last executing test programs: 16.805419459s ago: executing program 1 (id=2534): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10500c00", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) recvmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000000) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000280)="ea3b326995927077cdee223b91f48901d09a0e9aecccfe6087a46616367ef7d5"}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002000000"], 0x0, 0x42}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r9 = socket$kcm(0xa, 0x6, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r9, 0x29, 0x22, &(0x7f0000000100)=r10, 0x120) openat$cgroup_int(r8, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x7, 0x2, 0x0, 0x10080, 0x1, 0x470e, '\x00', r7, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0xe, @void, @value, @value=r8}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004edffffffb972534d9bc4fdccf57c2f4167858d64ec9ee4298ae98db7540fb5260af22eda78b9643fb284d68ae39b4e82c502e2a819b40dbdab9500b592ccad1a4d80840861f724cf6c280f0c4d1c1bf98315e861a0e6c0a6ced9932e44573bf0097dbca0b06b080c544b43ed5fbc84103811", @ANYRES32=r4, @ANYBLOB="0300"/20, @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="010000000500"/28], 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r11) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r6}, 0x18) write$cgroup_devices(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r11], 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r7, r11, 0x0, 0x5}, 0x50) 16.271843485s ago: executing program 1 (id=2536): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) 16.10368904s ago: executing program 1 (id=2538): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d02000000fcffffff0200000000000000000000000000000000036bc3c9924970bbf25fb6ff7e2a7f40215fd2fd8a72093d5100"/93], 0x0, 0x42, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000000), 0x400, r2, 0x0, 0x1ba8847c99}, 0x38) 15.871746128s ago: executing program 1 (id=2539): socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0600000000000000000000000000000000000000a5f4fe5bf070d9cc80f37cd5acf87f5401ac1ff06b4ea71d1dff520e336f7e83a19c1d9ab164c4f603", @ANYRES32], 0x50) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000800)={r6, r4, 0x4, r3}, 0x10) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @remote, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)="7e50ad76cccbee03a4bd8da085f1f9e1696c390d596a10e25839e0d94818674f069dd677f8972d672aa0cb4c837381b6612ffad4179e6c5e2469aa0bb60c230af567a521615a8792d0802d8876423ae5c2327c1e76a72e63acc2dca6584cdfd88081b9951b173ec5da866637af4ffc8bd801c80b0ab0b45460cc4244247b5a3d96c9075a51e791dab6342ed5ee3870156bde41ea9d51579266037683ae413da130a249056f1d4e6cad5d5a68117dcd784b1ac68c956c1c0c683c364dba1f1ccbf0360cdae5c197bd561a2964499248c7a4053a864a7b783b08a9a8a875848ca2f4e771a8", 0xe4}, {&(0x7f0000000940)="c80e40ab95022f73e4ce4934b1215100e94db5c994e2966d89f5e88fa3a24a24fe5539de8469da78c96cd4409e1c155e5d323516b6a3ce588f0c2aac34b28d6b200026e74f65663e205ffdbabb215b8fc58e046a1d15347dc873d9c7c91db63104ed93ca2761798ab73c4cfcce2a8827ac4c9d6cb50a5e5f1ad1ca3f44db5b02d9ee716af70b9d361d0f14bdc0b5c616241005d8984464aebc7ab24ccad8ebdd9b949de0575888bb6e40ec", 0xab}, {&(0x7f0000000a00)="033caa3f7ecf587e7077b2456625f2681490ce99d27de2662200dd33301bb24dcad1a104b364af65b6e07d978ac7aeaad9cc36b6fd7e531bdc5dcaf2548eded6639d1cfc71e7ddedcc1d13c81933b45898e9cdef77db504b4f2ab1a14fd8e282a5a09e45e3eca31556312004bffa5652b1fb02a430e83813663709a79099f468994d1dc6771de99ae1039adcdb7a9f8380520f403d1389d9aef9e6881867cb7752aa1085d0f73d0320d4c43bbce0abb705421916dd5deabd466e8b59180c8099d02c3ce7f430c03dfa5d0908eac2c999188ccb69d93ef2a70440c8860ad798aeeb3e5a12ce4bb21073ec3dbbe58cb557e22e41c4db515c0cc5", 0xf9}, {&(0x7f0000000b00)="74876468454901043ea896647c92b0d6e60e726b80960c2a6c07459ab85639e4c1859c9a97783d907679d52e46fa805fecc536c98b90ac276aea14ff6142b97e6096d25f5e2e2c02f842a2ce751af393f9aedfc5683e54512b47d5165de288f20903d006b02b4fd065fb899188f15a54ea5448ffd1124efca04cfe20e2cf7c3aca4c90c36ebd633fda7da25730322740b36b7fb60057a438efdc667ce2a8a89f1662c51afcbb5ab9e8e6880d6651eecef9c141eb221ab8513165f96c7705a30e6f6d01fdb7ee8fcedf723f802ad06474e8bcaecbbecf8275c5789a9bb6c4c9dd4989dfdef875be01808fe1c0", 0xec}], 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="10010000000000000f010000030000001eb0194e944c3a76a1ad11e7a8bd462ff867908a8e8feab43ea41a99493694cf650a0fee34cffcd2b438fb932ce2aa972212a4fad22704230560f89c7066affb6e8573656309951cad7bfde0afa0b1ff032f78ad1ebc6bca2b6fbd3cf9c2c9e3509a2a8ae45ae0a40aa7e301129dd32083c5458d1028ef18fc6be5967fc5224e4761ab9166248b6f9ca212d1721601604fb1b4015f67070179f66a8fa57461bd2e997fb5fa247bce9141e2531d53161fcdc93399f671c1d2cbbb5e04c9abd2943832d83717f23ea6dc43e68cc1609c3ed57a509d97096208c5c0b2f8ba93bfb71785a5b73477f40ddc254719db95f992af137b9e50a0a557e800000000000000d00000000000000019010000f7ffffffe61b655bfeb6dcd02a920f783621d0ee13cf081b2259b35301be9aa319b6adff15e7a8f635d77547d5302bc58fa3056df83cbabf9b4e51875f96bbe889c916e4c35932dcbcb44c37f78235faae7ef960a21fef21d2055e2b21747b025b10f494bd0b31f22e94b4073efe007279b416bd3bba40ef1676277a0d3de9db661e7d9bc7f5ea74b596025dd3103b9c2476a7a512c51151a6662da27d9981ec744f13f7bbddc89ed4d85498bba76da35ffc0f99a88d1e29ae57aa20a76e000000000000e800000000000000060000000f0000006c89539a11cd1dcabbc9926cdc93eedb14f8dbbd00e83cf55c201ad1d3ae99882f705cf96d3d596fb5d8df742b608d92269ebe1385d5f92bf52446f0b7081c03091b8cc19ee29d17cfe1a9b415269ce9d9f7897bc37571a398d591213f761c1f11a2e3d09e0de29ae07e6389d064a4009644c94bf6a35f2a5ac936d586439e7a46c64560164bc94ac9a931b68c7166e2ce5876787c54aac7cd8dacdd9591cfe3ec06e867a37469ec9a8223a8bf6f97492efd3dd2cd657c89a34a8c388cf5271109545cb7d40bed0b1850c3cb18f0d5ae3300000000000000"], 0x2c8}, 0x20000000) sendmsg$kcm(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRES64=r2, @ANYBLOB="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", @ANYRES8=r0, @ANYRES16, @ANYRES16=r10, @ANYBLOB="0000000000000000000700000045c80024577d750000000000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12}, 0x94) sendmsg(r7, 0x0, 0x40001) recvmsg$kcm(r7, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/231, 0xe7}, 0x100) 15.612924886s ago: executing program 1 (id=2540): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000078009106000000000100004a07d0f010aad5aeb7d2067513936a76f9c07b103b2f17a9f6ac22f1055e3167e640ae2ac214e848b3825191637c66fb412699bc951db3e5417a7a966456d6135384246e33e93b1f6fad05058114baaa24b8d962178684242ac79cd5483673eaa4cc5858f373a6f5ead356176d9250e3cce31d28f0e9d21596c30a47c95eb8281c65bd6eabaa02248fd50a35885bbdd98f2d142694358a8ab8"], 0xfe33) 15.374980674s ago: executing program 1 (id=2541): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x1}) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(r4) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x7, 0x0, 0x3fd, 0x1, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r11 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000f80)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/207, 0xcf}, {&(0x7f0000000cc0)=""/201, 0xc9}], 0x8, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138}, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x9, &(0x7f0000000380), 0x98) 8.664731566s ago: executing program 2 (id=2571): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x1}) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(r4) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x7, 0x0, 0x3fd, 0x1, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r11 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000f80)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/207, 0xcf}, {&(0x7f0000000cc0)=""/201, 0xc9}], 0x8, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138}, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x9, &(0x7f0000000380), 0x98) 6.531182753s ago: executing program 2 (id=2576): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x1}) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(r4) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYBLOB="000000000000000001800000000000000000000084a89f8f79bfe98eb870fdf4876f015bea937288deea12f7f9857c2a91f9cf8bcfab86e48f7b4c9523ece59b7656d415daa43296b07bb2f671397538403f79cf3e56f7aa0ce308bc35b2e2a4a22efa170147d83a1046b08feba1572b76a2928fc9b842ef03d13a37b63f66c8742ea9c3b346e7f52d281038bf2664d26cfc89fe49275cf4991f7be5a3bfd3ca966b0826ef0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x7, 0x0, 0x3fd, 0x1, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r10 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000f80)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/207, 0xcf}, {&(0x7f0000000cc0)=""/201, 0xc9}], 0x8, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x9, &(0x7f0000000380), 0x98) 5.787410777s ago: executing program 0 (id=2579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000100bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x20000, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001500)="b1256d0f8579948f1af090f65421964c23f3fcdddbb280918776c763f1571c4d3d27d0a17e7eea2c04a9d4decbb84ea6edccb675dcf09d015de6940027b8d72eda5c6b5234a6edbec3069efa7767dea571efb97410cee8790447bdfd859e2f9be40b14c965c65101b1425d7b6de5274f70585b82b967584f945cbfeaabbcb20141f45831d7211fedf169889f7d49dde4756bec5e678d2bb26cc074d1f1920b5c55341580cdc56cc2ebf4843e96f6ec19986cdefbf44d66873766bb50c32eb49469fc1d35c9284ac4", 0xc8}, {&(0x7f0000001600)="6f30a4c765648cc0b9120ea13e09d53cd666aed8e6d3f5bffe06e4ff3ff36d361bb1ab1e55cea42558d5f731958d9ab205bfc55b688f6c77f8928b638c578881b1e4e8fb", 0x44}], 0x2, &(0x7f00000016c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000100bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x20000, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001500)="b1256d0f8579948f1af090f65421964c23f3fcdddbb280918776c763f1571c4d3d27d0a17e7eea2c04a9d4decbb84ea6edccb675dcf09d015de6940027b8d72eda5c6b5234a6edbec3069efa7767dea571efb97410cee8790447bdfd859e2f9be40b14c965c65101b1425d7b6de5274f70585b82b967584f945cbfeaabbcb20141f45831d7211fedf169889f7d49dde4756bec5e678d2bb26cc074d1f1920b5c55341580cdc56cc2ebf4843e96f6ec19986cdefbf44d66873766bb50c32eb49469fc1d35c9284ac4", 0xc8}, {&(0x7f0000001600)="6f30a4c765648cc0b9120ea13e09d53cd666aed8e6d3f5bffe06e4ff3ff36d361bb1ab1e55cea42558d5f731958d9ab205bfc55b688f6c77f8928b638c578881b1e4e8fb", 0x44}], 0x2, &(0x7f00000016c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x18}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 5.551755084s ago: executing program 3 (id=2581): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x1}) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) 5.460626257s ago: executing program 2 (id=2582): r0 = socket$kcm(0x2, 0x5, 0x84) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x6, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$kcm(0x2, 0x1000000000000005, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f00000003c0)="2de7b7c0b982fcfe8d711afcb274ccc6870829cf559010dfaab9e74e1b0b8ef6435178563dfef03e6060c2bf18451a5485012576253f7b651dbb72806cabfc2c0eb78a4cbbefa7a29b32814cef805a596a3244d72c330070f183a46aba4403e7fa7519e0003d59b452502f18c34651994dfdc9987532493695db92bbb9490f7e65b9b9d4c5eb0ce2eac665b8d52f7d470000", 0x92}], 0x1}, 0x0) (async) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000280)="0204000902000000e4a17c45c8d2", 0xe}, {&(0x7f00000008c0)="d8f5656a7ffc8a1d715e0593f78e799a7c12a81b42c3d7f4c2f9f9de98bcd0267564233318c94d3c04f68180cde11c12f9037b317b912e89c4d63562c007ee7069d49f64f2d02fb649d64fbdef85affbdcee0e82abac63bc7a8a99df6999f52b4ddda53583ed28d464dc37dfb7edd57410a150277cb78ceec05f34472ca8a801cd73", 0x82}, {&(0x7f0000000a40)="f2a0173fec1f534e400539de882b1358cf3acb7252f74f38b43dee314521fbd840f070b76a8f65d1157301eb78c47c59836f7eb7ac768a330b633d9d048f426040b5afc6472ad56748054216fea47b41b176f1b189dc385c3fdf5a3399002f214689a3ae51c23c236d85106a3c07a3620f72ae110b3fbb748f0a9d9c594b8e39753c52ba9d7f497a59408233f61a37ae0a4b2c17ac8241c92fb6810e2a8097cae5da27ed6c5bdb062658c6341b1b21a042df255961a92357446bbfac3c2fdd0d50b1440bd15e749da7d607ec5be6ea4744d106fe9e472746a80fdbdf", 0xdc}, {&(0x7f0000000b40)="1899836e35", 0x5}, {&(0x7f0000000b80)="529c35300a15412198331a29c876004e84e9827acf64bf40b136880aa018466c64ecdeb1bf9435a6d0eeada43a2b1f14db49f9da30962fbed545c1550248436bf60083f37f3708c8478d2cd37d25eeaaff038bfd02c0415c4c50e7", 0x5b}], 0x5}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) (async) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32=r6], 0x50) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) (async) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES16], 0x20}, 0x0) (async) r9 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r10 = openat$cgroup(r9, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000086800000000001c0400000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000008000000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff87) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r12}, 0xc) (async) openat$cgroup_procs(r10, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$cgroup_subtree(r9, &(0x7f0000000140), 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) r13 = socket$kcm(0x10, 0x7, 0x10) socketpair(0x1f, 0x3, 0x3, &(0x7f0000000100)) (async) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x400c4) 5.203697715s ago: executing program 3 (id=2583): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x1}) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(r4) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x7, 0x0, 0x3fd, 0x1, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r11 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000f80)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/207, 0xcf}, {&(0x7f0000000cc0)=""/201, 0xc9}], 0x8, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138}, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x9, &(0x7f0000000380), 0x98) 5.152999137s ago: executing program 0 (id=2584): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4100, 0xa83}, {&(0x7f0000000bc0)=""/209, 0xa5}, {&(0x7f0000000900)=""/204, 0xdc}, {&(0x7f0000000340)=""/108, 0x75}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000001c0)=""/154, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/171}, {&(0x7f0000000800)=""/206}, {&(0x7f0000000280)=""/124}], 0x8}, 0x102) write$cgroup_pid(r2, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7c, &(0x7f0000000000)=r5, 0x62) 4.931621574s ago: executing program 2 (id=2585): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.365601722s ago: executing program 0 (id=2586): r0 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x200000000006}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x2010, r0}, 0x18) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80, 0x0}, 0x20008044) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x13c2, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x103e40, 0x1, 0x0, 0x0, 0x0, 0x40, 0xfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000dc0c0000000000000000000085000000050000009500"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000080)=ANY=[], 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000"], 0x50) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x44, 0x0, 0x0, 0x0, 0x7, 0x5, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r10, &(0x7f0000002cc0)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002b00)=[{&(0x7f00000005c0)="ce8813efd0beb3638cb6a064a2affbe33796bc15868177d7fa726933c04648675e2c9fdb016917451d0e87d2d1c58fb7e7c31fb96bc732d0e35d9ee94454a9dd28b105dc57fc5154db6bf85f7b0532b96a12461af8b247ea64ce56b0be6f056ecd478f3e9a494b99d879041bd6465f422d39b7e1d0342857dc472da08005d3c8ed186f1e7e64978f2a242f5cd90507a21b3bf28d525e05f8006a2dc2f0373fab9a1a2db38b4470e886b16b84bffed210bef6efeed45a97a572e052d34cbc770d27c5f5b41cd07bcbb335d0120d1ccf0bb891c245c7ab921fda05790ee5d96c7cdd", 0xe1}, {&(0x7f0000000740)="95023092fe6a91a9214665f47a42c2c93028c4ad18133178c6b71208d22ecd0711dca8f59ac2f1f085bd06196853425288382a830140e56cac17694f79e6b310a7483074dc38fcdc4b587117bd7a8414397d1242afde7b7f97fb17f48cfeaee3d4997748289a7c83f9217bbb2e6bff5736423cb6090fff8a6cc78032c1425652ed2293f9e313a1cbba71555d032d2be6835ee3def0b86950a678325b06e3b2919d5bcea6abb928b558a48b131c8d16b72075545634de1b5657da", 0xba}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="133385e1a41e1d9309c85b247adccd973c33efda9ccc19bdee042d9f0e452a3c81ad32eec677a953ba00f506c30ab30e5dfb7ae2b54b9c8fb096a5f6d5b4bb44e45122f9ffdd8d450062d890a7e5d60dc53890ea32e087ffdcb1c14545769f4fe5fdaefba600dd8ef06782abbc0bba7f109b2d0a408fd5e8e9", 0x79}, {&(0x7f0000001880)="533d8e384d143bdca47ffb9809b47ad2482fc0e6ae7025c1b6fe31ab66e9baad45181a496f7c13b1e0f8414d2f7ac513243c73c7625905235fc1fdac7eac30f2d68811a93a3d1f1a4c8e12168a72f99b4bf8fcfb67b1e0a80581be0911bb53a77f21205ff092e2716030476d235b48da9f6ce1f47d9744565053addbd22cb84a8ad5777c495bc3b7c2207fbec2ea6eb0c86f425bcaeaf65b43e8a43ef34e83dc3835303f8d5233d3a8160c87d463261ceae5348f9e1219231ac6cdd81e60c06605fb89bfe12092a63c4777ac3b19f62aa665c543b8f0a8439e1b398badab1fa4c3849e047eb106dcd4588322ed23251c7d74", 0xf2}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="92d056fcc37603b64d9b8d47b92ce200acd4d821f9fcc2e098a734aab11f679111698f9a4c4ec240ce4e9eebc69fe39e25894a761010839ce2429e8113fd1156cfa81f5cfff9ccdf320e01a5ff6ad8712e9765146a6921a852ea14514ea6388535e8e2e4a2b3b748fdb0738e709726d87c8050d103e75d0210f4b2b42e0896db216b0917dd9ff4f5391f85b5520e253e0d248942a8614c579004270106505db72a4b385574f9772cd485d16a1f5b273d05e98bc0036a14955502fb1439ce20dce24f990db3c6dad9693ba86ea3ed7c1eb048ce2256a0decfc1c81e99e1c6eff1b6192e85478eb7191ef7f557", 0xec}, {&(0x7f0000002a80)="6c8044ff4efcd17b619eff0481860caf8ab45561f2014987d316bb0537088aeb678e7a47832f772eb7b5e81f5fcf9aee4cae0e84fa638fdf203bb9aaf74b0a1f48e8eebf7b4e92d0fe210849814507b4cac04a8175f268c96216fb52acb46c2e28187b9c69f77caa18faba618d9188d109e9c6945c017e6032c980e967fa", 0x7e}], 0x8, &(0x7f0000002b80)=ANY=[@ANYBLOB="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"/296], 0x128}, 0x800) sendmsg$tipc(r10, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000740)="71409a3e495f61797edf2a6a1a482b1b09ef723aea41cdb3b34b64b4605d3af8ac7bf24c8614aeb55adb8e0e680c6cdf8f242d48843f8cf8831d6a9e0e4e44cccdc7d828db09fc149b01ecbc5968cdd016b1ec8f68216910a79e17841968a411c5ea10fe138ca872bd078e8d39a66edb46ae2395073a13f3f094d27439fd3fa8f945fe8aadeaf57567fadca3e4e4dde0ed0de3db76c698e063d91ed08a5a6b6e660ba8ac1bcd8156fa8f40c1c260b7944be7d62b0a0af54a7a4733b123b2fd8e9113a825b052f70bf8855c93b4d2add827cff0ca16e5cc40bdf39a76ab6e89dd", 0xe0}, {&(0x7f0000000840)="3b2dd20171a1836c86774010864625fedfba87a1", 0x14}, {&(0x7f0000000880)="d97c32ecc07035d8a71fb9571a844cc7f8df2e0b6ddd3b8a5f9512fe78f569a32c46a4c232fdc2ac47ab3e", 0x2b}, {&(0x7f00000008c0)="a2d09c066f6b5f8da5f03803fb109a24a3f3d81ab324bc6d3ad2", 