011] netlink: 'syz.2.2527': attribute type 3 has an invalid length. [ 489.704624][T13011] netlink: 'syz.2.2527': attribute type 4 has an invalid length. [ 489.721128][T13011] netlink: 142556 bytes leftover after parsing attributes in process `syz.2.2527'. [ 491.779025][T12917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.786019][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.818596][T12917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.837657][T13011] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 491.845754][T13028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2530'. [ 491.874523][T13028] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 492.254700][T12917] hsr_slave_0: entered promiscuous mode [ 492.265706][T12917] hsr_slave_1: entered promiscuous mode [ 492.288101][T12917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.298313][T12917] Cannot create hsr debugfs directory [ 492.842972][T13058] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2537'. [ 492.880954][ T144] batman_adv: batadv0: Interface deactivated: wlan0 [ 492.997323][ T144] batman_adv: batadv0: Removing interface: wlan0 [ 493.333101][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.358907][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.390825][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.398318][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.434342][ T144] bridge0: port 4(dummy0) entered disabled state [ 493.476276][ T144] bridge0: port 3(team0) entered disabled state [ 493.520508][ T144] bridge_slave_1: left allmulticast mode [ 493.526253][ T144] bridge_slave_1: left promiscuous mode [ 493.549599][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.597921][ T144] bridge_slave_0: left allmulticast mode [ 493.650740][ T144] bridge_slave_0: left promiscuous mode [ 493.656665][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.759681][ T144] veth1_macvtap: left allmulticast mode [ 493.769192][ T144] veth1_macvtap: left promiscuous mode [ 493.785628][ T144] veth0_macvtap: left promiscuous mode [ 493.794967][ T144] veth1_vlan: left promiscuous mode [ 495.498561][ T144] geneve1 (unregistering): left promiscuous mode [ 495.505525][ T144] geneve1 (unregistering): left allmulticast mode [ 495.516987][ T144] team0 (unregistering): Port device geneve1 removed [ 496.035765][ T144] team_slave_1 (unregistering): left promiscuous mode [ 496.042746][ T144] team_slave_1 (unregistering): left allmulticast mode [ 496.054595][ T144] team0 (unregistering): Port device team_slave_1 removed [ 496.102499][ T144] team_slave_0 (unregistering): left promiscuous mode [ 496.111454][ T144] team_slave_0 (unregistering): left allmulticast mode [ 496.120043][ T144] team0 (unregistering): Port device team_slave_0 removed [ 496.730399][T13092] validate_nla: 5 callbacks suppressed [ 496.730417][T13092] netlink: 'syz.0.2547': attribute type 39 has an invalid length. [ 496.952978][T13105] netlink: 'syz.2.2550': attribute type 2 has an invalid length. [ 496.975631][T13105] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2550'. [ 500.433914][T12917] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 500.516208][T12917] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 500.602168][T12917] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 500.683409][T12917] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.167162][T13164] tap0: tun_chr_ioctl cmd 1074025677 [ 501.179734][T13164] tap0: linktype set to 6 [ 501.226777][T12917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.298326][T12917] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.335528][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.342830][ T9278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.403744][ T9278] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.411043][ T9278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.738816][T13175] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 501.773970][T13175] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 501.804265][T13177] netlink: 'syz.3.2568': attribute type 9 has an invalid length. [ 501.842873][T13177] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2568'. [ 501.927296][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.937681][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.339937][T13177] netlink: 'syz.3.2568': attribute type 10 has an invalid length. [ 503.643884][T12917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.843976][T12917] veth0_vlan: entered promiscuous mode [ 503.967821][T12917] veth1_vlan: entered promiscuous mode [ 504.155226][T12917] veth0_macvtap: entered promiscuous mode [ 504.242363][T12917] veth1_macvtap: entered promiscuous mode [ 504.373774][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.417865][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.458863][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.511723][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.548795][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.613670][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.642241][T12917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.721467][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.773523][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.806645][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.849118][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.908700][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.940525][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.970849][T12917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.002386][T12917] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.058784][T12917] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.067586][T12917] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.117859][T12917] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.389020][T12917] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 505.412828][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.463447][T13249] bridge0: port 4(dummy0) entered disabled state [ 505.470454][T13249] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.478510][T13249] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.501645][T13249] bridge0: left promiscuous mode [ 505.545285][T13252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.598958][T13252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.671481][T13257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.704195][T13257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.894284][T13270] netlink: 'syz.0.2583': attribute type 9 has an invalid length. [ 505.906598][T13270] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2583'. [ 506.469572][T13274] netlink: 'syz.0.2583': attribute type 10 has an invalid length. [ 507.309282][ T5772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 507.324523][ T5772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 507.334199][ T5772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 507.343874][ T5772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 507.352846][ T5772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 507.368874][ T5772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 509.964751][T13256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.154177][T13256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.472064][T13256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.711862][T13256] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 510.747158][T13256] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 510.800710][T13256] team0: Port device netdevsim0 removed [ 510.809374][T13256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.838768][T13334] pim6reg1: entered promiscuous mode [ 510.854298][T13334] pim6reg1: entered allmulticast mode [ 511.364862][T13362] netlink: 'syz.3.2600': attribute type 10 has an invalid length. [ 511.436574][T13362] team0: Port device geneve1 added [ 511.503574][T13302] chnl_net:caif_netlink_parms(): no params data found [ 511.527632][ T5772] Bluetooth: hci4: command tx timeout [ 511.579742][T13365] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 511.635288][T13365] syzkaller0: entered promiscuous mode [ 511.642175][T13365] syzkaller0: entered allmulticast mode [ 511.708148][T13366] netlink: 'syz.1.2601': attribute type 10 has an invalid length. [ 511.724720][T13366] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2601'. [ 511.756272][T13366] bond0: entered promiscuous mode [ 511.768154][T13366] bond_slave_0: entered promiscuous mode [ 511.785909][T13366] bond_slave_1: entered promiscuous mode [ 511.806467][T13366] bridge0: port 3(bond0) entered blocking state [ 511.818355][T13366] bridge0: port 3(bond0) entered disabled state [ 511.828180][T13366] bond0: entered allmulticast mode [ 511.837830][T13366] bond_slave_0: entered allmulticast mode [ 511.845182][T13366] bond_slave_1: entered allmulticast mode [ 511.856001][T13366] bridge0: port 3(bond0) entered blocking state [ 511.862915][T13366] bridge0: port 3(bond0) entered forwarding state [ 512.217022][T13384] netlink: 'syz.1.2602': attribute type 9 has an invalid length. [ 512.253071][T13384] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2602'. [ 513.605853][ T5772] Bluetooth: hci4: command tx timeout [ 514.558181][T13397] netlink: 'syz.3.2606': attribute type 10 has an invalid length. [ 514.574024][T13397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2606'. [ 514.583848][T13397] ipvlan1: entered promiscuous mode [ 514.591753][T13397] bridge0: port 4(ipvlan1) entered blocking state [ 514.599013][T13397] bridge0: port 4(ipvlan1) entered disabled state [ 514.605764][T13397] ipvlan1: entered allmulticast mode [ 514.612529][T13397] veth0_vlan: entered allmulticast mode [ 514.620319][T13397] ipvlan1: left allmulticast mode [ 514.625551][T13397] veth0_vlan: left allmulticast mode [ 514.631882][T13397] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 514.652606][T13384] netlink: 'syz.1.2602': attribute type 10 has an invalid length. [ 514.921572][T13403] netlink: 'syz.0.2607': attribute type 21 has an invalid length. [ 514.935165][T13403] netlink: 'syz.0.2607': attribute type 4 has an invalid length. [ 514.946318][T13403] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2607'. [ 515.181469][T13408] netlink: 'syz.1.2609': attribute type 10 has an invalid length. [ 515.198580][T13408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2609'. [ 515.217547][T13408] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 515.240854][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.263838][T13302] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.279319][T13302] bridge_slave_0: entered allmulticast mode [ 515.297323][T13302] bridge_slave_0: entered promiscuous mode [ 515.308090][T13302] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.322555][T13302] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.332234][T13302] bridge_slave_1: entered allmulticast mode [ 515.366505][T13302] bridge_slave_1: entered promiscuous mode [ 515.477323][T13410] netlink: 'syz.0.2610': attribute type 7 has an invalid length. [ 515.489072][T13410] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2610'. [ 515.678743][ T5772] Bluetooth: hci4: command tx timeout [ 515.791007][T13302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.970358][T13302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.227538][T13302] team0: Port device team_slave_0 added [ 516.320644][T13302] team0: Port device team_slave_1 added [ 516.416001][T13437] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 516.764146][T13437] syzkaller0: entered promiscuous mode [ 516.770906][T13437] syzkaller0: entered allmulticast