last executing test programs: 17.116651065s ago: executing program 1 (id=13312): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x80000001, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x200}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x200}, 0xc) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xab, &(0x7f0000000200)=""/171, 0x40f00, 0x44, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x4, 0xe076, 0x4df87da9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[r3, r4, r5, r6, 0x1], &(0x7f0000000540)=[{0x5, 0x5, 0xc, 0x3}, {0x2, 0x4, 0x1, 0x1}], 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000640)={0x5c5, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={r8}, 0x4) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={r8}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup/syz0\x00', 0x1ff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x10, r5}, 0x18) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r9, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0], 0x0, 0x2b, &(0x7f00000009c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r9, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r9, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xe, 0x6, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x3, 0x4, 0x2, 0x7, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_fd={0x18, 0x7, 0x1, 0x0, r10}]}, &(0x7f00000007c0)='syzkaller\x00', 0x7ff, 0xfd, &(0x7f0000000800)=""/253, 0x41000, 0x21, '\x00', r11, @sk_skb=0x4, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x2, 0xd, 0xf, 0x2}, 0x10, r13, r7, 0x3, &(0x7f0000000f40)=[r2], &(0x7f0000000f80)=[{0x2, 0x2, 0x7, 0x7}, {0x4, 0x2, 0x1, 0xa}, {0x1, 0x3, 0x2, 0x6}], 0x10, 0x9}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x2, '\x00', r12, r2, 0x5}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x2, '\x00', r12, r2, 0x5}, 0x50) perf_event_open(&(0x7f0000001100)={0x4, 0x80, 0x0, 0x0, 0x5, 0x9, 0x0, 0x10000, 0x808, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x5f34e96005930ffb, @perf_config_ext={0x4, 0xf18}, 0x10, 0x401, 0x1ff, 0x2, 0x7fff, 0x3ae282dc, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001180)='./cgroup.cpu/syz1\x00', 0x1ff) r14 = syz_clone(0x2000, &(0x7f00000011c0)="688e657930eb09d2b8a3fba5d9a7e97d596a72ddf3e00a8921c8b55434eb034fde7b25594163d8b68fce0122399c0d158ef578a0da552529b6b365ad0dd724d792084b1f953f023e99c25a29e1d2501c49de5d713b6e33eb64df007e622d2e4361d11c2d64f3009ea576e07e3acb1bc67838537476b555a3406329a25e209595ed7fae", 0x83, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="175d665e7269b54988d17676528bfc30de05f8b8dea652813039217b34667b136e323a6adf7e869a8470cd5e99243cf8dc3ea8110cd5bebd37b55851b86ad0adcb017de1ba67e380d0cf168be4") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000013c0)={r14, r2, 0x0, 0xe, &(0x7f0000001380)='./cgroup/syz0\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000013c0)={r14, r2, 0x0, 0xe, &(0x7f0000001380)='./cgroup/syz0\x00', 0x0}, 0x30) r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001400)='memory.events.local\x00', 0x0, 0x0) unlink(&(0x7f0000001440)='./file0\x00') openat$cgroup_ro(r16, &(0x7f0000001480)='cpuset.memory_pressure\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000014c0), 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001500)={r15}, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001500)={r15}, 0x4) r17 = openat$cgroup_ro(r16, &(0x7f0000001540)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r17, 0x4008240b, &(0x7f0000001580)={0x2, 0x80, 0x0, 0xff, 0x4, 0x7, 0x0, 0x7873, 0x100, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_config_ext={0x2, 0x1a406c2c}, 0x10204c, 0xfff, 0x3, 0x8, 0x5, 0x6, 0x40, 0x0, 0xef7, 0x0, 0xffffffffffffffff}) openat$cgroup_subtree(r2, &(0x7f0000001600), 0x2, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001940)={&(0x7f0000001640)="e6512921377e8def3baeb7f5105e36ec0b041f331650aa39492378ccc9d242c21c9b514ff49ba6b0cfc687c3a632bd00330bfcf7de574d7cb76ba477790385a461687d6c0f0c5e9a6a1ce92696d37d654ad628c6449bd8877a67456989d7f4487c40d4fb38cae139dd5c13d4f9f84da14d1d95138fae6238e01602b43be89613d330a95e742c32287c2cb1d5c994ad68fb1819a05756ff278a3cedba7a09d499e310a5bb789ebd5baa9b9b0fbfc2aec4f998956aa04ebe52", &(0x7f0000001700)=""/230, &(0x7f0000001800)="d3051fe1ebcd007c2b8883e6a9c031e039fc65d56038333ead6477650c52bcde81e8af9f589931c15fe69a4955148ecf8f283fa5ec54cc303ba873ce2f8bea7a2edb20ca388b9ad80f5b1b7df3f680affadd231d64", &(0x7f0000001880)="958aadd6aa30af82c4c723ffa20d196887801a243239ecdf36df2076b9d06419e6e7e06054d3c3d052bd63947b8b7ad066f9a11fb78bcff84dcab7f5aa835823f3e727a979e2af76075cadebe42d51e8a5f8c0ad6ebd836a203f7d82561230ad2b73d53c23461398ff2a5ae32ad133a673cd3eb21a24bba47fe3cac707624898e1fa6e625f5ab0d0beedfcd4dd066791b90a0696545bfa7afe43f868f6e4a0819e1476c6b6ed0ae0df9239", 0xfffffffa, r1}, 0x38) openat$cgroup(r16, &(0x7f0000001980)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup(r16, &(0x7f0000001980)='syz1\x00', 