last executing test programs: 5.570629633s ago: executing program 3 (id=6586): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r0, &(0x7f0000000f40)={&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x0, 0x40000000}, 0x80, 0x0, 0x0, &(0x7f0000001380)=ANY=[], 0xc}, 0x0) 5.094704674s ago: executing program 3 (id=6593): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f0000000180)=""/166}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000001d00000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x746f2f51, &(0x7f0000000480)=[{&(0x7f00000004c0)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 4.612250837s ago: executing program 4 (id=6595): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x20000000000001ea, &(0x7f0000000500)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32=r1], 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x810, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(0x0, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/mnt\x00') r2 = perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x2, 0x3, 0x40, 0x9, 0x0, 0x3, 0x80006, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000680), 0x6}, 0x800, 0x6c, 0xfffffff9, 0x9, 0x879, 0x2, 0x8, 0x0, 0xf77, 0x0, 0x8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x6, 0x2, 0xce, 0x2, 0x0, 0x3, 0x4000, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6}, 0x110, 0xfffffffffffffff7, 0x5, 0x1, 0x0, 0x6, 0xf3, 0x0, 0xc1, 0x0, 0x1000}, 0x0, 0xa, r2, 0x9) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d80)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000dfffffff1b0000001c00000005000000000000b4ee240400000002273700029c4476b105d4ff28f4d0eaca3000000d00007f000c00000002000000"], &(0x7f0000000d80)=""/4096, 0x39, 0x1000, 0x1, 0x3}, 0x28) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) sendmsg$sock(r4, 0x0, 0x20008044) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ec0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x3, 0x0, 0x8, 0x40}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0xb7, &(0x7f00000001c0)=""/183, 0x0, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000001dc0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001e00)={0x0, 0x0, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001e40), &(0x7f0000001e80)=[{0x0, 0x2, 0xb, 0x5}, {0x5, 0x2, 0x1, 0xc}, {0x2, 0x2, 0x3, 0x4}, {0x4, 0x5, 0xc, 0x9}], 0x10, 0xb}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040000) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000ac0)={&(0x7f0000000b00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000c40)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010100}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) 4.230673835s ago: executing program 3 (id=6596): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x1c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe94}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x14, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x84000}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000dc0)={r3, r2}, 0xc) r4 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) close(r4) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000200)={&(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="2b706572765f6576656e74202d6672656586172ca018afdba8ef007a6572207d72646d612025"], 0x26) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000400)=[{0x0, 0x6000}, {0x0}, {0x0}, {&(0x7f0000000440), 0x6000}], 0x4, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x13, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x51909670}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xe813}]}, &(0x7f00000004c0)='GPL\x00', 0x9, 0x89, &(0x7f0000000580)=""/137, 0x41100, 0xb, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x4, &(0x7f0000000a00)=[r5, r5, r5, r5, r5], &(0x7f0000000a40)=[{0x0, 0x4, 0x7, 0x2}, {0x4, 0x5, 0x8, 0xc}, {0x5, 0x1, 0x5, 0x2}, {0x0, 0x2, 0x3, 0x2}], 0x10, 0x3}, 0x94) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x1000000) 4.142362018s ago: executing program 4 (id=6597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x15, 0x2000000000000216, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000007524180f1bc07f5f2f35000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000a3f2"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4c694, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x12810, 0x400000, 0xfffffffd, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffbff}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc00000000000000000000000000000248f4fa4d87"], 0x0, 0xfc5f}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020d00000000000000f7ffffff185200000800000000000000000000001801000020756c2500000000030900007b1af8ff00000000b5bf34aba02b80bfa100000000000007010000f8ffffff0002000008000000b703000008000000"], &(0x7f0000000140)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1a, r3, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0xc9c, 0x9}, 0x10, 0x2844, r0, 0x1, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000300)=[{0x2, 0x4, 0x8, 0x3}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e80)='memory.current\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f00)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x40049409, 0x5) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) recvmsg$unix(r4, &(0x7f0000000b40)={&(0x7f0000000840), 0x6e, &(0x7f0000000b00)=[{&(0x7f00000008c0)=""/101, 0x65}, {&(0x7f0000000940)=""/185, 0xb9}, {&(0x7f0000000a00)=""/232, 0xe8}], 0x3}, 0x12020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0xac5d, 0xd00000, 0x0, 0x52}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f898c8d8448c58f12b0f7e0c55f2df41bc2138407015fe3e904f6d448bc45a6d63bfb460d38ee34799d2bf08cd24923741f32aa345a525bba23a68ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x0, 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0x14, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r6, @ANYRES32=r9, @ANYBLOB='\x00'/10, @ANYRES64, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYRESHEX=r10, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000013c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, r8, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000001440)={'sit0\x00', @random="4f33e363a4b1"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 4.075393659s ago: executing program 2 (id=6599): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="3c00000033000b12d25a80648c2594f90124fc60100c034004000000002000119215a2283cf6b809f2db60490d20a735b16b6a4479b406db26a57b35", 0x3c}], 0x1}, 0x0) 4.074200849s ago: executing program 1 (id=6600): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0x2fa24f58}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd56}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="200000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 3.918459353s ago: executing program 4 (id=6601): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c006, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 3.885123304s ago: executing program 1 (id=6602): r0 = socket$kcm(0xa, 0x6, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000500)="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", 0x13b}, {&(0x7f00000009c0)="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", 0x192}, {&(0x7f00000018c0)="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", 0x14c}, {&(0x7f0000000d00)="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", 0xfb}, {&(0x7f0000000e00)="1679c98357b6294679b45dac19ffee9a12bec86bf722e0f5fe8109dedde67afa6fb2c50395312b4b14b9a3e357cf93f4958ba63aab925daef4a74f1ab0f984a9e5c3ff2d5fff0d90f60cdcbb5793cff25656584db85d70e52e9a0b1b4c", 0x5d}], 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x80) sendmsg$kcm(r0, &(0x7f0000000ec0)={&(0x7f0000000900)=@l2tp6={0xa, 0x0, 0x2, @remote, 0xbc8f}, 0x80, &(0x7f0000001680), 0x3, 0x0, 0x0, 0x900}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000037000000620a00ff000000006100081900000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0xffa0, &(0x7f00000003c0)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe2f, 0x0, 0x0, &(0x7f0000000300), 0x50}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="2b6e657400000000000001000000d4c8a097ff7d55a65447f44145f4c56d5f5bb1245d11038c54921493f001d7c053dc792382ee1b39737a7a2dc13a1b343fe51076ad750901bf3e41a04cc5e74b22f52d52385bd90000000042e55eccc0d9b7841ca645da88306c5f53bcb1d2e1d849d534ae4bd45602a69d0c28644a81720bab1069158e"], 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x5, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000001100)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000100000d000000000000000000000000000000000000000300000000021000000400000000000000000000000100000d00"/90], &(0x7f0000001280)=""/237, 0x5a, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001380)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="f5616e3edcdf406ac9c488c9d91d7e2f06931c901487160b6488ca29dee7cbbd1e74d24dd179d2bd326c66ab99197fb9261403e5bfa7d8e5c01cfa68bbf6ac5610d677", 0x43}, {&(0x7f0000001500)="cbc6bd3aa646b1dd76e5d3eb7cb63f62d4b7011180ee43994bb429ebc3327f8b4d9ed4a7d198b91268c9b2e10d43b3df4df8e661d259ca032cf6b95cab7b74306ee945cdf851452f45165325f45438e2e442a3a932f7883b556da69fd6ba299f584d45a8d390cc28ac8d4b2049dee4d978a3666697c9a9dc83ae3455d9dc4f998d680434f67f", 0x86}, {&(0x7f00000015c0)="1d71", 0x2}, {&(0x7f00000017c0)="53a02425bc4706b702c70bd6a3780c65bdb317c5566d2cc18364d76108e493d64a096ee95921e011fa1a73e066a33949974b6719668c07ba5cf711cc3cfd38a10b8c65259512be2533df5b9d26aed4090b99b695ce9a9a35b500f9ca9dd147e24a7cdab46597f916749850906a67116ca53001cbfa61e4021bdac754a59890a10ba13b04708bdeafee100500000000000000dd22ed95dc7203eb6d25bd8a273e3d90af8d4327f2c50913cb59f393a70a122eb44636a5d511d26af548c7b4f72cb64d64e731f5bd68", 0xc8}, {&(0x7f0000000780)="1e8909ce341e5a05ae438d25cf73d6ac9f42a12b2763ab4835a7cd6d0c5057c9217bb11279844f291d3e05a5818e3a478e24ede688ef75d20fb53a414a817696a06066500b33d895c2b2538b9f9d248ba7ba0bdc60894283e37c730dea8a068e2e7cb4583da1765b951b824fb510a2a6de548a1d02c0adfa75d8585fa5381797e11636e8954f89c9d14feb83eec3b75e5fa898d76ec768fa7593f9e50e196a1bb44340d4eb37ff24572522810755b5a2f7b759981cc2eb52ddfb40283fa2f4ce6131fed7", 0xc4}, {&(0x7f0000001740)="e563fa4f857932842a2cc323455eb3637e6e4642842aa9de39bd6dd8ee15797521b67b100f65c0b7f6a5a26a685be0426b8df2e1414536245f95817492934541bed363ab42af252a1a87", 0x4a}, {&(0x7f0000000380)="9f7b08b2c1118d7a60b7a62e38d3", 0xe}], 0x7, &(0x7f0000004400)=ANY=[@ANYRES8=r2], 0x23b0}, 0x8044) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000004180)={0x11, 0xd, 0x0, &(0x7f0000004240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000004280)={r7, r6}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000042c0)=ANY=[@ANYBLOB="0d00000005000080030000000e0000", @ANYRES32=r6, @ANYBLOB="bc0c00"/20, @ANYRES32, @ANYBLOB="01000000050000000300"/28], 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004340)={&(0x7f0000004380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001008000000030000000000001103000000000000000000000001000004040000000000000002000000000000000061612e003bdb4e4a8959ba546c"], 0x0, 0x51}, 0x28) 3.840733555s ago: executing program 0 (id=6603): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10001}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x2, 0x1, 0x1, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @exit, @ldst={0x3, 0x1, 0x2, 0x9, 0x9, 0x1, 0xfffffffffffffffc}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @generic={0x3, 0xa, 0x3, 0x80, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0x2, 0xbe, &(0x7f0000000d40)=""/190, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) 3.673014589s ago: executing program 2 (id=6604): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x100, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8f7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x0, 0x61, 0x5f, 0x5f]}}, 0x0, 0x22}, 0x28) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000480)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) sendmsg$sock(r0, &(0x7f0000004040)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000000600)="b6ffe7df5374ee1efdcccdbbddb401d0edc3673b933730ec14d02e1dd75c7a200d628913026f4bbf0bf51c8c3196d51bfe30c6295342907e0bbb73885871cd5fd3eacbfea91fc1c16b07fe88728077d19806b0afc1c4d11f75fcee39c0b30155f4086d9e7029f711046974ecbc8fb4b1137d2fdd4b5e5e91d4dfc8af17b95d45c144177478181649604a0d28d980831220f623724da66c", 0x97}, {&(0x7f0000000a40)}, {&(0x7f00000007c0)="b11580fb9128fa9a92c04cc5a6af11d7ffca2d0b93b51305b46c0e303c8bb72094d3b5ee9efa93bcf8638e8c10392d05e1748e1d69e3ddaf92baffb05448efa45a0d9ddd60b1c9e5af8f0976ae2eda47b282dd7a3a851e5a7df0e7bfc5f0b9e7a1ebe73f42b3756309ed705a5ac68362db30d9c1b774a9bed6b41fc85bba4b3d1afc1baa38703931d52079569e8d138f", 0x90}, {&(0x7f0000000880)="550c2289c65bb82616f6706355b072329122b29165fb2a82fb1501e7dadbb2ef1c49aa61cb7438af430d6b1b0341f676c8e0dff3d99a445848586c150386", 0x3e}, {&(0x7f00000008c0)="5db0e98f4bda918aad9eabf57f8a3365ad08946b5dd97d298c7133a2bfd52034b5db6b2a31361c8b71fe42df353fdf6a3d42840e6a2af4ab54f223789b6c88095302f55a6d7c8b4b6ec670d34207c8b67d132ce49dbb1dbef1005cd79690c2eeae51fc", 0x63}, {&(0x7f0000000380)="0f5871d15e87eb1f5677388395b3897af73fdd355fb25ea1c833457940400e27903eac3e5961c30ff5f6c3458dbac20b59e815b23b34dfef701933985d480b78c75ac7edb3624ab1adecd4c36596c3c7f7830496a36a5562711753a92e7e08c0be79440000002000002b7a73178f838e81b3daacabf204fb0b84687d7fac5e0da97afc441bcd270d54c662dae885b54f1f86cf9f9ec40166507e3e63b5ac6de0011826a00c18656b9c50ee73c335800015a0e246abf068e9e7a132021d1ef031845a3044e558e05117d60e7d10f40672687e89240db1818124", 0xd9}, {&(0x7f0000002dc0)="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", 0x168}, {0x0}], 0x8, &(0x7f0000004000)=[@mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}, 0x800) 3.657893539s ago: executing program 3 (id=6605): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000870000008500000006000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x2000000000000216, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2381, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000d80)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r3, 0x0, 0x14, 0xe80, &(0x7f0000000e40)="0000ffffffffa000", &(0x7f0000000e80)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000400)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000700)=r6) write$cgroup_devices(r7, &(0x7f0000000740)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000050000000000000007000000850000002c000000b7080000000000007b8af8ff00000000b7080000068000007b8af0ff00000400bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 3.533223932s ago: executing program 0 (id=6606): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f0000000180)=""/166}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000001d00000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x746f2f51, &(0x7f0000000480)=[{&(0x7f00000004c0)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.122301862s ago: executing program 2 (id=6607): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0xff00}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xba}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 3.121110222s ago: executing program 0 (id=6608): r0 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0x6f5f, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000740)=',/\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x30, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c006, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000400)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f00000005c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8cff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0700000004000000000100000300000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) 2.963833467s ago: executing program 4 (id=6609): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000dc0), 0x10) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0xfd, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000100), 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x5, r3}, 0x38) (async) socket$kcm(0x29, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000780)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000800), 0x6000}], 0x4, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 2.81995912s ago: executing program 1 (id=6610): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x6, &(0x7f0000000980)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2e}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000009c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000d40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) (fail_nth: 2) 2.389431081s ago: executing program 0 (id=6611): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x63}, 0x28) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)={[{0x2d, 'devices'}, {0x2d, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'net_prio'}]}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 7) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) 2.261674814s ago: executing program 4 (id=6612): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001200)={r0}, 0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000fc0)) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000001000)={'wlan1\x00', @random=' \x00'}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)="89000000120081ae08060cdc030000007f03e3f7112d00006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4008814) 1.450314974s ago: executing program 1 (id=6613): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040000) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000ac0)={&(0x7f0000000b00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000bc0)={&(0x7f0000000c40)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) 1.449991524s ago: executing program 2 (id=6614): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0x2, 0x3, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x10) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000bc0)={&(0x7f0000000c40)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x20000000) close(r0) socketpair(0x24, 0x0, 0x6, &(0x7f0000000180)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 1.449188304s ago: executing program 1 (id=6615): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000d00)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000d40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xe, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001100)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0x366, 