mode [ 516.864318][T13450] syzkaller0: entered promiscuous mode [ 516.870350][T13450] syzkaller0: entered allmulticast mode [ 516.921039][T13302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.932958][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.960170][T13302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.758726][ T5772] Bluetooth: hci4: command tx timeout [ 519.056144][T13302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.063596][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.090109][T13302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.361484][T13302] hsr_slave_0: entered promiscuous mode [ 519.374354][T13302] hsr_slave_1: entered promiscuous mode [ 519.385449][T13302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.399066][T13302] Cannot create hsr debugfs directory [ 519.886014][T13256] batman_adv: batadv0: Interface deactivated: wlan0 [ 519.926694][T13256] batman_adv: batadv0: Removing interface: wlan0 [ 520.011884][T13256] hsr_slave_0: left promiscuous mode [ 520.024138][T13256] hsr_slave_1: left promiscuous mode [ 520.032535][T13256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.048599][T13256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.060953][T13498] syz.0.2631[13498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.061217][T13498] syz.0.2631[13498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.083400][T13256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.128549][T13256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.144152][T13256] dummy0: left allmulticast mode [ 520.168523][T13256] dummy0: left promiscuous mode [ 520.186292][T13256] bridge0: port 4(dummy0) entered disabled state [ 520.202539][T13256] bridge0: port 3(team0) entered disabled state [ 520.218581][T13256] bridge_slave_1: left allmulticast mode [ 520.227810][T13256] bridge_slave_1: left promiscuous mode [ 520.239947][T13256] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.262612][T13256] bridge_slave_0: left allmulticast mode [ 520.273044][T13256] bridge_slave_0: left promiscuous mode [ 520.286520][T13256] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.341726][T13256] veth1_macvtap: left allmulticast mode [ 520.354003][T13256] veth1_macvtap: left promiscuous mode [ 520.365303][T13256] veth0_macvtap: left promiscuous mode [ 520.373022][T13256] veth1_vlan: left promiscuous mode [ 520.639839][T13256] geneve1 (unregistering): left promiscuous mode [ 520.646591][T13256] geneve1 (unregistering): left allmulticast mode [ 520.662755][T13256] team0 (unregistering): Port device geneve1 removed [ 521.200913][T13256] team_slave_1 (unregistering): left promiscuous mode [ 521.207848][T13256] team_slave_1 (unregistering): left allmulticast mode [ 521.217969][T13256] team0 (unregistering): Port device team_slave_1 removed [ 521.269293][T13256] team_slave_0 (unregistering): left promiscuous mode [ 521.277692][T13256] team0 (unregistering): Port device team_slave_0 removed [ 521.326680][T13256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.383837][T13256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.699496][T13256] bond0 (unregistering): Released all slaves [ 521.809579][T13496] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 521.829626][T13496] syzkaller0: entered promiscuous mode [ 521.835144][T13496] syzkaller0: entered allmulticast mode [ 525.212049][T13555] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 525.236118][T13555] syzkaller0: entered promiscuous mode [ 525.241831][T13555] syzkaller0: entered allmulticast mode [ 527.215216][T13302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 527.226099][T13302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 527.252070][T13302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 527.282455][T13302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 527.805970][T13577] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 527.915135][T13577] syzkaller0: entered promiscuous mode [ 527.941239][T13577] syzkaller0: entered allmulticast mode [ 530.365158][T13579] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 530.381969][T13579] syzkaller0: entered promiscuous mode [ 530.387515][T13579] syzkaller0: entered allmulticast mode [ 530.396630][T13594] netlink: 'syz.3.2654': attribute type 40 has an invalid length. [ 535.144602][T13607] bridge0: port 3(bond0) entered disabled state [ 535.245200][T13302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.315227][T13302] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.380797][T13262] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.388037][T13262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.430705][T13262] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.438028][T13262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.613924][T13302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 535.769668][T13621] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 536.061347][T13621] syzkaller0: entered promiscuous mode [ 536.067841][T13621] syzkaller0: entered allmulticast mode [ 536.216669][T13639] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2664'. [ 538.447604][T13302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.577679][T13302] veth0_vlan: entered promiscuous mode [ 538.599782][T13302] veth1_vlan: entered promiscuous mode [ 538.641578][T13302] veth0_macvtap: entered promiscuous mode [ 538.653645][T13302] veth1_macvtap: entered promiscuous mode [ 538.672192][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.683570][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.694706][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.705285][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.715233][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.725972][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.740489][T13302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.759711][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.771198][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.782539][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.793123][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.803150][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.814137][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.825714][T13302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.844668][T13302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.854657][T13302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.864629][T13302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.873523][T13302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.965331][T13255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.990546][T13255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.029110][T13252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.037005][T13252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.162499][T13662] netlink: 'syz.1.2672': attribute type 9 has an invalid length. [ 539.200301][T13662] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2672'. [ 539.346108][T13662] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2672'. [ 539.787519][T13672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2667'. [ 539.808740][T13672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2667'. [ 539.848141][T13669] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 539.921877][T13669] syzkaller0: entered promiscuous mode [ 539.927441][T13669] syzkaller0: entered allmulticast mode [ 545.068895][T13681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2667'. [ 545.095460][T13689] netlink: 'syz.1.2671': attribute type 10 has an invalid length. [ 545.105753][T13689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2671'. [ 545.117946][T13689] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 545.161619][T13690] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 545.188073][T13690] syzkaller0: entered promiscuous mode [ 545.194800][T13690] syzkaller0: entered allmulticast mode [ 547.095604][T13700] netlink: 'syz.0.2676': attribute type 10 has an invalid length. [ 547.103904][T13700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2676'. [ 547.113654][T13700] bridge0: port 3(dummy0) entered blocking state [ 547.120998][T13700] bridge0: port 3(dummy0) entered disabled state [ 547.127643][T13700] dummy0: entered allmulticast mode [ 547.136818][T13700] dummy0: entered promiscuous mode [ 547.142747][T13700] bridge0: port 3(dummy0) entered blocking state [ 547.149348][T13700] bridge0: port 3(dummy0) entered forwarding state [ 548.444165][T13726] netlink: 'syz.2.2683': attribute type 12 has an invalid length. [ 548.465592][T13726] netlink: 'syz.2.2683': attribute type 11 has an invalid length. [ 548.473876][T13726] netlink: 188816 bytes leftover after parsing attributes in process `syz.2.2683'. [ 548.489109][T13728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2684'. [ 548.498317][T13728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2684'. [ 549.037314][T13737] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 549.184870][T13737] syzkaller0: entered promiscuous mode [ 549.227023][T13737] syzkaller0: entered allmulticast mode [ 551.983620][T13747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2684'. [ 552.009615][T13752] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2689'. [ 552.890714][T13775] netlink: 'syz.0.2699': attribute type 9 has an invalid length. [ 552.928573][T13775] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2699'. [ 553.020823][T13775] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2699'. [ 554.087308][T13809] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2712'. [ 554.112015][T13803] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 554.637599][T13803] syzkaller0: entered promiscuous mode [ 554.659333][T13803] syzkaller0: entered allmulticast mode [ 557.639930][T13844] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2724'. [ 558.207157][T13860] netlink: 'syz.0.2732': attribute type 10 has an invalid length. [ 558.294447][T13860] veth0_vlan: left promiscuous mode [ 558.337388][T13860] veth0_vlan: entered promiscuous mode [ 558.348648][T13860] team0: Device veth0_vlan failed to register rx_handler [ 558.547970][T13866] netlink: 'syz.0.2732': attribute type 39 has an invalid length. [ 558.691538][T13871] netlink: 'syz.1.2734': attribute type 21 has an invalid length. [ 558.708760][T13871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2734'. [ 558.797988][ T9292] tipc: Left network mode [ 559.374229][ T9292] ip6gretap0 (unregistering): left allmulticast mode [ 559.478597][ T9292] ip6gretap0 (unregistering): left promiscuous mode [ 559.548027][ T9292] Ÿë: port 1(ip6gretap0) entered disabled state [ 562.136505][T13885] delete_channel: no stack [ 562.175411][T13885] delete_channel: no stack [ 564.025042][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.031731][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.688764][T13921] FAULT_INJECTION: forcing a failure. [ 565.688764][T13921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.710083][T13921] CPU: 1 PID: 13921 Comm: syz.1.2746 Not tainted syzkaller #0 [ 565.717626][T13921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 565.727743][T13921] Call Trace: [ 565.731072][T13921] [ 565.734045][T13921] dump_stack_lvl+0x18c/0x250 [ 565.738814][T13921] ? show_regs_print_info+0x20/0x20 [ 565.744061][T13921] ? load_image+0x400/0x400 [ 565.748653][T13921] ? __might_fault+0xaa/0x120 [ 565.753358][T13921] ? __lock_acquire+0x7d40/0x7d40 [ 565.758430][T13921] should_fail_ex+0x39d/0x4d0 [ 565.763319][T13921] _copy_from_user+0x2f/0xe0 [ 565.767943][T13921] ___sys_recvmsg+0x176/0x590 [ 565.772676][T13921] ? __sys_recvmsg+0x2a0/0x2a0 [ 