0x200002, 0x0) 16.897582722s ago: executing program 1 (id=13313): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1040a2, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400600c}, 0x3) sendmsg$inet(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42304822a5347abc11fb5664dc79199a73e7d", 0x49}, {&(0x7f0000000480)="2c64e36df11764f28e87", 0xa}], 0x2}, 0x2400800c) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000ef0000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000001"], 0x48) 14.839220577s ago: executing program 1 (id=13318): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x2e, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x0, 0x7, 0x7, 0x1, 0xffffffffffffff92, 0xffffffffffffffed}, @ldst={0x2, 0x3, 0x2, 0x9, 0x8, 0x100, 0x1}, @alu={0x4, 0x1, 0x3, 0x2, 0x6, 0x0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x69}, @ldst={0x0, 0x3, 0x2, 0x0, 0xb, 0x10, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xb, 0x3, 0x9, 0xffffffffffffffc0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$kcm(0xf, 0x3, 0x2) (async) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8915, &(0x7f0000001cc0)) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r3}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="020fff0902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = getpid() r7 = gettid() sendmsg$unix(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}], 0x60, 0x4014}, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x7, 0xa, 0x1, 0x0, 0x3, 0x800, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x11ea, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x10411, 0x6, 0x9, 0x3, 0x5, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x10000}, r7, 0x2, 0xffffffffffffffff, 0x3) (async) gettid() perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x1041a1, 0xc, 0x0, 0x1, 0x0, 0xfffffffe, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) (async) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) 14.617548284s ago: executing program 1 (id=13322): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xf, 0xfb, 0x0, 0x3c, 0xc00a, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000280), &(0x7f0000000380)=r3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0xc, "e8"}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x116, 0x1}], 0x40}, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x1}, 0x1aa63, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7fffffff, 0x0, 0xb}, 0xffffffffffffffff, 0x0, r2, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x3, 0x400, 0x6, 0x8, 0x800, r8, 0x737a, '\x00', 0x0, r9, 0x1, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}], 0x20}, 0x0) 14.185373518s ago: executing program 1 (id=13327): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, 0x4000000, 0xbb, 0x1fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x12002) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c0ffffff000000000a00000085000000280000001801000020756c2500d00000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc84bb8c396", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 13.253449998s ago: executing program 1 (id=13336): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="170000000000000095000000000000"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x80, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x28, 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840), 0x2, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[], &(0x7f0000000240)=""/237, 0x36, 0xed, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x29, 0x5, 0xb, &(0x7f0000002880)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="00000100000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x48) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x25, 0x0, 0x0) 7.217614359s ago: executing program 2 (id=13366): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x19201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x9, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r6, 0x84, 0x7b, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open$cgroup(0x0, r8, 0x0, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000006c8"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12) 6.154562304s ago: executing program 2 (id=13381): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x5744935563dc5412) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg(r3, &(0x7f0000001a00)={&(0x7f0000001380)=@vsock, 0x80, &(0x7f0000001880)=[{&(0x7f0000001480)=""/241, 0xffe3}], 0x1, &(0x7f0000001900)=""/241, 0xf1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xba, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x3, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x26, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd, @generic={0x29, 0x6, 0x8, 0x8001, 0x9}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x7, 