0x10, &(0x7f0000001240), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x8, 0x4, &(0x7f00000013c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9a}]}, &(0x7f0000001400)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001440)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000001540), 0xb5, 0x10, &(0x7f0000001580), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{r4}, &(0x7f0000001640), &(0x7f0000001680)=r0}, 0x20) perf_event_open(&(0x7f00000016c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000017c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)='>', 0x33fe0}], 0x1}, 0x0) close(r4) sendmsg$unix(r2, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="465864190000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000010b7030600000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9f, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000b80)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$kcm(0x2, 0x4, 0x2) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r9, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x2000000) 1.445733974s ago: executing program 3 (id=6616): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000ac0)={&(0x7f0000000b00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000bc0)={&(0x7f0000000c40)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) 1.150420251s ago: executing program 2 (id=6617): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x0, 0xc2ba, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180900000000000000000000000000008507000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010900f8ffffffb702000008000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe1d}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x8040) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000000000000000000000050000791220000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000011c0)=r0, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1200000024d4040100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001640)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.148795971s ago: executing program 0 (id=6627): bpf$ENABLE_STATS(0x20, 0x0, 0x0) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f00000002c0)) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000300)) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000005ed200be6a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018000000000000000000000000000000950000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r4, &(0x7f0000000800), 0x0}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) close(r6) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f00000009c0)={&(0x7f0000000a00)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="7f", 0x1}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) close(r6) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.093712712s ago: executing program 4 (id=6618): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0x2fa24f58}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd56}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x13, &(0x7f0000000180), 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x21a8, 0x0, 0x0, 0x0, 0x800000000000, 0x3, 0xb01}, 0x0, 0x0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000840)=@generic={0x0, 0x11}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x37) sendmsg$tipc(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000b00)=""/222}, 0x78) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1900000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="302543377132307ec3000000000000000000000000002000000000df0008000000f9ffffff"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="2e00000024008f866b29924a6f130000005e14060800000000000000f1ffffff000280a71802dd0000", 0x29}, {&(0x7f0000001d40)="018d4561b6", 0x5}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 1.092239892s ago: executing program 3 (id=6619): socket$kcm(0x22, 0x2, 0x26) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x81, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, @perf_config_ext={0x200, 0x5}, 0x21, 0x0, 0x0, 0x2, 0x0, 0x200, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000800), 0x12) write$cgroup_int(r1, 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000840)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1f, 0x80000, 0x7, &(0x7f0000000880)) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000026eb000000000000000000000000009a00000000"], &(0x7f0000000b40)='syzkaller\x00', 0x3, 0xee, &(0x7f0000000b80)=""/238, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={@map, 0x6, 0x1, 0x3, &(0x7f0000000d40)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000d80)=[0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0], 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2a004f0000000000c67a1ea7e195a3265bc976bb4621be0b86d05e66db817e8525e4cff481e2f362a7c9fa37ce0b9d5b6663be7e4966096e6fd55a67af9dca9983d7823bb002047496f0e7878c195f89fd4f366593f97cf44f7de8e0f02b6be7d592f6d0d77e155a98faa507a59b81ae8b7ecb83fd9ca7409fba83c5c401e33842f90149ccf08a42749b42cbf633005081957262c5272c5874b5f6bb26d97e8d0e361a6d48d6989c05f7d288850d46e310356b6e0bb88120fd", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r3], 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e40)={'wlan0\x00', 0x200}) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, @perf_bp={0x0, 0xa}, 0x10458c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x3c4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x22000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)) r4 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r4, &(0x7f0000001000)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r4], 0xfe33) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 678.803403ms ago: executing program 1 (id=6620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a40)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6a}, [@ldst={0x4}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x3f7, &(0x7f0000000240)=""/195}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)="1400000015000b63d25a80648c0ff65038bdf737", 0x14}], 0x1}, 0x2000c884) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x8000000000000001}, 0x9051, 0x7, 0x0, 0x4, 0x1000000, 0xa, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x2}], 0x1}, 0x0) r4 = syz_clone(0x21110000, &(0x7f0000001700)="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", 0x1000, &(0x7f0000002700), &(0x7f0000002740), &(0x7f0000002780)="f9923bf41d561f5e2f155f4e80b02fbd995d323b3fc420b9bfe5646d9fe92acfafcf67b796d87369bba6d25c84b8da7e4a483417377f77de14beca5279a5e07c95026264c6381a3b3362c9be24dac232347a90ad61a96475ecca1826d582c2aaee1d783faeaf29f22b854b96bb68e1bd1a17") r5 = perf_event_open(&(0x7f0000002840)={0x2, 0x80, 0x1, 0xf3, 0x1, 0x3, 0x0, 0x14000, 0xe280, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000002800), 0xf}, 0x100062, 0x7, 0x1, 0x4, 0x5, 0x80, 0x7, 0x0, 0x1, 0x0, 0xfff}, 0xffffffffffffffff, 0xb, r2, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002900)={r4, r5, 0x0, 0x8, &(0x7f00000028c0)='(#:-\'[)\x00'}, 0x30) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000007000000850000001b000000b7000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x2000489c) 458.029548ms ago: executing program 2 (id=6621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 0 (id=6622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x62a740, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000001580)=0x3) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0xc0000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000016c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="020000000800000004000000", @ANYRES32, @ANYBLOB="5f236311b11e549a4e5ce193f68a92c2c993fc00000000000000", @ANYRES64=0x0], 0x20) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000001700), 0x90) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000001740)={&(0x7f0000001780)={0x2, 0xfffd, @remote}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001800)="f5d2b9ed", 0x4}, {&(0x7f0000001840)="4fff54c1020045768718b4da1deb33c938033291be99a909af93cab03a", 0x1d}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001940)=[{0x0, 0x4, 0x5, 0x9}, {0x10000002, 0x0, 0x0, 0x1}], 0x10, 0x30}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40012142) close(r5) recvmsg$unix(r4, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000001a80)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x2, 0x10, @local}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000001b80)='{', 0x1}], 0x1}, 0x80d1) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000001c00)={'vcan0\x00', @random="5b9f45ff6cf9"}) socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001c40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x29, 0x3a, 0x0, 0xfffffffffffffdb7) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x48000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x3}, 0x106441, 0x0, 0x4, 0x3, 0xe, 0x803ff, 0xfffc, 0x0, 0xfffffffe, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 15.771358][T23296] netlink: 'syz.2.5542': attribute type 21 has an invalid length. [ 1115.791887][T23296] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5542'. [ 1115.810689][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.817084][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.353190][T23312] netlink: 'syz.2.5549': attribute type 21 has an invalid length. [ 1116.733949][T23324] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5554'. [ 1117.020101][T23332] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5543'. [ 1117.099076][T23330] netlink: 'syz.1.5556': attribute type 10 has an invalid length. [ 1118.781375][T23374] netlink: 'syz.0.5573': attribute type 10 has an invalid length. [ 1119.397304][T23390] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5578'. [ 1120.353627][T23420] netlink: 'syz.2.5590': attribute type 10 has an invalid length. [ 1121.479401][T23434] netlink: 'syz.1.5592': attribute type 6 has an invalid length. [ 1121.682732][T23433] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5594'. [ 1123.531105][T23456] netlink: 'syz.2.5599': attribute type 6 has an invalid length. [ 1124.067983][T23467] netlink: 'syz.0.5604': attribute type 10 has an invalid length. [ 1124.503195][T23473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.922718][T23503] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5614'. [ 1126.000244][T23508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5616'. [ 1126.318765][T23524] netlink: 'syz.0.5620': attribute type 10 has an invalid length. [ 1126.431067][T23529] netlink: 'syz.3.5619': attribute type 10 has an invalid length. [ 1126.911656][T23529] team0: Device wg1 is of different type [ 1127.045886][T23522] netlink: 'syz.3.5619': attribute type 21 has an invalid length. [ 1127.056999][T23522] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1127.114754][T23533] netlink: 'syz.1.5623': attribute type 10 has an invalid length. [ 1127.256463][T23543] netlink: 'syz.2.5625': attribute type 6 has an invalid length. [ 1128.164098][T23577] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5639'. [ 1128.238287][T23582] netlink: 'syz.4.5637': attribute type 10 has an invalid length. [ 1129.102577][T23595] netlink: 'syz.2.5645': attribute type 10 has an invalid length. [ 1129.269637][T23607] netlink: 'syz.1.5644': attribute type 10 has an invalid length. [ 1129.387481][T23607] team0: Device wg1 is of different type [ 1129.642861][T23593] netlink: 'syz.1.5644': attribute type 21 has an invalid length. [ 1129.694650][T23593] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5644'. [ 1129.897208][T23621] netlink: 'syz.2.5651': attribute type 9 has an invalid length. [ 1129.906484][T23621] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.5651'. [ 1130.363862][T23642] netlink: 'syz.4.5659': attribute type 27 has an invalid length. [ 1130.381325][T23641] netlink: 'syz.4.5659': attribute type 27 has an invalid length. [ 1130.409527][T23642] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5659'. [ 1130.441520][T23641] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5659'. [ 1130.813693][T23657] FAULT_INJECTION: forcing a failure. [ 1130.813693][T23657] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.832665][T23657] CPU: 0 PID: 23657 Comm: syz.0.5664 Not tainted syzkaller #0 [ 1130.840226][T23657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1130.850358][T23657] Call Trace: [ 1130.853714][T23657] [ 1130.856690][T23657] dump_stack_lvl+0x188/0x24e [ 1130.861508][T23657] ? show_regs_print_info+0x12/0x12 [ 1130.866751][T23657] ? load_image+0x410/0x410 [ 1130.871301][T23657] ? __might_sleep+0xd0/0xd0 [ 1130.875943][T23657] ? __lock_acquire+0x7ea0/0x7ea0 [ 1130.881029][T23657] should_fail_ex+0x390/0x4c0 [ 1130.885797][T23657] should_failslab+0x5/0x20 [ 1130.890349][T23657] slab_pre_alloc_hook+0x59/0x300 [ 1130.895424][T23657] kmem_cache_alloc_lru+0x49/0x2e0 [ 1130.900575][T23657] ? proc_alloc_inode+0x26/0xb0 [ 1130.905481][T23657] proc_alloc_inode+0x26/0xb0 [ 1130.910198][T23657] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 1130.916581][T23657] new_inode_pseudo+0x5f/0x1c0 [ 1130.921390][T23657] new_inode+0x25/0x1d0 [ 1130.925589][T23657] proc_pid_make_inode+0x20/0x1a0 [ 1130.930659][T23657] proc_ns_dir_lookup+0x6a0/0x7c0 [ 1130.935755][T23657] ? proc_ns_dir_readdir+0x430/0x430 [ 1130.941096][T23657] path_openat+0xff8/0x2f10 [ 1130.945698][T23657] ? do_filp_open+0x420/0x420 [ 1130.950458][T23657] do_filp_open+0x1ee/0x420 [ 1130.955007][T23657] ? vfs_tmpfile+0x470/0x470 [ 1130.959649][T23657] ? noop_direct_IO+0x10/0x10 [ 1130.964387][T23657] ? _raw_spin_unlock+0x24/0x40 [ 1130.969313][T23657] ? alloc_fd+0x590/0x640 [ 1130.973729][T23657] do_sys_openat2+0x14b/0x4f0 [ 1130.978451][T23657] ? up_read_non_owner+0x74/0x1c0 [ 1130.983517][T23657] ? do_mmap_read_unlock+0x36/0x60 [ 1130.988668][T23657] ? do_sys_open+0xe0/0xe0 [ 1130.993138][T23657] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1130.999180][T23657] ? lock_chain_count+0x20/0x20 [ 1131.004073][T23657] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1131.010101][T23657] __x64_sys_openat+0x135/0x160 [ 1131.015014][T23657] do_syscall_64+0x4c/0xa0 [ 1131.019468][T23657] ? clear_bhb_loop+0x60/0xb0 [ 1131.024197][T23657] ? clear_bhb_loop+0x60/0xb0 [ 1131.028919][T23657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1131.034848][T23657] RIP: 0033:0x7fb30c55fd8e [ 1131.039573][T23657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1131.059229][T23657] RSP: 002b:00007fb30a7f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1131.067684][T23657] RAX: ffffffffffffffda RBX: 00007fb30a7f66c0 RCX: 00007fb30c55fd8e [ 1131.075686][T23657] RDX: 0000000000000002 RSI: 00007fb30a7f5f90 RDI: ffffffffffffff9c [ 1131.083703][T23657] RBP: 00007fb30a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.091707][T23657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1131.099712][T23657] R13: 00007fb30c826038 R14: 00007fb30c825fa0 R15: 00007ffe5e4ca2b8 [ 1131.107754][T23657] [ 1131.672690][T23667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5668'. [ 1131.752697][T23659] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5665'. [ 1132.799295][T23693] validate_nla: 3 callbacks suppressed [ 1132.799369][T23693] netlink: 'syz.0.5678': attribute type 10 has an invalid length. [ 1134.432042][T23733] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.5693'. [ 1134.490144][T23726] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5692'. [ 1134.521494][T23739] netlink: 'syz.1.5693': attribute type 10 has an invalid length. [ 1134.710175][T23746] netlink: 'syz.0.5695': attribute type 10 has an invalid length. [ 1135.169852][T19614] tipc: Subscription rejected, illegal request [ 1135.520776][T23759] netlink: 'syz.2.5702': attribute type 10 has an invalid length. [ 1135.900738][T23759] team0: Device wg1 is of different type [ 1136.334166][T23783] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1136.358458][T23783] syzkaller1: linktype set to 773 [ 1136.380073][T23784] Q±6ã×\b‹¡Y­4��: renamed from lo [ 1136.573855][T23792] FAULT_INJECTION: forcing a failure. [ 1136.573855][T23792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.600729][T23792] CPU: 1 PID: 23792 Comm: syz.2.5711 Not tainted syzkaller #0 [ 1136.608312][T23792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1136.618424][T23792] Call Trace: [ 1136.621740][T23792] [ 1136.624707][T23792] dump_stack_lvl+0x188/0x24e [ 1136.629447][T23792] ? show_regs_print_info+0x12/0x12 [ 1136.634703][T23792] ? load_image+0x410/0x410 [ 1136.639349][T23792] ? __lock_acquire+0x7ea0/0x7ea0 [ 1136.644451][T23792] should_fail_ex+0x390/0x4c0 [ 1136.649297][T23792] _copy_from_user+0x2c/0x170 [ 1136.654208][T23792] __sys_bpf+0x2ea/0x780 [ 1136.658519][T23792] ? bpf_link_show_fdinfo+0x380/0x380 [ 1136.663970][T23792] ? lock_chain_count+0x20/0x20 [ 1136.668882][T23792] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1136.674938][T23792] __x64_sys_bpf+0x78/0x90 [ 1136.679410][T23792] do_syscall_64+0x4c/0xa0 [ 1136.683882][T23792] ? clear_bhb_loop+0x60/0xb0 [ 1136.688655][T23792] ? clear_bhb_loop+0x60/0xb0 [ 1136.693464][T23792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1136.699444][T23792] RIP: 0033:0x7fc2b879f559 [ 1136.704169][T23792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.723825][T23792] RSP: 002b:00007fc2b95f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1136.732295][T23792] RAX: ffffffffffffffda RBX: 00007fc2b8a25fa0 RCX: 00007fc2b879f559 [ 1136.740345][T23792] RDX: 0000000000000021 RSI: 0000200000000200 RDI: 0000000000000005 [ 1136.748367][T23792] RBP: 00007fc2b95f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.756393][T23792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.764417][T23792] R13: 00007fc2b8a26038 R14: 00007fc2b8a25fa0 R15: 00007ffefac45248 [ 1136.772486][T23792] [ 1136.967475][T23798] netlink: 'syz.4.5714': attribute type 10 has an invalid length. [ 1138.176658][T23817] netlink: 'syz.1.5720': attribute type 10 has an invalid length. [ 1138.191691][T23816] FAULT_INJECTION: forcing a failure. [ 1138.191691][T23816] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.234498][T23816] CPU: 1 PID: 23816 Comm: syz.2.5721 Not tainted syzkaller #0 [ 1138.242039][T23816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1138.252147][T23816] Call Trace: [ 1138.255462][T23816] [ 1138.258434][T23816] dump_stack_lvl+0x188/0x24e [ 1138.263167][T23816] ? rcu_is_watching+0x11/0xa0 [ 1138.267998][T23816] ? show_regs_print_info+0x12/0x12 [ 1138.273244][T23816] ? load_image+0x410/0x410 [ 1138.277792][T23816] ? lockdep_hardirqs_on+0x94/0x140 [ 1138.283166][T23816] should_fail_ex+0x390/0x4c0 [ 1138.287921][T23816] should_failslab+0x5/0x20 [ 1138.292474][T23816] slab_pre_alloc_hook+0x59/0x300 [ 1138.297571][T23816] kmem_cache_alloc_node+0x5a/0x310 [ 1138.302832][T23816] ? __alloc_skb+0xf9/0x7d0 [ 1138.307393][T23816] __alloc_skb+0xf9/0x7d0 [ 1138.311803][T23816] netlink_sendmsg+0x654/0xbd0 [ 1138.316628][T23816] ? lockdep_hardirqs_on+0x94/0x140 [ 1138.321895][T23816] ? netlink_getsockopt+0x550/0x550 [ 1138.327147][T23816] ? security_socket_sendmsg+0x70/0xa0 [ 1138.332665][T23816] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1138.337998][T23816] ? security_socket_sendmsg+0x7c/0xa0 [ 1138.343510][T23816] ? netlink_getsockopt+0x550/0x550 [ 1138.348768][T23816] ____sys_sendmsg+0x5ed/0x9a0 [ 1138.353596][T23816] ? __sys_sendmsg_sock+0x30/0x30 [ 1138.357212][T23817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5720'. [ 1138.358654][T23816] ? __import_iovec+0x306/0x510 [ 1138.372678][T23816] ? import_iovec+0x6f/0xa0 [ 1138.377243][T23816] ___sys_sendmsg+0x2a2/0x360 [ 1138.381977][T23816] ? __sys_sendmsg+0x2a0/0x2a0 [ 1138.386844][T23816] __se_sys_sendmsg+0x1c3/0x2b0 [ 1138.391751][T23816] ? __x64_sys_sendmsg+0x80/0x80 [ 1138.396773][T23816] do_syscall_64+0x4c/0xa0 [ 1138.401239][T23816] ? clear_bhb_loop+0x60/0xb0 [ 1138.405997][T23816] ? clear_bhb_loop+0x60/0xb0 [ 1138.410728][T23816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1138.416666][T23816] RIP: 0033:0x7fc2b879f559 [ 1138.421133][T23816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.440816][T23816] RSP: 002b:00007fc2b95d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1138.449297][T23816] RAX: ffffffffffffffda RBX: 00007fc2b8a26090 RCX: 00007fc2b879f559 [ 1138.457326][T23816] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 1138.465343][T23816] RBP: 00007fc2b95d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.473390][T23816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.481494][T23816] R13: 00007fc2b8a26128 R14: 00007fc2b8a26090 R15: 00007ffefac45248 [ 1138.489624][T23816] [ 1138.551565][T23817] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1139.138632][T23806] rxe_eth0 speed is unknown, defaulting to 1000 [ 1139.677563][T23842] netlink: 'syz.1.5729': attribute type 10 has an invalid length. [ 1139.912453][T23848] rxe_eth0 speed is unknown, defaulting to 1000 [ 1140.229067][T23861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1140.258334][T23861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1140.316081][T23863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1140.846518][T23870] netlink: 'syz.3.5737': attribute type 29 has an invalid length. [ 1140.855057][T23870] netlink: 'syz.3.5737': attribute type 29 has an invalid length. [ 1140.921273][T23871] netlink: 'syz.1.5738': attribute type 2 has an invalid length. [ 1140.958314][T23871] netlink: 'syz.1.5738': attribute type 1 has an invalid length. [ 1140.996530][T23871] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.5738'. [ 1141.311338][T23880] netlink: 'syz.0.5742': attribute type 10 has an invalid length. [ 1142.088210][T23911] netlink: 'syz.1.5752': attribute type 3 has an invalid length. [ 1142.145181][T23911] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5752'. [ 1142.492084][T23925] netlink: 'syz.0.5758': attribute type 10 has an invalid length. [ 1143.348236][T23943] netlink: 'syz.3.5766': attribute type 10 has an invalid length. [ 1143.409929][T23943] team0: Device vxcan1 is of different type [ 1144.119876][T23975] netlink: 'syz.1.5779': attribute type 2 has an invalid length. [ 1144.156226][T23975] netlink: 'syz.1.5779': attribute type 8 has an invalid length. [ 1144.165242][T23975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5779'. [ 1144.270818][T23967] netlink: 'syz.4.5775': attribute type 10 has an invalid length. [ 1144.539683][T23984] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5782'. [ 1145.022243][T24004] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1145.032375][T24004] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1145.054303][T24002] device syzkaller0 entered promiscuous mode [ 1145.060832][T24004] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1145.069476][T24004] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1145.077320][T24004] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1145.084649][T24004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1145.268051][ T5480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.433229][T24017] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5789'. [ 1145.460930][T24003] rxe_eth0 speed is unknown, defaulting to 1000 [ 1145.576555][ T5480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.165928][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 1149.255895][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 1150.009252][T24037] netlink: 'syz.1.5795': attribute type 10 has an invalid length. [ 1150.063015][T24059] netlink: 'syz.4.5801': attribute type 2 has an invalid length. [ 1150.093810][T24059] netlink: 'syz.4.5801': attribute type 8 has an invalid length. [ 1150.126943][T24059] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5801'. [ 1150.217380][ T5480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.354504][ T5480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.616515][T24071] netlink: 'syz.3.5803': attribute type 15 has an invalid length. [ 1150.624763][T24071] netlink: 'syz.3.5803': attribute type 7 has an invalid length. [ 1150.685981][T24071] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5803'. [ 1150.714814][T24081] netlink: 'syz.2.5804': attribute type 10 has an invalid length. [ 1150.966762][T24081] team0: Device wg1 is of different type [ 1151.107955][T24083] netlink: 'syz.2.5804': attribute type 21 has an invalid length. [ 1151.126011][T24083] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5804'. [ 1151.335981][T24004] Bluetooth: hci4: command 0x040f tx timeout [ 1151.396246][ T5480] tipc: Left network mode [ 1151.438113][T24097] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5809'. [ 1151.696939][T24003] chnl_net:caif_netlink_parms(): no params data found [ 1151.867104][T24105] netlink: 'syz.1.5811': attribute type 10 has an invalid length. [ 1152.531736][T24132] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5817'. [ 1152.626629][T24003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.634048][T24003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.668544][T24003] device bridge_slave_0 entered promiscuous mode [ 1152.753113][T24003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.763175][T24003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.777993][T24003] device bridge_slave_1 entered promiscuous mode [ 1152.883496][T24003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.898673][T24003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.037562][T24003] team0: Port device team_slave_0 added [ 1153.077123][T24003] team0: Port device team_slave_1 added [ 1153.141253][T24003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.176442][T24003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.234454][T24003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.266707][T24003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.284126][T24003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.322161][T24003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.405919][T24004] Bluetooth: hci4: command 0x0419 tx timeout [ 1153.480323][T24157] netlink: 'syz.3.5826': attribute type 10 has an invalid length. [ 1153.571201][T24003] device hsr_slave_0 entered promiscuous mode [ 1153.590720][T24003] device hsr_slave_1 entered promiscuous mode [ 1154.594656][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.626152][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.644110][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.686165][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.724587][ T5480] device bridge_slave_0 left promiscuous mode [ 1154.751391][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.480873][ T5480] device veth1_vlan left promiscuous mode [ 1155.496157][ T5480] device veth0_vlan left promiscuous mode [ 1156.209392][T24230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5848'. [ 1156.441259][T24231] sctp: [Deprecated]: syz.3.5848 (pid 24231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1156.441259][T24231] Use struct sctp_sack_info instead [ 1159.207158][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 1159.254758][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 1159.705554][T24200] netlink: 'syz.1.5841': attribute type 10 has an invalid length. [ 1159.720197][T24218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5845'. [ 1159.756622][T24230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5848'. [ 1160.424931][T24003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1160.469714][T24003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1160.557741][T24003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1160.596645][T24271] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5862'. [ 1160.614342][T24003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1160.698927][T24267] netlink: 'syz.2.5860': attribute type 6 has an invalid length. [ 1160.811142][T24275] netlink: 'syz.3.5863': attribute type 10 has an invalid length. [ 1161.048482][T24003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.098466][T21921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1161.127529][T21921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1161.149557][T24003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.181963][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1161.204272][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1161.225449][T13917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.232746][T13917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.311780][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1161.327417][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1161.346741][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1161.355596][T13917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.362891][T13917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.403447][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1161.428788][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1161.440437][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1161.452362][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1161.477048][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1161.505129][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1161.532995][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1161.566428][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1161.592880][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.624442][T24003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1161.692779][T24003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1161.717750][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1161.754486][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.791140][T24300] netlink: 'syz.3.5869': attribute type 6 has an invalid length. [ 1162.699600][T24326] netlink: 'syz.1.5875': attribute type 10 has an invalid length. [ 1163.157349][T13899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1163.172175][T13899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1163.219436][T24003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.239338][T24351] netlink: 125520 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1163.319603][T13899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1163.339592][T13899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1163.417371][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1163.450583][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1163.472144][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1163.488829][T13917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1163.517941][T24003] device veth0_vlan entered promiscuous mode [ 1163.540679][T24003] device veth1_vlan entered promiscuous mode [ 1163.570379][T13899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1163.589637][T13899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1163.611201][T13899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1163.637008][T13899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1163.662239][T24003] device veth0_macvtap entered promiscuous mode [ 1163.688371][T24003] device veth1_macvtap entered promiscuous mode [ 1163.718361][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.739111][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.754379][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.768062][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.782204][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.795511][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.816147][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.841779][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.896931][T24003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.946510][T21921] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1163.955335][T21921] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1163.973325][T21921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1163.985519][T21921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1164.000601][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.023012][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.043718][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.065137][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.095789][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.115006][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.145434][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.165958][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.187967][T24003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.202742][T21921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1164.235650][T21921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1164.252906][T24361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5881'. [ 1164.283460][T24003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.313229][T24003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.343176][T24003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.372599][T24003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.654468][T13929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.745998][T13929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.801150][T21921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1164.828022][T13929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.836548][T13929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.883501][T13929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1165.256703][T24396] netlink: 'syz.1.5890': attribute type 10 has an invalid length. [ 1165.304481][T24385] netlink: 'syz.3.5889': attribute type 21 has an invalid length. [ 1165.383418][T24385] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5889'. [ 1165.430614][T24399] netlink: 'syz.4.5891': attribute type 10 has an invalid length. [ 1165.457694][T24392] netlink: 'syz.3.5889': attribute type 10 has an invalid length. [ 1165.617315][T24392] team0: Device wg1 is of different type [ 1167.187591][T24004] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1167.208510][T24004] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1167.218117][T24004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1167.253101][T24004] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1167.265557][T24004] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1167.274021][T24004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1167.310423][ T5474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.555797][T24446] netlink: 'syz.3.5903': attribute type 10 has an invalid length. [ 1168.690329][ T5474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.747809][T24436] rxe_eth0 speed is unknown, defaulting to 1000 [ 1168.844527][ T5474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.055764][T24461] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5907'. [ 1169.153795][ T5474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.325932][T24004] Bluetooth: hci1: command 0x0409 tx timeout [ 1169.491832][T24473] netlink: 'syz.3.5910': attribute type 3 has an invalid length. [ 1169.559417][T24473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5910'. [ 1169.831084][T24485] netlink: 'syz.1.5913': attribute type 10 has an invalid length. [ 1170.131572][T24489] netlink: 'syz.3.5914': attribute type 10 has an invalid length. [ 1170.662705][T24489] team0: Device wg1 is of different type [ 1171.022869][T24493] netlink: 'syz.3.5914': attribute type 21 has an invalid length. [ 1171.052342][T24493] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5914'. [ 1171.172953][T24500] netlink: 'syz.2.5916': attribute type 10 has an invalid length. [ 1171.212120][T24436] chnl_net:caif_netlink_parms(): no params data found [ 1171.339859][T24513] netlink: 'syz.1.5919': attribute type 21 has an invalid length. [ 1171.406052][T24004] Bluetooth: hci1: command 0x041b tx timeout [ 1171.771177][T24436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.792492][T24436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.826754][T24436] device bridge_slave_0 entered promiscuous mode [ 1171.902665][T24436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.919851][T24436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.947108][T24436] device bridge_slave_1 entered promiscuous mode [ 1172.106735][T24436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.218551][T24436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.362131][T24436] team0: Port device team_slave_0 added [ 1172.398258][T24436] team0: Port device team_slave_1 added [ 