0x1a}, {&(0x7f0000000a80)="ed8cb8f44323917472726a9fec4c093e04ed8ff708a7ae9e1af443f3d760d687a849ef5cf5a6733d54ec03cb577cf622e4f349fd41ba6b5b72a4dd520eb92d375f59b57d9299980fb855d15cf76d4d9a7f5298942c80f1caa87db895d9d4fa77b06eb37e17aa81286e0b1688c5b1d3eb7f3fc34d470d197d615f59c1c6ebc53c72d13992abad3bc73cb8533dd49f1940f12797fe3cf7bd8e61749de6847fcf690bc2b17de67cc38e27d8b30c570f9668e110461cbeb876f117c0e154a2b010f7e08a38ae4ea43742bf4b870a748c", 0xce}, {&(0x7f0000000b80)="03f5a17661534534f2694737645b36bcb4ceb30580e1bc45005a2f31c0723351901259dc2d29d6700f559df61a1a010c8bdf0dd3d3a7924d6e1b2c822906d6fe5993f36035f95cf653e4ab3a", 0x4c}], 0x6, &(0x7f0000000dc0)="7e6c6f2273c2f6c936fd3265114a17555bfd3bc1aa06d0784d997ebda4030bd0994e258c4f2377c75233017f563d6cc358ddd2e730a8e754842398352048569794ed9981e8da599879936a82683c1ce0c01551959cc3eacd80d10198c4c46093f2fdcadbd446c0eb3da607e45cf3005065c1ce6420e63906e4b1983b5f4c0436678e91dbe0dba26b4162abca60f59502eb258b9bb6061dfa953fbfb5042a63ea", 0xa0, 0x48000}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) 3.472146501s ago: executing program 2 (id=2587): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150006000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x202, 0x1, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xfffffffe}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="f28a08d900"/14, 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000010000000000007f02f4ff17000000fd05000000000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xef, &(0x7f0000000140)=""/239, 0x41100, 0x8, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x24c, 0x7c36}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, r1, r4], &(0x7f0000000340)=[{0x0, 0x3, 0x5, 0x7}, {0x1, 0x3, 0xc, 0x6}]}, 0x94) 3.415429172s ago: executing program 3 (id=2588): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x4008040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000001c0)=r4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x4, 0x8000, 0x4, 0x4000000, 0x4000, 0x1, 0x16f81bd7, '\x00', r2, r4, 0x3, 0x2, 0x1}, 0x50) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.373927444s ago: executing program 0 (id=2589): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x1}) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(r4) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYBLOB="000000000000000001800000000000000000000084a89f8f79bfe98eb870fdf4876f015bea937288deea12f7f9857c2a91f9cf8bcfab86e48f7b4c9523ece59b7656d415daa43296b07bb2f671397538403f79cf3e56f7aa0ce308bc35b2e2a4a22efa170147d83a1046b08feba1572b76a2928fc9b842ef03d13a37b63f66c8742ea9c3b346e7f52d281038bf2664d26cfc89fe49275cf4991f7be5a3bfd3ca966b0826ef0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x7, 0x0, 0x3fd, 0x1, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r10 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000f80)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/207, 0xcf}, {&(0x7f0000000cc0)=""/201, 0xc9}], 0x8, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x9, &(0x7f0000000380), 0x98) 301.489801ms ago: executing program 3 (id=2590): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x1}) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) 194.355324ms ago: executing program 0 (id=2591): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xfe, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x0, 0x6, 0x0, 0x2000000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) (async) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) close(r1) 193.663634ms ago: executing program 3 (id=2592): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x3, 0x2}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2b, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @ldst={0x3, 0x4, 0x1, 0x0, 0x2, 0xfffffffffffffff2, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x7a, &(0x7f0000000440)=""/122, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x6, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r2, 0x1], &(0x7f00000005c0)=[{0x1, 0x2, 0xe, 0x6}, {0x1, 0x5, 0xc, 0x2}], 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a00)={0x6, 0x1c, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xb}]}, &(0x7f00000007c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000980)=""/4096, 0x41000, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001980)={0x2, 0x2, 0x81, 0x5}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000019c0)=[{0x1, 0x2, 0x1, 0xb}, {0x0, 0x1, 0x3, 0x6}, {0x3, 0x5, 0x5, 0x8}], 0x10, 0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001c00)={r3, 0x0, 0x73, 0x0, &(0x7f0000001ac0)="df825e47577c08c7f386486060ea2a0e972c007b2c33f12b79952e6296a2e0ffc4cfadc6e04961b60f42fb4079f71a5aac36803f71cf7b995830ffe9d14be6fa8697ce29dfb5ebfdd96070207755531d1160aadd423b70c144816a54bf94dfbc48c5a0ad2e4879a5e7343dae413766410347d1", 0x0, 0x8c, 0x0, 0x8a, 0x0, &(0x7f0000001b40)="7108dc87beb030cdf0f117596081e60ee4f48294ac64d244cd5e4eeb5076e5e8dfba48ef5b99c83af494650d3a2b9155a3873fbb4f01e13b1ea131353d9127caae5e9d1f2b9b3329a3b273d499649ad79e4fc45af1fe78694302f856b80aa8a2c8e9342b142f623c30316edd5c1fae9aca586282d3fc2f575d72bed2c301ea505d39bee56887385a5f47", 0x0, 0x2, 0x0, 0xb48}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) 63.773818ms ago: executing program 2 (id=2593): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081f80000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000006c0)=r1) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360"], 0xffdd) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="16c65f9ec2e23b6521", 0x9}], 0x1, &(0x7f00000005c0)}, 0x20040080) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x5, 0x6, 0x9, 0x0, 0x9, 0x18050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x11440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)={'b', ' *:* ', 'w\x00'}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa33200007"], 0xfdef) 25.430239ms ago: executing program 0 (id=2594): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="00000000dd8e2f780000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xa, &(0x7f0000000d80)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=2595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000696415c953d86a079239"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$kcm(0x10, 0x7, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0xfffffffffffffdf1, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)='E', 0x1}], 0x1}, 0x4080) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000180)=r7, 0xfd31) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r5) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10) r9 = socket$kcm(0x23, 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000940)={r10, r10}) r11 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94) r12 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000001300)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): T9302] RSP: 002b:00007f8b45eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.264282][ T9302] RAX: ffffffffffffffda RBX: 00007f8b45216090 RCX: 00007f8b44f9ce59 [ 257.272260][ T9302] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 257.280332][ T9302] RBP: 00007f8b45eba090 R08: 0000000000000000 R09: 0000000000000000 [ 257.288491][ T9302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.296474][ T9302] R13: 00007f8b45216128 R14: 00007f8b45216090 R15: 00007ffcb6ad8bb8 [ 257.304470][ T9302] [ 257.544407][ T9315] delete_channel: no stack [ 257.555400][ T9315] delete_channel: no stack [ 258.010841][ T9339] syzkaller0: entered promiscuous mode [ 258.028274][ T9339] syzkaller0: entered allmulticast mode [ 258.165608][ T9347] FAULT_INJECTION: forcing a failure. [ 258.165608][ T9347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.202092][ T9347] CPU: 1 PID: 9347 Comm: syz.0.1021 Not tainted syzkaller #0 [ 258.209550][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.219634][ T9347] Call Trace: [ 258.222944][ T9347] [ 258.225898][ T9347] dump_stack_lvl+0x18c/0x250 [ 258.230593][ T9347] ? show_regs_print_info+0x20/0x20 [ 258.235801][ T9347] ? load_image+0x420/0x420 [ 258.240311][ T9347] ? __lock_acquire+0x7d40/0x7d40 [ 258.245349][ T9347] ? mark_lock+0x94/0x320 [ 258.249692][ T9347] should_fail_ex+0x39d/0x4d0 [ 258.254385][ T9347] prepare_alloc_pages+0x1e2/0x5f0 [ 258.259509][ T9347] __alloc_pages+0x134/0x460 [ 258.264111][ T9347] ? zone_statistics+0x170/0x170 [ 258.269097][ T9347] ? do_wp_page+0x7ca/0x35f0 [ 258.273692][ T9347] ? do_wp_page+0xfc5/0x35f0 [ 258.278290][ T9347] __folio_alloc+0x10/0x20 [ 258.282715][ T9347] vma_alloc_folio+0x47a/0x8f0 [ 258.287494][ T9347] do_wp_page+0x1243/0x35f0 [ 258.292021][ T9347] ? folio_put+0xd0/0xd0 [ 258.296267][ T9347] ? do_raw_spin_lock+0x11f/0x2c0 [ 258.301304][ T9347] ? __rwlock_init+0x150/0x150 [ 258.306083][ T9347] handle_mm_fault+0x135d/0x4c00 [ 258.311036][ T9347] ? handle_mm_fault+0xe7/0x4c00 [ 258.315995][ T9347] ? numa_migrate_prep+0x350/0x350 [ 258.321126][ T9347] ? lock_chain_count+0x20/0x20 [ 258.325984][ T9347] ? perf_trace_lock+0xfc/0x3b0 [ 258.330864][ T9347] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 258.336162][ T9347] do_user_addr_fault+0x730/0x12c0 [ 258.341291][ T9347] exc_page_fault+0x64/0x100 [ 258.345903][ T9347] asm_exc_page_fault+0x26/0x30 [ 258.350764][ T9347] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 258.356585][ T9347] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 258.376204][ T9347] RSP: 0018:ffffc90003877ce0 EFLAGS: 00050202 [ 258.382325][ T9347] RAX: ffffffff842a8001 RBX: 000000000014000e RCX: 000000000013410e [ 258.390309][ T9347] RDX: 0000000000000000 RSI: ffff88804ae0bf00 RDI: 000020000000c000 [ 258.398288][ T9347] RBP: ffff88804ac00000 R08: 0000000000000005 R09: 0000000000000006 [ 258.406309][ T9347] R10: dffffc0000000000 R11: ffffed10095e8001 R12: 000020000014010e [ 258.414321][ T9347] R13: ffff88804ae00000 R14: 0000200000000100 R15: ffff88804ae00000 [ 258.422345][ T9347] ? _copy_to_user+0x61/0xa0 [ 258.426962][ T9347] _copy_to_user+0x85/0xa0 [ 258.431397][ T9347] map_get_next_key+0x4fd/0x620 [ 258.436262][ T9347] ? map_get_next_key+0x2d7/0x620 [ 258.441335][ T9347] __sys_bpf+0x715/0x890 [ 258.445629][ T9347] ? bpf_link_show_fdinfo+0x390/0x390 [ 258.451303][ T9347] ? lock_chain_count+0x20/0x20 [ 258.456182][ T9347] __x64_sys_bpf+0x7c/0x90 [ 258.460616][ T9347] do_syscall_64+0x55/0xb0 [ 258.465041][ T9347] ? clear_bhb_loop+0x40/0x90 [ 258.469724][ T9347] ? clear_bhb_loop+0x40/0x90 [ 258.474416][ T9347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.480360][ T9347] RIP: 0033:0x7f8b44f9ce59 [ 258.484813][ T9347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.504451][ T9347] RSP: 002b:00007f8b45eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.512888][ T9347] RAX: ffffffffffffffda RBX: 00007f8b45216090 RCX: 00007f8b44f9ce59 [ 258.520890][ T9347] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 258.528899][ T9347] RBP: 00007f8b45eba090 R08: 0000000000000000 R09: 0000000000000000 [ 258.536914][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.544931][ T9347] R13: 00007f8b45216128 R14: 00007f8b45216090 R15: 00007ffcb6ad8bb8 [ 258.552958][ T9347] [ 258.571232][ T9349] netlink: 'syz.2.1022': attribute type 2 has an invalid length. [ 258.596567][ T9349] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1022'. [ 259.598582][ T5814] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 259.634402][ T9377] FAULT_INJECTION: forcing a failure. [ 259.634402][ T9377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.653747][ T9377] CPU: 1 PID: 9377 Comm: syz.3.1031 Not tainted syzkaller #0 [ 259.661196][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.671307][ T9377] Call Trace: [ 259.674631][ T9377] [ 259.677574][ T9377] dump_stack_lvl+0x18c/0x250 [ 259.682261][ T9377] ? show_regs_print_info+0x20/0x20 [ 259.687460][ T9377] ? load_image+0x420/0x420 [ 259.691987][ T9377] ? __lock_acquire+0x7d40/0x7d40 [ 259.697017][ T9377] ? mark_lock+0x94/0x320 [ 259.701354][ T9377] should_fail_ex+0x39d/0x4d0 [ 259.706043][ T9377] prepare_alloc_pages+0x1e2/0x5f0 [ 259.711177][ T9377] __alloc_pages+0x134/0x460 [ 259.715770][ T9377] ? zone_statistics+0x170/0x170 [ 259.720733][ T9377] ? do_wp_page+0x7ca/0x35f0 [ 259.725324][ T9377] ? do_wp_page+0xfc5/0x35f0 [ 259.729919][ T9377] __folio_alloc+0x10/0x20 [ 259.734337][ T9377] vma_alloc_folio+0x47a/0x8f0 [ 259.739118][ T9377] do_wp_page+0x1243/0x35f0 [ 259.743632][ T9377] ? folio_put+0xd0/0xd0 [ 259.747875][ T9377] ? do_raw_spin_lock+0x11f/0x2c0 [ 259.752913][ T9377] ? __rwlock_init+0x150/0x150 [ 259.757698][ T9377] handle_mm_fault+0x135d/0x4c00 [ 259.762653][ T9377] ? handle_mm_fault+0xe7/0x4c00 [ 259.767603][ T9377] ? numa_migrate_prep+0x350/0x350 [ 259.772739][ T9377] ? lock_chain_count+0x20/0x20 [ 259.777602][ T9377] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 259.782896][ T9377] do_user_addr_fault+0x730/0x12c0 [ 259.788032][ T9377] exc_page_fault+0x64/0x100 [ 259.792643][ T9377] asm_exc_page_fault+0x26/0x30 [ 259.797501][ T9377] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 259.803318][ T9377] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 259.822933][ T9377] RSP: 0018:ffffc90003a27ce0 EFLAGS: 00050202 [ 259.829006][ T9377] RAX: ffffffff842a8001 RBX: 000000000014000e RCX: 000000000013310e [ 259.836985][ T9377] RDX: 0000000000000000 RSI: ffff88804b40cf00 RDI: 000020000000d000 [ 259.844977][ T9377] RBP: ffff88804cc00000 R08: 0000000000000005 R09: 0000000000000006 [ 259.852981][ T9377] R10: dffffc0000000000 R11: ffffed10096a8001 R12: 000020000014010e [ 259.860964][ T9377] R13: ffff88804b400000 R14: 0000200000000100 R15: ffff88804b400000 [ 259.868958][ T9377] ? _copy_to_user+0x61/0xa0 [ 259.873560][ T9377] _copy_to_user+0x85/0xa0 [ 259.877982][ T9377] map_get_next_key+0x4fd/0x620 [ 259.882843][ T9377] ? map_get_next_key+0x2d7/0x620 [ 259.887874][ T9377] __sys_bpf+0x715/0x890 [ 259.892122][ T9377] ? bpf_link_show_fdinfo+0x390/0x390 [ 259.897514][ T9377] ? lock_chain_count+0x20/0x20 [ 259.902375][ T9377] __x64_sys_bpf+0x7c/0x90 [ 259.906797][ T9377] do_syscall_64+0x55/0xb0 [ 259.911221][ T9377] ? clear_bhb_loop+0x40/0x90 [ 259.915900][ T9377] ? clear_bhb_loop+0x40/0x90 [ 259.920587][ T9377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.926491][ T9377] RIP: 0033:0x7f926e19ce59 [ 259.930910][ T9377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.950534][ T9377] RSP: 002b:00007f926efaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.958955][ T9377] RAX: ffffffffffffffda RBX: 00007f926e416090 RCX: 00007f926e19ce59 [ 259.966932][ T9377] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 259.974909][ T9377] RBP: 00007f926efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 259.982882][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.990856][ T9377] R13: 00007f926e416128 R14: 00007f926e416090 R15: 00007fffb94a6a18 [ 259.998843][ T9377] [ 260.306580][ T9390] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1032'. [ 260.462942][ T9393] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 260.477241][ T9393] netlink: 'syz.3.1036': attribute type 3 has an invalid length. [ 260.501081][ T9393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1036'. [ 260.548661][ T9396] netlink: 'syz.0.1038': attribute type 9 has an invalid length. [ 260.561508][ T9396] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.1038'. [ 261.543396][ T9423] FAULT_INJECTION: forcing a failure. [ 261.543396][ T9423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.569320][ T9421] tap0: tun_chr_ioctl cmd 35108 [ 261.584280][ T9423] CPU: 1 PID: 9423 Comm: syz.3.1044 Not tainted syzkaller #0 [ 261.591719][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.601820][ T9423] Call Trace: [ 261.605123][ T9423] [ 261.608066][ T9423] dump_stack_lvl+0x18c/0x250 [ 261.612768][ T9423] ? show_regs_print_info+0x20/0x20 [ 261.617973][ T9423] ? load_image+0x420/0x420 [ 261.622484][ T9423] ? __lock_acquire+0x7d40/0x7d40 [ 261.627521][ T9423] ? mark_lock+0x94/0x320 [ 261.631880][ T9423] should_fail_ex+0x39d/0x4d0 [ 261.636589][ T9423] prepare_alloc_pages+0x1e2/0x5f0 [ 261.641725][ T9423] __alloc_pages+0x134/0x460 [ 261.646331][ T9423] ? zone_statistics+0x170/0x170 [ 261.651362][ T9423] ? do_wp_page+0x7ca/0x35f0 [ 261.655957][ T9423] ? do_wp_page+0xfc5/0x35f0 [ 261.660553][ T9423] __folio_alloc+0x10/0x20 [ 261.664978][ T9423] vma_alloc_folio+0x47a/0x8f0 [ 261.669755][ T9423] do_wp_page+0x1243/0x35f0 [ 261.674274][ T9423] ? folio_put+0xd0/0xd0 [ 261.678521][ T9423] ? do_raw_spin_lock+0x11f/0x2c0 [ 261.683558][ T9423] ? __rwlock_init+0x150/0x150 [ 261.688335][ T9423] handle_mm_fault+0x135d/0x4c00 [ 261.693279][ T9423] ? handle_mm_fault+0xe7/0x4c00 [ 261.698235][ T9423] ? numa_migrate_prep+0x350/0x350 [ 261.703359][ T9423] ? lock_chain_count+0x20/0x20 [ 261.708222][ T9423] ? perf_trace_lock+0xfc/0x3b0 [ 261.713092][ T9423] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 261.718396][ T9423] do_user_addr_fault+0x730/0x12c0 [ 261.723596][ T9423] exc_page_fault+0x64/0x100 [ 261.728232][ T9423] asm_exc_page_fault+0x26/0x30 [ 261.733111][ T9423] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 261.738967][ T9423] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 261.758622][ T9423] RSP: 0018:ffffc9000369fce0 EFLAGS: 00050202 [ 261.764725][ T9423] RAX: ffffffff842a8001 RBX: 000000000014000e RCX: 000000000013210e [ 261.772713][ T9423] RDX: 0000000000000000 RSI: ffff88804bc0df00 RDI: 000020000000e000 [ 261.780722][ T9423] RBP: ffff888048600000 R08: 0000000000000005 R09: 0000000000000006 [ 261.788702][ T9423] R10: dffffc0000000000 R11: ffffed10097a8001 R12: 000020000014010e [ 261.796697][ T9423] R13: ffff88804bc00000 R14: 0000200000000100 R15: ffff88804bc00000 [ 261.804701][ T9423] ? _copy_to_user+0x61/0xa0 [ 261.809316][ T9423] _copy_to_user+0x85/0xa0 [ 261.813742][ T9423] map_get_next_key+0x4fd/0x620 [ 261.818624][ T9423] ? map_get_next_key+0x2d7/0x620 [ 261.823667][ T9423] __sys_bpf+0x715/0x890 [ 261.827946][ T9423] ? bpf_link_show_fdinfo+0x390/0x390 [ 261.833367][ T9423] ? lock_chain_count+0x20/0x20 [ 261.838246][ T9423] __x64_sys_bpf+0x7c/0x90 [ 261.842677][ T9423] do_syscall_64+0x55/0xb0 [ 261.847214][ T9423] ? clear_bhb_loop+0x40/0x90 [ 261.851892][ T9423] ? clear_bhb_loop+0x40/0x90 [ 261.856574][ T9423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.862480][ T9423] RIP: 0033:0x7f926e19ce59 [ 261.866906][ T9423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.886529][ T9423] RSP: 002b:00007f926efaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.894955][ T9423] RAX: ffffffffffffffda RBX: 00007f926e416090 RCX: 00007f926e19ce59 [ 261.902933][ T9423] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 261.910910][ T9423] RBP: 00007f926efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 261.918887][ T9423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.926867][ T9423] R13: 00007f926e416128 R14: 00007f926e416090 R15: 00007fffb94a6a18 [ 261.934882][ T9423] [ 262.120696][ T9429] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1048'. [ 263.250473][ T9459] FAULT_INJECTION: forcing a failure. [ 263.250473][ T9459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.270796][ T9459] CPU: 0 PID: 9459 Comm: syz.2.1058 Not tainted syzkaller #0 [ 263.278250][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.288344][ T9459] Call Trace: [ 263.291648][ T9459] [ 263.294601][ T9459] dump_stack_lvl+0x18c/0x250 [ 263.299317][ T9459] ? show_regs_print_info+0x20/0x20 [ 263.304556][ T9459] ? load_image+0x420/0x420 [ 263.309106][ T9459] ? __lock_acquire+0x7d40/0x7d40 [ 263.314171][ T9459] ? mark_lock+0x94/0x320 [ 263.318538][ T9459] should_fail_ex+0x39d/0x4d0 [ 263.323271][ T9459] prepare_alloc_pages+0x1e2/0x5f0 [ 263.328455][ T9459] __alloc_pages+0x134/0x460 [ 263.333099][ T9459] ? zone_statistics+0x170/0x170 [ 263.338075][ T9459] ? do_wp_page+0x7ca/0x35f0 [ 263.342699][ T9459] ? do_wp_page+0xfc5/0x35f0 [ 263.347326][ T9459] __folio_alloc+0x10/0x20 [ 263.351776][ T9459] vma_alloc_folio+0x47a/0x8f0 [ 263.356575][ T9459] do_wp_page+0x1243/0x35f0 [ 263.361123][ T9459] ? folio_put+0xd0/0xd0 [ 263.365396][ T9459] ? do_raw_spin_lock+0x11f/0x2c0 [ 263.370455][ T9459] ? __rwlock_init+0x150/0x150 [ 263.375270][ T9459] handle_mm_fault+0x135d/0x4c00 [ 263.380246][ T9459] ? handle_mm_fault+0xe7/0x4c00 [ 263.385224][ T9459] ? numa_migrate_prep+0x350/0x350 [ 263.390388][ T9459] ? lock_chain_count+0x20/0x20 [ 263.395271][ T9459] ? perf_trace_lock+0xfc/0x3b0 [ 263.400157][ T9459] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 263.405502][ T9459] do_user_addr_fault+0x730/0x12c0 [ 263.410674][ T9459] exc_page_fault+0x64/0x100 [ 263.415327][ T9459] asm_exc_page_fault+0x26/0x30 [ 263.420214][ T9459] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 263.426051][ T9459] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 263.445702][ T9459] RSP: 0018:ffffc9000492fce0 EFLAGS: 00050202 [ 263.451834][ T9459] RAX: ffffffff842a8001 RBX: 000000000014000e RCX: 000000000013110e [ 263.459861][ T9459] RDX: 0000000000000000 RSI: ffff88804c00ef00 RDI: 000020000000f000 [ 263.467866][ T9459] RBP: ffff88804a800000 R08: 0000000000000005 R09: 0000000000000006 [ 263.475955][ T9459] R10: dffffc0000000000 R11: ffffed1009828001 R12: 000020000014010e [ 263.483981][ T9459] R13: ffff88804c000000 R14: 0000200000000100 R15: ffff88804c000000 [ 263.492017][ T9459] ? _copy_to_user+0x61/0xa0 [ 263.496669][ T9459] _copy_to_user+0x85/0xa0 [ 263.501121][ T9459] map_get_next_key+0x4fd/0x620 [ 263.506001][ T9459] ? map_get_next_key+0x2d7/0x620 [ 263.511052][ T9459] __sys_bpf+0x715/0x890 [ 263.515326][ T9459] ? bpf_link_show_fdinfo+0x390/0x390 [ 263.520747][ T9459] ? lock_chain_count+0x20/0x20 [ 263.525648][ T9459] __x64_sys_bpf+0x7c/0x90 [ 263.530091][ T9459] do_syscall_64+0x55/0xb0 [ 263.534536][ T9459] ? clear_bhb_loop+0x40/0x90 [ 263.539239][ T9459] ? clear_bhb_loop+0x40/0x90 [ 263.543940][ T9459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.549869][ T9459] RIP: 0033:0x7f77cad9ce59 [ 263.554307][ T9459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.573950][ T9459] RSP: 002b:00007f77cbc16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.582408][ T9459] RAX: ffffffffffffffda RBX: 00007f77cb016090 RCX: 00007f77cad9ce59 [ 263.590412][ T9459] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 263.598412][ T9459] RBP: 00007f77cbc16090 R08: 0000000000000000 R09: 0000000000000000 [ 263.606412][ T9459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.614407][ T9459] R13: 00007f77cb016128 R14: 00007f77cb016090 R15: 00007ffed10281c8 [ 263.622429][ T9459] [ 263.641192][ T9461] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1059'. [ 263.990534][ T9467] netlink: 'syz.0.1062': attribute type 29 has an invalid length. [ 264.039449][ T9467] netlink: 'syz.0.1062': attribute type 29 has an invalid length. [ 264.089024][ T9469] netlink: 'syz.3.1063': attribute type 22 has an invalid length. [ 264.103725][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 264.124323][ T9471] netlink: 'syz.0.1062': attribute type 29 has an invalid length. [ 264.157636][ T9467] netlink: 'syz.0.1062': attribute type 29 has an invalid length. [ 264.199157][ T9471] netlink: 'syz.0.1062': attribute type 29 has an invalid length. [ 264.857486][ T9501] FAULT_INJECTION: forcing a failure. [ 264.857486][ T9501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.876819][ T9501] CPU: 0 PID: 9501 Comm: syz.3.1069 Not tainted syzkaller #0 [ 264.884279][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.894377][ T9501] Call Trace: [ 264.897712][ T9501] [ 264.900681][ T9501] dump_stack_lvl+0x18c/0x250 [ 264.905415][ T9501] ? show_regs_print_info+0x20/0x20 [ 264.910677][ T9501] ? load_image+0x420/0x420 [ 264.915224][ T9501] ? __lock_acquire+0x7d40/0x7d40 [ 264.920307][ T9501] ? mark_lock+0x94/0x320 [ 264.924715][ T9501] should_fail_ex+0x39d/0x4d0 [ 264.929448][ T9501] prepare_alloc_pages+0x1e2/0x5f0 [ 264.934605][ T9501] __alloc_pages+0x134/0x460 [ 264.939243][ T9501] ? zone_statistics+0x170/0x170 [ 264.944189][ T9501] ? do_wp_page+0x7ca/0x35f0 [ 264.948781][ T9501] ? do_wp_page+0xfc5/0x35f0 [ 264.953368][ T9501] __folio_alloc+0x10/0x20 [ 264.957869][ T9501] vma_alloc_folio+0x47a/0x8f0 [ 264.962665][ T9501] do_wp_page+0x1243/0x35f0 [ 264.967191][ T9501] ? folio_put+0xd0/0xd0 [ 264.971419][ T9501] ? do_raw_spin_lock+0x11f/0x2c0 [ 264.976454][ T9501] ? __rwlock_init+0x150/0x150 [ 264.981251][ T9501] handle_mm_fault+0x135d/0x4c00 [ 264.986217][ T9501] ? handle_mm_fault+0xe7/0x4c00 [ 264.991194][ T9501] ? numa_migrate_prep+0x350/0x350 [ 264.996330][ T9501] ? lock_chain_count+0x20/0x20 [ 265.001215][ T9501] ? perf_trace_lock+0xfc/0x3b0 [ 265.006084][ T9501] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 265.011365][ T9501] do_user_addr_fault+0x730/0x12c0 [ 265.016477][ T9501] exc_page_fault+0x64/0x100 [ 265.021190][ T9501] asm_exc_page_fault+0x26/0x30 [ 265.026067][ T9501] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 265.031907][ T9501] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 265.051619][ T9501] RSP: 0018:ffffc9000563fce0 EFLAGS: 00050202 [ 265.057687][ T9501] RAX: ffffffff842a8001 RBX: 000000000014000e RCX: 000000000013010e [ 265.065669][ T9501] RDX: 0000000000000000 RSI: ffff88804da0ff00 RDI: 0000200000010000 [ 265.073647][ T9501] RBP: ffff88804c400000 R08: 0000000000000005 R09: 0000000000000006 [ 265.081646][ T9501] R10: dffffc0000000000 R11: ffffed1009b68001 R12: 000020000014010e [ 265.089653][ T9501] R13: ffff88804da00000 R14: 0000200000000100 R15: ffff88804da00000 [ 265.097635][ T9501] ? _copy_to_user+0x61/0xa0 [ 265.102235][ T9501] _copy_to_user+0x85/0xa0 [ 265.106691][ T9501] map_get_next_key+0x4fd/0x620 [ 265.111540][ T9501] ? map_get_next_key+0x2d7/0x620 [ 265.116646][ T9501] __sys_bpf+0x715/0x890 [ 265.120902][ T9501] ? bpf_link_show_fdinfo+0x390/0x390 [ 265.126285][ T9501] ? lock_chain_count+0x20/0x20 [ 265.131128][ T9501] __x64_sys_bpf+0x7c/0x90 [ 265.135556][ T9501] do_syscall_64+0x55/0xb0 [ 265.140001][ T9501] ? clear_bhb_loop+0x40/0x90 [ 265.144673][ T9501] ? clear_bhb_loop+0x40/0x90 [ 265.149348][ T9501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.155246][ T9501] RIP: 0033:0x7f926e19ce59 [ 265.159652][ T9501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.179273][ T9501] RSP: 002b:00007f926efaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.187701][ T9501] RAX: ffffffffffffffda RBX: 00007f926e416090 RCX: 00007f926e19ce59 [ 265.195668][ T9501] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 265.203648][ T9501] RBP: 00007f926efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 265.211627][ T9501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.219670][ T9501] R13: 00007f926e416128 R14: 00007f926e416090 R15: 00007fffb94a6a18 [ 265.227791][ T9501] [ 265.709517][ T9541] FAULT_INJECTION: forcing a failure. [ 265.709517][ T9541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 265.867136][ T9541] CPU: 1 PID: 9541 Comm: syz.0.1078 Not tainted syzkaller #0 [ 265.874587][ T9541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.884729][ T9541] Call Trace: [ 265.888035][ T9541] [ 265.890987][ T9541] dump_stack_lvl+0x18c/0x250 [ 265.895700][ T9541] ? show_regs_print_info+0x20/0x20 [ 265.900933][ T9541] ? load_image+0x420/0x420 [ 265.905478][ T9541] ? __lock_acquire+0x7d40/0x7d40 [ 265.910568][ T9541] ? mark_lock+0x94/0x320 [ 265.911648][ T9543] netlink: 'syz.2.1072': attribute type 3 has an invalid length. [ 265.914925][ T9541] should_fail_ex+0x39d/0x4d0 [ 265.915047][ T9541] prepare_alloc_pages+0x1e2/0x5f0 [ 265.932608][ T9541] __alloc_pages+0x134/0x460 [ 265.937231][ T9541] ? zone_statistics+0x170/0x170 [ 265.942179][ T9541] ? do_wp_page+0x7ca/0x35f0 [ 265.946774][ T9541] ? do_wp_page+0xfc5/0x35f0 [ 265.951410][ T9541] __folio_alloc+0x10/0x20 [ 265.955842][ T9541] vma_alloc_folio+0x47a/0x8f0 [ 265.960614][ T9541] do_wp_page+0x1243/0x35f0 [ 265.965130][ T9541] ? folio_put+0xd0/0xd0 [ 265.969364][ T9541] ? do_raw_spin_lock+0x11f/0x2c0 [ 265.974390][ T9541] ? __rwlock_init+0x150/0x150 [ 265.979158][ T9541] handle_mm_fault+0x135d/0x4c00 [ 265.984129][ T9541] ? handle_mm_fault+0xe7/0x4c00 [ 265.989094][ T9541] ? numa_migrate_prep+0x350/0x350 [ 265.994214][ T9541] ? lock_chain_count+0x20/0x20 [ 265.999111][ T9541] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 266.004417][ T9541] do_user_addr_fault+0x730/0x12c0 [ 266.009594][ T9541] exc_page_fault+0x64/0x100 [ 266.014205][ T9541] asm_exc_page_fault+0x26/0x30 [ 266.019096][ T9541] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 266.024929][ T9541] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 266.044558][ T9541] RSP: 0018:ffffc90004f0fce0 EFLAGS: 00050202 [ 266.050636][ T9541] RAX: ffffffff842a8001 RBX: 000000000014000e RCX: 000000000012f10e [ 266.058612][ T9541] RDX: 0000000000000000 RSI: ffff88804c410f00 RDI: 0000200000011000 [ 266.066586][ T9541] RBP: ffff88804ac00000 R08: 0000000000000005 R09: 0000000000000006 [ 266.074600][ T9541] R10: dffffc0000000000 R11: ffffed10098a8001 R12: 000020000014010e [ 266.082681][ T9541] R13: ffff88804c400000 R14: 0000200000000100 R15: ffff88804c400000 [ 266.090676][ T9541] ? _copy_to_user+0x61/0xa0 [ 266.095291][ T9541] _copy_to_user+0x85/0xa0 [ 266.099712][ T9541] map_get_next_key+0x4fd/0x620 [ 266.104570][ T9541] ? map_get_next_key+0x2d7/0x620 [ 266.109610][ T9541] __sys_bpf+0x715/0x890 [ 266.113860][ T9541] ? bpf_link_show_fdinfo+0x390/0x390 [ 266.119241][ T9541] ? lock_chain_count+0x20/0x20 [ 266.124108][ T9541] __x64_sys_bpf+0x7c/0x90 [ 266.128533][ T9541] do_syscall_64+0x55/0xb0 [ 266.132952][ T9541] ? clear_bhb_loop+0x40/0x90 [ 266.137673][ T9541] ? clear_bhb_loop+0x40/0x90 [ 266.142352][ T9541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.148252][ T9541] RIP: 0033:0x7f8b44f9ce59 [ 266.152672][ T9541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.172462][ T9541] RSP: 002b:00007f8b45eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.180925][ T9541] RAX: ffffffffffffffda RBX: 00007f8b45216090 RCX: 00007f8b44f9ce59 [ 266.188915][ T9541] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 266.196907][ T9541] RBP: 00007f8b45eba090 R08: 0000000000000000 R09: 0000000000000000 [ 266.204887][ T9541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.212861][ T9541] R13: 00007f8b45216128 R14: 00007f8b45216090 R15: 00007ffcb6ad8bb8 [ 266.220856][ T9541] [ 266.255563][ T9543] netlink: 'syz.2.1072': attribute type 6 has an invalid length. [ 266.272261][ T9543] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1072'. [ 267.597387][ T9586] FAULT_INJECTION: forcing a failure. [ 267.597387][ T9586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.630394][ T9586] CPU: 1 PID: 9586 Comm: syz.1.1085 Not tainted syzkaller #0 [ 267.637857][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.647955][ T9586] Call Trace: [ 267.651252][ T9586] [ 267.654206][ T9586] dump_stack_lvl+0x18c/0x250 [ 267.658921][ T9586] ? show_regs_print_info+0x20/0x20 [ 267.664144][ T9586] ? load_image+0x420/0x420 [ 267.668678][ T9586] ? __lock_acquire+0x7d40/0x7d40 [ 267.673733][ T9586] ? mark_lock+0x94/0x320 [ 267.678099][ T9586] should_fail_ex+0x39d/0x4d0 [ 267.682812][ T9586] prepare_alloc_pages+0x1e2/0x5f0 [ 267.687944][ T9586] __alloc_pages+0x134/0x460 [ 267.692540][ T9586] ? zone_statistics+0x170/0x170 [ 267.697489][ T9586] ? do_wp_page+0x7ca/0x35f0 [ 267.702090][ T9586] ? do_wp_page+0xfc5/0x35f0 [ 267.706720][ T9586] __folio_alloc+0x10/0x20 [ 267.711147][ T9586] vma_alloc_folio+0x47a/0x8f0 [ 267.715934][ T9586] do_wp_page+0x1243/0x35f0 [ 267.720453][ T9586] ? folio_put+0xd0/0xd0 [ 267.724699][ T9586] ? do_raw_spin_lock+0x11f/0x2c0 [ 267.729735][ T9586] ? __rwlock_init+0x150/0x150 [ 267.734514][ T9586] handle_mm_fault+0x135d/0x4c00 [ 267.739467][ T9586] ? handle_mm_fault+0xe7/0x4c00 [ 267.744418][ T9586] ? numa_migrate_prep+0x350/0x350 [ 267.749547][ T9586] ? lock_chain_count+0x20/0x20 [ 267.754405][ T9586] ? perf_trace_lock+0xfc/0x3b0 [ 267.759270][ T9586] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 267.764561][ T9586] do_user_addr_fault+0x730/0x12c0 [ 267.769695][ T9586] exc_page_fault+0x64/0x100 [ 267.774303][ T9586] asm_exc_page_fault+0x26/0x30 [ 267.779228][ T9586] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 267.785048][ T9586] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 267.804668][ T9586] RSP: 0018:ffffc9000563fce0 EFLAGS: 00050202 [ 267.810744][ T9586] RAX: ffffffff842a8001 RBX: 000000000014000e RCX: 000000000012e10e [ 267.818721][ T9586] RDX: 0000000000000000 RSI: ffff88804b211f00 RDI: 0000200000012000 [ 267.826696][ T9586] RBP: ffff888048400000 R08: 0000000000000005 R09: 0000000000000006 [ 267.834758][ T9586] R10: dffffc0000000000 R11: ffffed1009668001 R12: 000020000014010e [ 267.842748][ T9586] R13: ffff88804b200000 R14: 0000200000000100 R15: ffff88804b200000 [ 267.850733][ T9586] ? _copy_to_user+0x61/0xa0 [ 267.855349][ T9586] _copy_to_user+0x85/0xa0 [ 267.859775][ T9586] map_get_next_key+0x4fd/0x620 [ 267.864634][ T9586] ? map_get_next_key+0x2d7/0x620 [ 267.869673][ T9586] __sys_bpf+0x715/0x890 [ 267.873938][ T9586] ? bpf_link_show_fdinfo+0x390/0x390 [ 267.879334][ T9586] ? lock_chain_count+0x20/0x20 [ 267.884211][ T9586] __x64_sys_bpf+0x7c/0x90 [ 267.888639][ T9586] do_syscall_64+0x55/0xb0 [ 267.893062][ T9586] ? clear_bhb_loop+0x40/0x90 [ 267.897742][ T9586] ? clear_bhb_loop+0x40/0x90 [ 267.902422][ T9586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.908333][ T9586] RIP: 0033:0x7ff3eb59ce59 [ 267.912762][ T9586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.932383][ T9586] RSP: 002b:00007ff3ec390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.940805][ T9586] RAX: ffffffffffffffda RBX: 00007ff3eb816090 RCX: 00007ff3eb59ce59 [ 267.948780][ T9586] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 267.956758][ T9586] RBP: 00007ff3ec390090 R08: 0000000000000000 R09: 0000000000000000 [ 267.964732][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.972712][ T9586] R13: 00007ff3eb816128 R14: 00007ff3eb816090 R15: 00007ffce07f7858 [ 267.980707][ T9586] [ 268.467713][ T9604] netlink: 127924 bytes leftover after parsing attributes in process `syz.3.1089'. [ 268.497062][ T9604] netlink: 16384 bytes leftover after parsing attributes in process `syz.3.1089'. [ 268.662211][ T9604] netlink: 'syz.3.1089': attribute type 4 has an invalid length. [ 268.684378][ T9604] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 268.693405][ T9604] netlink: 183444 bytes leftover after parsing attributes in process `syz.3.1089'. [ 268.745976][ T9607] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1091'. [ 269.201319][ T9615] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 269.355066][ T9619] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 269.368241][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.614819][ T9631] FAULT_INJECTION: forcing a failure. [ 269.614819][ T9631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.644469][ T9631] CPU: 0 PID: 9631 Comm: syz.3.1099 Not tainted syzkaller #0 [ 269.651915][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.662002][ T9631] Call Trace: [ 269.665310][ T9631] [ 269.668277][ T9631] dump_stack_lvl+0x18c/0x250 [ 269.673004][ T9631] ? show_regs_print_info+0x20/0x20 [ 269.678249][ T9631] ? load_image+0x420/0x420 [ 269.682796][ T9631] ? __lock_acquire+0x7d40/0x7d40 [ 269.687857][ T9631] ? mark_lock+0x94/0x320 [ 269.692233][ T9631] should_fail_ex+0x39d/0x4d0 [ 269.696953][ T9631] prepare_alloc_pages+0x1e2/0x5f0 [ 269.702118][ T9631] __alloc_pages+0x134/0x460 [ 269.706749][ T9631] ? zone_statistics+0x170/0x170 [ 269.711737][ T9631] ? do_wp_page+0x7ca/0x35f0 [ 269.716364][ T9631] ? do_wp_page+0xfc5/0x35f0 [ 269.720992][ T9631] __folio_alloc+0x10/0x20 [ 269.725438][ T9631] vma_alloc_folio+0x47a/0x8f0 [ 269.730264][ T9631] do_wp_page+0x1243/0x35f0 [ 269.734826][ T9631] ? folio_put+0xd0/0xd0 [ 269.739099][ T9631] ? do_raw_spin_lock+0x11f/0x2c0 [ 269.744157][ T9631] ? __rwlock_init+0x150/0x150 [ 269.748970][ T9631] handle_mm_fault+0x135d/0x4c00 [ 269.753937][ T9631] ? handle_mm_fault+0xe7/0x4c00 [ 269.758902][ T9631] ? numa_migrate_prep+0x350/0x350 [ 269.764024][ T9631] ? lock_chain_count+0x20/0x20 [ 269.768903][ T9631] ? perf_trace_lock+0xfc/0x3b0 [ 269.773762][ T9631] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 269.779236][ T9631] do_user_addr_fault+0x730/0x12c0 [ 269.784370][ T9631] exc_page_fault+0x64/0x100 [ 269.788979][ T9631] asm_exc_page_fault+0x26/0x30 [ 269.793844][ T9631] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 269.799663][ T9631] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 269.819284][ T9631] RSP: 0018:ffffc9000c93fce0 EFLAGS: 00050202 [ 269.825363][ T9631] RAX: ffffffff842a8001 RBX: 000000000014000e RCX: 000000000012d10e [ 269.833337][ T9631] RDX: 0000000000000000 RSI: ffff88804a812f00 RDI: 0000200000013000 [ 269.841411][ T9631] RBP: ffff88804ac00000 R08: 0000000000000005 R09: 0000000000000006 [ 269.849392][ T9631] R10: dffffc0000000000 R11: ffffed1009528001 R12: 000020000014010e [ 269.857368][ T9631] R13: ffff88804a800000 R14: 0000200000000100 R15: ffff88804a800000 [ 269.865360][ T9631] ? _copy_to_user+0x61/0xa0 [ 269.869964][ T9631] _copy_to_user+0x85/0xa0 [ 269.874385][ T9631] map_get_next_key+0x4fd/0x620 [ 269.879238][ T9631] ? map_get_next_key+0x2d7/0x620 [ 269.884269][ T9631] __sys_bpf+0x715/0x890 [ 269.888529][ T9631] ? bpf_link_show_fdinfo+0x390/0x390 [ 269.893916][ T9631] ? lock_chain_count+0x20/0x20 [ 269.898783][ T9631] __x64_sys_bpf+0x7c/0x90 [ 269.903200][ T9631] do_syscall_64+0x55/0xb0 [ 269.907623][ T9631] ? clear_bhb_loop+0x40/0x90 [ 269.912302][ T9631] ? clear_bhb_loop+0x40/0x90 [ 269.916985][ T9631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.922889][ T9631] RIP: 0033:0x7f926e19ce59 [ 269.927307][ T9631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.946921][ T9631] RSP: 002b:00007f926efaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.955346][ T9631] RAX: ffffffffffffffda RBX: 00007f926e416090 RCX: 00007f926e19ce59 [ 269.963319][ T9631] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 