0x3, 0x0, 0x10}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000006c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xa, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[r5, r7, r8, r9, 0x1, r10, r11, r12], &(0x7f0000000940)=[{0x5, 0x2, 0xc, 0x2}, {0x2, 0x1, 0xd, 0x7}, {0x4, 0x2, 0x0, 0x9}], 0x10, 0xa7f}, 0x94) 5.072810998s ago: executing program 2 (id=13378): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1040a2, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400600c}, 0x3) sendmsg$inet(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42304822a5347abc11fb5664dc79199a73e7d", 0x49}, {&(0x7f0000000480)="2c64e36df11764f28e87161c", 0xc}], 0x2}, 0x2400800c) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000ef0000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000001"], 0x48) 4.782618468s ago: executing program 0 (id=13380): close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 3.185698568s ago: executing program 3 (id=13384): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x49}, 0x40440d1) 3.176131749s ago: executing program 2 (id=13385): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x57}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0xa, 0x0, 0xa4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x1, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) socketpair(0x2c, 0x3, 0x302, &(0x7f0000000000)) 3.021692924s ago: executing program 0 (id=13387): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000006009800002105823d79354746de2b6ca332e865951456bd334e5ee52685b894e2e84a33df017e", @ANYRES32=0x0, @ANYRES32], 0x50) gettid() r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="b107c09a5026de51ce3e8640af1a8b2d1e67f16405c3458fe41dc04ef234718d683aa3a998fa99431a9c7c6d7505b0cec633f763303666604cbb6aa4c0f995a9454dc81b079dc93b0162ac3d1a8a1b72ce18d493594b3b24bad58801007a7b1d8ab9b50c5dbef8311b2502a124913259abadf354fea31d1ce0fed5c7ac577690164d1a72748723d3eb92e3e73e3a2b7cdfaa442f9e9f8e1a711d5b988215f0f80a2eeade5a078256a41973b0b029278c20a2818628dc256a0742896c3def6e825fdf64fd33d5f584ca908c272dc04d0693decdad028feec7", 0xd8}, {0x0}, {0x0}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98", 0x87}], 0x4, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) recvmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10002) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000003840)=""/4096, 0x1000}], 0x1}, 0x10002) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)) 2.958570245s ago: executing program 3 (id=13388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f0000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000002411000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x301e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106081, 0x0, 0x4000000, 0x1, 0x0, 0x3ff}, 0x0, 0xfffffffdfffffffe, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x28101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000016c0)=ANY=[@ANYBLOB="180000000700000000000000fcffffff9500000000000000f91666d1d8c84e69a2f435870e6c70192cee5438f20b8e0e44c01c0db9c10c2576eade446d101df58c2ba2e067c062008b05f2dbc040f4fdc3acdac789d4e43b06ce809211792e87c30a8d48e226a87b4adebbe890207933ef8370"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001780)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="110000001000000000000000", @ANYRES32=r1, @ANYBLOB="6baf830cd2c5e397869a08d78c34e0c5473e7b32", @ANYRES64=0x0], 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffffffffeb7, &(0x7f0000001040), 0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="33b1b097ff010000000000005137e61c4a775964ef20087285dd27fb86bff2edb061c08096f5de6f020000009512ee12ead2b079f5357778f8a9a0555603cdc97cbd77fc8c16ec679e6b90974a77f823a3185f34c177450600000035a3975da7fff93d6fd86dd595d412e4015c0c1f1082ac216be1413991000000000000", @ANYRESOCT, @ANYRESOCT=r4, @ANYRESDEC=r2, @ANYRES16=r4, @ANYRESHEX=0x0], 0x18}, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r5}) socket$kcm(0x2c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000a00053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c200000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x4000000) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000002940)=@ax25={{0x3, @default, 0x7}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null]}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001140)=')O', 0x2}, {&(0x7f0000001300)="20167cd0d08814d66eb41d0b80453634b50aa37f4d42156a21c2e7486eb7131ab0afdd6500eff7db7a1698f7d4757186ac0b198aba1303e6b4022c053e9ea6b27c54c932c7612909335a21f14cd6b3e4bd12c83d9d257341d4c51d728e748ed23e21d238a32a201f0bda5d69ea578f88cdc619fadf7bee60799a4622a1b8a7b01266724b39cb8b5c1ef318c419cb2afb934081ee", 