1172.523904][T24436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.533769][T24436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.577354][T24436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.640848][T24436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.659603][T24436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.703593][T24436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.779076][T24549] FAULT_INJECTION: forcing a failure. [ 1172.779076][T24549] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.802551][T24549] CPU: 0 PID: 24549 Comm: syz.0.5929 Not tainted syzkaller #0 [ 1172.810121][T24549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1172.820273][T24549] Call Trace: [ 1172.823703][T24549] [ 1172.826694][T24549] dump_stack_lvl+0x188/0x24e [ 1172.831453][T24549] ? show_regs_print_info+0x12/0x12 [ 1172.836737][T24549] ? load_image+0x410/0x410 [ 1172.841321][T24549] ? __might_sleep+0xd0/0xd0 [ 1172.845978][T24549] ? __lock_acquire+0x7ea0/0x7ea0 [ 1172.851080][T24549] should_fail_ex+0x390/0x4c0 [ 1172.855844][T24549] should_failslab+0x5/0x20 [ 1172.860405][T24549] slab_pre_alloc_hook+0x59/0x300 [ 1172.865498][T24549] ? lockdep_softirqs_off+0x430/0x430 [ 1172.870964][T24549] kmem_cache_alloc+0x56/0x2f0 [ 1172.875784][T24549] ? security_inode_alloc+0x30/0x110 [ 1172.881177][T24549] security_inode_alloc+0x30/0x110 [ 1172.886355][T24549] inode_init_always+0x910/0xc90 [ 1172.891368][T24549] new_inode_pseudo+0x91/0x1c0 [ 1172.896194][T24549] new_inode+0x25/0x1d0 [ 1172.900425][T24549] proc_pid_make_inode+0x20/0x1a0 [ 1172.905518][T24549] proc_ns_dir_lookup+0x6a0/0x7c0 [ 1172.910611][T24549] ? proc_ns_dir_readdir+0x430/0x430 [ 1172.915968][T24549] path_openat+0xff8/0x2f10 [ 1172.920607][T24549] ? do_filp_open+0x420/0x420 [ 1172.925382][T24549] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1172.932061][T24549] do_filp_open+0x1ee/0x420 [ 1172.936667][T24549] ? vfs_tmpfile+0x470/0x470 [ 1172.941336][T24549] ? noop_direct_IO+0x10/0x10 [ 1172.946126][T24549] ? _raw_spin_unlock+0x24/0x40 [ 1172.951031][T24549] ? alloc_fd+0x590/0x640 [ 1172.955477][T24549] do_sys_openat2+0x14b/0x4f0 [ 1172.960217][T24549] ? ct_nmi_exit+0x145/0x1c0 [ 1172.964932][T24549] ? do_sys_open+0xe0/0xe0 [ 1172.969436][T24549] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1172.975482][T24549] ? lock_chain_count+0x20/0x20 [ 1172.980494][T24549] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1172.986572][T24549] __x64_sys_openat+0x135/0x160 [ 1172.991505][T24549] do_syscall_64+0x4c/0xa0 [ 1172.996011][T24549] ? clear_bhb_loop+0x60/0xb0 [ 1173.000750][T24549] ? clear_bhb_loop+0x60/0xb0 [ 1173.005493][T24549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1173.011449][T24549] RIP: 0033:0x7fc4b9d5fd8e [ 1173.015923][T24549] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1173.035701][T24549] RSP: 002b:00007fc4bac67ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1173.044281][T24549] RAX: ffffffffffffffda RBX: 00007fc4bac686c0 RCX: 00007fc4b9d5fd8e [ 1173.052340][T24549] RDX: 0000000000000002 RSI: 00007fc4bac67f90 RDI: ffffffffffffff9c [ 1173.060376][T24549] RBP: 00007fc4bac68090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.068406][T24549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1173.076435][T24549] R13: 00007fc4ba026038 R14: 00007fc4ba025fa0 R15: 00007fff27cb8c78 [ 1173.084504][T24549] [ 1173.119935][T24436] device hsr_slave_0 entered promiscuous mode [ 1173.129711][T24436] device hsr_slave_1 entered promiscuous mode [ 1173.157399][T24436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1173.179333][T24436] Cannot create hsr debugfs directory [ 1173.401720][T24554] netlink: 'syz.1.5931': attribute type 25 has an invalid length. [ 1173.416661][T24554] netlink: 'syz.1.5931': attribute type 6 has an invalid length. [ 1173.450681][T24554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5931'. [ 1173.471079][T24553] netlink: 'syz.2.5930': attribute type 10 has an invalid length. [ 1173.485786][T24004] Bluetooth: hci1: command 0x040f tx timeout [ 1174.138065][T24578] netlink: 'syz.2.5938': attribute type 27 has an invalid length. [ 1174.229566][ T5474] device hsr_slave_0 left promiscuous mode [ 1174.269200][ T5474] device hsr_slave_1 left promiscuous mode [ 1174.316481][ T5474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.323969][ T5474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.366578][ T5474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.394478][ T5474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.971279][ T5474] team0 (unregistering): Port device geneve1 removed [ 1175.565833][T24004] Bluetooth: hci1: command 0x0419 tx timeout [ 1175.964856][T24616] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5948'. [ 1176.311492][ T5474] team0 (unregistering): Port device team_slave_1 removed [ 1176.418706][ T5474] team0 (unregistering): Port device team_slave_0 removed [ 1177.044293][T24608] netlink: 'syz.0.5944': attribute type 10 has an invalid length. [ 1177.262669][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.269184][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.076012][T24663] netlink: 'syz.3.5962': attribute type 10 has an invalid length. [ 1178.125096][T24660] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.5962'. [ 1178.301499][T24436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1178.361611][T24436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1178.421499][T24436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1178.462085][T24436] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1178.800485][ T5474] tipc: Subscription rejected, illegal request [ 1178.828203][T24436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.888260][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1178.914380][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1178.957598][T24436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.999627][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1179.036714][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1179.099065][T13901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.106286][T13901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.165353][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1179.213610][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1179.269977][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1179.356694][T13901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.363909][T13901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.454733][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1179.515217][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1179.564658][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1179.602805][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1179.657011][T24688] netlink: 'syz.1.5970': attribute type 10 has an invalid length. [ 1179.665318][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1179.781414][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1179.841023][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1179.906345][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1179.956737][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1179.985942][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1180.023050][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1180.107076][T24436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1180.834262][T24721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1181.371787][T24728] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1181.378607][T24728] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1181.472269][T24728] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1181.516618][T24728] syzkaller0: linktype set to 823 [ 1181.542220][T24732] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 1182.043734][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1182.076130][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1182.089723][T24436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.309985][T24756] netlink: 'syz.2.5984': attribute type 10 has an invalid length. [ 1184.138590][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1184.158191][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1184.213254][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1184.230491][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1184.251209][T24436] device veth0_vlan entered promiscuous mode [ 1184.277657][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1184.353114][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1184.399317][T24436] device veth1_vlan entered promiscuous mode [ 1184.516768][T24809] netlink: 'syz.0.5994': attribute type 10 has an invalid length. [ 1184.539850][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1184.566218][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1184.586979][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1184.618009][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1184.643400][T24436] device veth0_macvtap entered promiscuous mode [ 1184.683443][T24436] device veth1_macvtap entered promiscuous mode [ 1184.753866][T24815] netlink: 'syz.2.5998': attribute type 16 has an invalid length. [ 1184.792633][T24815] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5998'. [ 1184.863198][T24815] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1184.914112][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.930411][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.989266][T24823] netlink: 'syz.1.6000': attribute type 29 has an invalid length. [ 1184.996694][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.011895][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.022474][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.033200][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.043746][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.061263][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.089931][T24436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.116059][T24819] netlink: 'syz.3.5999': attribute type 10 has an invalid length. [ 1185.148346][T24823] netlink: 'syz.1.6000': attribute type 29 has an invalid length. [ 1185.206194][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1185.226633][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1185.246207][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1185.277874][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1185.298611][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.321145][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.375470][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.404058][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.423064][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.466286][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.517380][T24436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.563555][T24436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.614302][T24436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.671556][T24830] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6002'. [ 1185.722923][T24830] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1185.773326][T24830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1185.793241][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1185.859203][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1185.896917][T24436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.936219][T24436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.945008][T24436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.995067][T24436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.309352][T13901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.317424][T24850] netlink: 'syz.2.6006': attribute type 3 has an invalid length. [ 1186.317450][T24850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6006'. [ 1186.437999][T13901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.524301][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1186.555425][T13929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.595260][T13929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.640897][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1187.026284][T24869] netlink: 'syz.2.6013': attribute type 10 has an invalid length. [ 1190.110956][T24929] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6032'. [ 1192.120516][T24919] netlink: 'syz.3.6029': attribute type 10 has an invalid length. [ 1192.150452][T24942] mac80211_hwsim hwsim35 ªªªªª@: renamed from wlan0 [ 1192.551977][T24958] netlink: 'syz.2.6040': attribute type 10 has an invalid length. [ 1192.759341][T24960] netlink: 'syz.1.6037': attribute type 10 has an invalid length. [ 1192.977144][T24960] team0: Device wg1 is of different type [ 1193.128185][T24946] netlink: 'syz.1.6037': attribute type 21 has an invalid length. [ 1193.145993][T24946] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6037'. [ 1193.607176][T24966] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6045'. [ 1193.815427][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1193.826631][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1193.839579][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1194.018777][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1194.032838][T13636] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1194.040680][T13636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1194.099864][T24978] netlink: 'syz.0.6049': attribute type 10 has an invalid length. [ 1194.272361][T24978] team0: Device wg1 is of different type [ 1194.470936][T24973] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6048'. [ 1194.653399][T24973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.685544][T24973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.709732][T24973] bond0 (unregistering): Released all slaves [ 1194.725982][T24980] netlink: 'syz.0.6049': attribute type 21 has an invalid length. [ 1194.733987][T24980] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6049'. [ 1194.760883][T24974] rxe_eth0 speed is unknown, defaulting to 1000 [ 1194.810304][T24985] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6050'. [ 1194.954235][T13901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.959701][T13901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.013424][T24989] netlink: 'syz.1.6052': attribute type 10 has an invalid length. [ 1196.142421][T13636] Bluetooth: hci2: command 0x0409 tx timeout [ 1196.248333][T13901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.475634][T13901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.731246][T25011] netlink: 'syz.1.6057': attribute type 10 has an invalid length. [ 1198.033054][T24974] chnl_net:caif_netlink_parms(): no params data found [ 1198.206605][T13636] Bluetooth: hci2: command 0x041b tx timeout [ 1199.024509][T25049] netlink: 'syz.0.6068': attribute type 10 has an invalid length. [ 1199.207842][T25051] netlink: 'syz.2.6066': attribute type 10 has an invalid length. [ 1199.529139][T25063] netlink: 'syz.4.6069': attribute type 10 has an invalid length. [ 1200.286821][T13636] Bluetooth: hci2: command 0x040f tx timeout [ 1200.514313][T24974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.620259][T24974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.656341][T24974] device bridge_slave_0 entered promiscuous mode [ 1200.687641][T24974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.694795][T24974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.735956][T24974] device bridge_slave_1 entered promiscuous mode [ 1200.866520][T24974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.496384][T24974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.505995][T25107] mac80211_hwsim hwsim44 ªªªªª@: renamed from wlan0 [ 1201.539905][T25109] netlink: 'syz.1.6077': attribute type 10 has an invalid length. [ 1201.588882][T25109] team0: Device wg1 is of different type [ 1201.637973][T25092] netlink: 'syz.1.6077': attribute type 21 has an invalid length. [ 1201.665833][T25092] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6077'. [ 1201.900195][T24974] team0: Port device team_slave_0 added [ 1202.054092][T24974] team0: Port device team_slave_1 added [ 1202.147405][T25118] netlink: 'syz.2.6083': attribute type 10 has an invalid length. [ 1202.372035][T13636] Bluetooth: hci2: command 0x0419 tx timeout [ 1203.069817][T24974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.105718][T24974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.305728][T24974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.337375][T25133] netlink: 'syz.1.6087': attribute type 10 has an invalid length. [ 1203.345320][T25140] netlink: 'syz.2.6088': attribute type 10 has an invalid length. [ 1203.488064][T24974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.505864][T24974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.593297][T24974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.727166][T25149] netlink: 'syz.0.6089': attribute type 10 has an invalid length. [ 1203.880927][T24974] device hsr_slave_0 entered promiscuous mode [ 1203.956431][T24974] device hsr_slave_1 entered promiscuous mode [ 1204.005411][T24974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1204.025901][T24974] Cannot create hsr debugfs directory [ 1204.316388][T25165] netlink: 'syz.0.6095': attribute type 3 has an invalid length. [ 1204.324622][T25165] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6095'. [ 1204.444178][T25159] netlink: 'syz.4.6094': attribute type 10 has an invalid length. [ 1204.484656][T25164] netlink: 'syz.1.6093': attribute type 10 has an invalid length. [ 1204.513645][T25164] device vlan0 entered promiscuous mode [ 1205.292518][T25175] netlink: 'syz.4.6098': attribute type 10 has an invalid length. [ 1205.862248][T13901] device hsr_slave_0 left promiscuous mode [ 1205.896680][T13901] device hsr_slave_1 left promiscuous mode [ 1205.914063][T13901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.931709][T13901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.971387][T13901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.005622][T13901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.033534][T13901] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1206.060961][T13901] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1206.099875][T13901] device €Â left promiscuous mode [ 1206.105239][T13901] bridge0: port 1(€Â) entered disabled