269.971293][ T9631] RBP: 00007f926efaf090 R08: 0000000000000000 R09: 0000000000000000 [ 269.979354][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.987325][ T9631] R13: 00007f926e416128 R14: 00007f926e416090 R15: 00007fffb94a6a18 [ 269.995317][ T9631] [ 270.129892][ T9638] netlink: 'syz.3.1103': attribute type 9 has an invalid length. [ 270.142136][ T9638] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1103'. [ 270.417045][ T9644] netlink: 'syz.2.1105': attribute type 3 has an invalid length. [ 270.428015][ T9644] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1105'. [ 270.650797][ T9650] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1108'. [ 270.702367][ T9650] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 271.025341][ T9654] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1109'. [ 271.055411][ T9654] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1109'. [ 271.707885][ T9675] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1113'. [ 271.738820][ T9675] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1113'. [ 271.782585][ T9662] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1113'. [ 271.899049][ T9662] netlink: 'syz.3.1113': attribute type 10 has an invalid length. [ 271.924701][ T9662] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 272.255100][ T9687] netlink: 'syz.3.1119': attribute type 10 has an invalid length. [ 272.718250][ T9692] netlink: 'syz.0.1120': attribute type 2 has an invalid length. [ 273.533802][ T9715] netlink: 'syz.3.1126': attribute type 10 has an invalid length. [ 273.623677][ T9715] macvlan0: entered promiscuous mode [ 273.645232][ T9715] macvlan0: entered allmulticast mode [ 276.115602][ T9765] netlink: 'syz.1.1146': attribute type 15 has an invalid length. [ 277.460624][ T9777] syzkaller0: entered promiscuous mode [ 277.493638][ T9777] syzkaller0: entered allmulticast mode [ 277.609867][ T9784] __nla_validate_parse: 3 callbacks suppressed [ 277.609886][ T9784] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1147'. [ 278.786302][ T9809] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1153'. [ 278.879231][ T9809] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1153'. [ 278.961807][ T9812] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1154'. [ 278.972482][ T9814] netlink: 'syz.2.1155': attribute type 21 has an invalid length. [ 279.206684][ T9821] netlink: 'syz.0.1157': attribute type 4 has an invalid length. [ 279.223581][ T9821] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1157'. [ 279.293819][ T9818] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1156'. [ 279.777312][ T9835] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.1162'. [ 279.813561][ T9835] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1162'. [ 279.861379][ T9836] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1162'. [ 280.256079][ T9844] can: request_module (can-proto-5) failed. [ 280.340110][ T9851] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1167'. [ 281.056789][ T9860] netlink: 'syz.2.1171': attribute type 11 has an invalid length. [ 281.073603][ T9860] netlink: 'syz.2.1171': attribute type 2 has an invalid length. [ 281.867677][ T9877] netlink: 'syz.1.1177': attribute type 21 has an invalid length. [ 282.544588][ T9901] netlink: 'syz.2.1186': attribute type 2 has an invalid length. [ 282.595045][ T9901] netlink: 'syz.2.1186': attribute type 8 has an invalid length. [ 282.637794][ T9901] __nla_validate_parse: 3 callbacks suppressed [ 282.637841][ T9901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1186'. [ 282.967612][ T9913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1187'. [ 284.706640][ T9947] netlink: 'syz.3.1193': attribute type 4 has an invalid length. [ 284.787743][ T9947] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1193'. [ 285.484155][ T9963] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1201'. [ 285.493289][ T9963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.644841][ T9969] netlink: 'syz.1.1202': attribute type 21 has an invalid length. [ 286.225196][ T9983] netlink: 'syz.2.1206': attribute type 10 has an invalid length. [ 286.268957][ T9983] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.305621][ T9983] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.572236][ T9989] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.156188][T10009] netlink: 'syz.3.1214': attribute type 33 has an invalid length. [ 287.184827][T10009] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1214'. [ 287.225641][T10009] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 288.084238][T10014] netlink: 'syz.2.1217': attribute type 10 has an invalid length. [ 288.100180][T10014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1217'. [ 288.123003][T10014] ipvlan1: entered promiscuous mode [ 288.129094][T10014] ipvlan1: entered allmulticast mode [ 288.158070][T10014] veth0_vlan: entered allmulticast mode [ 288.179643][T10014] bridge0: port 4(ipvlan1) entered blocking state [ 288.186929][T10014] bridge0: port 4(ipvlan1) entered disabled state [ 288.196396][T10014] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 288.551703][T10044] netlink: 'syz.1.1223': attribute type 17 has an invalid length. [ 288.916327][T10053] netlink: 'syz.0.1225': attribute type 10 has an invalid length. [ 288.928885][T10053] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1225'. [ 289.716711][T10072] netlink: 'syz.2.1231': attribute type 28 has an invalid length. [ 289.773041][T10072] netlink: 'syz.2.1231': attribute type 9 has an invalid length. [ 289.794462][T10072] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1231'. [ 290.089119][T10088] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 290.097451][T10088] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1238'. [ 290.272294][T10103] netlink: 'syz.3.1242': attribute type 46 has an invalid length. [ 290.676390][T10119] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1244'. [ 291.212087][T10131] netlink: 'syz.2.1248': attribute type 2 has an invalid length. [ 291.226348][T10131] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1248'. [ 293.898551][T10154] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1254'. [ 293.912965][T10154] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1254'. [ 293.954432][T10154] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1254'. [ 294.011164][T10153] netlink: 'syz.2.1255': attribute type 29 has an invalid length. [ 294.059379][T10153] netlink: 'syz.2.1255': attribute type 29 has an invalid length. [ 294.138066][T10151] netlink: 'syz.3.1253': attribute type 10 has an invalid length. [ 294.163787][T10151] bridge0: port 3(ip6gretap0) entered disabled state [ 294.172687][T10151] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.189623][T10151] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.443147][T10157] netlink: 'syz.2.1255': attribute type 29 has an invalid length. [ 294.500185][T10159] netlink: 'syz.2.1255': attribute type 29 has an invalid length. [ 294.909163][T10177] netlink: 'syz.1.1261': attribute type 29 has an invalid length. [ 295.221148][T10177] netlink: 'syz.1.1261': attribute type 29 has an invalid length. [ 295.245838][T10190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1261'. [ 295.256050][T10182] netlink: 'syz.1.1261': attribute type 29 has an invalid length. [ 295.288488][T10184] netlink: 'syz.1.1261': attribute type 29 has an invalid length. [ 295.316625][T10187] netlink: 'syz.1.1261': attribute type 29 has an invalid length. [ 295.864530][T10218] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1270'. [ 295.877651][T10218] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1270'. [ 295.902757][T10218] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1270'. [ 295.920485][T10218] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1270'. [ 295.982143][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1272'. [ 295.993638][T10223] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1272'. [ 297.386685][T10275] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 297.541984][T10285] ipvlan0: entered promiscuous mode [ 297.548149][T10285] ipvlan0: entered allmulticast mode [ 297.553951][T10285] veth0_vlan: entered allmulticast mode [ 297.562687][T10280] veth0_macvtap: left promiscuous mode [ 300.862697][T10289] __nla_validate_parse: 8 callbacks suppressed [ 300.862713][T10289] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1292'. [ 301.121747][T10328] validate_nla: 4 callbacks suppressed [ 301.121767][T10328] netlink: 'syz.3.1301': attribute type 29 has an invalid length. [ 301.136485][T10328] netlink: 'syz.3.1301': attribute type 29 has an invalid length. [ 301.147231][T10328] netlink: 'syz.3.1301': attribute type 29 has an invalid length. [ 301.156323][T10328] netlink: 'syz.3.1301': attribute type 29 has an invalid length. [ 301.165440][T10328] netlink: 'syz.3.1301': attribute type 29 has an invalid length. [ 301.176062][T10328] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1301'. [ 301.269104][T10332] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1302'. [ 302.333270][T10359] syz.3.1312[10359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.333419][T10359] syz.3.1312[10359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.924719][T10370] netlink: 'syz.1.1315': attribute type 21 has an invalid length. [ 302.948108][T10370] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1315'. [ 304.515250][T10394] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1323'. [ 304.721240][T10405] netlink: 'syz.0.1327': attribute type 153 has an invalid length. [ 304.742324][T10405] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1327'. [ 305.471002][T10445] netlink: 'syz.0.1337': attribute type 21 has an invalid length. [ 305.500059][T10445] netlink: 'syz.0.1337': attribute type 6 has an invalid length. [ 305.505668][T10454] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1335'. [ 305.533733][T10445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1337'. [ 305.587893][T10454] netlink: 21056 bytes leftover after parsing attributes in process `syz.2.1335'. [ 305.605763][T10454] tipc: Started in network mode [ 305.620493][T10454] tipc: Node identity 1a, cluster identity 4711 [ 305.640573][T10454] tipc: Node number set to 26 [ 305.970212][T10467] netlink: 'syz.0.1341': attribute type 6 has an invalid length. [ 307.700806][T10501] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.1351'. [ 307.747029][T10511] netlink: 'syz.3.1352': attribute type 8 has an invalid length. [ 307.809519][T10511] netlink: 'syz.3.1352': attribute type 6 has an invalid length. [ 307.865985][T10511] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1352'. [ 307.932152][T10522] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1356'. [ 308.024961][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 308.222336][T10535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.251122][T10535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.290352][T10535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.304974][T10535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.421369][T10536] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 310.699416][T10595] netlink: 'syz.2.1378': attribute type 29 has an invalid length. [ 310.764948][T10595] netlink: 'syz.2.1378': attribute type 29 has an invalid length. [ 310.802714][T10598] netlink: 'syz.2.1378': attribute type 29 has an invalid length. [ 310.955808][T10606] syzkaller0: entered promiscuous mode [ 310.961606][T10606] syzkaller0: entered allmulticast mode [ 310.995539][T10595] netlink: 'syz.2.1378': attribute type 29 has an invalid length. [ 311.031846][T10604] netlink: 'syz.3.1381': attribute type 9 has an invalid length. [ 311.052876][T10598] netlink: 'syz.2.1378': attribute type 29 has an invalid length. [ 311.061159][T10604] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1381'. [ 311.138711][T10604] netlink: 'syz.3.1381': attribute type 10 has an invalid length. [ 311.174290][T10604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1381'. [ 311.186287][T10604] dummy0: entered promiscuous mode [ 311.191510][T10604] dummy0: entered allmulticast mode [ 311.225394][T10604] bridge0: port 4(dummy0) entered blocking state [ 311.238630][T10615] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1384'. [ 311.247923][T10604] bridge0: port 4(dummy0) entered disabled state [ 311.411291][T10617] can: request_module (can-proto-5) failed. [ 311.616384][T10628] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1386'. [ 311.808760][T10633] netlink: 61959 bytes leftover after parsing attributes in process `syz.3.1388'. [ 312.108478][T10641] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1391'. [ 313.229454][T10656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1394'. [ 316.277840][T10670] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1396'. [ 316.863231][T10681] validate_nla: 5 callbacks suppressed [ 316.863249][T10681] netlink: 'syz.2.1400': attribute type 11 has an invalid length. [ 317.719008][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.727966][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.670215][T10727] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1412'. [ 319.844658][T10743] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.1417'. [ 319.862681][T10743] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1417'. [ 321.461043][T10746] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1418'. [ 321.904203][T10767] netlink: 'syz.3.1425': attribute type 21 has an invalid length. [ 322.087862][T10769] netlink: 'syz.2.1424': attribute type 2 has an invalid length. [ 322.098948][T10769] netlink: 'syz.2.1424': attribute type 8 has an invalid length. [ 322.108479][T10769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1424'. [ 322.139696][T10770] netlink: 'syz.2.1424': attribute type 11 has an invalid length. [ 322.313769][T10783] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1428'. [ 322.325254][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 322.920584][T10805] netlink: 'syz.1.1436': attribute type 39 has an invalid length. [ 323.061620][T10809] wlan0: mtu greater than device maximum [ 323.080512][T10809] netlink: 'syz.3.1435': attribute type 2 has an invalid length. [ 323.897968][T10842] netlink: 'syz.0.1446': attribute type 29 has an invalid length. [ 323.928972][T10842] netlink: 'syz.0.1446': attribute type 29 has an invalid length. [ 323.970703][T10849] netlink: 'syz.0.1446': attribute type 29 has an invalid length. [ 323.998411][T10842] netlink: 'syz.0.1446': attribute type 29 has an invalid length. [ 326.925187][T10866] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1452'. [ 327.327179][T10882] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1456'. [ 327.645684][T10894] validate_nla: 1 callbacks suppressed [ 327.645700][T10894] netlink: 'syz.2.1460': attribute type 10 has an invalid length. [ 327.976540][T10894] bond0: (slave team0): Releasing backup interface [ 327.985345][T10901] netlink: 'syz.1.1461': attribute type 29 has an invalid length. [ 328.069563][T10894] team0 (unregistering): Port device team_slave_0 removed [ 328.153506][T10894] team0 (unregistering): Port device team_slave_1 removed [ 328.546105][T10901] netlink: 'syz.1.1461': attribute type 29 has an invalid length. [ 328.568971][T10896] netlink: 'syz.0.1459': attribute type 4 has an invalid length. [ 328.579141][T10896] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1459'. [ 328.905342][T10912] netlink: 'syz.3.1463': attribute type 22 has an invalid length. [ 328.949605][T10912] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.1463'. [ 329.403048][T10932] netlink: 'syz.1.1468': attribute type 10 has an invalid length. [ 329.433344][T10932] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1468'. [ 329.453958][T10932] hsr0: entered promiscuous mode [ 329.460443][T10932] bridge0: port 4(hsr0) entered blocking state [ 329.467328][T10932] bridge0: port 4(hsr0) entered disabled state [ 329.475468][T10932] hsr0: entered allmulticast mode [ 329.480682][T10932] hsr_slave_0: entered allmulticast mode [ 329.487734][T10932] hsr_slave_1: entered allmulticast mode [ 329.497306][T10932] bridge0: port 4(hsr0) entered blocking state [ 329.503705][T10932] bridge0: port 4(hsr0) entered forwarding state [ 329.535927][T10926] netlink: 'syz.1.1468': attribute type 11 has an invalid length. [ 329.553844][T10926] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1468'. [ 329.726741][T10946] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1471'. [ 329.741221][T10946] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 [ 329.893023][T10958] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1476'. [ 331.363754][ T23] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 333.199244][T10968] netlink: 'syz.2.1480': attribute type 29 has an invalid length. [ 333.211662][T10968] netlink: 'syz.2.1480': attribute type 29 has an invalid length. [ 333.224681][T10968] netlink: 'syz.2.1480': attribute type 29 has an invalid length. [ 333.365147][T10968] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1480'. [ 333.376911][T10968] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 333.578106][T10981] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1484'. [ 333.603529][T10981] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 333.611863][T10981] openvswitch: netlink: Message has 1 unknown bytes. [ 334.463608][T10997] mac80211_hwsim hwsim6 ªªªªªª: renamed from wlan0 [ 335.221591][T11007] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 335.259537][T11007] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1492'. [ 335.644403][T11028] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1499'. [ 337.076845][T11057] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1509'. [ 337.481760][T11068] pim6reg1: entered promiscuous mode [ 337.496503][T11068] pim6reg1: entered allmulticast mode [ 338.176909][T11078] netlink: 'syz.2.1514': attribute type 21 has an invalid length. [ 338.188721][T11078] netlink: 'syz.2.1514': attribute type 10 has an invalid length. [ 338.223693][T11078] netlink: 'syz.2.1514': attribute type 12 has an invalid length. [ 338.231932][T11078] netlink: 'syz.2.1514': attribute type 13 has an invalid length. [ 338.275993][T11078] netlink: 'syz.2.1514': attribute type 14 has an invalid length. [ 338.318845][T11078] netlink: 'syz.2.1514': attribute type 15 has an invalid length. [ 338.329320][T11078] netlink: 'syz.2.1514': attribute type 16 has an invalid length. [ 338.338720][T11078] netlink: 'syz.2.1514': attribute type 19 has an invalid length. [ 338.388616][T11078] netlink: 'syz.2.1514': attribute type 21 has an invalid length. [ 338.397098][T11078] netlink: 'syz.2.1514': attribute type 22 has an invalid length. [ 338.448880][T11078] netlink: 12226 bytes leftover after parsing attributes in process `syz.2.1514'. [ 338.965731][T11110] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1523'. [ 