565.777486][T13921] ? __fget_files+0x43d/0x4b0 [ 565.782391][T13921] __x64_sys_recvmsg+0x20c/0x2e0 [ 565.787357][T13921] ? ___sys_recvmsg+0x590/0x590 [ 565.792244][T13921] ? lockdep_hardirqs_on+0x98/0x150 [ 565.797473][T13921] do_syscall_64+0x55/0xa0 [ 565.801919][T13921] ? clear_bhb_loop+0x40/0x90 [ 565.806725][T13921] ? clear_bhb_loop+0x40/0x90 [ 565.811450][T13921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.817368][T13921] RIP: 0033:0x7f841ed9aeb9 [ 565.821821][T13921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.841451][T13921] RSP: 002b:00007f841fc76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 565.849897][T13921] RAX: ffffffffffffffda RBX: 00007f841f015fa0 RCX: 00007f841ed9aeb9 [ 565.857907][T13921] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 565.866088][T13921] RBP: 00007f841fc76090 R08: 0000000000000000 R09: 0000000000000000 [ 565.874341][T13921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.882362][T13921] R13: 00007f841f016038 R14: 00007f841f015fa0 R15: 00007ffc9d8948b8 [ 565.890466][T13921] [ 566.811028][T13949] netlink: 'syz.2.2757': attribute type 10 has an invalid length. [ 566.838231][T13949] team0: Port device geneve1 added [ 566.906171][T13940] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 566.963246][T13940] syzkaller0: entered promiscuous mode [ 566.975444][T13940] syzkaller0: entered allmulticast mode [ 570.341640][ T9292] hsr_slave_0: left promiscuous mode [ 570.352688][ T9292] hsr_slave_1: left promiscuous mode [ 570.370500][ T9292] bridge0: port 3(dummy0) entered disabled state [ 570.389674][ T9292] bridge_slave_1: left allmulticast mode [ 570.395392][ T9292] bridge_slave_1: left promiscuous mode [ 570.416417][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.438027][ T9292] bridge_slave_0: left promiscuous mode [ 570.445712][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.521274][ T9292] veth1_vlan: left promiscuous mode [ 570.842539][ T9292] team0 (unregistering): Port device geneve1 removed [ 571.674690][ T9292] team0 (unregistering): Port device team_slave_1 removed [ 571.873851][ T9292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.927553][ T9292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.296285][ T9292] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 572.305608][ T9292] bond0 (unregistering): Released all slaves [ 572.414944][T13992] netlink: 'syz.2.2771': attribute type 1 has an invalid length. [ 572.423142][T13992] netlink: 'syz.2.2771': attribute type 4 has an invalid length. [ 572.431857][T13992] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2771'. [ 572.780373][T14040] netlink: 'syz.3.2785': attribute type 10 has an invalid length. [ 572.788286][T14040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2785'. [ 572.830158][T14040] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 572.864590][T14042] netlink: 'syz.0.2786': attribute type 19 has an invalid length. [ 572.888170][T14042] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.2786'. [ 573.155881][T14047] netlink: 'syz.3.2788': attribute type 10 has an invalid length. [ 573.194814][T14047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2788'. [ 574.296351][T14066] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 574.619038][T14066] syzkaller0: entered promiscuous mode [ 574.625929][T14066] syzkaller0: entered allmulticast mode [ 574.736162][T14075] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2797'. [ 574.760133][T14076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2797'. [ 575.694064][T14059] Bluetooth: hci0: command 0x0406 tx timeout [ 577.298047][T14096] netlink: 'syz.1.2804': attribute type 10 has an invalid length. [ 577.335420][T14096] team0: Device hsr_slave_0 failed to register rx_handler [ 577.401497][T14095] netlink: 'syz.1.2804': attribute type 10 has an invalid length. [ 577.443840][T14095] team0: Device hsr_slave_0 failed to register rx_handler [ 580.640288][T14132] syzkaller0: entered promiscuous mode [ 580.659042][T14132] syzkaller0: entered allmulticast mode [ 582.670521][T14140] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 582.689879][T14140] syzkaller0: entered promiscuous mode [ 582.695422][T14140] syzkaller0: entered allmulticast mode [ 585.919382][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 587.175256][T14154] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2825'. [ 587.205087][T14171] netlink: 'syz.1.2831': attribute type 21 has an invalid length. [ 587.218800][T14171] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2831'. [ 587.637968][T14185] syzkaller0: entered promiscuous mode [ 587.656106][T14185] syzkaller0: entered allmulticast mode [ 587.688164][T14179] FAULT_INJECTION: forcing a failure. [ 587.688164][T14179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.724497][T14179] CPU: 0 PID: 14179 Comm: syz.1.2834 Not tainted syzkaller #0 [ 587.732132][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 587.742245][T14179] Call Trace: [ 587.745618][T14179] [ 587.748609][T14179] dump_stack_lvl+0x18c/0x250 [ 587.753358][T14179] ? show_regs_print_info+0x20/0x20 [ 587.758729][T14179] ? load_image+0x400/0x400 [ 587.763296][T14179] ? __lock_acquire+0x7d40/0x7d40 [ 587.768382][T14179] ? snprintf+0xe9/0x140 [ 587.772687][T14179] should_fail_ex+0x39d/0x4d0 [ 587.777439][T14179] _copy_to_user+0x2f/0xa0 [ 587.781911][T14179] simple_read_from_buffer+0xe7/0x150 [ 587.787330][T14179] proc_fail_nth_read+0x1e8/0x260 [ 587.792415][T14179] ? proc_fault_inject_write+0x360/0x360 [ 587.798714][T14179] ? fsnotify_perm+0x271/0x5e0 [ 587.803516][T14179] ? proc_fault_inject_write+0x360/0x360 [ 587.809204][T14179] vfs_read+0x28b/0x970 [ 587.813403][T14179] ? kernel_read+0x1e0/0x1e0 [ 587.818023][T14179] ? __fget_files+0x28/0x4b0 [ 587.822732][T14179] ? __fget_files+0x28/0x4b0 [ 587.827366][T14179] ? __fget_files+0x43d/0x4b0 [ 587.832084][T14179] ? __fdget_pos+0x2a3/0x330 [ 587.836798][T14179] ? ksys_read+0x75/0x260 [ 587.841171][T14179] ksys_read+0x150/0x260 [ 587.845471][T14179] ? vfs_write+0x990/0x990 [ 587.849953][T14179] ? lockdep_hardirqs_on+0x98/0x150 [ 587.855188][T14179] do_syscall_64+0x55/0xa0 [ 587.859649][T14179] ? clear_bhb_loop+0x40/0x90 [ 587.864358][T14179] ? clear_bhb_loop+0x40/0x90 [ 587.869065][T14179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.874988][T14179] RIP: 0033:0x7f841ed5b78e [ 587.879434][T14179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 587.899497][T14179] RSP: 002b:00007f841fc75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.907942][T14179] RAX: ffffffffffffffda RBX: 00007f841fc766c0 RCX: 00007f841ed5b78e [ 587.915950][T14179] RDX: 000000000000000f RSI: 00007f841fc760a0 RDI: 0000000000000005 [ 587.923949][T14179] RBP: 00007f841fc76090 R08: 0000000000000000 R09: 0000000000000000 [ 587.931950][T14179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.940049][T14179] R13: 00007f841f016038 R14: 00007f841f015fa0 R15: 00007ffc9d8948b8 [ 587.948087][T14179] [ 588.826017][T14205] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 588.890134][T14205] syzkaller0: entered promiscuous mode [ 588.898510][T14205] syzkaller0: entered allmulticast mode [ 591.060677][T14213] netlink: 'syz.1.2844': attribute type 10 has an invalid length. [ 591.068928][T14213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2844'. [ 591.077933][T14213] ipvlan1: entered promiscuous mode [ 591.087968][T14213] bridge0: port 4(ipvlan1) entered blocking state [ 591.095625][T14213] bridge0: port 4(ipvlan1) entered disabled state [ 591.102783][T14213] ipvlan1: entered allmulticast mode [ 591.108753][T14213] veth0_vlan: entered allmulticast mode [ 591.116337][T14213] ipvlan1: left allmulticast mode [ 591.122095][T14213] veth0_vlan: left allmulticast mode [ 591.127944][T14213] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 591.437642][T14225] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2849'. [ 591.725767][T14228] syzkaller0: entered promiscuous mode [ 591.731586][T14228] syzkaller0: entered allmulticast mode [ 592.069297][T14240] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 592.348294][T14240] syzkaller0: entered promiscuous mode [ 592.364693][T14240] syzkaller0: entered allmulticast mode [ 592.790874][T14257] netlink: 'syz.3.2860': attribute type 33 has an invalid length. [ 592.862348][T14257] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2860'. [ 594.857529][T14265] netlink: 'syz.2.2861': attribute type 10 has an invalid length. [ 594.878126][T14265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2861'. [ 594.893905][T14265] caif0: entered promiscuous mode [ 594.906589][T14265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.941358][T14270] Dead loop on virtual device ip6_vti0, fix it urgently! [ 596.010124][T14277] syzkaller0: entered promiscuous mode [ 596.016221][T14277] syzkaller0: entered allmulticast mode [ 596.757709][T14303] netlink: 'syz.1.2874': attribute type 10 has an invalid length. [ 596.776953][T14303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2874'. [ 596.799475][T14303] bridge0: port 4(dummy0) entered blocking state [ 596.806002][T14303] bridge0: port 4(dummy0) entered disabled state [ 596.813395][T14303] dummy0: entered allmulticast mode [ 596.828593][T14303] dummy0: entered promiscuous mode [ 596.834759][T14303] bridge0: port 4(dummy0) entered blocking state [ 596.841547][T14303] bridge0: port 4(dummy0) entered forwarding state [ 597.054211][T14307] netlink: 'syz.2.2875': attribute type 10 has an invalid length. [ 597.187705][T14307] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 598.006078][T14322] syzkaller0: entered promiscuous mode [ 598.029841][T14322] syzkaller0: entered allmulticast mode [ 598.207410][T14342] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2888'. [ 598.218610][T14342] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 598.505943][T14347] netlink: 'syz.3.2890': attribute type 10 has an invalid length. [ 598.517972][T14347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2890'. [ 598.533680][T14347] batadv0: entered promiscuous mode [ 598.541513][T14347] batadv0: entered allmulticast mode [ 598.547999][T14347] bridge0: port 4(batadv0) entered blocking state [ 598.555914][T14347] bridge0: port 4(batadv0) entered disabled state [ 598.594149][T14347] bridge0: port 4(batadv0) entered blocking state [ 598.600935][T14347] bridge0: port 4(batadv0) entered forwarding state [ 598.891505][T13257] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 598.901367][T13257] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 599.076453][T14363] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2895'. [ 599.113136][T14363] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2895'. [ 599.205639][T14363] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.2895'. [ 599.216615][T14363] tipc: Started in network mode [ 599.222272][T14363] tipc: Node identity b, cluster identity 73 [ 599.230902][T14363] tipc: Node number set to 11 [ 601.288516][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 603.382873][T14398] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2910'. [ 604.350571][T14420] netlink: 'syz.2.2918': attribute type 10 has an invalid length. [ 604.507357][T14420] veth0_vlan: left promiscuous mode [ 604.543397][T14420] veth0_vlan: entered promiscuous mode [ 604.574484][T14420] team0: Device veth0_vlan failed to register rx_handler [ 605.562571][T14451] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2932'. [ 607.219869][T14474] netlink: 'syz.2.2940': attribute type 20 has an invalid length. [ 607.567233][T14485] netlink: 'syz.1.2944': attribute type 10 has an invalid length. [ 607.608700][T14485] team0: Port device geneve1 added [ 