state [ 1206.387847][T13901] device veth1_vlan left promiscuous mode [ 1206.393777][T13901] device veth0_vlan left promiscuous mode [ 1207.612146][T13901] team0 (unregistering): Port device team_slave_1 removed [ 1207.662408][T13901] team0 (unregistering): Port device team_slave_0 removed [ 1208.169535][T25199] netlink: 'syz.4.6103': attribute type 10 has an invalid length. [ 1208.177681][T25196] netlink: 'syz.2.6102': attribute type 10 has an invalid length. [ 1208.198748][T25196] team0: Device wg1 is of different type [ 1208.222042][T25201] netlink: 'syz.2.6102': attribute type 21 has an invalid length. [ 1208.242748][T25201] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6102'. [ 1208.254157][T25211] netlink: 'syz.0.6105': attribute type 10 has an invalid length. [ 1208.269115][T25222] netlink: 'syz.1.6108': attribute type 10 has an invalid length. [ 1208.786538][T25229] netlink: 'syz.2.6110': attribute type 10 has an invalid length. [ 1209.258034][T24974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1209.283591][T25242] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6115'. [ 1209.318722][T24974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1209.355147][T24974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1209.440943][T24974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1209.744447][T25252] validate_nla: 1 callbacks suppressed [ 1209.744467][T25252] netlink: 'syz.0.6116': attribute type 10 has an invalid length. [ 1209.952019][T24974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.022855][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1210.039117][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1210.094816][T24974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.166461][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1210.202722][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1210.226487][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.233784][ T5459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.346298][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1210.378397][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1210.407919][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1210.450179][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.457459][ T5459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.521868][T25259] netlink: 'syz.2.6127': attribute type 10 has an invalid length. [ 1210.561989][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1210.631097][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1210.656657][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1210.699341][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1210.747035][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1210.784789][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1210.810144][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1210.872108][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1210.930864][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1211.002586][T24974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1211.039684][T24974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1211.071654][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1211.089260][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1211.164806][T25275] netlink: 'syz.2.6120': attribute type 10 has an invalid length. [ 1211.704081][T25281] netlink: 'syz.4.6122': attribute type 10 has an invalid length. [ 1212.294795][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1212.315987][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1212.378867][T24974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.508071][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1212.537773][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1212.603436][T24974] device veth0_vlan entered promiscuous mode [ 1212.639417][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1212.656960][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1212.679669][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1212.711812][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1212.731706][T25305] netlink: 'syz.0.6124': attribute type 10 has an invalid length. [ 1212.796895][T24974] device veth1_vlan entered promiscuous mode [ 1212.853490][T25313] netlink: 'syz.2.6129': attribute type 10 has an invalid length. [ 1212.909211][T24974] device veth0_macvtap entered promiscuous mode [ 1212.986202][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1213.016597][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1213.036144][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1213.114534][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1213.176513][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1213.197459][T24974] device veth1_macvtap entered promiscuous mode [ 1213.308822][T24974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.355966][T24974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.386724][T24974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.403134][T24974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.414529][T24974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.425225][T24974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.435232][T24974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.446181][T24974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.487582][T24974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.496770][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1213.506182][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1213.532900][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1213.561806][T24974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.581354][T24974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.600556][T24974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.618546][T24974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.631244][T24974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.645435][T24974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.661449][T24974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.672749][T24974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.690556][T24974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.708331][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1213.727640][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1213.745156][T24974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.755512][T24974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.770947][T24974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.780136][T24974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.016312][ T5474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.024614][ T5474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.118375][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1214.189572][T25341] netlink: 'syz.4.6135': attribute type 10 has an invalid length. [ 1214.226287][T25341] team0: Device wg1 is up. Set it down before adding it as a team port [ 1214.263842][T25333] netlink: 'syz.2.6134': attribute type 6 has an invalid length. [ 1214.305126][T25331] netlink: 'syz.4.6135': attribute type 21 has an invalid length. [ 1214.348989][T25331] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6135'. [ 1214.413185][ T5474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.442989][ T5474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.488783][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1215.411677][T25374] netlink: 'syz.4.6144': attribute type 10 has an invalid length. [ 1215.744687][T25385] netlink: 'syz.1.6146': attribute type 10 has an invalid length. [ 1216.604864][T25399] netlink: 'syz.4.6159': attribute type 10 has an invalid length. [ 1217.927514][T25414] netlink: 'syz.0.6162': attribute type 10 has an invalid length. [ 1218.736936][T25446] netlink: 'syz.1.6156': attribute type 10 has an invalid length. [ 1219.744729][T25463] netlink: 'syz.4.6160': attribute type 10 has an invalid length. [ 1219.809865][T25470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6161'. [ 1220.346342][T25472] sctp: [Deprecated]: syz.0.6161 (pid 25472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1220.346342][T25472] Use struct sctp_sack_info instead [ 1220.497632][T25463] team0: Device wg1 is of different type [ 1220.639969][T25470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6161'. [ 1220.687207][T25457] netlink: 'syz.4.6160': attribute type 21 has an invalid length. [ 1220.705504][T25457] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6160'. [ 1220.760427][T25468] netlink: 'syz.1.6165': attribute type 10 has an invalid length. [ 1221.062127][T25486] netlink: 'syz.3.6169': attribute type 10 has an invalid length. [ 1223.060422][T25513] netlink: 'syz.1.6174': attribute type 10 has an invalid length. [ 1223.075897][T25512] netlink: 'syz.4.6183': attribute type 10 has an invalid length. [ 1223.334904][T25527] netlink: 'syz.1.6177': attribute type 10 has an invalid length. [ 1223.922720][T25533] rxe_eth0 speed is unknown, defaulting to 1000 [ 1224.317804][T25540] netlink: 'syz.2.6181': attribute type 10 has an invalid length. [ 1225.040298][T25551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6182'. [ 1225.084081][T25551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6182'. [ 1225.251677][T25554] netlink: 'syz.1.6185': attribute type 10 has an invalid length. [ 1225.746247][T25555] sctp: [Deprecated]: syz.2.6182 (pid 25555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1225.746247][T25555] Use struct sctp_sack_info instead [ 1226.186482][T25567] netlink: 'syz.3.6187': attribute type 10 has an invalid length. [ 1226.558815][T25573] netlink: 'syz.4.6188': attribute type 10 has an invalid length. [ 1226.678478][T25573] team0: Device wg1 is of different type [ 1226.875742][T25575] netlink: 'syz.4.6188': attribute type 21 has an invalid length. [ 1226.883739][T25575] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6188'. [ 1227.012811][T25580] netlink: 'syz.1.6190': attribute type 10 has an invalid length. [ 1227.040543][T25578] netlink: 'syz.3.6189': attribute type 10 has an invalid length. [ 1228.084946][T25591] netlink: 'syz.3.6195': attribute type 10 has an invalid length. [ 1229.002669][T24004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1229.013738][T24004] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1229.026398][T24004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1229.036164][T24004] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1229.051946][T24004] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1229.065298][T24004] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1229.114714][T13925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.153709][T25607] rxe_eth0 speed is unknown, defaulting to 1000 [ 1229.177199][T25609] netlink: 'syz.3.6200': attribute type 10 has an invalid length. [ 1229.231172][T13925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.497030][T13925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.639046][T25618] netlink: 'syz.0.6201': attribute type 10 has an invalid length. [ 1229.767195][T13925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.876632][T25626] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6206'. [ 1229.988442][T25626] openvswitch: netlink: Message has 6 unknown bytes. [ 1230.026982][T25633] netlink: 'syz.4.6207': attribute type 10 has an invalid length. [ 1230.233336][T25607] chnl_net:caif_netlink_parms(): no params data found [ 1230.358007][T25637] netlink: 'syz.1.6209': attribute type 10 has an invalid length. [ 1230.901987][T25650] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1230.950465][T25607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.958008][T25607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.978163][T25650] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1230.999598][T25650] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1231.013881][T25650] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1231.025564][T25607] device bridge_slave_0 entered promiscuous mode [ 1231.027570][T25650] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1231.058326][T25650] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1231.086394][T24004] Bluetooth: hci3: command 0x0409 tx timeout [ 1231.107036][T25650] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1231.122311][T25607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.133965][T25650] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1231.154880][T25607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.177795][T25650] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1231.202040][T25607] device bridge_slave_1 entered promiscuous mode [ 1231.258357][T25650] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1231.587217][T25668] netlink: 'syz.1.6215': attribute type 21 has an invalid length. [ 1231.639981][T25674] netlink: 'syz.0.6216': attribute type 10 has an invalid length. [ 1231.841697][T25607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.108773][T25607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.139289][T25685] netlink: 'syz.4.6218': attribute type 10 has an invalid length. [ 1232.305805][T25607] team0: Port device team_slave_0 added [ 1232.315106][T25607] team0: Port device team_slave_1 added [ 1232.436447][T25607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.443491][T25607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.575978][T25607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.653317][T25607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.685719][T25607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.805784][T25607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.179338][T24004] Bluetooth: hci3: command 0x041b tx timeout [ 1233.198401][T25607] device hsr_slave_0 entered promiscuous mode [ 1233.217706][T25607] device hsr_slave_1 entered promiscuous mode [ 1233.255337][T25607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1233.285819][T25607] Cannot create hsr debugfs directory [ 1233.946767][T13925] device hsr_slave_0 left promiscuous mode [ 1233.961580][T13925] device hsr_slave_1 left promiscuous mode [ 1233.983455][T13925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.023259][T13925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.050137][T13925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.091327][T13925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.207852][T13925] device veth0_vlan left promiscuous mode [ 1234.668623][T13925] team0 (unregistering): Port device geneve1 removed [ 1235.255910][T24004] Bluetooth: hci3: command 0x040f tx timeout [ 1236.324961][T13925] team0 (unregistering): Port device team_slave_1 removed [ 1236.394315][T13925] team0 (unregistering): Port device team_slave_0 removed [ 1236.975511][T25776] __nla_validate_parse: 18 callbacks suppressed [ 1236.975531][T25776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6243'. [ 1237.010880][T25791] netlink: 'syz.1.6248': attribute type 10 has an invalid length. [ 1237.325845][T24004] Bluetooth: hci3: command 0x0419 tx timeout [ 1237.557717][T25809] delete_channel: no stack [ 1237.599474][T25809] delete_channel: no stack [ 1237.658311][T25809] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6251'. [ 1237.698489][T25809] netlink: 'syz.1.6251': attribute type 10 has an invalid length. [ 1237.731249][T25809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6251'. [ 1238.295008][T25607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1238.322960][T25607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1238.343646][T25607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1238.372959][T25607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1238.630460][T25607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.687088][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1238.700610][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.707070][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.733292][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1238.779969][T25607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.985396][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1239.002671][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1239.060472][T13921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.067789][T13921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.117939][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1239.171832][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1239.261582][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1239.336902][T13921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.344183][T13921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.376353][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1239.437890][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1239.495558][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1239.545951][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1239.606927][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1239.643651][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1239.684968][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1239.718569][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1239.781137][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1239.835814][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1239.871105][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1239.937155][T25859] netlink: 'syz.3.6263': attribute type 6 has an invalid length. [ 1240.027747][T25607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1240.667960][T25875] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6267'. [ 1241.170706][T25883] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6269'. [ 1241.484822][T25896] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.6272'. [ 1241.587822][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1241.595436][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1241.650704][T25607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.784342][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1241.828019][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1241.963006][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1241.996668][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1242.045574][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1242.100715][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1242.158749][T25607] device