339.226007][T11110] syzkaller0: entered promiscuous mode [ 339.249349][T11110] syzkaller0: entered allmulticast mode [ 340.604377][T11105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.906945][T11128] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1528'. [ 340.931264][T11128] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 342.980438][T11154] netlink: 'syz.1.1535': attribute type 29 has an invalid length. [ 343.769347][T11154] netlink: 'syz.1.1535': attribute type 29 has an invalid length. [ 343.986224][T11165] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1537'. [ 344.056830][T11168] sit0: entered allmulticast mode [ 344.821384][T11191] delete_channel: no stack [ 344.826396][T11191] delete_channel: no stack [ 344.832455][T11191] netlink: 'syz.1.1545': attribute type 27 has an invalid length. [ 344.841125][T11191] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1545'. [ 346.676725][T11216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1550'. [ 346.718466][T11216] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1550'. [ 346.826321][T11223] netlink: 'syz.2.1553': attribute type 9 has an invalid length. [ 346.848580][T11223] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1553'. [ 347.188931][T11234] netlink: 'syz.1.1557': attribute type 22 has an invalid length. [ 347.216075][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 347.231915][T11236] netlink: 'syz.2.1556': attribute type 17 has an invalid length. [ 347.246034][T11236] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1556'. [ 350.170551][T11245] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1561'. [ 350.197891][T11246] netlink: 'syz.2.1559': attribute type 49 has an invalid length. [ 350.210179][T11242] netlink: 'syz.1.1558': attribute type 9 has an invalid length. [ 350.219250][T11242] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1558'. [ 350.248152][T11246] veth0_to_bridge: mtu less than device minimum [ 350.371704][T11252] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1570'. [ 350.462307][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.522754][T11263] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 350.653708][T11266] veth0_vlan: entered allmulticast mode [ 353.641622][T11269] veth0_vlan: left promiscuous mode [ 353.652260][T11269] veth0_vlan: entered promiscuous mode [ 353.715065][T11279] netlink: 'syz.3.1569': attribute type 21 has an invalid length. [ 353.723006][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1569'. [ 354.040312][T11283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.258996][T11285] syzkaller0: entered promiscuous mode [ 354.273666][T11285] syzkaller0: entered allmulticast mode [ 354.301661][T11289] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 354.386422][T11295] netlink: 'syz.3.1574': attribute type 33 has an invalid length. [ 354.414866][T11295] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1574'. [ 354.448177][T11295] `: renamed from ip6tnl0 (while UP) [ 354.458263][T11295] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 354.965795][T11298] netlink: 'syz.3.1574': attribute type 21 has an invalid length. [ 357.691974][T11305] tap0: tun_chr_ioctl cmd 1074025681 [ 357.702487][T11312] netlink: 'syz.3.1580': attribute type 10 has an invalid length. [ 357.711813][T11312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1580'. [ 357.723583][T11314] netlink: 'syz.2.1578': attribute type 10 has an invalid length. [ 357.731710][T11314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.753183][T11314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.793665][T11314] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 358.040964][T11322] netlink: 'syz.0.1582': attribute type 3 has an invalid length. [ 358.064010][T11322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1582'. [ 360.122560][T11385] netlink: 'syz.0.1602': attribute type 25 has an invalid length. [ 360.133823][T11385] netlink: 'syz.0.1602': attribute type 3 has an invalid length. [ 360.147630][T11385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1602'. [ 361.172455][T11398] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1605'. [ 362.819969][T11414] @: port 1(netdevsim3) entered blocking state [ 362.833910][T11414] @: port 1(netdevsim3) entered disabled state [ 362.840523][T11414] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 362.850060][T11414] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 362.880005][T11416] netlink: 'syz.3.1610': attribute type 10 has an invalid length. [ 362.893759][T11416] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1610'. [ 362.904000][T11419] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1609'. [ 362.963943][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 363.107387][T11427] netlink: 'syz.3.1613': attribute type 2 has an invalid length. [ 363.116514][T11427] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1613'. [ 363.490846][T11443] netlink: 'syz.2.1619': attribute type 10 has an invalid length. [ 363.520029][T11443] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 363.597681][T11450] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1619'. [ 364.088948][T11471] netlink: 'syz.2.1629': attribute type 33 has an invalid length. [ 364.122962][T11471] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1629'. [ 364.145318][T11471] `: renamed from syz_tun (while UP) [ 365.050461][T11493] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1636'. [ 365.083327][T11493] netlink: zone id is out of range [ 365.110896][T11493] netlink: zone id is out of range [ 365.132276][T11493] netlink: del zone limit has 8 unknown bytes [ 365.914126][T11487] bridge0: port 4(hsr0) entered disabled state [ 366.127138][T11507] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1637'. [ 367.787045][T11547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1649'. [ 367.865428][T11558] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1652'. [ 368.277856][T11548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.314413][T11558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.378845][T11558] bond_slave_0: left promiscuous mode [ 368.498583][T11558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.568191][T11558] bond_slave_1: left promiscuous mode [ 368.589189][T11558] bond0 (unregistering): Released all slaves [ 368.613388][T11559] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1652'. [ 369.008875][T11578] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1656'. [ 369.091768][T11578] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 369.625688][T11593] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1661'. [ 369.963878][T11607] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1666'. [ 370.001480][T11608] netlink: 'syz.3.1666': attribute type 33 has an invalid length. [ 370.024283][T11608] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1666'. [ 370.884359][T11644] netlink: 'syz.2.1676': attribute type 41 has an invalid length. [ 374.217189][T11650] IPv6: Can't replace route, no match found [ 374.233651][T11669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1683'. [ 374.254016][T11670] netlink: 'syz.1.1683': attribute type 12 has an invalid length. [ 374.261890][T11670] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1683'. [ 375.243765][T11714] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1699'. [ 375.644230][T11722] netlink: 'syz.3.1702': attribute type 3 has an invalid length. [ 375.652627][T11722] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1702'. [ 375.707991][T11722] netlink: 'syz.3.1702': attribute type 12 has an invalid length. [ 375.723041][T11722] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1702'. [ 375.758941][T11727] netlink: 'syz.1.1703': attribute type 2 has an invalid length. [ 375.777101][T11727] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1703'. [ 376.037599][T11736] can: request_module (can-proto-5) failed. [ 379.118101][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.133464][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.522384][T11778] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1716'. [ 381.501472][T11819] can: request_module (can-proto-5) failed. [ 381.908637][T11837] netlink: 'syz.2.1731': attribute type 10 has an invalid length. [ 382.062926][T11841] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1733'. [ 382.431248][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1739'. [ 382.552992][T11867] netlink: 'syz.0.1740': attribute type 21 has an invalid length. [ 383.136196][T11885] netlink: 'syz.2.1744': attribute type 29 has an invalid length. [ 383.154393][T11885] netlink: 'syz.2.1744': attribute type 29 has an invalid length. [ 383.255741][T11889] syz.1.1745[11889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.256080][T11889] syz.1.1745[11889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.563232][T11898] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1750'. [ 383.787512][T11908] netlink: 'syz.1.1753': attribute type 21 has an invalid length. [ 383.815634][T11908] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1753'. [ 383.832226][T11908] netlink: 'syz.1.1753': attribute type 4 has an invalid length. [ 383.843808][T11908] netlink: 'syz.1.1753': attribute type 3 has an invalid length. [ 383.871555][T11908] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1753'. [ 384.120563][T11916] netlink: 'syz.2.1756': attribute type 10 has an invalid length. [ 384.287321][T11929] netlink: 'syz.3.1760': attribute type 19 has an invalid length. [ 384.322181][T11929] netlink: 'syz.3.1760': attribute type 10 has an invalid length. [ 385.189987][T11958] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1769'. [ 385.280941][T11957] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1768'. [ 385.304162][T11961] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1769'. [ 386.397860][T11995] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1780'. [ 386.407653][T11995] tc_dump_action: action bad kind [ 386.621462][T11999] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1781'. [ 386.647248][T12004] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1784'. [ 386.676814][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 387.845921][T12042] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1795'. [ 387.859444][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1795'. [ 388.053250][T12044] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.1797'. [ 388.094536][T12044] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 388.700497][T12054] validate_nla: 7 callbacks suppressed [ 388.700547][T12054] netlink: 'syz.1.1802': attribute type 29 has an invalid length. [ 388.861285][T12054] netlink: 'syz.1.1802': attribute type 29 has an invalid length. [ 388.873271][T12055] netlink: 'syz.1.1802': attribute type 29 has an invalid length. [ 390.414685][T12081] delete_channel: no stack [ 390.440402][T12109] bridge0: port 3(batadv0) entered disabled state [ 390.451945][T12109] bridge_slave_1: left allmulticast mode [ 390.461085][T12109] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.515924][T12109] bridge_slave_0: left allmulticast mode [ 390.525215][T12109] bridge_slave_0: left promiscuous mode [ 390.531019][T12109] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.821293][T12152] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 392.709487][T12169] netlink: 'syz.1.1832': attribute type 10 has an invalid length. [ 392.724283][T12169] macvlan0: entered promiscuous mode [ 392.734204][T12169] macvlan0: entered allmulticast mode [ 392.764198][T12169] team0: Port device macvlan0 removed [ 392.771727][T12169] veth1_vlan: entered allmulticast mode [ 392.786763][T12169] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 393.124804][T12180] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1836'. [ 393.193945][T12180] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 393.310140][ T5785] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 394.907964][T12220] netlink: 'syz.3.1839': attribute type 10 has an invalid length. [ 395.011300][T12220] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1839'. [ 395.040891][T12220] openvswitch: netlink: Flow key attr not present in new flow. [ 395.490885][T12234] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1850'. [ 396.098832][T12257] netlink: 'syz.1.1858': attribute type 25 has an invalid length. [ 396.111597][T12257] netlink: 'syz.1.1858': attribute type 25 has an invalid length. [ 396.525139][T12270] netlink: 'syz.2.1861': attribute type 16 has an invalid length. [ 396.535972][T12270] netlink: 'syz.2.1861': attribute type 3 has an invalid length. [ 396.544223][T12270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1861'. [ 396.577147][T12272] team0: Port device team_slave_0 removed [ 396.643354][T12274] netlink: 'syz.0.1865': attribute type 39 has an invalid length. [ 397.369451][T12269] delete_channel: no stack [ 397.496197][T12291] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1870'. [ 398.121770][T12316] veth0_vlan: left promiscuous mode [ 398.136857][T12316] veth0_vlan: entered promiscuous mode [ 398.188232][T12320] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.1878'. [ 398.201017][T12320] openvswitch: netlink: IP tunnel dst address not specified [ 398.262500][T12322] netlink: 'syz.3.1880': attribute type 2 has an invalid length. [ 398.483033][T12330] netlink: 'syz.3.1882': attribute type 21 has an invalid length. [ 398.516578][T12330] netlink: 'syz.3.1882': attribute type 1 has an invalid length. [ 398.840998][T12344] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1885'. [ 399.129435][T12354] netlink: 'syz.0.1890': attribute type 1 has an invalid length. [ 399.142072][T12354] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1890'. [ 400.142629][T12388] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1899'. [ 401.833912][T12426] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1910'. [ 402.162709][ T5785] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 402.178347][ T5785] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 403.953968][T12441] validate_nla: 1 callbacks suppressed [ 403.953986][T12441] netlink: 'syz.0.1915': attribute type 21 has an invalid length. [ 403.968392][T12441] netlink: 'syz.0.1915': attribute type 20 has an invalid length. [ 404.186996][T12448] netlink: 'syz.0.1917': attribute type 10 has an invalid length. [ 404.212317][T12448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1917'. [ 404.226118][T12448] batadv0: entered allmulticast mode [ 404.236925][T12448] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 404.364597][T12443] netlink: 'syz.2.1916': attribute type 10 has an invalid length. [ 405.059958][T12480] netlink: 'syz.3.1926': attribute type 10 has an invalid length. [ 405.231108][T12484] syzkaller0: left promiscuous mode [ 405.253616][T12484] syzkaller0: left allmulticast mode [ 408.510977][T12512] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1932'. [ 411.589328][T12521] netlink: 'syz.0.1936': attribute type 49 has an invalid length. [ 412.311417][T12540] syzkaller0: entered promiscuous mode [ 412.321260][T12540] syzkaller0: entered allmulticast mode [ 412.529546][T12549] netlink: 'syz.3.1946': attribute type 28 has an invalid length. [ 413.995461][T12577] netlink: set zone limit has 8 unknown bytes [ 414.215401][T12587] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1954'. [ 414.248654][T12591] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 414.259488][T12587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.276468][T12591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1955'. [ 414.483682][T12591] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 414.491626][T12591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1955'. [ 415.022114][T12604] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 415.034052][T12604] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1958'. [ 415.156163][T12608] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1960'. [ 415.513241][T12619] netlink: 'syz.3.1964': attribute type 3 has an invalid length. [ 415.524791][T12615] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1962'. [ 415.550644][T12619] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1964'. [ 416.378638][T12636] netlink: 'syz.2.1967': attribute type 21 has an invalid length. [ 416.397311][T12636] netlink: 'syz.2.1967': attribute type 1 has an invalid length. [ 416.423724][T12636] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1967'. [ 416.806133][T12648] netlink: 'syz.3.1972': attribute type 12 has an invalid length. [ 416.819594][T12648] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1972'. [ 417.300874][T12661] netlink: 'syz.0.1976': attribute type 10 has an invalid length. [ 417.355550][T12661] team0: Device hsr_slave_0 failed to register rx_handler [ 417.485010][T12679] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1981'. [ 417.537397][T12683] netlink: 'syz.3.1981': attribute type 10 has an invalid length. [ 418.079657][T12690] netlink: 'syz.3.1984': attribute type 8 has an invalid length. [ 418.295804][T12694] netlink: 'syz.3.1985': attribute type 2 has an invalid length. [ 418.333169][T12694] netlink: 'syz.3.1985': attribute type 8 has an invalid length. [ 418.392909][T12698] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 418.582987][T12698] syzkaller0: entered promiscuous mode [ 418.605012][T12698] syzkaller0: entered allmulticast mode [ 419.513961][T12736] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 419.585479][T12736] netlink: 'syz.0.1999': attribute type 3 has an invalid length. [ 419.594566][T12741] netlink: 'syz.2.1997': attribute type 3 has an invalid length. [ 419.611653][T12741] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 419.620295][T12736] __nla_validate_parse: 4 callbacks suppressed [ 419.620342][T12736] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1999'. [ 419.630413][T12741] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.1997'. [ 420.442575][ T5785] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 420.464537][T12762] delete_channel: no stack [ 420.783241][T12770] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.2007'. [ 421.706194][T12786] netlink: 'syz.3.2012': attribute type 29 has an invalid length. [ 421.974003][T12799] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 421.997826][T12799] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 422.299823][T12807] validate_nla: 4 callbacks suppressed [ 422.299841][T12807] netlink: 'syz.3.2016': attribute type 29 has an invalid length. [ 422.648741][T12807] netlink: 'syz.3.2016': attribute type 29 has an invalid length. [ 424.799835][T12820] netlink: 'syz.0.2019': attribute type 39 has an invalid length. [ 427.641885][T12887] netlink: 'syz.0.2036': attribute type 3 has an invalid length. [ 427.657453][T12887] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2036'. [ 