0x94}, {&(0x7f00000013c0)="3e8bdd564288fa85e1a74545ebac3719a0685bcc46fdeba6e41ef1f743942bddf70950c57096cf26eee36533771c1a6805c5bd45ad53ab28bc91e89bc27eb6b61ad49aaaf0e750ef5a121fb452c5eb48168b4b0fb83cf3586696a6e82268abee6a03b7bd8dddd69657fdfbdd056e8f3c6855a46144e2e9f1d8a1644d73dc7a478cda08d58b2857f7816621a57e4d3b7e2db54d44b8920d6797a3700967aecf92a35003fb8b2d6bdbb63306978ab4901bb531be271a6a6d047f92532b2ff8e28ae46e501f453462a35fdb742af461f8dbede89650232ae3a3fa", 0xd9}, {&(0x7f00000014c0)="7ded42c1f2447352cebec63e899f33c3c04600bc106f499d1600949ca3c8fb8b9dc973e46785a442ccd2f758119bddfb69b2b3e6f401f7eec757846113190361abc355da248ed3053d4548ae2c9b04a6138dd7bd3fc3dc60e2f648497137aaf4e4be8fdfd54171af1e677014c1ac4a0e18d959208c30d9adaa6231baf4de2515ce2348f1e2f8e35b024efbe6c4b563074ab8be281d80dec011293754056c602e5037dac6ccb87c4f7efb84550ab99669280c0ecdc08279b852f4a07f68f147f4001fb3da75fec81cccda8dbdc3", 0xcd}, {&(0x7f00000015c0)="8db2aa26ae52594acf7ba273ae9b11204ceb14b51a8c30b2ecf2c20124950e23fcb70db8f8988b5c9f8a6b96586a7ff477377762fdafcfdfbfda3efe54aadaa5cd6ce41e3c08dd6a27442f4cea95b8be7dd44ae671129c4edcb5a64719f8912d53fff37c18c1a7968ea385dc1623641a988f25f5bab91e697d3be556a034eb3c05d5e475e6ffec3cef94d5d07cf2b4ff858e7c3837da09fe029b9df85cd8aaf52db04aebfdc85a35c8ea916ca7022d386f27b398ac6a861b36a5e71361392311c2053de8593ec42959eef4df04b5aca79b7696b6316e464f57e14f26376ba0d74a6aa0df8b89fd2aa22a2440e7f25559e7dfc228a25b2d69a0a3e3", 0xfb}, {&(0x7f0000001900)="a699bac10d8159c033f4536a055c6338a1152a650fe727a511f970aa78168fdc287c0abfee7495d6e39aa289e2820076ff9993016e1784f782edfc790ffd42b2b5a41807f48872cd41d5a1c4b341539d21876e3f046998921fe580f14543720eef00182f39b6b949b926d96c23c126368ad7eb69e0eccaf0460884fd97e5b78b4d587c906ba4584d72ba07fb2c13dd7b095cbf347333d5790dcf29459f2ac15de15f8496d9497521fc381c91133ee5ec31006e3241004e597b09d7cc", 0xbc}, {&(0x7f0000001840)}], 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 2.613131486s ago: executing program 0 (id=13389): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000005c0), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xff7ffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)}, 0x8000) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$kcm(0x2, 0x3, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x8dc, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d", 0x16}, {0x0}], 0x4}, 0x40000) 2.611519017s ago: executing program 2 (id=13398): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000006009800002105823d79354746de2b6ca332e865951456bd334e5ee52685b894e2e84a33df017e", @ANYRES32=0x0, @ANYRES32], 0x50) gettid() r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="b107c09a5026de51ce3e8640af1a8b2d1e67f16405c3458fe41dc04ef234718d683aa3a998fa99431a9c7c6d7505b0cec633f763303666604cbb6aa4c0f995a9454dc81b079dc93b0162ac3d1a8a1b72ce18d493594b3b24bad58801007a7b1d8ab9b50c5dbef8311b2502a124913259abadf354fea31d1ce0fed5c7ac577690164d1a72748723d3eb92e3e73e3a2b7cdfaa442f9e9f8e1a711d5b988215f0f80a2eeade5a078256a41973b0b029278c20a2818628dc256a0742896c3def6e825fdf64fd33d5f584ca908c272dc04d0693decdad028feec7", 0xd8}, {0x0}, {0x0}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98", 0x87}], 0x4, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) recvmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10002) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000003840)=""/4096, 0x1000}], 0x1}, 0x10002) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)) 2.50966797s ago: executing program 3 (id=13390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8802}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc84bb8c396", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.411574603s ago: executing program 0 (id=13391): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x891c, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 2.215736209s ago: executing program 2 (id=13392): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB="00005a6146941b7d54b6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="0cf3", 0x2}], 0x1}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1.981696816s ago: executing program 4 (id=13393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0xffffffc0, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc84bb8c396", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.786039323s ago: executing program 4 (id=13394): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240440c1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x12, &(0x7f0000000040)=r0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='N\n'], 0x6a) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open$cgroup(0x0, r8, 0x0, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000006c8"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) 1.56552059s ago: executing program 3 (id=13395): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1040a2, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400600c}, 0x3) sendmsg$inet(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42304822a5347abc11fb5664dc79199a73e7d", 0x49}, {&(0x7f0000000480)="2c64e36df11764f28e87161c", 0xc}], 0x2}, 