veth0_vlan entered promiscuous mode [ 1242.247432][T25607] device veth1_vlan entered promiscuous mode [ 1242.404274][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1242.429283][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1242.479384][T25607] device veth0_macvtap entered promiscuous mode [ 1242.528681][T25607] device veth1_macvtap entered promiscuous mode [ 1242.645381][T25607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1242.677485][T25607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.710119][T25607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1242.726162][T25607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.842377][T25607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1242.853391][T25607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.889703][T25607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1242.926447][T25607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.966736][T25607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.013580][T25913] netlink: 'syz.1.6276': attribute type 10 has an invalid length. [ 1243.090590][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1243.131182][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1243.254549][T25914] delete_channel: no stack [ 1243.260440][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1243.309204][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1243.343773][T25607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1243.385272][T25607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.419357][T25607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1243.458772][T25607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.505706][T25607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1243.554325][T25607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.589368][T25607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1243.620682][T25607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.648597][T25607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.687066][T25931] tun0: tun_chr_ioctl cmd 2147767507 [ 1243.692551][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1243.722103][T13921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1243.792033][T25607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.815890][T25607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.853622][T25607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.879696][T25607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.909853][T25940] netlink: 'syz.3.6282': attribute type 25 has an invalid length. [ 1243.927462][T25940] netlink: 'syz.3.6282': attribute type 6 has an invalid length. [ 1243.945620][T25940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1244.152537][ T5459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.173705][ T5459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.243534][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1244.278904][T13925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.319298][T13925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.378304][T21920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1244.438770][T25953] netlink: 'syz.0.6284': attribute type 10 has an invalid length. [ 1244.865378][T25962] netlink: 'syz.1.6286': attribute type 10 has an invalid length. [ 1245.698081][T25984] netlink: 'syz.4.6290': attribute type 10 has an invalid length. [ 1247.061475][T26011] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.6298'. [ 1247.146287][T26012] netlink: 'syz.0.6298': attribute type 10 has an invalid length. [ 1247.944569][T26029] netlink: 'syz.4.6304': attribute type 10 has an invalid length. [ 1248.215818][T26032] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.6305'. [ 1248.808910][T26037] netlink: 'syz.2.6307': attribute type 10 has an invalid length. [ 1249.257086][T26054] netlink: 'syz.3.6312': attribute type 6 has an invalid length. [ 1249.284194][T26054] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.6312'. [ 1250.225510][T26072] FAULT_INJECTION: forcing a failure. [ 1250.225510][T26072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.308714][T26072] CPU: 1 PID: 26072 Comm: syz.4.6314 Not tainted syzkaller #0 [ 1250.316352][T26072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1250.326555][T26072] Call Trace: [ 1250.329892][T26072] [ 1250.332870][T26072] dump_stack_lvl+0x188/0x24e [ 1250.337618][T26072] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1250.343842][T26072] ? show_regs_print_info+0x12/0x12 [ 1250.349190][T26072] ? load_image+0x410/0x410 [ 1250.353794][T26072] should_fail_ex+0x390/0x4c0 [ 1250.358632][T26072] copyin+0x1b/0x120 [ 1250.362588][T26072] _copy_from_iter+0x447/0x1130 [ 1250.367525][T26072] ? copyout_mc+0x110/0x110 [ 1250.372100][T26072] ? __virt_addr_valid+0x462/0x540 [ 1250.377280][T26072] ? __virt_addr_valid+0x467/0x540 [ 1250.382457][T26072] ? __phys_addr_symbol+0x2b/0x70 [ 1250.387536][T26072] ? __check_object_size+0x4f6/0xa70 [ 1250.392887][T26072] netlink_sendmsg+0x755/0xbd0 [ 1250.397807][T26072] ? netlink_getsockopt+0x550/0x550 [ 1250.403076][T26072] ? netlink_getsockopt+0x550/0x550 [ 1250.408333][T26072] ____sys_sendmsg+0x5ed/0x9a0 [ 1250.413146][T26072] ? lockdep_hardirqs_on+0x94/0x140 [ 1250.418396][T26072] ? __sys_sendmsg_sock+0x30/0x30 [ 1250.423489][T26072] ? ___sys_sendmsg+0x287/0x360 [ 1250.428395][T26072] ___sys_sendmsg+0x2a2/0x360 [ 1250.433136][T26072] ? __sys_sendmsg+0x2a0/0x2a0 [ 1250.438002][T26072] __se_sys_sendmsg+0x1c3/0x2b0 [ 1250.442909][T26072] ? __x64_sys_sendmsg+0x80/0x80 [ 1250.447923][T26072] do_syscall_64+0x4c/0xa0 [ 1250.452389][T26072] ? clear_bhb_loop+0x60/0xb0 [ 1250.457119][T26072] ? clear_bhb_loop+0x60/0xb0 [ 1250.462017][T26072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.467963][T26072] RIP: 0033:0x7f57d699f559 [ 1250.472418][T26072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.492098][T26072] RSP: 002b:00007f57d7819028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.500747][T26072] RAX: ffffffffffffffda RBX: 00007f57d6c26090 RCX: 00007f57d699f559 [ 1250.508763][T26072] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 1250.516782][T26072] RBP: 00007f57d7819090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.524815][T26072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.533005][T26072] R13: 00007f57d6c26128 R14: 00007f57d6c26090 R15: 00007ffc859123f8 [ 1250.541082][T26072] [ 1251.038019][T13636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1251.048494][T13636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1251.056958][T13636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1251.065141][T13636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1251.074276][T13636] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1251.081793][T13636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1251.544792][T26095] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6317'. [ 1251.679241][T26079] rxe_eth0 speed is unknown, defaulting to 1000 [ 1252.505013][T13901] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.591802][T26119] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.6321'. [ 1252.738964][T13901] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.856626][T26130] netlink: 'syz.3.6323': attribute type 29 has an invalid length. [ 1252.966002][T26130] netlink: 'syz.3.6323': attribute type 29 has an invalid length. [ 1253.082548][T13901] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.156891][T26129] netlink: 'syz.0.6325': attribute type 10 has an invalid length. [ 1253.175777][T24004] Bluetooth: hci5: command 0x0409 tx timeout [ 1253.212058][T26126] netlink: 'syz.2.6324': attribute type 10 has an invalid length. [ 1253.313658][T13901] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.416912][T26143] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.6328'. [ 1253.727639][T26151] FAULT_INJECTION: forcing a failure. [ 1253.727639][T26151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.802145][T13901] tipc: Left network mode [ 1253.825862][T26151] CPU: 0 PID: 26151 Comm: syz.2.6331 Not tainted syzkaller #0 [ 1253.833419][T26151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1253.843523][T26151] Call Trace: [ 1253.846840][T26151] [ 1253.849808][T26151] dump_stack_lvl+0x188/0x24e [ 1253.854547][T26151] ? show_regs_print_info+0x12/0x12 [ 1253.859799][T26151] ? load_image+0x410/0x410 [ 1253.864340][T26151] ? __lock_acquire+0x7ea0/0x7ea0 [ 1253.869400][T26151] ? trace_call_bpf+0x5d6/0x6b0 [ 1253.874315][T26151] should_fail_ex+0x390/0x4c0 [ 1253.879060][T26151] _copy_from_user+0x2c/0x170 [ 1253.883793][T26151] __sys_bpf+0x2ea/0x780 [ 1253.888096][T26151] ? bpf_link_show_fdinfo+0x380/0x380 [ 1253.893576][T26151] ? lock_chain_count+0x20/0x20 [ 1253.898498][T26151] __x64_sys_bpf+0x78/0x90 [ 1253.902963][T26151] do_syscall_64+0x4c/0xa0 [ 1253.907479][T26151] ? clear_bhb_loop+0x60/0xb0 [ 1253.912208][T26151] ? clear_bhb_loop+0x60/0xb0 [ 1253.917025][T26151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1253.922970][T26151] RIP: 0033:0x7ff67ad9f559 [ 1253.927430][T26151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.947103][T26151] RSP: 002b:00007ff67bc2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1253.955639][T26151] RAX: ffffffffffffffda RBX: 00007ff67b025fa0 RCX: 00007ff67ad9f559 [ 1253.963654][T26151] RDX: 0000000000000050 RSI: 0000200000001180 RDI: 000000000000000a [ 1253.971648][T26151] RBP: 00007ff67bc2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.979651][T26151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.987648][T26151] R13: 00007ff67b026038 R14: 00007ff67b025fa0 R15: 00007ffe123c3a48 [ 1253.995682][T26151] [ 1254.007131][T26079] chnl_net:caif_netlink_parms(): no params data found [ 1254.022954][T26155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6333'. [ 1254.067418][T26155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6333'. [ 1254.091340][T26160] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6333'. [ 1254.657892][T26170] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.6335'. [ 1254.916695][T26079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.923926][T26079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.977332][T26079] device bridge_slave_0 entered promiscuous mode [ 1255.197794][T26079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.204985][T26079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.245716][T24004] Bluetooth: hci5: command 0x041b tx timeout [ 1255.269218][T26079] device bridge_slave_1 entered promiscuous mode [ 1255.297234][T26181] netlink: 'syz.3.6339': attribute type 10 has an invalid length. [ 1255.607019][T26186] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.6341'. [ 1255.808970][T26079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.916548][T26079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.093665][T26212] netlink: 'syz.0.6347': attribute type 10 has an invalid length. [ 1256.270440][T26212] team0: Device wg1 is of different type [ 1256.450176][T26079] team0: Port device team_slave_0 added [ 1256.476716][T26215] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.6348'. [ 1256.554110][T26220] netlink: 'syz.0.6347': attribute type 21 has an invalid length. [ 1256.578636][T26220] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6347'. [ 1256.623736][T26079] team0: Port device team_slave_1 added [ 1256.778824][T26079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.802809][T26079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.890359][T26079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.986919][T26231] device sit0 entered promiscuous mode [ 1257.325770][T24004] Bluetooth: hci5: command 0x040f tx timeout [ 1257.451302][T26079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.490540][T26079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.553183][T26079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.607796][T26234] netlink: 'syz.3.6353': attribute type 2 has an invalid length. [ 1257.641897][T26234] netlink: 'syz.3.6353': attribute type 8 has an invalid length. [ 1257.665950][T26234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6353'. [ 1257.868308][T26228] device syzkaller0 entered promiscuous mode [ 1258.329999][T26266] netlink: 'syz.0.6359': attribute type 2 has an invalid length. [ 1258.359066][T26266] netlink: 'syz.0.6359': attribute type 1 has an invalid length. [ 1259.423583][T24004] Bluetooth: hci5: command 0x0419 tx timeout [ 1261.897232][T26303] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6365'. [ 1261.940095][T26079] device hsr_slave_0 entered promiscuous mode [ 1262.006361][T26079] device hsr_slave_1 entered promiscuous mode [ 1262.042751][T26079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1262.065529][T26079] Cannot create hsr debugfs directory [ 1262.265580][T26315] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.6368'. [ 1262.776868][T13901] device hsr_slave_0 left promiscuous mode [ 1262.798899][T13901] device hsr_slave_1 left promiscuous mode [ 1262.877388][T13901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.884950][T13901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.926910][T13901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.965891][T13901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.002562][T13901] device bridge_slave_0 left promiscuous mode [ 1263.029620][T13901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.176021][T13901] device veth1_vlan left promiscuous mode [ 1263.703012][T13901] team0 (unregistering): Port device geneve1 removed [ 1265.172874][T13901] team0 (unregistering): Port device team_slave_1 removed [ 1265.301991][T13901] team0 (unregistering): Port device team_slave_0 removed [ 1265.891297][T26330] netlink: 'syz.2.6374': attribute type 10 has an invalid length. [ 1265.909933][T26343] netlink: 'syz.0.6375': attribute type 10 has an invalid length. [ 1265.928941][T26361] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1265.985721][T26361] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1265.995365][T26361] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1266.203098][T26372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6382'. [ 1266.931372][T26079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1266.997037][T26079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1267.036725][T26079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1267.082073][T26393] netlink: 'syz.3.6391': attribute type 10 has an invalid length. [ 1267.114524][T26079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1267.587721][T26408] netlink: 763 bytes leftover after parsing attributes in process `syz.2.6394'. [ 1267.788903][T26079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.838926][T13929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1267.860051][T13929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1267.897959][T26079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.938761][T13929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1267.992435][T13929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1268.024241][T13929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.031533][T13929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.079430][T13929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1268.119882][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1268.149891][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1268.192219][T13901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.199461][T13901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.236001][T26424] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.6398'. [ 1268.272356][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1268.295278][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1268.377796][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1268.415235][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1268.509371][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1268.535478][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1268.607973][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1268.679774][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1268.731876][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1268.762995][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1268.808222][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1268.849654][T26079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1269.074912][T26437] netlink: 'syz.0.6403': attribute type 10 has an invalid length. [ 1269.926377][T26437] team0 (unregistering): Port device team_slave_0 removed [ 1270.088356][T26437] team0 (unregistering): Port device team_slave_1 removed [ 1270.337306][T26449] netlink: 'syz.2.6406': attribute type 10 has an invalid length. [ 1270.718578][T26464] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.6412'. [ 1271.067966][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1271.083659][T13925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1271.178915][T26079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.308418][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1271.344846][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1271.485920][T13636] Bluetooth: hci4: command 0x0406 tx timeout [ 1271.488623][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1271.506846][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1271.516146][T26480] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.6415'. [ 1271.547497][T26079] device veth0_vlan entered promiscuous mode [ 1271.599343][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1271.618356][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1271.647416][T26079] device veth1_vlan entered promiscuous mode [ 1271.767068][T21920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1271.794859][T21920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1271.834215][T26079] device veth0_macvtap entered promiscuous mode [ 1271.867302][T26079] device veth1_macvtap entered promiscuous mode [ 1271.897866][T26489] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.6418'. [ 