607.635135][T14488] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2945'. [ 608.185156][T14501] netlink: 'syz.3.2950': attribute type 21 has an invalid length. [ 608.196327][T14501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2950'. [ 609.563872][T14519] netlink: 'syz.3.2956': attribute type 13 has an invalid length. [ 609.585147][T14516] netlink: 'syz.0.2955': attribute type 6 has an invalid length. [ 609.593538][T14516] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2955'. [ 609.614072][T14519] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2956'. [ 609.737634][T14519] erspan0: refused to change device tx_queue_len [ 609.754012][T14519] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 610.153862][T14534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2960'. [ 610.170825][T14534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2960'. [ 610.198316][T14534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2960'. [ 610.220426][T14534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2960'. [ 610.263818][T14534] netlink: 'syz.1.2960': attribute type 10 has an invalid length. [ 610.284485][T14534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2960'. [ 610.297697][T14534] bridge0: port 5(ipvlan1) entered blocking state [ 610.313695][T14534] bridge0: port 5(ipvlan1) entered disabled state [ 610.321929][T14534] ipvlan1: entered allmulticast mode [ 610.327400][T14534] veth0_vlan: entered allmulticast mode [ 610.335594][T14534] ipvlan1: left allmulticast mode [ 610.341045][T14534] veth0_vlan: left allmulticast mode [ 610.347072][T14534] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 611.574245][T14574] netlink: 'syz.1.2974': attribute type 12 has an invalid length. [ 611.593223][T14574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2974'. [ 611.797341][T14582] Dead loop on virtual device ip6_vti0, fix it urgently! [ 611.825634][T14586] netlink: 'syz.2.2978': attribute type 10 has an invalid length. [ 611.862279][T14586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2978'. [ 611.876352][T14586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.969789][T14583] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.2977'. [ 614.752773][T14663] netlink: 'syz.2.3007': attribute type 6 has an invalid length. [ 614.766829][T14663] __nla_validate_parse: 1 callbacks suppressed [ 614.766846][T14663] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3007'. [ 614.828254][T14673] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3010'. [ 615.287901][T14682] raw_sendmsg: syz.0.3013 forgot to set AF_INET. Fix it! [ 615.957539][T14691] netlink: 'syz.0.3016': attribute type 3 has an invalid length. [ 615.990782][T14691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3016'. [ 616.009155][T14691] netlink: 'syz.0.3016': attribute type 2 has an invalid length. [ 616.021438][T14691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3016'. [ 616.808361][T14717] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3025'. [ 618.341022][T14772] cgroup: fork rejected by pids controller in /syz1 [ 618.672753][T14881] sctp: [Deprecated]: syz.3.3054 (pid 14881) Use of int in max_burst socket option deprecated. [ 618.672753][T14881] Use struct sctp_assoc_value instead [ 618.892639][T13255] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.934889][T14887] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3056'. [ 619.011469][T13255] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.106518][T13255] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.231111][T13255] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.273326][T14895] netlink: 'syz.0.3059': attribute type 10 has an invalid length. [ 619.352242][T14897] syz.3.3061[14897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 619.352381][T14897] syz.3.3061[14897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 619.895295][T14914] pimreg0: tun_chr_ioctl cmd 1074025681 [ 619.946128][T14913] netlink: 'syz.0.3066': attribute type 21 has an invalid length. [ 619.968770][T14913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3066'. [ 620.001265][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 620.019470][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 620.038116][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 620.048940][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 620.056786][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 620.064883][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 622.158804][ T5772] Bluetooth: hci1: command tx timeout [ 622.947454][T14938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3069'. [ 623.606460][T14963] syzkaller0: left promiscuous mode [ 623.621335][T14963] syzkaller0: left allmulticast mode [ 623.696646][T14966] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3076'. [ 623.779065][T14966] netlink: 'syz.3.3076': attribute type 10 has an invalid length. [ 623.791578][T14966] veth0_vlan: left promiscuous mode [ 623.805587][T14966] veth0_vlan: entered promiscuous mode [ 623.832798][T14966] team0: Device veth0_vlan failed to register rx_handler [ 624.411266][ T5772] Bluetooth: hci1: command tx timeout [ 624.804471][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.810979][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.478733][ T5772] Bluetooth: hci1: command tx timeout [ 627.127675][T14919] chnl_net:caif_netlink_parms(): no params data found [ 627.819806][T14919] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.827035][T14919] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.857877][T14919] bridge_slave_0: entered allmulticast mode [ 627.865980][T14919] bridge_slave_0: entered promiscuous mode [ 628.007311][T14919] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.028731][T14919] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.045449][T14919] bridge_slave_1: entered allmulticast mode [ 628.053588][T14919] bridge_slave_1: entered promiscuous mode [ 628.151394][T15028] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3087'. [ 628.183023][T13255] hsr_slave_0: left promiscuous mode [ 628.235303][T13255] hsr_slave_1: left promiscuous mode [ 628.248328][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.260212][T13255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.273812][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.284202][T13255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.299381][T13255] dummy0: left allmulticast mode [ 628.309181][T13255] dummy0: left promiscuous mode [ 628.320377][T13255] bridge0: port 4(dummy0) entered disabled state [ 628.361553][T13255] bond0: left promiscuous mode [ 628.368612][T13255] bond_slave_0: left promiscuous mode [ 628.374668][T13255] bond_slave_1: left promiscuous mode [ 628.381886][T13255] bridge0: port 3(bond0) entered disabled state [ 628.392149][T13255] bridge_slave_1: left allmulticast mode [ 628.397963][T13255] bridge_slave_1: left promiscuous mode [ 628.406545][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.430944][T13255] bridge_slave_0: left allmulticast mode [ 628.439491][T13255] bridge_slave_0: left promiscuous mode [ 628.447127][T13255] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.490790][T15043] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3089'. [ 628.540630][T13255] veth1_vlan: left promiscuous mode [ 628.548836][T13255] veth0_vlan: left promiscuous mode [ 628.559365][ T5772] Bluetooth: hci1: command tx timeout [ 628.803349][T13255] team0 (unregistering): Port device geneve1 removed [ 629.256228][T13255] team0 (unregistering): Port device team_slave_1 removed [ 629.304314][T13255] team0 (unregistering): Port device team_slave_0 removed [ 629.352912][T13255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.362072][T13255] bond_slave_1 (unregistering): left allmulticast mode [ 629.413094][T13255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.424361][T13255] bond_slave_0 (unregistering): left allmulticast mode [ 629.804362][T13255] bond0 (unregistering): Released all slaves [ 629.907028][T14919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.922382][T14919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.934359][T15028] netlink: 'syz.2.3087': attribute type 10 has an invalid length. [ 629.944431][T15028] veth0_vlan: left promiscuous mode [ 629.954374][T15028] veth0_vlan: entered promiscuous mode [ 629.972900][T15028] team0: Device veth0_vlan failed to register rx_handler [ 630.175679][T14919] team0: Port device team_slave_0 added [ 630.211457][T14919] team0: Port device team_slave_1 added [ 630.344216][T14919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.358001][T14919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.404427][T14919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.445569][T14919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.486382][T14919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.560613][T14919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.998711][T14919] hsr_slave_0: entered promiscuous mode [ 631.005992][T14919] hsr_slave_1: entered promiscuous mode [ 631.025183][T14919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.046774][T14919] Cannot create hsr debugfs directory [ 631.852824][T15087] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3098'. [ 631.979623][T15087] netlink: 'syz.0.3098': attribute type 10 has an invalid length. [ 631.996379][T15087] veth0_vlan: left promiscuous mode [ 632.003130][T14059] Bluetooth: hci4: command 0x0406 tx timeout [ 632.021045][T15087] veth0_vlan: entered promiscuous mode [ 632.041731][T15087] team0: Device veth0_vlan failed to register rx_handler [ 633.441964][T14919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 633.476050][T14919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 633.541375][T14919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 636.432595][T14919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 636.786364][T14919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.844324][T14919] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.900680][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.907917][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.932024][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.939277][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.072549][T15149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3110'. [ 637.136805][T15149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3110'. [ 637.167983][T15145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3110'. [ 637.201619][T15151] netlink: 'syz.0.3110': attribute type 10 has an invalid length. [ 639.805730][T15151] veth1_vlan: entered allmulticast mode [ 639.834445][T15151] team0: Device veth1_vlan failed to register rx_handler [ 640.657545][T14919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.796097][T14919] veth0_vlan: entered promiscuous mode [ 640.849612][T14919] veth1_vlan: entered promiscuous mode [ 641.068993][T14919] veth0_macvtap: entered promiscuous mode [ 641.111453][T14919] veth1_macvtap: entered promiscuous mode [ 641.142941][T15191] netlink: 'syz.3.3118': attribute type 21 has an invalid length. [ 641.162996][T15191] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3118'. [ 