0x2400800c) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000ef0000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000001"], 0x48) 1.437799594s ago: executing program 4 (id=13396): close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 1.344455937s ago: executing program 0 (id=13397): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="170000000000000095000000000000"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x80, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x28, 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840), 0x2, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000880)='cpuset.cpus\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x29, 0x5, 0xb, &(0x7f0000002880)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="00000100000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x48) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x25, 0x0, 0x0) 1.156850783s ago: executing program 4 (id=13399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002ffffff8100000081"], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x1008, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x11, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="bf", 0x0, 0x8000}, 0x50) 944.261769ms ago: executing program 0 (id=13400): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20283, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0xed5, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup=r3, r2, 0x7, 0x2024, r2, @void, @void, @value=r4}, 0x20) r5 = openat$cgroup(r3, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x94, 0x1, 0x3, 0xa8, r0, 0x4, '\x00', 0x0, r6, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r7, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', r8, r6, 0x4, 0x1, 0x4}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/126, 0x7e}], 0x1}, 0x2000) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x323) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) ioctl$TUNGETVNETLE(r10, 0x800454dd, &(0x7f0000000680)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r0, 0x3, 0x1, 0xd6e, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_procs(r3, &(0x7f0000000800)='tasks\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000840)=0xfffffffffffffff7, 0x12) write$cgroup_int(r10, &(0x7f0000000880)=0x2, 0x12) write$cgroup_subtree(r10, &(0x7f00000008c0)={[{0x2b, 'blkio'}, {0x2b, 'freezer'}]}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a40)={r11, &(0x7f0000000900)="71568d42b8063dd2326540810daefce474b47812b27cf43e3003173e84001f58c4d4169f876b6f1f0e875289eab9c5d73e2eb1ba8c391d4ec801cc61c45b999d8d59f98cb8f74b2fa7739b24eab3d3a32ff7e28c9c9b30af3b9a10e564bb034b0a5c3c00d326a14a799a61be9ee32fd5657d2b015a9511bdbc3c4002dce6582e04fb7da601661c8c6d1a0b7f1c579f179df21c956f67ac8fb0c2f87f539d59db4ae635eb1596495c67fdfd547453f2d40b0dca603a915cb8dcb8e36ab8091e8f44931ec888484c2e6e9df286c656401fa36d5e7af07c5ca64016", &(0x7f0000000a00)=""/9, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x2400, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x1, '\x00', r8, r6, 0x3, 0x1, 0x1}, 0x50) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x298842, 0x0) ioctl$TUNGETDEVNETNS(r12, 0x54e3, 0x0) socket$kcm(0x29, 0x2, 0x0) 537.071642ms ago: executing program 4 (id=13401): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000005c0), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xff7ffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)}, 0x8000) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$kcm(0x2, 0x3, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x8dc, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d", 0x16}, {0x0}], 0x4}, 0x40000) 479.612954ms ago: executing program 3 (id=13402): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000006009800002105823d79354746de2b6ca332e865951456bd334e5ee52685b894e2e84a33df017e", @ANYRES32=0x0, @ANYRES32], 0x50) gettid() r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="b107c09a5026de51ce3e8640af1a8b2d1e67f16405c3458fe41dc04ef234718d683aa3a998fa99431a9c7c6d7505b0cec633f763303666604cbb6aa4c0f995a9454dc81b079dc93b0162ac3d1a8a1b72ce18d493594b3b24bad58801007a7b1d8ab9b50c5dbef8311b2502a124913259abadf354fea31d1ce0fed5c7ac577690164d1a72748723d3eb92e3e73e3a2b7cdfaa442f9e9f8e1a711d5b988215f0f80a2eeade5a078256a41973b0b029278c20a2818628dc256a0742896c3def6e825fdf64fd33d5f584ca908c272dc04d0693decdad028feec7", 0xd8}, {0x0}, {0x0}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98", 0x87}], 0x4, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) recvmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10002) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000003840)=""/4096, 0x1000}], 0x1}, 0x10002) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)) 208.230273ms ago: executing program 4 (id=13403): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') r0 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xe, 