1271.951119][T26079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.136240][T26079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.158312][T26079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.212707][T26079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.242857][T26079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.273253][T26079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.313107][T26079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.333404][T26079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.405556][T26079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.488419][T21920] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1272.511415][T21920] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1272.550603][T21920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1272.597170][T21920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1272.993502][T26079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.021772][T26079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.031958][T26079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.042663][T26079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.052599][T26079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.063290][T26079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.073212][T26079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.083998][T26079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.096706][T26079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.123057][T21920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1273.167094][T21920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1273.194106][T26079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.235857][T26079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.262077][T26079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.285951][T26079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.734265][T26526] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.6427'. [ 1273.820270][T26526] netlink: 'syz.2.6427': attribute type 10 has an invalid length. [ 1273.878052][T13880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.905747][T13880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.922419][ T5459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.937297][T13929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1273.944731][ T5459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.983154][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1274.201555][T26533] netlink: 'syz.4.6428': attribute type 3 has an invalid length. [ 1274.251610][T26533] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6428'. [ 1274.340721][T26540] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.6430'. [ 1274.374295][T26542] netlink: 'syz.4.6428': attribute type 16 has an invalid length. [ 1274.396239][T26542] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6428'. [ 1275.276652][T26566] netlink: 'syz.0.6436': attribute type 10 has an invalid length. [ 1275.909762][T26584] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.6444'. [ 1276.350059][T26599] FAULT_INJECTION: forcing a failure. [ 1276.350059][T26599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1276.415959][T26599] CPU: 0 PID: 26599 Comm: syz.4.6450 Not tainted syzkaller #0 [ 1276.423506][T26599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1276.433654][T26599] Call Trace: [ 1276.436975][T26599] [ 1276.439934][T26599] dump_stack_lvl+0x188/0x24e [ 1276.444682][T26599] ? show_regs_print_info+0x12/0x12 [ 1276.449929][T26599] ? load_image+0x410/0x410 [ 1276.454460][T26599] ? __lock_acquire+0x7ea0/0x7ea0 [ 1276.459525][T26599] should_fail_ex+0x390/0x4c0 [ 1276.464249][T26599] _copy_from_user+0x2c/0x170 [ 1276.468960][T26599] __sys_bpf+0x2ea/0x780 [ 1276.473253][T26599] ? bpf_link_show_fdinfo+0x380/0x380 [ 1276.478672][T26599] ? lock_chain_count+0x20/0x20 [ 1276.483589][T26599] __x64_sys_bpf+0x78/0x90 [ 1276.488068][T26599] do_syscall_64+0x4c/0xa0 [ 1276.492545][T26599] ? clear_bhb_loop+0x60/0xb0 [ 1276.497268][T26599] ? clear_bhb_loop+0x60/0xb0 [ 1276.501991][T26599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1276.507921][T26599] RIP: 0033:0x7f57d699f559 [ 1276.512363][T26599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.532010][T26599] RSP: 002b:00007f57d783a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1276.540477][T26599] RAX: ffffffffffffffda RBX: 00007f57d6c25fa0 RCX: 00007f57d699f559 [ 1276.548747][T26599] RDX: 0000000000000070 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1276.556750][T26599] RBP: 00007f57d783a090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.564752][T26599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.572763][T26599] R13: 00007f57d6c26038 R14: 00007f57d6c25fa0 R15: 00007ffc859123f8 [ 1276.580779][T26599] [ 1276.594546][T26605] netlink: 'syz.1.6453': attribute type 21 has an invalid length. [ 1276.665820][T26605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6453'. [ 1277.141515][T26610] FAULT_INJECTION: forcing a failure. [ 1277.141515][T26610] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.234510][T26610] CPU: 1 PID: 26610 Comm: syz.0.6454 Not tainted syzkaller #0 [ 1277.242197][T26610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1277.252413][T26610] Call Trace: [ 1277.255783][T26610] [ 1277.258793][T26610] dump_stack_lvl+0x188/0x24e [ 1277.263595][T26610] ? show_regs_print_info+0x12/0x12 [ 1277.268915][T26610] ? load_image+0x410/0x410 [ 1277.273506][T26610] ? verify_lock_unused+0x140/0x140 [ 1277.278874][T26610] ? perf_trace_lock+0x301/0x390 [ 1277.283909][T26610] should_fail_ex+0x390/0x4c0 [ 1277.288687][T26610] should_failslab+0x5/0x20 [ 1277.293256][T26610] slab_pre_alloc_hook+0x59/0x300 [ 1277.298469][T26610] kmem_cache_alloc+0x56/0x2f0 [ 1277.303327][T26610] ? skb_clone+0x1e7/0x370 [ 1277.307838][T26610] skb_clone+0x1e7/0x370 [ 1277.312217][T26610] __netlink_deliver_tap+0x3e4/0x7e0 [ 1277.317666][T26610] ? netlink_deliver_tap+0x2e/0x1b0 [ 1277.322952][T26610] netlink_deliver_tap+0x19c/0x1b0 [ 1277.328179][T26610] netlink_unicast+0x777/0x920 [ 1277.333095][T26610] netlink_sendmsg+0x8ad/0xbd0 [ 1277.337969][T26610] ? netlink_getsockopt+0x550/0x550 [ 1277.343257][T26610] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1277.348924][T26610] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1277.354301][T26610] ? security_socket_sendmsg+0x7c/0xa0 [ 1277.359847][T26610] ? netlink_getsockopt+0x550/0x550 [ 1277.365144][T26610] ____sys_sendmsg+0x5ed/0x9a0 [ 1277.370023][T26610] ? __sys_sendmsg_sock+0x30/0x30 [ 1277.375160][T26610] ? __import_iovec+0x306/0x510 [ 1277.380133][T26610] ? import_iovec+0x6f/0xa0 [ 1277.384738][T26610] ___sys_sendmsg+0x2a2/0x360 [ 1277.389509][T26610] ? __sys_sendmsg+0x2a0/0x2a0 [ 1277.394393][T26610] ? __lock_acquire+0x7ea0/0x7ea0 [ 1277.399572][T26610] __se_sys_sendmsg+0x1c3/0x2b0 [ 1277.404514][T26610] ? perf_trace_preemptirq_template+0x268/0x320 [ 1277.410864][T26610] ? __x64_sys_sendmsg+0x80/0x80 [ 1277.415945][T26610] ? lockdep_hardirqs_on+0x94/0x140 [ 1277.421253][T26610] do_syscall_64+0x4c/0xa0 [ 1277.425745][T26610] ? clear_bhb_loop+0x60/0xb0 [ 1277.430524][T26610] ? clear_bhb_loop+0x60/0xb0 [ 1277.435275][T26610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1277.441237][T26610] RIP: 0033:0x7fc4b9d9f559 [ 1277.445716][T26610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.465548][T26610] RSP: 002b:00007fc4bac68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1277.474067][T26610] RAX: ffffffffffffffda RBX: 00007fc4ba025fa0 RCX: 00007fc4b9d9f559 [ 1277.482322][T26610] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 1277.490456][T26610] RBP: 00007fc4bac68090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.498506][T26610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.506628][T26610] R13: 00007fc4ba026038 R14: 00007fc4ba025fa0 R15: 00007fff27cb8c78 [ 1277.514789][T26610] [ 1278.778620][T26641] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.6461'. [ 1280.062320][T26675] netlink: 'syz.2.6471': attribute type 29 has an invalid length. [ 1280.100538][T26675] netlink: 'syz.2.6471': attribute type 29 has an invalid length. [ 1280.607786][T26690] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.6476'. [ 1281.034571][T26706] sctp: [Deprecated]: syz.1.6483 (pid 26706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1281.034571][T26706] Use struct sctp_sack_info instead [ 1281.108306][T26712] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6484'. [ 1281.927219][T26737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6491'. [ 1282.027409][T26742] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.6492'. [ 1282.198339][T26747] netlink: 'syz.3.6494': attribute type 10 has an invalid length. [ 1282.487803][T26749] netlink: 'syz.4.6495': attribute type 10 has an invalid length. [ 1283.200081][T26764] netlink: 'syz.0.6507': attribute type 10 has an invalid length. [ 1283.323200][T26758] netlink: 'syz.0.6507': attribute type 21 has an invalid length. [ 1283.371917][T26758] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6507'. [ 1284.440483][T26790] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.6506'. [ 1285.122164][T26799] netlink: 'syz.2.6510': attribute type 10 has an invalid length. [ 1285.399529][T26803] netlink: 'syz.3.6512': attribute type 2 has an invalid length. [ 1285.442056][T26803] netlink: 'syz.3.6512': attribute type 8 has an invalid length. [ 1285.517045][T26803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6512'. [ 1286.144034][T26830] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.6520'. [ 1286.969874][T26836] netlink: 'syz.2.6525': attribute type 10 has an invalid length. [ 1287.774155][T26843] netlink: 'syz.1.6527': attribute type 10 has an invalid length. [ 1288.006003][T26846] FAULT_INJECTION: forcing a failure. [ 1288.006003][T26846] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.045874][T26846] CPU: 1 PID: 26846 Comm: syz.2.6528 Not tainted syzkaller #0 [ 1288.053451][T26846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1288.063604][T26846] Call Trace: [ 1288.066949][T26846] [ 1288.069948][T26846] dump_stack_lvl+0x188/0x24e [ 1288.074721][T26846] ? show_regs_print_info+0x12/0x12 [ 1288.080001][T26846] ? load_image+0x410/0x410 [ 1288.084597][T26846] ? __might_sleep+0xd0/0xd0 [ 1288.089353][T26846] ? __lock_acquire+0x7ea0/0x7ea0 [ 1288.094485][T26846] should_fail_ex+0x390/0x4c0 [ 1288.099268][T26846] should_failslab+0x5/0x20 [ 1288.103841][T26846] slab_pre_alloc_hook+0x59/0x300 [ 1288.108946][T26846] ? lockdep_softirqs_off+0x430/0x430 [ 1288.114426][T26846] kmem_cache_alloc+0x56/0x2f0 [ 1288.119258][T26846] ? security_inode_alloc+0x30/0x110 [ 1288.124630][T26846] security_inode_alloc+0x30/0x110 [ 1288.129802][T26846] inode_init_always+0x910/0xc90 [ 1288.134801][T26846] new_inode_pseudo+0x91/0x1c0 [ 1288.139622][T26846] __sock_create+0x129/0x940 [ 1288.144260][T26846] ? __might_fault+0xa6/0x120 [ 1288.148994][T26846] ? __might_fault+0xc2/0x120 [ 1288.153762][T26846] __sys_socketpair+0x1bd/0x540 [ 1288.158689][T26846] __x64_sys_socketpair+0x97/0xb0 [ 1288.163776][T26846] do_syscall_64+0x4c/0xa0 [ 1288.168250][T26846] ? clear_bhb_loop+0x60/0xb0 [ 1288.172974][T26846] ? clear_bhb_loop+0x60/0xb0 [ 1288.177704][T26846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1288.183647][T26846] RIP: 0033:0x7ff67ad9f559 [ 1288.188124][T26846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.207772][T26846] RSP: 002b:00007ff67bc2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1288.216253][T26846] RAX: ffffffffffffffda RBX: 00007ff67b025fa0 RCX: 00007ff67ad9f559 [ 1288.224268][T26846] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 1288.232285][T26846] RBP: 00007ff67bc2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.240299][T26846] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 1288.248315][T26846] R13: 00007ff67b026038 R14: 00007ff67b025fa0 R15: 00007ffe123c3a48 [ 1288.256467][T26846] [ 1288.289333][T26846] socket: no more sockets [ 1288.675068][T26854] netlink: 'syz.4.6530': attribute type 10 has an invalid length. [ 1288.838096][T26854] team0: Device wg1 is of different type [ 1289.024508][T26850] netlink: 'syz.4.6530': attribute type 21 has an invalid length. [ 1289.073986][T26850] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1289.200966][T26867] netlink: 'syz.3.6532': attribute type 3 has an invalid length. [ 1289.218542][T26867] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6532'. [ 1289.286237][T26874] device syzkaller0 entered promiscuous mode [ 1291.737998][T26919] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.6547'. [ 1291.976197][T24004] Bluetooth: hci1: command 0x0406 tx timeout [ 1293.488156][T26883] netlink: 'syz.4.6537': attribute type 10 has an invalid length. [ 1293.496356][T26910] netlink: 'syz.3.6545': attribute type 10 has an invalid length. [ 1293.726114][T26923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6550'. [ 1293.982737][T26931] netlink: 'syz.1.6549': attribute type 10 has an invalid length. [ 1294.093484][T26931] team0: Device wg1 is of different type [ 1294.180095][T26935] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.6562'. [ 1294.192223][T26930] netlink: 'syz.1.6549': attribute type 21 has an invalid length. [ 1294.266550][T26930] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6549'. [ 1295.163965][T26947] netlink: 'syz.1.6556': attribute type 21 has an invalid length. [ 1295.187181][T26947] netlink: 'syz.1.6556': attribute type 1 has an invalid length. [ 1295.211609][T26947] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6556'. [ 1295.400297][T26957] netlink: 'syz.3.6558': attribute type 10 has an invalid length. [ 1295.712306][T26968] netlink: 'syz.0.6560': attribute type 10 has an invalid length. [ 1296.655042][T26981] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1296.696615][T26980] FAULT_INJECTION: forcing a failure. [ 1296.696615][T26980] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.741715][T26980] CPU: 0 PID: 26980 Comm: syz.0.6567 Not tainted syzkaller #0 [ 1296.749277][T26980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1296.759428][T26980] Call Trace: [ 1296.762758][T26980] [ 1296.765746][T26980] dump_stack_lvl+0x188/0x24e [ 1296.770493][T26980] ? show_regs_print_info+0x12/0x12 [ 1296.775769][T26980] ? load_image+0x410/0x410 [ 1296.780474][T26980] ? __lock_acquire+0x7ea0/0x7ea0 [ 1296.785612][T26980] should_fail_ex+0x390/0x4c0 [ 1296.790376][T26980] should_failslab+0x5/0x20 [ 1296.794969][T26980] slab_pre_alloc_hook+0x59/0x300 [ 1296.800085][T26980] kmem_cache_alloc_lru+0x49/0x2e0 [ 1296.805298][T26980] ? __d_alloc+0x2e/0x6e0 [ 1296.809697][T26980] ? atime_needs_update+0x770/0x770 [ 1296.814982][T26980] __d_alloc+0x2e/0x6e0 [ 1296.819197][T26980] ? d_alloc_anon+0x9/0x20 [ 1296.823692][T26980] __ns_get_path+0x3e1/0x650 [ 1296.828449][T26980] ns_get_path+0x50/0x90 [ 1296.832778][T26980] proc_ns_get_link+0x168/0x290 [ 1296.837702][T26980] ? proc_ns_instantiate+0xf0/0xf0 [ 1296.842903][T26980] ? pick_link+0x10f/0xe20 [ 1296.847392][T26980] ? bpf_lsm_inode_follow_link+0x5/0x10 [ 1296.853217][T26980] ? security_inode_follow_link+0xb3/0x100 [ 1296.859112][T26980] ? proc_ns_instantiate+0xf0/0xf0 [ 1296.864318][T26980] pick_link+0x6ad/0xe20 [ 1296.868715][T26980] step_into+0xc14/0xee0 [ 1296.873057][T26980] ? rcu_read_lock_any_held+0xb0/0x130 [ 1296.878595][T26980] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 1296.883963][T26980] ? set_root+0x3a0/0x3a0 [ 1296.888462][T26980] ? d_splice_alias+0x110/0x320 [ 1296.893492][T26980] path_openat+0x15dd/0x2f10 [ 1296.898217][T26980] ? do_filp_open+0x420/0x420 [ 1296.902983][T26980] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1296.909777][T26980] do_filp_open+0x1ee/0x420 [ 1296.914372][T26980] ? vfs_tmpfile+0x470/0x470 [ 1296.919112][T26980] ? _raw_spin_unlock+0x24/0x40 [ 1296.924110][T26980] ? alloc_fd+0x590/0x640 [ 1296.928622][T26980] do_sys_openat2+0x14b/0x4f0 [ 1296.933378][T26980] ? ct_nmi_exit+0x145/0x1c0 [ 1296.938073][T26980] ? do_sys_open+0xe0/0xe0 [ 1296.942562][T26980] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1296.948633][T26980] ? lock_chain_count+0x20/0x20 [ 1296.953645][T26980] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1296.959731][T26980] __x64_sys_openat+0x135/0x160 [ 1296.964790][T26980] do_syscall_64+0x4c/0xa0 [ 1296.969357][T26980] ? clear_bhb_loop+0x60/0xb0 [ 1296.974120][T26980] ? clear_bhb_loop+0x60/0xb0 [ 1296.978869][T26980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1296.984857][T26980] RIP: 0033:0x7fc4b9d5fd8e [ 1296.989338][T26980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1297.009104][T26980] RSP: 002b:00007fc4bac67ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1297.017594][T26980] RAX: ffffffffffffffda RBX: 00007fc4bac686c0 RCX: 00007fc4b9d5fd8e [ 1297.025634][T26980] RDX: 0000000000000002 RSI: 00007fc4bac67f90 RDI: ffffffffffffff9c [ 1297.033697][T26980] RBP: 00007fc4bac68090 R08: 0000000000000000 R09: 0000000000000000 [ 1297.041734][T26980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1297.049763][T26980] R13: 00007fc4ba026038 R14: 00007fc4ba025fa0 R15: 00007fff27cb8c78 [ 1297.057840][T26980] [ 1298.751867][T27011] netlink: 'syz.3.6577': attribute type 10 has an invalid length. [ 1298.990907][T27021] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1299.286087][T27025] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.6583'. [ 1299.317895][T27025] netlink: 'syz.1.6583': attribute type 10 has an invalid length. [ 1300.196311][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.202752][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.366362][T27050] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.6593'. [ 1300.613938][T27053] netlink: 'syz.1.6594': attribute type 2 has an invalid length. [ 1300.678973][T27053] netlink: 'syz.1.6594': attribute type 4 has an invalid length. [ 1300.763074][T27053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6594'. [ 1301.097266][T27064] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6596'. [ 1301.693771][T27086] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.6606'. [ 1302.277043][T27096] FAULT_INJECTION: forcing a failure. [ 1302.277043][T27096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.333748][T27096] CPU: 1 PID: 27096 Comm: syz.1.6610 Not tainted syzkaller #0 [ 1302.341296][T27096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1302.351402][T27096] Call Trace: [ 1302.354721][T27096] [ 1302.357699][T27096] dump_stack_lvl+0x188/0x24e [ 