641.254027][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.298522][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.338464][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.376452][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.402667][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.424800][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.467255][T14919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.503409][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.534953][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.565472][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.598737][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.640979][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.677482][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.715780][T14919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.772966][T14919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.814773][T14919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.854543][T14919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.891312][T14919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.217984][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.248996][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.359157][ T9281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.379519][ T9281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.572481][T15283] sctp: [Deprecated]: syz.2.3139 (pid 15283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 646.572481][T15283] Use struct sctp_sack_info instead [ 650.048155][T15334] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3153'. [ 653.366912][T15356] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3160'. [ 653.756254][T15365] netlink: 'syz.3.3164': attribute type 10 has an invalid length. [ 653.765442][T15365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3164'. [ 653.785816][T15365] bridge0: port 5(ipvlan1) entered blocking state [ 653.796763][T15365] bridge0: port 5(ipvlan1) entered disabled state [ 653.810266][T15365] ipvlan1: entered allmulticast mode [ 653.816087][T15365] veth0_vlan: entered allmulticast mode [ 653.897622][T15365] ipvlan1: left allmulticast mode [ 653.905755][T15365] veth0_vlan: left allmulticast mode [ 653.938291][T15365] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 656.688226][T15386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3166'. [ 663.363560][T15440] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3191'. [ 663.774438][T15456] netlink: 'syz.3.3198': attribute type 2 has an invalid length. [ 664.375796][T15473] netlink: 'syz.1.3203': attribute type 10 has an invalid length. [ 664.387860][T15473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3203'. [ 664.401382][T15473] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 665.677941][T15501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3214'. [ 665.804955][T15512] netlink: 'syz.1.3218': attribute type 10 has an invalid length. [ 665.897502][T15512] team0: Port device geneve1 added [ 666.285942][T15524] netlink: 'syz.1.3223': attribute type 21 has an invalid length. [ 666.324613][T15524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3223'. [ 667.708920][T15558] netlink: 'syz.2.3237': attribute type 10 has an invalid length. [ 667.932947][T15558] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 668.187843][ T5772] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 668.196248][T15570] netlink: 'syz.1.3242': attribute type 10 has an invalid length. [ 668.305778][T15570] veth0_vlan: left promiscuous mode [ 668.351567][T15570] veth0_vlan: entered promiscuous mode [ 668.377292][T15570] team0: Device veth0_vlan failed to register rx_handler [ 669.779784][T15614] netlink: 'syz.2.3257': attribute type 27 has an invalid length. [ 669.802765][T15614] netlink: 'syz.2.3257': attribute type 4 has an invalid length. [ 669.812431][T15614] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3257'. [ 669.909999][T15618] netlink: 'syz.2.3257': attribute type 10 has an invalid length. [ 669.933080][T15618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3257'. [ 669.949782][T15618] ipvlan1: entered promiscuous mode [ 669.971163][T15618] bridge0: port 3(ipvlan1) entered blocking state [ 669.992960][T15618] bridge0: port 3(ipvlan1) entered disabled state [ 670.006104][T15618] ipvlan1: entered allmulticast mode [ 670.022755][T15618] veth0_vlan: entered allmulticast mode [ 670.052493][T15618] ipvlan1: left allmulticast mode [ 670.072442][T15618] veth0_vlan: left allmulticast mode [ 670.094411][T15618] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 672.690903][T15627] netlink: 'syz.0.3258': attribute type 10 has an invalid length. [ 672.910597][T15634] Dead loop on virtual device ip6_vti0, fix it urgently! [ 676.286762][T15666] netlink: 'syz.2.3273': attribute type 10 has an invalid length. [ 677.263248][T15687] netlink: 'syz.1.3283': attribute type 21 has an invalid length. [ 677.293264][T15687] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3283'. [ 677.314152][T15687] netlink: 'syz.1.3283': attribute type 5 has an invalid length. [ 677.356704][T15687] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3283'. [ 677.408944][T15690] netlink: 'syz.1.3283': attribute type 21 has an invalid length. [ 677.451362][T15690] netlink: 'syz.1.3283': attribute type 1 has an invalid length. [ 680.545252][T15714] netlink: 'syz.1.3295': attribute type 153 has an invalid length. [ 680.553865][T15714] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3295'. [ 680.718194][T15721] sctp: [Deprecated]: syz.1.3295 (pid 15721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.718194][T15721] Use struct sctp_sack_info instead [ 681.919784][T15736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3304'. [ 683.335997][T15763] netlink: 'syz.2.3312': attribute type 10 has an invalid length. [ 683.345588][T15763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3312'. [ 683.356439][T15763] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 684.630931][T15800] netlink: 'syz.2.3328': attribute type 10 has an invalid length. [ 684.845755][T15809] : renamed from veth0_vlan [ 684.923956][T15814] netlink: 'syz.3.3334': attribute type 21 has an invalid length. [ 684.934522][T15814] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3334'. [ 685.584987][T15834] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3341'. [ 685.700171][T15834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3341'. [ 686.243635][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.258716][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.533352][T15904] netlink: 'syz.0.3369': attribute type 10 has an invalid length. [ 690.541642][T15904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3369'. [ 690.556739][T15904] ipvlan1: entered promiscuous mode [ 690.572577][T15904] bridge0: port 4(ipvlan1) entered blocking state [ 690.579671][T15904] bridge0: port 4(ipvlan1) entered disabled state [ 690.586609][T15904] ipvlan1: entered allmulticast mode [ 690.592851][T15904] veth0_vlan: entered allmulticast mode [ 690.605481][T15904] ipvlan1: left allmulticast mode [ 690.612301][T15904] veth0_vlan: left allmulticast mode [ 690.622673][T15904] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 694.694532][T15935] netlink: 'syz.0.3381': attribute type 21 has an invalid length. [ 694.758323][T15935] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3381'. [ 694.972475][T15942] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3384'. [ 695.335225][T15955] netlink: 'syz.1.3388': attribute type 10 has an invalid length. [ 695.366791][T15955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3388'. [ 695.387727][T15955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 696.838649][T15968] syzkaller0: entered promiscuous mode [ 696.844209][T15968] syzkaller0: entered allmulticast mode [ 696.868057][T15968] syzkaller0: left promiscuous mode [ 696.873543][T15968] syzkaller0: left allmulticast mode [ 704.644725][T16032] netlink: 'syz.3.3417': attribute type 21 has an invalid length. [ 704.673452][T16030] netlink: 'syz.1.3416': attribute type 10 has an invalid length. [ 704.711176][T16030] team0: Port device netdevsim0 added [ 706.389863][T16062] netlink: 'syz.2.3429': attribute type 21 has an invalid length. [ 708.464033][T16101] netlink: 'syz.1.3441': attribute type 21 has an invalid length. [ 708.575199][T16108] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3445'. [ 708.611247][T16109] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3445'. [ 708.727153][T16109] netlink: 'syz.0.3445': attribute type 29 has an invalid length. [ 708.744063][T16108] netlink: 'syz.0.3445': attribute type 29 has an invalid length. [ 708.787006][T16108] netlink: 'syz.0.3445': attribute type 29 has an invalid length. [ 712.189575][T16137] netlink: 'syz.2.3456': attribute type 10 has an invalid length. [ 712.235713][T16137] veth0_vlan: left promiscuous mode [ 712.259557][T16137] veth0_vlan: entered promiscuous mode [ 712.283095][T16137] team0: Device veth0_vlan failed to register rx_handler [ 712.464351][T16140] €Â: renamed from hsr0 (while UP) [ 716.176329][T16162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.447052][T16167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.435779][T16185] FAULT_INJECTION: forcing a failure. [ 719.435779][T16185] name failslab, interval 1, probability 0, space 0, times 0 [ 719.528964][T16185] CPU: 0 PID: 16185 Comm: syz.0.3473 Not tainted syzkaller #0 [ 719.536611][T16185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 719.546725][T16185] Call Trace: [ 719.550055][T16185] [ 719.553037][T16185] dump_stack_lvl+0x18c/0x250 [ 719.557787][T16185] ? show_regs_print_info+0x20/0x20 [ 719.563048][T16185] ? load_image+0x400/0x400 [ 719.567597][T16185] ? __might_sleep+0xe0/0xe0 [ 719.572222][T16185] ? __lock_acquire+0x7d40/0x7d40 [ 719.577283][T16185] should_fail_ex+0x39d/0x4d0 [ 719.582004][T16185] should_failslab+0x9/0x20 [ 719.586547][T16185] slab_pre_alloc_hook+0x59/0x310 [ 719.591608][T16185] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 719.597448][T16185] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 719.603218][T16185] __kmem_cache_alloc_node+0x53/0x250 [ 719.608633][T16185] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 719.614552][T16185] __kmalloc+0xa4/0x230 [ 719.618749][T16185] tomoyo_realpath_from_path+0xe3/0x5d0 [ 719.624348][T16185] tomoyo_path_number_perm+0x248/0x620 [ 719.629930][T16185] ? tomoyo_path_number_perm+0x217/0x620 [ 719.635625][T16185] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 719.641258][T16185] ? __fget_files+0x28/0x4b0 [ 719.645894][T16185] ? __fget_files+0x28/0x4b0 [ 719.650545][T16185] security_file_ioctl+0x70/0xa0 [ 719.655529][T16185] __se_sys_ioctl+0x48/0x170 [ 719.660156][T16185] do_syscall_64+0x55/0xa0 [ 719.664628][T16185] ? clear_bhb_loop+0x40/0x90 [ 719.669335][T16185] ? clear_bhb_loop+0x40/0x90 [ 719.674049][T16185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.679987][T16185] RIP: 0033:0x7ff426f9aeb9 [ 719.684426][T16185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.704147][T16185] RSP: 002b:00007ff427e11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.712594][T16185] RAX: ffffffffffffffda RBX: 00007ff427215fa0 RCX: 00007ff426f9aeb9 [ 719.720594][T16185] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 000000000000000a [ 719.728595][T16185] RBP: 00007ff427e11090 R08: 0000000000000000 R09: 0000000000000000 [ 719.736594][T16185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.744586][T16185] R13: 00007ff427216038 R14: 00007ff427215fa0 R15: 00007ffc506b6a88 [ 719.752611][T16185] [ 719.775056][T16185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 721.477773][T16182] wg2: entered allmulticast mode [ 721.510751][T16186] wg2: entered promiscuous mode [ 723.042361][T16209] netlink: 'syz.3.3479': attribute type 4 has an invalid length. [ 723.055844][T16209] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3479'. [ 725.082578][T16209] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 727.884188][T16250] netlink: 'syz.0.3494': attribute type 3 has an invalid length. [ 727.959558][T16250] netlink: 'syz.0.3494': attribute