427.673857][T12884] netlink: 'syz.2.2035': attribute type 39 has an invalid length. [ 429.157300][T12914] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2045'. [ 429.637255][T12926] netlink: 'syz.0.2049': attribute type 3 has an invalid length. [ 429.701259][T12926] netlink: 'syz.0.2049': attribute type 6 has an invalid length. [ 429.802411][T12926] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2049'. [ 430.189787][T12943] delete_channel: no stack [ 430.279413][T12950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2055'. [ 430.834980][T12966] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2058'. [ 431.051712][T12969] netlink: 'syz.1.2060': attribute type 21 has an invalid length. [ 431.821275][T12973] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.2061'. [ 431.986764][T12980] netlink: 'syz.1.2062': attribute type 21 has an invalid length. [ 433.867146][T13004] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2067'. [ 433.909697][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'. [ 434.342757][T13018] netlink: 'syz.1.2071': attribute type 3 has an invalid length. [ 434.354200][T13018] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2071'. [ 434.784953][T13022] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 434.799193][T13022] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2073'. [ 434.836622][T13022] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 434.968162][T13026] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2072'. [ 435.864696][T13036] netlink: 'syz.0.2075': attribute type 10 has an invalid length. [ 435.904541][T13036] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2075'. [ 438.004724][T13064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2085'. [ 438.287375][T13076] netlink: 'syz.2.2088': attribute type 33 has an invalid length. [ 438.313134][T13076] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2088'. [ 440.558916][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.573089][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.210189][T13118] netlink: 'syz.0.2098': attribute type 10 has an invalid length. [ 441.282656][T13118] team0: Device vxcan1 is of different type [ 442.317960][T13161] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2107'. [ 442.331184][T13161] tc_dump_action: action bad kind [ 442.454738][T13163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.498422][T13163] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 442.523490][T13163] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.2108'. [ 443.059752][T13191] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2119'. [ 443.872444][T13213] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2126'. [ 443.882380][T13213] openvswitch: netlink: Key type 16157 is out of range max 32 [ 443.976348][T13218] netlink: 'syz.0.2129': attribute type 11 has an invalid length. [ 443.984395][T13218] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 443.992370][T13218] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 444.001212][T13218] netlink: 'syz.0.2129': attribute type 2 has an invalid length. [ 444.009551][T13218] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.2129'. [ 444.200428][T13224] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2130'. [ 444.425454][T13235] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.2133'. [ 444.905521][T13261] syzkaller0: left promiscuous mode [ 444.911040][T13261] syzkaller0: left allmulticast mode [ 445.571393][T13273] netlink: 'syz.2.2146': attribute type 33 has an invalid length. [ 445.580298][T13273] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2146'. [ 445.893596][T13288] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2149'. [ 445.962028][T13288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.004635][T13288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.030139][T13288] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 446.049509][T13288] bond0 (unregistering): Released all slaves [ 447.694523][T13334] netlink: 'syz.3.2163': attribute type 2 has an invalid length. [ 447.717966][T13334] netlink: 'syz.3.2163': attribute type 8 has an invalid length. [ 447.753486][T13334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2163'. [ 447.921909][T13337] can: request_module (can-proto-0) failed. [ 448.609888][T13353] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2169'. [ 448.623549][T13353] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.2169'. [ 448.790289][T13365] netlink: 'syz.2.2174': attribute type 16 has an invalid length. [ 448.824593][T13365] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2174'. [ 448.864865][T13365] veth1_macvtap: entered allmulticast mode [ 452.118344][T13382] netlink: 'syz.0.2179': attribute type 2 has an invalid length. [ 452.133789][T13382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2179'. [ 452.276689][T13388] netlink: 'syz.3.2181': attribute type 23 has an invalid length. [ 452.305706][T13388] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2181'. [ 452.377184][T13390] netlink: 'syz.1.2180': attribute type 7 has an invalid length. [ 452.430739][ C1] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 452.787264][T13401] netlink: 'syz.0.2185': attribute type 9 has an invalid length. [ 452.796229][T13401] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2185'. [ 455.132720][T13453] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2198'. [ 455.838607][T13490] netlink: 'syz.1.2211': attribute type 10 has an invalid length. [ 456.072316][T13496] netlink: 'syz.1.2213': attribute type 21 has an invalid length. [ 456.100533][T13496] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2213'. [ 456.862590][T13518] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2217'. [ 457.232373][T13530] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2221'. [ 458.951420][T13559] netlink: 'syz.1.2230': attribute type 3 has an invalid length. [ 458.966387][T13559] netlink: 'syz.1.2230': attribute type 16 has an invalid length. [ 458.987875][T13559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2230'. [ 459.267446][T13586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2236'. [ 459.293258][T13586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2236'. [ 459.316798][T13581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2236'. [ 459.460846][T13589] lo: entered allmulticast mode [ 459.570704][T13583] lo: entered promiscuous mode [ 459.596961][T13583] lo: left allmulticast mode [ 459.989143][T13615] netlink: 'syz.3.2247': attribute type 29 has an invalid length. [ 460.001569][T13615] netlink: 'syz.3.2247': attribute type 29 has an invalid length. [ 460.018666][T13615] netlink: 'syz.3.2247': attribute type 29 has an invalid length. [ 460.029467][T13615] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2247'. [ 460.109772][T13617] netlink: 'syz.0.2248': attribute type 10 has an invalid length. [ 460.123845][T13617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2248'. [ 460.152768][T13617] batman_adv: batadv0: Adding interface: virt_wifi0 [ 460.165596][T13617] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.195082][T13617] batman_adv: batadv0: Interface activated: virt_wifi0 [ 460.653011][T13621] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 460.967542][T13640] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2256'. [ 461.208479][T13654] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2258'. [ 461.462442][T13645] syzkaller0: entered promiscuous mode [ 461.468879][T13645] syzkaller0: entered allmulticast mode [ 463.707795][T13668] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 463.719700][T13678] netlink: 'syz.3.2267': attribute type 2 has an invalid length. [ 463.966061][T13689] netlink: 'syz.1.2270': attribute type 9 has an invalid length. [ 463.988766][T13689] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2270'. [ 464.737459][T13719] netlink: 'syz.0.2276': attribute type 10 has an invalid length. [ 464.754598][T13719] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2276'. [ 464.766383][T13719] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 464.840490][T13719] batman_adv: batadv0: Removing interface: virt_wifi0 [ 464.895344][T13736] syz.1.2281[13736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.895574][T13736] syz.1.2281[13736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.003224][T13739] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2282'. [ 465.032968][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2282'. [ 465.232487][T13744] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 465.297517][T13742] delete_channel: no stack [ 466.111790][T13771] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2290'. [ 466.885277][T13770] delete_channel: no stack [ 469.294310][T13856] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2314'. [ 470.651342][T13870] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2319'. [ 472.085725][T13889] netlink: 'syz.3.2325': attribute type 10 has an invalid length. [ 472.394572][T13907] netlink: 'syz.2.2331': attribute type 2 has an invalid length. [ 473.417289][T13940] netlink: 'syz.0.2337': attribute type 21 has an invalid length. [ 475.139465][T13978] sock: sock_set_timeout: `syz.0.2356' (pid 13978) tries to set negative timeout [ 475.298257][T13986] netlink: 'syz.0.2351': attribute type 3 has an invalid length. [ 475.313525][T13986] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.2351'. [ 477.409021][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 477.417976][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 477.429996][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 477.442873][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 477.452881][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 477.465632][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 477.530488][ T6726] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.672059][ T6726] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.686655][T14033] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2367'. [ 477.704674][T14033] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2367'. [ 477.753253][ T6726] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.939964][T14027] chnl_net:caif_netlink_parms(): no params data found [ 478.098865][ T6726] ip6gretap0 (unregistering): left allmulticast mode [ 478.106481][ T6726] ip6gretap0 (unregistering): left promiscuous mode [ 478.114757][ T6726] bridge0: port 3(ip6gretap0) entered disabled state [ 478.141627][T14027] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.150361][T14027] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.158172][T14027] bridge_slave_0: entered allmulticast mode [ 478.169444][T14027] bridge_slave_0: entered promiscuous mode [ 478.275461][T14027] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.303289][T14027] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.326833][T14027] bridge_slave_1: entered allmulticast mode [ 478.358374][T14027] bridge_slave_1: entered promiscuous mode [ 478.451142][T14027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.471417][T14027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.818248][T14027] team0: Port device team_slave_0 added [ 478.841310][T14027] team0: Port device team_slave_1 added [ 478.851211][T14058] ¨à'©ÿˆ: renamed from hsr0 (while UP) [ 478.865523][T14060] netlink: 'syz.2.2372': attribute type 1 has an invalid length. [ 478.877778][T14060] netlink: 44799 bytes leftover after parsing attributes in process `syz.2.2372'. [ 479.363345][T14027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.389054][T14027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.448175][T14027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.513894][ T5785] Bluetooth: hci0: command tx timeout [ 479.849415][T14065] syzkaller0: entered promiscuous mode [ 479.855224][T14065] syzkaller0: entered allmulticast mode [ 479.883089][T14027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.892864][T14027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.921168][T14027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.603653][ T5785] Bluetooth: hci0: command tx timeout [ 481.901542][T14027] hsr_slave_0: entered promiscuous mode [ 481.937439][T14027] hsr_slave_1: entered promiscuous mode [ 482.132013][T14102] netlink: 'syz.1.2381': attribute type 12 has an invalid length. [ 482.159364][T14102] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2381'. [ 482.450427][T14111] netlink: 'syz.1.2382': attribute type 15 has an invalid length. [ 482.466851][T14111] netlink: 'syz.1.2382': attribute type 7 has an invalid length. [ 483.147510][ T6726] bridge0: port 4(dummy0) entered disabled state [ 483.158495][ T6726] bridge_slave_1: left allmulticast mode [ 483.166785][ T6726] bridge_slave_1: left promiscuous mode [ 483.172509][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.182271][ T6726] bridge_slave_0: left allmulticast mode [ 483.188025][ T6726] bridge_slave_0: left promiscuous mode [ 483.194792][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.213073][ T6726] veth1_macvtap: left allmulticast mode [ 483.219689][ T6726] veth1_vlan: left promiscuous mode [ 483.676333][ T5785] Bluetooth: hci0: command tx timeout [ 484.769508][T14027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.790061][T14027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.800983][T14027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.811707][T14027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.904202][T14027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.926221][T14027] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.940965][T10425] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.948212][T10425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.973407][T10425] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.981436][T10425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.249708][T14027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.301374][T14027] veth0_vlan: entered promiscuous mode [ 485.321459][T14027] veth1_vlan: entered promiscuous mode [ 485.356258][T14027] veth0_macvtap: entered promiscuous mode [ 485.369177][T14027] veth1_macvtap: entered promiscuous mode [ 485.397051][T14027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.412685][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.424661][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.437186][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.448089][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.459818][T14027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.486118][T14027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.503458][T14027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.512205][T14027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.530421][T14027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.632894][T10425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.649448][T10425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.702114][ T6726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.711831][ T6726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.753672][ T5785] Bluetooth: hci0: command tx timeout [ 486.692259][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.704928][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.714448][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.723949][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.732871][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 486.754906][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 486.757775][T10425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.976419][T10425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.062908][T14200] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2388'. [ 487.225571][T10425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.288476][T14198] syzkaller0: entered promiscuous mode [ 487.294603][T14198] syzkaller0: entered allmulticast mode [ 487.393973][T10425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.876635][ T5785] Bluetooth: hci3: command tx timeout [ 489.538629][T14215] syzkaller0: entered promiscuous mode [ 489.548038][T14215] syzkaller0: entered allmulticast mode [ 489.626226][T14244] netlink: 'syz.1.2393': attribute type 4 has an invalid length. [ 489.644578][T14244] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2393'. [ 490.956869][ T5785] Bluetooth: hci3: command tx timeout [ 491.779468][T10425] tipc: Left network mode [ 491.836065][T14189] chnl_net:caif_netlink_parms(): no params data found [ 492.160651][T14189] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.173935][T14189] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.181379][T14189] bridge_slave_0: entered allmulticast mode [ 492.195694][T14189] bridge_slave_0: entered promiscuous mode [ 492.211500][T14189] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.228653][T14189] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.236621][T14189] bridge_slave_1: entered allmulticast mode [ 492.245230][T14189] bridge_slave_1: entered promiscuous mode [ 492.362485][T14189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.399969][T14189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.569495][T14189] team0: Port device team_slave_0 added [ 492.797434][T14189] team0: Port device team_slave_1 added [ 493.048455][ T5785] Bluetooth: hci3: command tx timeout [ 493.075447][T14295] netlink: 'syz.1.2401': attribute type 10 has an invalid length. [ 493.087260][T14295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2401'. [ 493.100255][T14295] veth0_vlan: left allmulticast mode [ 493.123049][T14295] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 495.114025][ T5785] Bluetooth: hci3: command tx timeout [ 495.842586][T10425] gretap0 (unregistering): left allmulticast mode [ 495.849208][T10425] gretap0 (unregistering): left promiscuous mode [ 495.858696][T10425] Ÿë: port 1(gretap0) entered disabled state [ 495.869327][T14296] netlink: 'syz.3.2402': attribute type 10 has an invalid length. [ 495.895847][T14296] team0: Device hsr_slave_0 failed to register rx_handler [ 495.919190][T14189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.932963][T14189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.963157][T14189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.980312][T14311] netlink: 'syz.2.2404': attribute type 10 has an invalid length. [ 495.993651][T14311] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2404'. [ 496.085545][T14189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.097029][T14189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.133151][T14189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.286207][T14318] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2407'. [ 496.323062][T14318] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 496.406166][T14189] hsr_slave_0: entered promiscuous mode [ 496.439092][T14189] hsr_slave_1: entered promiscuous mode [ 496.483923][T14189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.491560][T14189] Cannot create hsr debugfs directory [ 497.157015][T14314] syzkaller0: entered promiscuous mode [ 497.162870][T14314] syzkaller0: entered allmulticast mode [ 499.522521][T10425] hsr_slave_0: left promiscuous mode [ 499.532077][T10425] hsr_slave_1: left promiscuous mode [ 499.539135][T10425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.549808][T10425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.562767][T10425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.581624][T10425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.594329][T10425] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 499.611691][T10425] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 499.646681][T10425] veth1_macvtap: left promiscuous mode [ 499.652300][T10425] veth0_macvtap: left promiscuous mode [ 501.838148][T10425] team0 (unregistering): Port device geneve1 removed [ 501.998608][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.005074][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.174976][T10425] team0 (unregistering): Port device team_slave_1 removed [ 503.687343][T14189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 503.728878][T14189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 503.761131][T14189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 503.821709][T14189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 504.226235][T14189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.269717][T14412] netlink: 'syz.1.2423': attribute type 10 has an invalid length. [ 504.278675][T14412] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2423'. [ 504.295366][T14412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 504.309264][T14412] bridge0: port 4(hsr0) entered blocking state [ 504.317312][T14412] bridge0: port 4(hsr0) entered forwarding state [ 504.338181][T14189] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.382867][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.390143][ T6726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.429156][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.436402][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.043129][T14189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.165592][T14189] veth0_vlan: entered promiscuous mode [ 505.209234][T14189] veth1_vlan: entered promiscuous mode [ 505.259448][T14458] netlink: set zone limit has 8 unknown bytes [ 505.318485][T14189] veth0_macvtap: entered promiscuous mode [ 505.348579][T14189] veth1_macvtap: entered promiscuous mode [ 505.431189][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.457478][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.474754][T14189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.487854][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.499221][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.510943][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.532196][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.547984][T14189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.582108][T14189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.601302][T14189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.612475][T14189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.626332][T14189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.746705][T14460] bridge0: port 5(ip6gretap0) entered blocking state [ 505.770047][T14460] bridge0: port 5(ip6gretap0) entered disabled state [ 505.801208][T14460] ip6gretap0: entered allmulticast mode [ 505.822379][T14460] ip6gretap0: entered promiscuous mode [ 505.838477][T14460] bridge0: port 5(ip6gretap0) entered blocking state [ 505.846040][T14460] bridge0: port 5(ip6gretap0) entered forwarding state [ 505.866750][T14473] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 505.987621][ T6726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.016242][ T6726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.127372][T10432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.154560][T10432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.240913][T14525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 507.260115][T14525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 507.287569][T14525] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 507.304636][T14525] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 507.313704][T14525] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 507.321965][T14525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 507.525675][T10432] netdevsim netdevsim2 netdevsim3 (unregistering): left allmulticast mode [ 507.544773][T10432] netdevsim netdevsim2 netdevsim3 (unregistering): left promiscuous mode [ 507.567167][T10432] @: port 1(netdevsim3) entered disabled state [ 507.590021][T10432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.716126][T10432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.950662][T10432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.522881][T10432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.928731][T14523] chnl_net:caif_netlink_parms(): no params data found [ 509.159186][T10432] tipc: Left network mode [ 509.353971][T14525] Bluetooth: hci1: command tx timeout [ 509.393930][T14523] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.405151][T14523] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.423055][T14523] bridge_slave_0: entered allmulticast mode [ 509.454217][T14523] bridge_slave_0: entered promiscuous mode [ 509.479688][T14523] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.503575][T14523] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.510864][T14523] bridge_slave_1: entered allmulticast mode [ 509.524834][T14523] bridge_slave_1: entered promiscuous mode [ 509.734775][T14593] bridge0: port 3(ip6gretap0) entered blocking state [ 509.752789][T14593] bridge0: port 3(ip6gretap0) entered disabled state [ 509.794677][T14593] ip6gretap0: entered allmulticast mode [ 509.823075][T14593] ip6gretap0: entered promiscuous mode [ 509.850170][T14593] bridge0: port 3(ip6gretap0) entered blocking state [ 509.857752][T14593] bridge0: port 3(ip6gretap0) entered forwarding state [ 510.021808][T14523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.091264][T14523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.246329][T14523] team0: Port device team_slave_0 added [ 510.278164][T14523] team0: Port device team_slave_1 added [ 510.371627][T14523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.379747][T14523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.413186][T14523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.448356][T14523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.460453][T14523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.491872][T14523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.978132][T14523] hsr_slave_0: entered promiscuous mode [ 511.005632][T14523] hsr_slave_1: entered promiscuous mode [ 511.018011][T14523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.034100][T14523] Cannot create hsr debugfs directory [ 511.242509][T14640] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2461'. [ 511.450594][T14525] Bluetooth: hci1: command tx timeout [ 513.513974][T14525] Bluetooth: hci1: command tx timeout [ 515.575444][T14523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.595708][T14525] Bluetooth: hci1: command tx timeout [ 515.599074][T14523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.623228][T14523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.641203][T14525] Bluetooth: hci3: ISO packet for unknown connection handle 8 [ 515.822383][T10432] hsr_slave_0: left promiscuous mode [ 515.842585][T10432] hsr_slave_1: left promiscuous mode [ 515.871104][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.879007][T10432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.932190][T10432] veth1_macvtap: left promiscuous mode [ 515.939046][T10432] veth1_vlan: left promiscuous mode [ 515.945533][T10432] veth0_vlan: left promiscuous mode [ 517.602953][T14523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 517.871745][T14749] netlink: 'syz.0.2488': attribute type 10 has an invalid length. [ 517.906553][T14749] geneve0: entered promiscuous mode [ 517.919886][T14756] cgroup: fork rejected by pids controller in /syz3 [ 518.006272][T14749] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 518.269151][T14523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.380385][T14523] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.415278][ T4120] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.422510][ T4120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.474953][ T4120] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.482146][ T4120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.365716][T14523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.573116][T14523] veth0_vlan: entered promiscuous mode [ 519.615830][T14523] veth1_vlan: entered promiscuous mode [ 519.720420][T14523] veth0_macvtap: entered promiscuous mode [ 519.892097][T14523] veth1_macvtap: entered promiscuous mode [ 520.074598][T10432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.118518][T14523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.143498][T14523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.168219][T14523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.193418][T14523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.215523][T14523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.311023][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 520.322846][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 520.331962][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 520.341600][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 520.350776][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 520.358436][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 520.364926][T10432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.406167][T14523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.416921][T14523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.427117][T14523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.438608][T14523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.451360][T14523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.471054][T14523] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.480224][T14523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.489399][T14523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.499275][T14523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.565498][T10432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.682081][T10115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.700629][T10115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.790047][T10432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.868832][ T4120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.903421][ T4120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.225775][T14924] chnl_net:caif_netlink_parms(): no params data found [ 521.466967][T14924] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.474468][T14924] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.481841][T14924] bridge_slave_0: entered allmulticast mode [ 521.489683][T14924] bridge_slave_0: entered promiscuous mode [ 521.499921][T14924] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.507286][T14924] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.515048][T14924] bridge_slave_1: entered allmulticast mode [ 521.522633][T14924] bridge_slave_1: entered promiscuous mode [ 521.625414][T14962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2506'. [ 521.650064][T14924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.779581][T14924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.071441][T14924] team0: Port device team_slave_0 added [ 522.143181][T14975] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2508'. [ 522.240973][T14924] team0: Port device team_slave_1 added [ 522.363872][T14980] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 522.401784][ T5785] Bluetooth: hci0: command tx timeout [ 522.465155][T14986] netlink: 'syz.1.2510': attribute type 29 has an invalid length. [ 522.530695][T14986] netlink: 'syz.1.2510': attribute type 29 has an invalid length. [ 522.553742][T14988] netlink: 'syz.1.2510': attribute type 29 has an invalid length. [ 522.570752][T14924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.603533][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.664652][T14924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.745195][T14986] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2510'. [ 522.764544][T14924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.771529][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.810454][T14924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.202859][T14997] syzkaller0: entered promiscuous mode [ 523.208731][T14997] syzkaller0: entered allmulticast mode [ 523.452231][T14924] hsr_slave_0: entered promiscuous mode [ 523.462362][T14924] hsr_slave_1: entered promiscuous mode [ 523.473095][T14924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.481097][T14924] Cannot create hsr debugfs directory [ 524.474352][ T5785] Bluetooth: hci0: command tx timeout [ 526.563648][ T5785] Bluetooth: hci0: command tx timeout [ 526.722335][T15043] netlink: 'syz.1.2521': attribute type 10 has an invalid length. [ 526.733540][T15043] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2521'. [ 526.754953][T10432] hsr_slave_0: left promiscuous mode [ 526.761191][T10432] hsr_slave_1: left promiscuous mode [ 526.772594][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.781230][T10432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.791294][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.799073][T10432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.807626][T10432] bridge_slave_1: left allmulticast mode [ 526.813304][T10432] bridge_slave_1: left promiscuous mode [ 526.820255][T10432] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.832519][T10432] bridge_slave_0: left allmulticast mode [ 526.838853][T10432] bridge_slave_0: left promiscuous mode [ 526.845121][T10432] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.906104][T10432] veth1_macvtap: left promiscuous mode [ 526.911770][T10432] veth0_macvtap: left promiscuous mode [ 526.922814][T10432] veth1_vlan: left promiscuous mode [ 526.928592][T10432] veth0_vlan: left promiscuous mode [ 527.671762][T10432] team0 (unregistering): Port device team_slave_1 removed [ 527.723516][T10432] team0 (unregistering): Port device team_slave_0 removed [ 527.770156][T10432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.822519][T10432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.189830][T10432] bond0 (unregistering): Released all slaves [ 528.305636][T15058] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2525'. [ 528.633687][ T5785] Bluetooth: hci0: command tx timeout [ 529.550150][T14924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 529.566892][T14924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 529.577625][T14924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 529.627063][T14924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 529.853158][T14924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.951865][T14924] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.972650][T15101] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2534'. [ 529.994693][T15101] openvswitch: netlink: Key type 4112 is out of range max 32 [ 530.014942][T10425] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.022195][T10425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.039740][T10425] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.046989][T10425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.677493][T14924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.832675][T14924] veth0_vlan: entered promiscuous mode [ 530.870478][T14924] veth1_vlan: entered promiscuous mode [ 530.964087][T14924] veth0_macvtap: entered promiscuous mode [ 530.998613][T14924] veth1_macvtap: entered promiscuous mode [ 531.058408][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.083514][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.113684][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.135157][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.167264][T14924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.242243][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.276827][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.297151][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.319690][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.335269][T14924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.360616][T15134] veth1_to_bond: entered allmulticast mode [ 531.558093][T14924] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.585346][T14924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.609731][T14924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.638376][T14924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.831976][T15155] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 531.847270][T15155] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 531.904258][T10432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.944416][T10432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.004233][T10432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.012130][T10432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.925093][T15200] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2551'. [ 533.812862][T14525] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 533.826465][T14525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 533.855621][T14525] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 533.873689][T14525] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 533.882595][T14525] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 533.892499][T14525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 534.550021][T10432] netdevsim netdevsim1 netdevsim3 (unregistering): left allmulticast mode [ 534.580068][T10432] netdevsim netdevsim1 netdevsim3 (unregistering): left promiscuous mode [ 534.623498][T10432] @: port 1(netdevsim3) entered disabled state [ 534.647904][T10432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.069578][T10432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.410990][T10432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.646593][T10432] bond0: (slave netdevsim0): Releasing backup interface [ 535.694696][T10432] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 535.813597][T10432] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 535.840327][T10432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.973801][ T5785] Bluetooth: hci4: command tx timeout [ 536.425868][T15284] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.433873][T15284] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.462432][T15284] bridge0: entered allmulticast mode [ 536.493088][T15219] chnl_net:caif_netlink_parms(): no params data found [ 536.934590][T15219] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.984429][T15219] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.040681][T15219] bridge_slave_0: entered allmulticast mode [ 537.074172][T15219] bridge_slave_0: entered promiscuous mode [ 537.185478][T15219] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.232009][T15219] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.278175][T15219] bridge_slave_1: entered allmulticast mode [ 537.328447][T15219] bridge_slave_1: entered promiscuous mode [ 537.677068][T15219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.735535][T15219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.951884][T15219] team0: Port device team_slave_0 added [ 537.994289][ T5785] Bluetooth: hci4: command tx timeout [ 537.995108][T15219] team0: Port device team_slave_1 added [ 538.220443][T15219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.258196][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.383769][T15219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.453654][T15219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.484697][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.617479][T15219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.852020][T15327] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2574'. [ 539.900150][T15219] hsr_slave_0: entered promiscuous mode [ 539.972689][T15219] hsr_slave_1: entered promiscuous mode [ 540.073847][ T5785] Bluetooth: hci4: command tx timeout [ 540.108168][T10432] bridge0: port 5(ip6gretap0) entered disabled state [ 540.279824][T10432] ip6gretap0 (unregistering): left allmulticast mode [ 540.296087][T10432] ip6gretap0 (unregistering): left promiscuous mode [ 540.308653][T10432] bridge0: port 5(ip6gretap0) entered disabled state [ 540.353964][T15331] netlink: 'syz.0.2575': attribute type 21 has an invalid length. [ 540.373844][T15331] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2575'. [ 540.656854][T15339] netlink: 'syz.0.2577': attribute type 1 has an invalid length. [ 540.690911][T15339] netlink: 'syz.0.2577': attribute type 3 has an invalid length. [ 540.720406][T15339] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2577'. [ 541.200003][T15347] netlink: 'syz.0.2579': attribute type 10 has an invalid length. [ 541.362107][T15347] team0: Port device geneve1 added [ 541.822091][T15369] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2584'. [ 541.974846][T15369] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2584'. [ 542.081957][T15377] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2584'. [ 542.153722][ T5785] Bluetooth: hci4: command tx timeout [ 543.020928][T15380] netlink: 'syz.2.2585': attribute type 4 has an invalid length. [ 543.035290][T15380] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2585'. [ 543.067264][T15380] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 546.524946][T15411] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2592'. [ 546.660408][T15413] netlink: 'syz.2.2593': attribute type 3 has an invalid length. [ 546.703969][T15413] netlink: 'syz.2.2593': attribute type 1 has an invalid length. [ 546.711912][T15413] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2593'. [ 546.777347][T10432] [ 546.779737][T10432] ====================================================== [ 546.786773][T10432] WARNING: possible circular locking dependency detected [ 546.793817][T10432] syzkaller #0 Not tainted [ 546.798263][T10432] ------------------------------------------------------ [ 546.805301][T10432] kworker/u4:45/10432 is trying to acquire lock: [ 546.811646][T10432] ffff88807a0e8d80 (team->team_lock_key#4){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 546.821377][T10432] [ 546.821377][T10432] but task is already holding lock: [ 546.828760][T10432] ffff8880317f0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 546.839235][T10432] [ 546.839235][T10432] which lock already depends on the new lock. [ 546.839235][T10432] [ 546.849654][T10432] [ 546.849654][T10432] the existing dependency chain (in reverse order) is: [ 546.858758][T10432] [ 546.858758][T10432] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 546.866534][T10432] __mutex_lock+0x136/0xcc0 [ 546.871658][T10432] ieee80211_open+0x144/0x200 [ 546.876900][T10432] __dev_open+0x2cb/0x430 [ 546.881838][T10432] dev_open+0xab/0x190 [ 546.886472][T10432] team_add_slave+0x75f/0x29a0 [ 546.891787][T10432] do_setlink+0xdfe/0x4130 [ 546.896763][T10432] rtnl_newlink+0x17da/0x20a0 [ 546.901986][T10432] rtnetlink_rcv_msg+0x869/0xfa0 [ 546.907472][T10432] netlink_rcv_skb+0x241/0x4d0 [ 546.912837][T10432] netlink_unicast+0x751/0x8d0 [ 546.918148][T10432] netlink_sendmsg+0x8d0/0xbf0 [ 546.923455][T10432] ____sys_sendmsg+0x5ba/0x960 [ 546.928762][T10432] ___sys_sendmsg+0x2a6/0x360 [ 546.933982][T10432] __se_sys_sendmsg+0x1c2/0x2b0 [ 546.939385][T10432] do_syscall_64+0x55/0xb0 [ 546.944398][T10432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.950874][T10432] [ 546.950874][T10432] -> #0 (team->team_lock_key#4){+.+.}-{3:3}: [ 546.959087][T10432] __lock_acquire+0x2df1/0x7d40 [ 546.964551][T10432] lock_acquire+0x19e/0x420 [ 546.969603][T10432] __mutex_lock+0x136/0xcc0 [ 546.974652][T10432] team_del_slave+0x32/0x1c0 [ 546.979790][T10432] team_device_event+0x28d/0xa20 [ 546.985275][T10432] notifier_call_chain+0x197/0x380 [ 546.990980][T10432] unregister_netdevice_many_notify+0x100d/0x1900 [ 546.997941][T10432] unregister_netdevice_queue+0x32c/0x370 [ 547.004215][T10432] _cfg80211_unregister_wdev+0x16b/0x580 [ 547.010433][T10432] ieee80211_remove_interfaces+0x49e/0x690 [ 547.016785][T10432] ieee80211_unregister_hw+0x5d/0x2a0 [ 547.022709][T10432] mac80211_hwsim_del_radio+0x289/0x480 [ 547.028857][T10432] hwsim_exit_net+0x58d/0x650 [ 547.034101][T10432] cleanup_net+0x70a/0xbb0 [ 547.039067][T10432] process_scheduled_works+0xa5d/0x15d0 [ 547.045160][T10432] worker_thread+0xa55/0xfc0 [ 547.050301][T10432] kthread+0x2fa/0x390 [ 547.054926][T10432] ret_from_fork+0x48/0x80 [ 547.059926][T10432] ret_from_fork_asm+0x11/0x20 [ 547.065277][T10432] [ 547.065277][T10432] other info that might help us debug this: [ 547.065277][T10432] [ 547.075536][T10432] Possible unsafe locking scenario: [ 547.075536][T10432] [ 547.083165][T10432] CPU0 CPU1 [ 547.088552][T10432] ---- ---- [ 547.093919][T10432] lock(&rdev->wiphy.mtx); [ 547.098445][T10432] lock(team->team_lock_key#4); [ 547.105926][T10432] lock(&rdev->wiphy.mtx); [ 547.112956][T10432] lock(team->team_lock_key#4); [ 547.117898][T10432] [ 547.117898][T10432] *** DEADLOCK *** [ 547.117898][T10432] [ 547.126058][T10432] 5 locks held by kworker/u4:45/10432: [ 547.131528][T10432] #0: ffff888140044938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 547.142437][T10432] #1: ffffc9000e61fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 547.153000][T10432] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 547.162429][T10432] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 547.172295][T10432] #4: ffff8880317f0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 547.183131][T10432] [ 547.183131][T10432] stack backtrace: [ 547.189036][T10432] CPU: 0 PID: 10432 Comm: kworker/u4:45 Not tainted syzkaller #0 [ 547.196769][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.206841][T10432] Workqueue: netns cleanup_net [ 547.211635][T10432] Call Trace: [ 547.215022][T10432] [ 547.218078][T10432] dump_stack_lvl+0x18c/0x250 [ 547.222904][T10432] ? load_image+0x420/0x420 [ 547.227534][T10432] ? show_regs_print_info+0x20/0x20 [ 547.232761][T10432] ? print_circular_bug+0x12b/0x1a0 [ 547.237990][T10432] check_noncircular+0x2fc/0x400 [ 547.242958][T10432] ? print_deadlock_bug+0x5d0/0x5d0 [ 547.248178][T10432] ? lockdep_lock+0xf5/0x230 [ 547.252779][T10432] ? __lock_acquire+0x1273/0x7d40 [ 547.257832][T10432] ? _find_first_zero_bit+0xd3/0x100 [ 547.263189][T10432] __lock_acquire+0x2df1/0x7d40 [ 547.268053][T10432] ? verify_lock_unused+0x140/0x140 [ 547.273248][T10432] ? verify_lock_unused+0x140/0x140 [ 547.278473][T10432] lock_acquire+0x19e/0x420 [ 547.282994][T10432] ? team_del_slave+0x32/0x1c0 [ 547.287766][T10432] ? __might_sleep+0xe0/0xe0 [ 547.292356][T10432] ? read_lock_is_recursive+0x20/0x20 [ 547.297733][T10432] __mutex_lock+0x136/0xcc0 [ 547.302245][T10432] ? team_del_slave+0x32/0x1c0 [ 547.307011][T10432] ? __lock_acquire+0x7d40/0x7d40 [ 547.312035][T10432] ? rcu_is_watching+0x15/0xb0 [ 547.316798][T10432] ? trace_contention_end+0x39/0xe0 [ 547.321990][T10432] ? __mutex_lock+0x315/0xcc0 [ 547.326665][T10432] ? team_del_slave+0x32/0x1c0 [ 547.331426][T10432] ? mutex_lock_nested+0x20/0x20 [ 547.336368][T10432] ? bond_netdev_event+0xeb/0xf20 [ 547.341393][T10432] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 547.347033][T10432] team_del_slave+0x32/0x1c0 [ 547.351625][T10432] team_device_event+0x28d/0xa20 [ 547.356568][T10432] notifier_call_chain+0x197/0x380 [ 547.361686][T10432] unregister_netdevice_many_notify+0x100d/0x1900 [ 547.368104][T10432] ? lock_chain_count+0x20/0x20 [ 547.372973][T10432] ? unregister_netdevice_many+0x20/0x20 [ 547.378635][T10432] ? kernfs_remove_by_name_ns+0x117/0x150 [ 547.384414][T10432] ? __lock_acquire+0x7d40/0x7d40 [ 547.389451][T10432] unregister_netdevice_queue+0x32c/0x370 [ 547.395177][T10432] ? list_netdevice+0x730/0x730 [ 547.400031][T10432] ? kernfs_remove_by_name_ns+0x117/0x150 [ 547.405764][T10432] _cfg80211_unregister_wdev+0x16b/0x580 [ 547.411403][T10432] ieee80211_remove_interfaces+0x49e/0x690 [ 547.417302][T10432] ? ieee80211_do_stop+0x1e20/0x1e20 [ 547.422585][T10432] ? rcu_is_watching+0x15/0xb0 [ 547.427365][T10432] ieee80211_unregister_hw+0x5d/0x2a0 [ 547.432743][T10432] mac80211_hwsim_del_radio+0x289/0x480 [ 547.438304][T10432] ? rhashtable_remove_fast+0xc00/0xc00 [ 547.443857][T10432] hwsim_exit_net+0x58d/0x650 [ 547.448540][T10432] ? hwsim_init_net+0x90/0x90 [ 547.453220][T10432] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 547.459068][T10432] cleanup_net+0x70a/0xbb0 [ 547.463487][T10432] ? ops_free_list+0x3b0/0x3b0 [ 547.468263][T10432] ? preempt_schedule_thunk+0x1a/0x30 [ 547.473639][T10432] ? process_scheduled_works+0x96f/0x15d0 [ 547.479372][T10432] ? process_scheduled_works+0x96f/0x15d0 [ 547.485094][T10432] process_scheduled_works+0xa5d/0x15d0 [ 547.490660][T10432] ? worker_attach_to_pool+0x380/0x380 [ 547.496140][T10432] ? assign_work+0x3d2/0x5d0 [ 547.500733][T10432] worker_thread+0xa55/0xfc0 [ 547.505335][T10432] kthread+0x2fa/0x390 [ 547.509403][T10432] ? pr_cont_work+0x560/0x560 [ 547.514082][T10432] ? kthread_blkcg+0xd0/0xd0 [ 547.518673][T10432] ret_from_fork+0x48/0x80 [ 547.523094][T10432] ? kthread_blkcg+0xd0/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 547.527714][T10432] ret_from_fork_asm+0x11/0x20 [ 547.532492][T10432] [ 547.574169][T10432] team0: Port device wlan1 removed [ 547.940864][T15219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 548.244639][T10432] hsr_slave_0: left promiscuous mode [ 548.305051][T10432] hsr_slave_1: left promiscuous mode [ 548.323459][T10432] bridge0: port 4(hsr0) entered disabled state [ 548.343785][T10432] bond0: left allmulticast mode [ 548.348699][T10432] bond_slave_0: left allmulticast mode [ 548.364365][T10432] bond_slave_1: left allmulticast mode [ 548.370070][T10432] bridge0: port 3(bond0) entered disabled state [ 548.383045][T10432] bridge_slave_1: left allmulticast mode [ 548.388920][T10432] bridge_slave_1: left promiscuous mode [ 548.397391][T10432] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.406202][T10432] bridge_slave_0: left allmulticast mode [ 548.411857][T10432] bridge_slave_0: left promiscuous mode [ 548.418837][T10432] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.429308][T10432] veth1_vlan: left allmulticast mode [ 548.435021][T10432] veth1_vlan: left promiscuous mode [ 548.440344][T10432] veth0_vlan: left promiscuous mode [ 548.663669][T10432] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 548.847658][T10432] team0 (unregistering): Port device team_slave_1 removed [ 548.891616][T10432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.900419][T10432] bond_slave_1 (unregistering): left promiscuous mode [ 548.927986][T10432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.937510][T10432] bond_slave_0 (unregistering): left promiscuous mode [ 549.054510][T10432] bond0 (unregistering): Released all slaves [ 549.509298][T10432] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.549121][T10432] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.606889][T10432] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.650034][T10432] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.779436][T10432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.850504][T10432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.919931][T10432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.998932][T10432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.301274][T10432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.357762][T10432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.391428][T10432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.469322][T10432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.707136][T10432] bridge0: port 3(ip6gretap0) entered disabled state [ 550.739447][T10432] ip6gretap0 (unregistering): left allmulticast mode [ 550.746514][T10432] ip6gretap0 (unregistering): left promiscuous mode [ 550.753203][T10432] bridge0: port 3(ip6gretap0) entered disabled state [ 551.667939][T10432] hsr_slave_0: left promiscuous mode [ 551.678830][T10432] hsr_slave_1: left promiscuous mode [ 551.684870][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.692305][T10432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.702841][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.710336][T10432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.720196][T10432] bridge_slave_1: left allmulticast mode [ 551.726314][T10432] bridge_slave_1: left promiscuous mode [ 551.732051][T10432] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.742637][T10432] bridge_slave_0: left allmulticast mode [ 551.748933][T10432] bridge_slave_0: left promiscuous mode [ 551.757075][T10432] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.770293][T10432] hsr_slave_0: left promiscuous mode [ 551.778479][T10432] hsr_slave_1: left promiscuous mode [ 551.785006][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.792445][T10432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.804469][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.811920][T10432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.821361][T10432] bridge_slave_1: left allmulticast mode [ 551.827485][T10432] bridge_slave_1: left promiscuous mode [ 551.833206][T10432] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.844166][T10432] bridge_slave_0: left allmulticast mode [ 551.849865][T10432] bridge_slave_0: left promiscuous mode [ 551.857190][T10432] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.870246][T10432] hsr_slave_0: left promiscuous mode [ 551.877400][T10432] hsr_slave_1: left promiscuous mode [ 551.884052][T10432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.891739][T10432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.901309][T10432] bridge_slave_1: left allmulticast mode [ 551.907034][T10432] bridge_slave_1: left promiscuous mode [ 551.912675][T10432] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.925503][T10432] bridge_slave_0: left allmulticast mode [ 551.931162][T10432] bridge_slave_0: left promiscuous mode [ 551.937031][T10432] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.947852][T10432] hsr_slave_0: left promiscuous mode [ 551.953750][T10432] hsr_slave_1: left promiscuous mode [ 551.959624][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.967080][T10432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.974894][T10432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.982313][T10432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.990230][T10432] bridge_slave_1: left allmulticast mode [ 551.997137][T10432] bridge_slave_1: left promiscuous mode [ 552.002805][T10432] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.011402][T10432] bridge_slave_0: left allmulticast mode [ 552.017127][T10432] bridge_slave_0: left promiscuous mode [ 552.022790][T10432] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.034992][T10432] veth1_macvtap: left promiscuous mode [ 552.040506][T10432] veth0_macvtap: left promiscuous mode [ 552.046130][T10432] veth1_vlan: left promiscuous mode [ 552.051399][T10432] veth0_vlan: left promiscuous mode [ 552.057544][T10432] veth1_macvtap: left promiscuous mode [ 552.063036][T10432] veth0_macvtap: left promiscuous mode [ 552.068652][T10432] veth1_vlan: left promiscuous mode [ 552.075393][T10432] veth0_vlan: left promiscuous mode [ 552.081315][T10432] veth1_macvtap: left promiscuous mode [ 552.087150][T10432] veth0_macvtap: left promiscuous mode [ 552.092689][T10432] veth1_vlan: left promiscuous mode [ 552.098026][T10432] veth0_vlan: left promiscuous mode [ 552.281465][T10432] team0 (unregistering): Port device geneve1 removed [ 552.307006][T10432] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 552.415163][T10432] team0 (unregistering): Port device team_slave_1 removed [ 552.452362][T10432] team0 (unregistering): Port device team_slave_0 removed [ 552.481532][T10432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.510277][T10432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.566570][T10432] bond0 (unregistering): Released all slaves [ 552.744287][T10432] team0 (unregistering): Port device team_slave_1 removed [ 552.761887][T10432] team0 (unregistering): Port device team_slave_0 removed [ 552.790465][T10432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.821075][T10432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.885382][T10432] bond0 (unregistering): Released all slaves [ 553.052061][T10432] team0 (unregistering): Port device team_slave_1 removed [ 553.077755][T10432] team0 (unregistering): Port device team_slave_0 removed [ 553.111787][T10432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.129384][T10432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.181187][T10432] bond0 (unregistering): Released all slaves [ 553.367346][T10432] team0 (unregistering): Port device team_slave_1 removed [ 553.396347][T10432] team0 (unregistering): Port device team_slave_0 removed [ 553.433179][T10432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.471197][T10432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.540022][T10432] bond0 (unregistering): Released all slaves