1302.362445][T27096] ? show_regs_print_info+0x12/0x12 [ 1302.367721][T27096] ? load_image+0x410/0x410 [ 1302.372285][T27096] ? __lock_acquire+0x7ea0/0x7ea0 [ 1302.377377][T27096] should_fail_ex+0x390/0x4c0 [ 1302.382171][T27096] strncpy_from_user+0x32/0x340 [ 1302.387090][T27096] bpf_prog_load+0x200/0x1530 [ 1302.391837][T27096] ? map_freeze+0x390/0x390 [ 1302.396395][T27096] ? __might_fault+0xa6/0x120 [ 1302.401155][T27096] ? __might_fault+0xa6/0x120 [ 1302.405868][T27096] ? __might_fault+0xc2/0x120 [ 1302.410609][T27096] ? __might_fault+0xa6/0x120 [ 1302.415346][T27096] ? bpf_lsm_bpf+0x5/0x10 [ 1302.419723][T27096] ? security_bpf+0x7a/0xa0 [ 1302.424383][T27096] __sys_bpf+0x5b8/0x780 [ 1302.428687][T27096] ? bpf_link_show_fdinfo+0x380/0x380 [ 1302.434134][T27096] ? lock_chain_count+0x20/0x20 [ 1302.439067][T27096] __x64_sys_bpf+0x78/0x90 [ 1302.443559][T27096] do_syscall_64+0x4c/0xa0 [ 1302.448059][T27096] ? clear_bhb_loop+0x60/0xb0 [ 1302.452778][T27096] ? clear_bhb_loop+0x60/0xb0 [ 1302.457500][T27096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1302.463456][T27096] RIP: 0033:0x7f900d99f559 [ 1302.467929][T27096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.487585][T27096] RSP: 002b:00007f900e88f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1302.496063][T27096] RAX: ffffffffffffffda RBX: 00007f900dc25fa0 RCX: 00007f900d99f559 [ 1302.504073][T27096] RDX: 0000000000000070 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1302.512081][T27096] RBP: 00007f900e88f090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.520094][T27096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.528100][T27096] R13: 00007f900dc26038 R14: 00007f900dc25fa0 R15: 00007ffe9b237898 [ 1302.536133][T27096] [ 1302.795418][T27105] FAULT_INJECTION: forcing a failure. [ 1302.795418][T27105] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.870291][T27105] CPU: 1 PID: 27105 Comm: syz.0.6611 Not tainted syzkaller #0 [ 1302.877844][T27105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1302.887982][T27105] Call Trace: [ 1302.891300][T27105] [ 1302.894277][T27105] dump_stack_lvl+0x188/0x24e [ 1302.899051][T27105] ? show_regs_print_info+0x12/0x12 [ 1302.904315][T27105] ? load_image+0x410/0x410 [ 1302.908896][T27105] should_fail_ex+0x390/0x4c0 [ 1302.913752][T27105] should_failslab+0x5/0x20 [ 1302.918308][T27105] slab_pre_alloc_hook+0x59/0x300 [ 1302.923393][T27105] kmem_cache_alloc_node+0x5a/0x310 [ 1302.928643][T27105] ? __alloc_skb+0xf9/0x7d0 [ 1302.933214][T27105] __alloc_skb+0xf9/0x7d0 [ 1302.937600][T27105] netlink_dump+0x1e1/0xcd0 [ 1302.942206][T27105] ? netlink_lookup+0x30/0x200 [ 1302.947032][T27105] ? __netlink_dump_start+0x11e/0x6f0 [ 1302.952456][T27105] ? netlink_lookup+0x200/0x200 [ 1302.957373][T27105] ? __netlink_lookup+0x2d/0x730 [ 1302.962396][T27105] ? netlink_lookup+0x30/0x200 [ 1302.967214][T27105] ? netlink_lookup+0x30/0x200 [ 1302.972013][T27105] __netlink_dump_start+0x52c/0x6f0 [ 1302.977249][T27105] netlink_diag_handler_dump+0x195/0x230 [ 1302.982945][T27105] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1302.989136][T27105] ? netlink_policy_dump_write+0x5d0/0x5d0 [ 1302.994970][T27105] ? netlink_diag_handler_dump+0x230/0x230 [ 1303.000813][T27105] ? netlink_diag_dump+0x230/0x230 [ 1303.005977][T27105] ? netlink_policy_dump_write+0x5d0/0x5d0 [ 1303.011828][T27105] sock_diag_rcv_msg+0x3c7/0x5e0 [ 1303.016799][T27105] netlink_rcv_skb+0x1ef/0x440 [ 1303.021625][T27105] ? sock_diag_bind+0xa0/0xa0 [ 1303.026338][T27105] ? netlink_ack+0x1160/0x1160 [ 1303.031137][T27105] ? netlink_deliver_tap+0x2e/0x1b0 [ 1303.036373][T27105] sock_diag_rcv+0x26/0x40 [ 1303.040905][T27105] netlink_unicast+0x7ad/0x920 [ 1303.045705][T27105] netlink_sendmsg+0x8ad/0xbd0 [ 1303.050509][T27105] ? netlink_getsockopt+0x550/0x550 [ 1303.055740][T27105] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1303.061327][T27105] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1303.066652][T27105] ? security_socket_sendmsg+0x7c/0xa0 [ 1303.072139][T27105] ? netlink_getsockopt+0x550/0x550 [ 1303.077378][T27105] ____sys_sendmsg+0x5ed/0x9a0 [ 1303.082179][T27105] ? __sys_sendmsg_sock+0x30/0x30 [ 1303.087229][T27105] ? __import_iovec+0x306/0x510 [ 1303.092128][T27105] ? import_iovec+0x6f/0xa0 [ 1303.096693][T27105] ___sys_sendmsg+0x2a2/0x360 [ 1303.101401][T27105] ? __sys_sendmsg+0x2a0/0x2a0 [ 1303.106257][T27105] __se_sys_sendmsg+0x1c3/0x2b0 [ 1303.111138][T27105] ? __x64_sys_sendmsg+0x80/0x80 [ 1303.116237][T27105] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1303.122207][T27105] do_syscall_64+0x4c/0xa0 [ 1303.126652][T27105] ? clear_bhb_loop+0x60/0xb0 [ 1303.131365][T27105] ? clear_bhb_loop+0x60/0xb0 [ 1303.136075][T27105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1303.141999][T27105] RIP: 0033:0x7fc4b9d9f559 [ 1303.146452][T27105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.166278][T27105] RSP: 002b:00007fc4bac47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1303.174716][T27105] RAX: ffffffffffffffda RBX: 00007fc4ba026090 RCX: 00007fc4b9d9f559 [ 1303.182713][T27105] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 1303.190732][T27105] RBP: 00007fc4bac47090 R08: 0000000000000000 R09: 0000000000000000 [ 1303.198820][T27105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1303.206813][T27105] R13: 00007fc4ba026128 R14: 00007fc4ba026090 R15: 00007fff27cb8c78 [ 1303.214832][T27105] [ 1304.242323][T27130] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6618'. [ 1304.377346][T27133] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.6619'. [ 1304.516892][T27134] netlink: 'syz.1.6620': attribute type 10 has an invalid length. [ 1304.729751][T27134] team0: Port device virt_wifi0 added [ 1304.761717][T27135] netlink: 'syz.0.6627': attribute type 10 has an invalid length. [ 1305.212389][T27144] device vcan0 entered promiscuous mode [ 1305.247404][T27144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1305.665742][T27153] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6625'. [ 1317.565987][T13636] Bluetooth: hci2: command 0x0406 tx timeout [ 1319.994608][T24004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1320.004945][T24004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1320.013351][T24004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1320.026646][T24004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1320.034293][T24004] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1320.042954][T24004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1320.135488][T24004] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1320.145280][T24004] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1320.154169][T24004] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1320.162990][T24004] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1320.177690][T24004] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1320.185057][T24004] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1321.073650][T24004] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1321.082932][T24004] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1321.091403][T24004] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1321.099447][T24004] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1321.107502][T24004] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1321.114808][T24004] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1321.245084][T13636] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1321.254555][T13636] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1321.262979][T13636] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1321.283211][T13636] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1321.291007][T13636] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1321.299769][T13636] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1321.980275][T13636] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1321.989738][T13636] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1321.998077][T13636] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1322.007192][T13636] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1322.014851][T13636] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1322.031089][T13636] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1322.066000][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 1322.216000][ T4285] Bluetooth: hci6: command 0x0409 tx timeout [ 1323.166263][ T4285] Bluetooth: hci7: command 0x0409 tx timeout [ 1323.366147][ T4285] Bluetooth: hci8: command 0x0409 tx timeout [ 1324.066070][ T4285] Bluetooth: hci9: command 0x0409 tx timeout [ 1324.165905][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 1324.315909][ T4285] Bluetooth: hci6: command 0x041b tx timeout [ 1325.265916][ T4285] Bluetooth: hci7: command 0x041b tx timeout [ 1325.415934][ T4285] Bluetooth: hci8: command 0x041b tx timeout [ 1326.165971][ T4285] Bluetooth: hci9: command 0x041b tx timeout [ 1326.216159][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 1326.366549][ T4285] Bluetooth: hci6: command 0x040f tx timeout [ 1327.365885][ T4285] Bluetooth: hci7: command 0x040f tx timeout [ 1327.515870][ T4285] Bluetooth: hci8: command 0x040f tx timeout [ 1328.215979][ T4285] Bluetooth: hci9: command 0x040f tx timeout [ 1328.316382][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 1328.466022][ T4285] Bluetooth: hci6: command 0x0419 tx timeout [ 1329.415968][ T4285] Bluetooth: hci7: command 0x0419 tx timeout [ 1329.566517][ T4285] Bluetooth: hci8: command 0x0419 tx timeout [ 1330.315967][ T4285] Bluetooth: hci9: command 0x0419 tx timeout [ 1333.416145][T23994] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2676 jiffies s: 168845 root: 0x1/. [ 1333.443602][T23994] rcu: blocking rcu_node structures (internal RCU debug): [ 1333.456863][T23994] Sending NMI from CPU 1 to CPUs 0: [ 1333.462179][ C0] NMI backtrace for cpu 0 [ 1333.462190][ C0] CPU: 0 PID: 27129 Comm: syz.3.6619 Not tainted syzkaller #0 [ 1333.462208][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1333.462218][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x60 [ 1333.462269][ C0] Code: 48 8b 04 24 65 48 8b 0d b4 28 80 7e 65 8b 15 b5 28 80 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 <74> 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b [ 1333.462285][ C0] RSP: 0018:ffffc90000007128 EFLAGS: 00000046 [ 1333.462301][ C0] RAX: ffffffff8155f877 RBX: ffff88802c7de6e0 RCX: ffff88802b77da00 [ 1333.462314][ C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000005 [ 1333.462324][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff2326848 [ 1333.462336][ C0] R10: dffffc0000000000 R11: fffffbfff2326849 R12: 0000000000000001 [ 1333.462348][ C0] R13: dffffc0000000000 R14: ffff88805f8cf318 R15: 0000000000000001 [ 1333.462360][ C0] FS: 00007fb12e2a36c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1333.462375][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1333.462387][ C0] CR2: 00007ff67bb5da08 CR3: 0000000073a55000 CR4: 00000000003506f0 [ 1333.462402][ C0] DR0: 0000200000000300 DR1: 0000200000001ac0 DR2: 0000200000000d80 [ 1333.462414][ C0] DR3: 0000200000000d80 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1333.462426][ C0] Call Trace: [ 1333.462432][ C0] [ 1333.462437][ C0] __task_pid_nr_ns+0x1a7/0x460 [ 1333.462542][ C0] ? __task_pid_nr_ns+0x24/0x460 [ 1333.462567][ C0] __perf_event_header__init_id+0x149/0x530 [ 1333.462597][ C0] perf_prepare_sample+0x18b/0x2020 [ 1333.462626][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1333.462652][ C0] ? perf_callchain+0x190/0x190 [ 1333.462681][ C0] perf_event_output_forward+0x197/0x2f0 [ 1333.462708][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 1333.462733][ C0] ? perf_get_page_size+0x430/0x430 [ 1333.462761][ C0] ? __lock_acquire+0x142d/0x7ea0 [ 1333.462787][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1333.462816][ C0] __perf_event_overflow+0x457/0x630 [ 1333.462846][ C0] perf_swevent_overflow+0x19b/0x230 [ 1333.462869][ C0] perf_swevent_event+0x458/0x570 [ 1333.462897][ C0] ? perf_tp_event+0xc10/0xc10 [ 1333.462923][ C0] ? perf_trace_buf_alloc+0x300/0x300 [ 1333.462943][ C0] ? debug_object_activate+0x4f0/0x4f0 [ 1333.462967][ C0] perf_tp_event+0x36b/0xc10 [ 1333.462996][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1333.463051][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1333.463068][ C0] ? sched_clock_cpu+0x6e/0x260 [ 1333.463091][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1333.463121][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 1333.463147][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1333.463169][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1333.463195][ C0] ? __irq_exit_rcu+0x147/0x230 [ 1333.463212][ C0] ? irq_exit_rcu+0x20/0x20 [ 1333.463230][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1333.463250][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 1333.463275][ C0] trace_hardirqs_on+0x24/0x40 [ 1333.463297][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1333.463317][ C0] RIP: 0010:lock_acquire+0x226/0x4a0 [ 1333.463340][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 ef 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1333.463354][ C0] RSP: 0018:ffffc90000007a20 EFLAGS: 00000206 [ 1333.463368][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 231d4692828d4600 [ 1333.463379][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2b20 RDI: ffffffff8adf7160 [ 1333.463391][ C0] RBP: ffffc90000007b28 R08: dffffc0000000000 R09: 1ffffffff2326864 [ 1333.463404][ C0] R10: dffffc0000000000 R11: fffffbfff2326865 R12: 1ffff92000000f50 [ 1333.463416][ C0] R13: 0000000000000000 R14: 0000000000000246 R15: dffffc0000000000 [ 1333.463442][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1333.463467][ C0] ? mark_lock+0x94/0x320 [ 1333.463490][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1333.463515][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1333.463542][ C0] _raw_spin_lock+0x2a/0x40 [ 1333.463558][ C0] ? garp_join_timer+0x21/0x120 [ 1333.463581][ C0] garp_join_timer+0x21/0x120 [ 1333.463605][ C0] call_timer_fn+0x1ac/0x670 [ 1333.463624][ C0] ? garp_init_applicant+0x440/0x440 [ 1333.463647][ C0] ? call_timer_fn+0xcf/0x670 [ 1333.463664][ C0] ? __run_timers+0x810/0x810 [ 1333.463687][ C0] ? garp_init_applicant+0x440/0x440 [ 1333.463712][ C0] __run_timers+0x56c/0x810 [ 1333.463737][ C0] ? detach_timer+0x350/0x350 [ 1333.463763][ C0] run_timer_softirq+0x63/0xf0 [ 1333.463780][ C0] handle_softirqs+0x291/0x910 [ 1333.463800][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1333.463818][ C0] ? do_softirq+0x210/0x210 [ 1333.463833][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1333.463854][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1333.463872][ C0] __irq_exit_rcu+0x13b/0x230 [ 1333.463889][ C0] ? irq_exit_rcu+0x20/0x20 [ 1333.463911][ C0] irq_exit_rcu+0x5/0x20 [ 1333.463925][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1333.463953][ C0] [ 1333.463958][ C0] [ 1333.463964][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1333.463984][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 1333.464003][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ff b7 1a f7 65 8b 05 c0 67 c4 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1333.464017][ C0] RSP: 0018:ffffc900067874a0 EFLAGS: 00000206 [ 1333.464035][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 231d4692828d4600 [ 1333.464048][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001 [ 1333.464059][ C0] RBP: ffffc90006787538 R08: ffffffff9193425f R09: 1ffffffff232684b [ 1333.464072][ C0] R10: dffffc0000000000 R11: fffffbfff232684c R12: dffffc0000000000 [ 1333.464085][ C0] R13: ffff888059508000 R14: ffffffff97c725b0 R15: 1ffff92000cf0e94 [ 1333.464108][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1333.464130][ C0] debug_check_no_obj_freed+0x471/0x520 [ 1333.464156][ C0] free_unref_page_prepare+0x2c3/0x9e0 [ 1333.464185][ C0] free_unref_page+0x2e/0x3f0 [ 1333.464212][ C0] qlist_free_all+0x76/0xe0 [ 1333.464233][ C0] kasan_quarantine_reduce+0x144/0x160 [ 1333.464253][ C0] __kasan_slab_alloc+0x1e/0x80 [ 1333.464279][ C0] slab_post_alloc_hook+0x4b/0x490 [ 1333.464299][ C0] ? slab_pre_alloc_hook+0x2e2/0x300 [ 1333.464319][ C0] ? preempt_schedule+0xbc/0xd0 [ 1333.464342][ C0] kmem_cache_alloc+0x18b/0x2f0 [ 1333.464361][ C0] ? alloc_vfsmnt+0x24/0x450 [ 1333.464380][ C0] alloc_vfsmnt+0x24/0x450 [ 1333.464399][ C0] clone_mnt+0x6b/0xcd0 [ 1333.464415][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1333.464452][ C0] copy_tree+0x3ce/0x7e0 [ 1333.464472][ C0] ? copy_mnt_ns+0x16b/0x980 [ 1333.464493][ C0] copy_mnt_ns+0x16b/0x980 [ 1333.464512][ C0] ? kmem_cache_alloc+0x1b2/0x2f0 [ 1333.464531][ C0] ? create_new_namespaces+0x34/0x700 [ 1333.464552][ C0] create_new_namespaces+0xd3/0x700 [ 1333.464572][ C0] ? bpf_lsm_capable+0x5/0x10 [ 1333.464594][ C0] ? security_capable+0x85/0xb0 [ 1333.464612][ C0] ? copy_namespaces+0x55/0x410 [ 1333.464631][ C0] ? copy_namespaces+0x55/0x410 [ 1333.464649][ C0] copy_namespaces+0x3ae/0x410 [ 1333.464670][ C0] copy_process+0x199b/0x4070 [ 1333.464689][ C0] ? plist_add+0x3d7/0x490 [ 1333.464717][ C0] ? copy_process+0x974/0x4070 [ 1333.464738][ C0] ? futex_wait+0x4a3/0x5c0 [ 1333.464803][ C0] ? idle_dummy+0x10/0x10 [ 1333.464828][ C0] kernel_clone+0x24b/0x900 [ 1333.464849][ C0] ? create_io_thread+0x170/0x170 [ 1333.464877][ C0] __x64_sys_clone+0x1a7/0x220 [ 1333.464898][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 1333.464929][ C0] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1333.464957][ C0] do_syscall_64+0x4c/0xa0 [ 1333.464977][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1333.464997][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1333.465017][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1333.465042][ C0] RIP: 0033:0x7fb12d39f559 [ 1333.465057][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.465070][ C0] RSP: 002b:00007fb12e2a2fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1333.465086][ C0] RAX: ffffffffffffffda RBX: 00007fb12d625fa0 RCX: 00007fb12d39f559 [ 1333.465099][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000022000 [ 1333.465110][ C0] RBP: 00007fb12d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1333.465120][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1333.465131][ C0] R13: 00007fb12d626038 R14: 00007fb12d625fa0 R15: 00007ffd72ce62d8 [ 1333.465152][ C0]