type 1 has an invalid length. [ 727.967462][T16250] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3494'. [ 736.095087][T16302] netlink: 'syz.0.3509': attribute type 21 has an invalid length. [ 736.138678][T16302] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3509'. [ 739.440589][T16324] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3518'. [ 739.615802][T16324] caif0: entered allmulticast mode [ 739.628650][T16324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 740.022807][T16339] netlink: 'syz.0.3524': attribute type 11 has an invalid length. [ 740.127201][T16339] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3524'. [ 740.180356][T16335] netlink: 'syz.2.3523': attribute type 3 has an invalid length. [ 743.683588][T16363] netlink: 'syz.1.3535': attribute type 3 has an invalid length. [ 744.648855][T14059] Bluetooth: hci1: command 0x0406 tx timeout [ 747.703643][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.710187][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.944837][T16396] delete_channel: no stack [ 749.952437][T16396] delete_channel: no stack [ 750.034411][T16397] netlink: 'syz.3.3545': attribute type 3 has an invalid length. [ 754.324072][T16416] FAULT_INJECTION: forcing a failure. [ 754.324072][T16416] name failslab, interval 1, probability 0, space 0, times 0 [ 754.354439][T16416] CPU: 0 PID: 16416 Comm: syz.2.3554 Not tainted syzkaller #0 [ 754.361994][T16416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 754.372119][T16416] Call Trace: [ 754.375454][T16416] [ 754.378695][T16416] dump_stack_lvl+0x18c/0x250 [ 754.383474][T16416] ? show_regs_print_info+0x20/0x20 [ 754.388741][T16416] ? load_image+0x400/0x400 [ 754.389212][T16421] netlink: 'syz.1.3555': attribute type 21 has an invalid length. [ 754.393370][T16416] ? __might_sleep+0xe0/0xe0 [ 754.393429][T16416] ? __lock_acquire+0x7d40/0x7d40 [ 754.393459][T16416] should_fail_ex+0x39d/0x4d0 [ 754.393495][T16416] should_failslab+0x9/0x20 [ 754.393522][T16416] slab_pre_alloc_hook+0x59/0x310 [ 754.393556][T16416] ? tomoyo_encode+0x28b/0x540 [ 754.393577][T16416] ? tomoyo_encode+0x28b/0x540 [ 754.393596][T16416] __kmem_cache_alloc_node+0x53/0x250 [ 754.393632][T16416] ? tomoyo_encode+0x28b/0x540 [ 754.393650][T16416] __kmalloc+0xa4/0x230 [ 754.393683][T16416] tomoyo_encode+0x28b/0x540 [ 754.393710][T16416] tomoyo_realpath_from_path+0x592/0x5d0 [ 754.393746][T16416] tomoyo_path_number_perm+0x248/0x620 [ 754.393778][T16416] ? tomoyo_path_number_perm+0x217/0x620 [ 754.438859][T16421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3555'. [ 754.440573][T16416] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 754.485646][T16416] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 754.491527][T16416] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 754.497618][T16416] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 754.503851][T16416] security_file_ioctl+0x70/0xa0 [ 754.509032][T16416] __se_sys_ioctl+0x48/0x170 [ 754.513780][T16416] do_syscall_64+0x55/0xa0 [ 754.518266][T16416] ? clear_bhb_loop+0x40/0x90 [ 754.523000][T16416] ? clear_bhb_loop+0x40/0x90 [ 754.527732][T16416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.533678][T16416] RIP: 0033:0x7f00aa39aeb9 [ 754.538160][T16416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.557852][T16416] RSP: 002b:00007f00ab2e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.566316][T16416] RAX: ffffffffffffffda RBX: 00007f00aa615fa0 RCX: 00007f00aa39aeb9 [ 754.574335][T16416] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 000000000000000a [ 754.582350][T16416] RBP: 00007f00ab2e9090 R08: 0000000000000000 R09: 0000000000000000 [ 754.590365][T16416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.598373][T16416] R13: 00007f00aa616038 R14: 00007f00aa615fa0 R15: 00007ffc37482ba8 [ 754.606399][T16416] [ 754.669522][T16416] ERROR: Out of memory at tomoyo_realpath_from_path. [ 755.830870][T16431] netlink: 'syz.0.3558': attribute type 3 has an invalid length. [ 759.842185][T16471] netlink: 'syz.0.3574': attribute type 3 has an invalid length. [ 759.860058][T16471] netlink: 'syz.0.3574': attribute type 1 has an invalid length. [ 759.868187][T16471] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3574'. [ 759.975121][T16479] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3578'. [ 763.420421][T16508] netlink: 'syz.3.3587': attribute type 3 has an invalid length. [ 763.448601][T16508] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 763.456685][T16508] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3587'. [ 763.755894][T16512] netlink: 'syz.1.3589': attribute type 10 has an invalid length. [ 763.788964][T16512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3589'. [ 763.828992][T16512] ipvlan1: entered promiscuous mode [ 763.896934][T16512] bridge0: port 3(ipvlan1) entered blocking state [ 763.975911][T16512] bridge0: port 3(ipvlan1) entered disabled state [ 764.011318][T16512] ipvlan1: entered allmulticast mode [ 764.033795][T16512] : entered allmulticast mode [ 764.183382][T16512] ipvlan1: left allmulticast mode [ 764.207732][T16512] : left allmulticast mode [ 764.262407][T16512] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 772.230967][T16595] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 772.239967][T16595] syzkaller1: linktype set to 786 [ 772.261468][T16595] netlink: 'syz.3.3620': attribute type 46 has an invalid length. [ 772.278613][T16595] netlink: 'syz.3.3620': attribute type 10 has an invalid length. [ 774.994181][T16595] team0: Port device syz_tun added [ 778.329513][T16616] tap0: tun_chr_ioctl cmd 35108 [ 778.344614][T16618] tap0: tun_chr_ioctl cmd 1074025692 [ 778.695365][T16631] netlink: 'syz.0.3635': attribute type 10 has an invalid length. [ 782.959887][T16656] syzkaller0: entered promiscuous mode [ 782.971979][T16656] syzkaller0: entered allmulticast mode [ 785.137885][T16662] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3643'. [ 785.147588][T16661] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3643'. [ 790.107245][T16661] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.3643'. [ 790.117406][T16682] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.3652'. [ 790.132148][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 794.282473][T16718] netlink: 'syz.3.3663': attribute type 22 has an invalid length. [ 794.318204][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3663'. [ 794.849377][T16730] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3667'. [ 796.100892][T16737] netlink: 'syz.1.3669': attribute type 3 has an invalid length. [ 796.171212][T16737] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3669'. [ 801.142865][T16768] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3679'. [ 801.166027][T16774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3682'. [ 801.175909][T16774] dummy0: entered promiscuous mode [ 801.187035][T16774] dummy0: entered allmulticast mode [ 801.206115][T16768] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3679'. [ 801.250175][T16772] FAULT_INJECTION: forcing a failure. [ 801.250175][T16772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.279890][T16768] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3679'. [ 801.338925][T16772] CPU: 0 PID: 16772 Comm: syz.2.3681 Not tainted syzkaller #0 [ 801.346468][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 801.356577][T16772] Call Trace: [ 801.359911][T16772] [ 801.362888][T16772] dump_stack_lvl+0x18c/0x250 [ 801.367662][T16772] ? show_regs_print_info+0x20/0x20 [ 801.372990][T16772] ? load_image+0x400/0x400 [ 801.377554][T16772] ? __lock_acquire+0x7d40/0x7d40 [ 801.382640][T16772] should_fail_ex+0x39d/0x4d0 [ 801.387385][T16772] _copy_from_user+0x2f/0xe0 [ 801.392028][T16772] __copy_msghdr+0x3bb/0x580 [ 801.396693][T16772] ___sys_sendmsg+0x214/0x360 [ 801.401418][T16772] ? get_pid_task+0x20/0x1e0 [ 801.406074][T16772] ? __sys_sendmsg+0x2a0/0x2a0 [ 801.410928][T16772] ? __lock_acquire+0x7d40/0x7d40 [ 801.416033][T16772] __se_sys_sendmsg+0x1c2/0x2b0 [ 801.420935][T16772] ? __x64_sys_sendmsg+0x80/0x80 [ 801.425947][T16772] ? lockdep_hardirqs_on+0x98/0x150 [ 801.431201][T16772] do_syscall_64+0x55/0xa0 [ 801.435673][T16772] ? clear_bhb_loop+0x40/0x90 [ 801.440442][T16772] ? clear_bhb_loop+0x40/0x90 [ 801.445153][T16772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.451069][T16772] RIP: 0033:0x7f00aa39aeb9 [ 801.455505][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.475138][T16772] RSP: 002b:00007f00ab2e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.483585][T16772] RAX: ffffffffffffffda RBX: 00007f00aa615fa0 RCX: 00007f00aa39aeb9 [ 801.491583][T16772] RDX: 0000000020000800 RSI: 0000200000000800 RDI: 000000000000000b [ 801.499703][T16772] RBP: 00007f00ab2e9090 R08: 0000000000000000 R09: 0000000000000000 [ 801.507799][T16772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.515792][T16772] R13: 00007f00aa616038 R14: 00007f00aa615fa0 R15: 00007ffc37482ba8 [ 801.523809][T16772] [ 809.136816][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.143609][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.556584][T16832] delete_channel: no stack [ 809.565068][T16832] delete_channel: no stack [ 809.637823][T16834] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3703'. [ 809.783769][T16841] netlink: 'syz.1.3703': attribute type 10 has an invalid length. [ 810.895479][T16841] team0 (unregistering): Port device team_slave_0 removed [ 810.945549][T16841] team0 (unregistering): Port device team_slave_1 removed [ 810.992329][T16841] team0 (unregistering): Port device geneve1 removed [ 811.069891][T16841] team0 (unregistering): Port device netdevsim0 removed [ 816.333770][T16881] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3721'. [ 816.452124][T16891] netlink: 'syz.0.3721': attribute type 10 has an invalid length. [ 817.077991][T16891] team0 (unregistering): Port device team_slave_0 removed [ 817.335661][T16891] team0 (unregistering): Port device team_slave_1 removed [ 817.361731][T16891] team0 (unregistering): Port device geneve1 removed [ 818.045013][T16918] netlink: 'syz.2.3733': attribute type 21 has an invalid length. [ 820.937690][T16934] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3737'. [ 820.992003][T16936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3747'. [ 821.104549][T16938] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3739'. [ 821.193525][T16938] netlink: 'syz.3.3739': attribute type 10 has an invalid length. [ 821.412354][T16938] team0 (unregistering): Port device team_slave_0 removed [ 821.555298][T16938] team0 (unregistering): Port device team_slave_1 removed [ 821.644653][T16938] team0 (unregistering): Port device geneve1 removed [ 821.719216][T16938] team0 (unregistering): Port device syz_tun removed [ 821.955815][T16938] syz.3.3739 (16938) used greatest stack depth: 17768 bytes left [ 824.580440][T16989] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3759'. [ 827.794086][T17010] netlink: 'syz.1.3768': attribute type 10 has an invalid length. [ 827.916283][T17013] netlink: 'syz.2.3770': attribute type 21 has an invalid length. [ 827.924704][T17013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3770'. [ 828.158233][T17025] FAULT_INJECTION: forcing a failure. [ 828.158233][T17025] name failslab, interval 1, probability 0, space 0, times 0 [ 828.194650][T17025] CPU: 1 PID: 17025 Comm: syz.1.3773 Not tainted syzkaller #0 [ 828.202206][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 828.212317][T17025] Call Trace: [ 828.215739][T17025] [ 828.218748][T17025] dump_stack_lvl+0x18c/0x250 [ 828.223586][T17025] ? show_regs_print_info+0x20/0x20 [ 828.228901][T17025] ? load_image+0x400/0x400 [ 828.233553][T17025] ? __might_sleep+0xe0/0xe0 [ 828.238201][T17025] ? __lock_acquire+0x7d40/0x7d40 [ 828.243348][T17025] should_fail_ex+0x39d/0x4d0 [ 828.248109][T17025] should_failslab+0x9/0x20 [ 828.252676][T17025] slab_pre_alloc_hook+0x59/0x310 [ 828.257768][T17025] ? __lock_acquire+0x7d40/0x7d40 [ 828.262852][T17025] kmem_cache_alloc_node+0x60/0x320 [ 828.268094][T17025] ? __alloc_skb+0x103/0x2c0 [ 828.272722][T17025] __alloc_skb+0x103/0x2c0 [ 828.277176][T17025] netlink_sendmsg+0x66a/0xbf0 [ 828.282110][T17025] ? lockdep_hardirqs_on+0x98/0x150 [ 828.287344][T17025] ? netlink_getsockopt+0x590/0x590 [ 828.292579][T17025] ? aa_sock_msg_perm+0x94/0x150 [ 828.297557][T17025] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 828.302871][T17025] ? security_socket_sendmsg+0x80/0xa0 [ 828.308364][T17025] ? netlink_getsockopt+0x590/0x590 [ 828.313597][T17025] ____sys_sendmsg+0x5ba/0x960 [ 828.318401][T17025] ? __lock_acquire+0x7d40/0x7d40 [ 828.323457][T17025] ? __asan_memset+0x22/0x40 [ 828.328092][T17025] ? __sys_sendmsg_sock+0x30/0x30 [ 828.333154][T17025] ? __import_iovec+0x5f2/0x850 [ 828.338242][T17025] ? import_iovec+0x73/0xa0 [ 828.342783][T17025] ___sys_sendmsg+0x2a6/0x360 [ 828.347494][T17025] ? __sys_sendmsg+0x2a0/0x2a0 [ 828.352485][T17025] ? perf_trace_preemptirq_template+0x269/0x330 [ 828.358881][T17025] __se_sys_sendmsg+0x1c2/0x2b0 [ 828.363788][T17025] ? __x64_sys_sendmsg+0x80/0x80 [ 828.368761][T17025] ? lockdep_hardirqs_on+0x98/0x150 [ 828.373993][T17025] do_syscall_64+0x55/0xa0 [ 828.378618][T17025] ? clear_bhb_loop+0x40/0x90 [ 828.383408][T17025] ? clear_bhb_loop+0x40/0x90 [ 828.388120][T17025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 828.394041][T17025] RIP: 0033:0x7f1a4c39aeb9 [ 828.398487][T17025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.418128][T17025] RSP: 002b:00007f1a4d2dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.426760][T17025] RAX: ffffffffffffffda RBX: 00007f1a4c615fa0 RCX: 00007f1a4c39aeb9 [ 828.434756][T17025] RDX: 0000000020000800 RSI: 0000200000000800 RDI: 000000000000000b [ 828.442757][T17025] RBP: 00007f1a4d2dc090 R08: 0000000000000000 R09: 0000000000000000 [ 828.450791][T17025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.458786][T17025] R13: 00007f1a4c616038 R14: 00007f1a4c615fa0 R15: 00007ffe218cdc48 [ 828.466811][T17025] [ 831.857828][T17041] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3780'. [ 832.181979][ T5772] Bluetooth: hci1: unexpected event 0x01 length: 151 > 1 [ 832.249693][T17059] netlink: 'syz.2.3786': attribute type 2 has an invalid length. [ 832.296056][T17059] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3786'. [ 833.466388][T17076] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3793'. [ 833.742287][T17093] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3799'. [ 833.848027][T17096] C: renamed from team_slave_0 [ 833.866764][T17096] netlink: 'syz.0.3798': attribute type 1 has an invalid length. [ 833.944634][T17096] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3798'. [ 835.750649][T17132] netlink: 'syz.1.3813': attribute type 2 has an invalid length. [ 835.768685][T17132] netlink: 'syz.1.3813': attribute type 1 has an invalid length. [ 835.776733][T17132] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3813'. [ 836.892063][T17151] netlink: 'syz.0.3821': attribute type 3 has an invalid length. [ 836.902299][T17151] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3821'. [ 837.028448][T17153] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3821'. [ 838.503793][T17180] syzkaller0: entered promiscuous mode [ 838.558770][T17180] syzkaller0: entered allmulticast mode [ 841.738073][T17188] netlink: 'syz.3.3836': attribute type 10 has an invalid length. [ 841.746182][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3836'. [ 841.755704][T17188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.781461][T17210] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3844'. [ 844.495152][T17265] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3865'. [ 846.891947][T17282] netlink: 'syz.3.3875': attribute type 21 has an invalid length. [ 846.952872][T17282] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3875'. [ 847.989953][T17308] netlink: 'syz.1.3883': attribute type 10 has an invalid length. [ 848.298172][T17313] netlink: 'syz.1.3887': attribute type 10 has an invalid length. [ 848.686791][T17320] netlink: 'syz.1.3890': attribute type 21 has an invalid length. [ 848.722578][T17320] netlink: 'syz.1.3890': attribute type 1 has an invalid length. [ 848.756198][T17320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3890'. [ 853.220324][T17363] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.3909'. [ 853.753950][T17371] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3912'. [ 853.807354][T17371] netlink: 'syz.3.3912': attribute type 10 has an invalid length. [ 853.822071][T17371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.214727][T17371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.290921][T17371] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 856.422992][T17380] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3914'. [ 857.735162][T17418] netlink: 'syz.2.3928': attribute type 2 has an invalid length. [ 857.744649][T17418] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3928'. [ 858.395197][T17433] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3934'. [ 858.458070][T17435] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3934'. [ 864.833956][T17503] netlink: 'syz.0.3961': attribute type 10 has an invalid length. [ 864.872760][T17506] netlink: 'syz.2.3962': attribute type 10 has an invalid length. [ 869.952005][T17595] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3982'. [ 870.583023][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.592383][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.755592][T17638] netlink: 'syz.3.3995': attribute type 21 has an invalid length. [ 873.799169][T17638] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3995'. [ 873.848563][T17638] netlink: 'syz.3.3995': attribute type 4 has an invalid length. [ 873.875820][T17638] netlink: 'syz.3.3995': attribute type 5 has an invalid length. [ 873.887602][T17638] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3995'. [ 880.242179][T17693] pim6reg1: tun_chr_ioctl cmd 35098 [ 883.298074][T17701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4019'. [ 883.364980][T17703] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4020'. [ 883.381981][T17703] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.4020'. [ 883.407815][T17703] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4020'. [ 883.821440][T17716] netlink: 'syz.0.4024': attribute type 10 has an invalid length. [ 883.889038][T17716] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 886.820050][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 886.908243][T17730] FAULT_INJECTION: forcing a failure. [ 886.908243][T17730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.937962][T17730] CPU: 1 PID: 17730 Comm: syz.1.4031 Not tainted syzkaller #0 [ 886.945534][T17730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 886.955640][T17730] Call Trace: [ 886.958971][T17730] [ 886.961941][T17730] dump_stack_lvl+0x18c/0x250 [ 886.966684][T17730] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 886.972904][T17730] ? show_regs_print_info+0x20/0x20 [ 886.978161][T17730] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 886.984388][T17730] ? dump_stack+0x9/0x20 [ 886.988709][T17730] should_fail_ex+0x39d/0x4d0 [ 886.993550][T17730] _copy_to_user+0x2f/0xa0 [ 886.998018][T17730] simple_read_from_buffer+0xe7/0x150 [ 887.003641][T17730] proc_fail_nth_read+0x1e8/0x260 [ 887.008743][T17730] ? proc_fault_inject_write+0x360/0x360 [ 887.014440][T17730] ? fsnotify_perm+0x271/0x5e0 [ 887.019273][T17730] ? proc_fault_inject_write+0x360/0x360 [ 887.024989][T17730] vfs_read+0x28b/0x970 [ 887.029213][T17730] ? kernel_read+0x1e0/0x1e0 [ 887.033865][T17730] ? __fget_files+0x28/0x4b0 [ 887.038518][T17730] ? __fget_files+0x28/0x4b0 [ 887.043170][T17730] ? __fget_files+0x43d/0x4b0 [ 887.047910][T17730] ? __fdget_pos+0x2a3/0x330 [ 887.052547][T17730] ? ksys_read+0x75/0x260 [ 887.056936][T17730] ksys_read+0x150/0x260 [ 887.061244][T17730] ? vfs_write+0x990/0x990 [ 887.065723][T17730] ? syscall_enter_from_user_mode+0x2e/0x80 [ 887.071679][T17730] do_syscall_64+0x55/0xa0 [ 887.076147][T17730] ? clear_bhb_loop+0x40/0x90 [ 887.080876][T17730] ? clear_bhb_loop+0x40/0x90 [ 887.085610][T17730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.091558][T17730] RIP: 0033:0x7f1a4c35b78e [ 887.096104][T17730] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 887.116117][T17730] RSP: 002b:00007f1a4d2dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 887.124599][T17730] RAX: ffffffffffffffda RBX: 00007f1a4d2dc6c0 RCX: 00007f1a4c35b78e [ 887.132627][T17730] RDX: 000000000000000f RSI: 00007f1a4d2dc0a0 RDI: 000000000000000c [ 887.140647][T17730] RBP: 00007f1a4d2dc090 R08: 0000000000000000 R09: 0000000000000000 [ 887.148706][T17730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.156721][T17730] R13: 00007f1a4c616038 R14: 00007f1a4c615fa0 R15: 00007ffe218cdc48 [ 887.164862][T17730] [ 887.762400][T17740] netlink: 'syz.1.4033': attribute type 2 has an invalid length. [ 887.776039][T17740] netlink: 'syz.1.4033': attribute type 8 has an invalid length. [ 887.785138][T17740] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4033'. [ 889.800485][T17743] netlink: 'syz.0.4035': attribute type 10 has an invalid length. [ 889.832371][T17743] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 890.274443][T17760] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4042'. [ 893.833113][T17798] netlink: 'syz.3.4054': attribute type 9 has an invalid length. [ 893.852065][T17798] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4054'. [ 895.167887][T17838] netlink: 'syz.0.4070': attribute type 10 has an invalid length. [ 895.198125][T17838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4070'. [ 895.210471][T17838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.234211][T17843] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4072'. [ 896.334695][T17862] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4080'. [ 896.345422][T17862] openvswitch: netlink: Key type 4112 is out of range max 32 [ 896.847320][T17880] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4086'. [ 896.878496][T17880] netlink: del zone limit has 4 unknown bytes [ 896.967529][T17887] netlink: 'syz.3.4086': attribute type 10 has an invalid length. [ 897.038397][T17887] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4086'. [ 901.628003][T17919] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4099'. [ 905.349788][T17936] netlink: 'syz.2.4106': attribute type 1 has an invalid length. [ 905.388991][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4106'. [ 905.685341][T17944] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4109'. [ 905.839451][T17946] netlink: 'syz.2.4106': attribute type 2 has an invalid length. [ 905.847289][T17946] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4106'. [ 906.096008][T17951] delete_channel: no stack [ 906.116181][T17951] delete_channel: no stack [ 906.976523][T17961] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4113'. [ 907.243066][T17964] netlink: 'syz.2.4112': attribute type 10 has an invalid length. [ 907.334024][T17964] bond0: (slave netdevsim0): Releasing backup interface [ 910.919910][T17981] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4121'. [ 911.002397][T17986] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4121'. [ 911.432393][T17995] syzkaller0: entered promiscuous mode [ 911.437988][T17995] syzkaller0: entered allmulticast mode [ 911.482060][T17993] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4122'. [ 911.704565][T17998] tun0: tun_chr_ioctl cmd 1074025677 [ 911.717863][T17998] tun0: linktype set to 776 [ 913.516738][T18014] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4131'. [ 913.798064][T18019] netlink: 'syz.0.4132': attribute type 10 has an invalid length. [ 917.315423][T18053] netlink: 'syz.0.4142': attribute type 10 has an invalid length. [ 917.342407][T18053] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.4142'. [ 918.507053][T18067] C: renamed from team_slave_0 [ 920.641288][T18067] netlink: 'syz.1.4147': attribute type 2 has an invalid length. [ 920.668450][T18067] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4147'. [ 920.677565][T18067] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 920.823898][T18075] netlink: 'syz.3.4150': attribute type 10 has an invalid length. [ 920.843901][T18075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4150'. [ 920.863711][T18075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 920.932543][T18080] netlink: 'syz.2.4152': attribute type 3 has an invalid length. [ 920.949687][T18080] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4152'. [ 921.489536][T18091] netlink: 142312 bytes leftover after parsing attributes in process `syz.3.4156'. [ 921.507512][T18091] netlink: 'syz.3.4156': attribute type 1 has an invalid length. [ 921.518019][T18091] netlink: 'syz.3.4156': attribute type 2 has an invalid length. [ 921.530491][T18091] netlink: 'syz.3.4156': attribute type 3 has an invalid length. [ 921.542926][T18091] netlink: 'syz.3.4156': attribute type 4 has an invalid length. [ 926.370659][T18155] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4178'. [ 927.508488][T18172] netlink: 'syz.0.4184': attribute type 10 has an invalid length. [ 928.881114][T18175] netlink: 'syz.1.4185': attribute type 10 has an invalid length. [ 928.894833][T18175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4185'. [ 928.905017][T18175] bridge0: port 3(ipvlan1) entered blocking state [ 928.927283][T18175] bridge0: port 3(ipvlan1) entered disabled state [ 928.935313][T18175] ipvlan1: entered allmulticast mode [ 928.949167][T18175] : entered allmulticast mode [ 928.956104][T18175] ipvlan1: left allmulticast mode [ 928.988597][T18175] : left allmulticast mode [ 928.995914][T18175] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 929.433045][T18193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4192'. [ 930.264777][T18204] netlink: 'syz.3.4196': attribute type 10 has an invalid length. [ 930.601654][T18206] netlink: 'syz.3.4197': attribute type 12 has an invalid length. [ 930.628429][T18206] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.4197'. [ 932.002150][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.012644][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.491077][T18241] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4211'. [ 936.782712][T18257] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4215'. [ 940.183040][T18282] netlink: 'syz.1.4226': attribute type 10 has an invalid length. [ 940.204700][T18285] syz.3.4227[18285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.204951][T18285] syz.3.4227[18285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.432583][T18295] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4232'. [ 943.911875][T18334] netlink: 'syz.3.4246': attribute type 2 has an invalid length. [ 943.936013][T18334] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4246'. [ 947.574245][T18366] netlink: 'syz.3.4256': attribute type 10 has an invalid length. [ 948.222275][T18379] netlink: 'syz.3.4260': attribute type 41 has an invalid length. [ 952.063033][T18421] netlink: 'syz.2.4277': attribute type 10 has an invalid length. [ 952.471957][T18437] netlink: 'syz.2.4284': attribute type 21 has an invalid length. [ 952.490817][T18437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4284'. [ 956.329750][T18476] netlink: 'syz.3.4300': attribute type 10 has an invalid length. [ 958.979538][T18495] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4306'. [ 959.104869][T18500] netlink: 'syz.1.4308': attribute type 2 has an invalid length. [ 959.138449][T18500] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4308'. [ 961.886527][T18550] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 963.127621][T18581] netlink: 'syz.3.4338': attribute type 10 has an invalid length. [ 963.157121][T18581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4338'. [ 963.185325][T18581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 964.096212][T18592] netlink: 'syz.3.4342': attribute type 10 has an invalid length. [ 964.320031][T17537] wlan1: Trigger new scan to find an IBSS to join [ 965.757661][T18632] netlink: 'syz.3.4360': attribute type 10 has an invalid length. [ 965.776154][T18632] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4360'. [ 965.787193][T18632] bridge0: port 5(ipvlan1) entered blocking state [ 965.794228][T18632] bridge0: port 5(ipvlan1) entered disabled state [ 965.801324][T18632] ipvlan1: entered allmulticast mode [ 965.806670][T18632] veth0_vlan: entered allmulticast mode [ 965.833675][T18632] ipvlan1: left allmulticast mode [ 965.854554][T18632] veth0_vlan: left allmulticast mode [ 965.861418][T18632] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 965.934129][ T5772] Bluetooth: hci1: unexpected event for opcode 0x6c61 [ 968.001238][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4376'. [ 968.564494][T18687] netlink: 'syz.3.4379': attribute type 21 has an invalid length. [ 968.573147][T18687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4379'. [ 968.720822][T18693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4382'. [ 969.279009][T17555] wlan1: Trigger new scan to find an IBSS to join [ 969.292353][T18705] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4386'. [ 970.275051][T17537] wlan1: Creating new IBSS network, BSSID 32:79:87:72:f4:d1 [ 970.317980][T17534] ------------[ cut here ]------------ [ 970.324481][T17534] WARNING: CPU: 0 PID: 17534 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 970.334892][T17534] Modules linked in: [ 970.338906][T17534] CPU: 0 PID: 17534 Comm: kworker/u4:46 Not tainted syzkaller #0 [ 970.346688][T17534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 970.356910][T17534] Workqueue: cfg80211 cfg80211_event_work [ 970.362796][T17534] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 970.369129][T17534] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 7c a2 f7 0f 0b eb bb e8 6e 7c a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 60 7c a2 f7 0f 0b e9 e0 fd ff ff e8 [ 970.389271][T17534] RSP: 0000:ffffc90013927a20 EFLAGS: 00010293 [ 970.395471][T17534] RAX: ffffffff89e49842 RBX: dffffc0000000000 RCX: ffff888063b28000 [ 970.403726][T17534] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 970.411857][T17534] RBP: ffffc90013927af8 R08: ffffffff911bf56f R09: 1ffffffff2237ead [ 970.419959][T17534] R10: dffffc0000000000 R11: fffffbfff2237eae R12: ffff888023ed8c90 [ 970.428019][T17534] R13: 1ffff92002724f4c R14: ffff888078d735b8 R15: 000000000000001f [ 970.436155][T17534] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 970.445219][T17534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 970.451995][T17534] CR2: 0000200000000480 CR3: 000000006297e000 CR4: 00000000003506f0 [ 970.460089][T17534] DR0: 0100000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 970.468137][T17534] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 970.476366][T17534] Call Trace: [ 970.479768][T17534] [ 970.482782][T17534] ? mutex_lock_nested+0x20/0x20 [ 970.487808][T17534] ? trace_rdev_return_void+0x1c0/0x1c0 [ 970.493803][T17534] cfg80211_process_wdev_events+0x3bc/0x550 [ 970.499853][T17534] cfg80211_process_rdev_events+0xa1/0x110 [ 970.505732][T17534] cfg80211_event_work+0x2f/0x40 [ 970.510845][T17534] ? process_scheduled_works+0x96f/0x15d0 [ 970.516724][T17534] process_scheduled_works+0xa5d/0x15d0 [ 970.522403][T17534] ? assign_work+0x430/0x430 [ 970.527068][T17534] ? assign_work+0x3d0/0x430 [ 970.531798][T17534] worker_thread+0xa55/0xfc0 [ 970.537251][T17534] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 970.543366][T17534] kthread+0x2fa/0x390 [ 970.547500][T17534] ? pr_cont_work+0x560/0x560 [ 970.552334][T17534] ? kthread_blkcg+0xd0/0xd0 [ 970.556987][T17534] ret_from_fork+0x48/0x80 [ 970.561514][T17534] ? kthread_blkcg+0xd0/0xd0 [ 970.566260][T17534] ret_from_fork_asm+0x11/0x20 [ 970.571194][T17534] [ 970.574277][T17534] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 970.581696][T17534] CPU: 0 PID: 17534 Comm: kworker/u4:46 Not tainted syzkaller #0 [ 970.589454][T17534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 970.599565][T17534] Workqueue: cfg80211 cfg80211_event_work [ 970.605386][T17534] Call Trace: [ 970.608707][T17534] [ 970.611722][T17534] dump_stack_lvl+0x18c/0x250 [ 970.616459][T17534] ? show_regs_print_info+0x20/0x20 [ 970.621811][T17534] ? load_image+0x400/0x400 [ 970.626415][T17534] panic+0x2dc/0x730 [ 970.630380][T17534] ? bpf_jit_dump+0xd0/0xd0 [ 970.634958][T17534] ? ret_from_fork_asm+0x11/0x20 [ 970.639962][T17534] __warn+0x2e0/0x470 [ 970.643989][T17534] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 970.649679][T17534] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 970.655283][T17534] report_bug+0x2be/0x4f0 [ 970.659763][T17534] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 970.665363][T17534] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 970.670956][T17534] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 970.676549][T17534] handle_bug+0xcf/0x120 [ 970.680829][T17534] exc_invalid_op+0x1a/0x50 [ 970.685371][T17534] asm_exc_invalid_op+0x1a/0x20 [ 970.690246][T17534] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 970.696548][T17534] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 7c a2 f7 0f 0b eb bb e8 6e 7c a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 60 7c a2 f7 0f 0b e9 e0 fd ff ff e8 [ 970.716403][T17534] RSP: 0000:ffffc90013927a20 EFLAGS: 00010293 [ 970.722512][T17534] RAX: ffffffff89e49842 RBX: dffffc0000000000 RCX: ffff888063b28000 [ 970.730523][T17534] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 970.738533][T17534] RBP: ffffc90013927af8 R08: ffffffff911bf56f R09: 1ffffffff2237ead [ 970.746538][T17534] R10: dffffc0000000000 R11: fffffbfff2237eae R12: ffff888023ed8c90 [ 970.754812][T17534] R13: 1ffff92002724f4c R14: ffff888078d735b8 R15: 000000000000001f [ 970.762840][T17534] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 970.768447][T17534] ? mutex_lock_nested+0x20/0x20 [ 970.773429][T17534] ? trace_rdev_return_void+0x1c0/0x1c0 [ 970.779013][T17534] cfg80211_process_wdev_events+0x3bc/0x550 [ 970.784944][T17534] cfg80211_process_rdev_events+0xa1/0x110 [ 970.790779][T17534] cfg80211_event_work+0x2f/0x40 [ 970.795843][T17534] ? process_scheduled_works+0x96f/0x15d0 [ 970.801605][T17534] process_scheduled_works+0xa5d/0x15d0 [ 970.807299][T17534] ? assign_work+0x430/0x430 [ 970.811929][T17534] ? assign_work+0x3d0/0x430 [ 970.816654][T17534] worker_thread+0xa55/0xfc0 [ 970.821277][T17534] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 970.827221][T17534] kthread+0x2fa/0x390 [ 970.831328][T17534] ? pr_cont_work+0x560/0x560 [ 970.836048][T17534] ? kthread_blkcg+0xd0/0xd0 [ 970.840670][T17534] ret_from_fork+0x48/0x80 [ 970.845119][T17534] ? kthread_blkcg+0xd0/0xd0 [ 970.849745][T17534] ret_from_fork_asm+0x11/0x20 [ 970.854553][T17534] [ 970.858177][T17534] Kernel Offset: disabled [ 970.862629][T17534] Rebooting in 86400 seconds..