0x0, &(0x7f0000000240)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000940), 0x8, 0xf9, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x7, 0xae, 0x97a, 0x6, 0x0, r6, 0xffffff9c, '\x00', r7, r1, 0x3, 0x5, 0x3}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="6f00000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f00000003c0), &(0x7f0000000440)=r8}, 0x20) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0, 0x0, &(0x7f0000000ec0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x64}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}}}}], 0xb0}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000140)=r8}, 0x20) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x15, 0x4, 0x4, 0xfffffffe, 0x0, r2, 0x7, '\x00', r10, r1, 0x0, 0x3}, 0x50) 0s ago: executing program 3 (id=13404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0xffffffff, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc84bb8c396", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): '. [ 2211.464098][T11730] netlink: 'syz.4.11781': attribute type 19 has an invalid length. [ 2211.489839][T11730] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.11781'. [ 2211.733285][T11738] device lo entered promiscuous mode [ 2211.760842][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2211.937608][T11754] sctp: [Deprecated]: syz.1.11787 (pid 11754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2211.937608][T11754] Use struct sctp_sack_info instead [ 2211.978538][T11754] netlink: 'syz.1.11787': attribute type 21 has an invalid length. [ 2211.988138][T11754] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11787'. [ 2212.261238][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11796'. [ 2212.274337][T11785] netlink: 'syz.4.11796': attribute type 2 has an invalid length. [ 2212.294014][T11788] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 2212.300174][T11787] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 2212.306712][T11787] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 2212.845085][T11804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2212.852597][T11804] IPv6: NLM_F_CREATE should be set when creating new route [ 2212.860233][T11804] IPv6: NLM_F_CREATE should be set when creating new route [ 2212.867675][T11804] IPv6: NLM_F_CREATE should be set when creating new route [ 2212.915316][T11804] netlink: 'syz.1.11802': attribute type 3 has an invalid length. [ 2212.923756][T11806] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.11803'. [ 2212.925413][T11807] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.11803'. [ 2212.955344][T11804] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11802'. [ 2213.224030][T11817] mac80211_hwsim hwsim98 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2213.515477][T11828] team0: Port device team_slave_0 removed [ 2213.521724][T11828] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2213.594402][T11836] netlink: 'syz.3.11814': attribute type 3 has an invalid length. [ 2213.665633][T11842] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2215.326162][T11878] validate_nla: 1 callbacks suppressed [ 2215.326202][T11878] netlink: 'syz.4.11828': attribute type 3 has an invalid length. [ 2215.384512][T11878] __nla_validate_parse: 5 callbacks suppressed [ 2215.384561][T11878] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11828'. [ 2215.550274][T11886] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2215.601616][T11886] device syzkaller0 entered promiscuous mode [ 2215.710369][T11896] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11833'. [ 2215.781862][T11900] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11835'. [ 2215.812945][T11898] vcan0: mtu less than device minimum [ 2215.838390][T11902] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11833'. [ 2216.416903][T11914] netlink: 60583 bytes leftover after parsing attributes in process `syz.2.11838'. [ 2216.427529][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11838'. [ 2217.059929][T11926] netlink: 'syz.0.11842': attribute type 3 has an invalid length. [ 2217.105301][T11926] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11842'. [ 2217.117612][T11931] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11845'. [ 2217.801235][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2217.811478][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2217.831598][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2217.840110][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2217.848968][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2217.857664][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2218.454389][T11947] chnl_net:caif_netlink_parms(): no params data found [ 2218.503542][T11967] netlink: 'syz.2.11852': attribute type 3 has an invalid length. [ 2218.553336][T11967] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11852'. [ 2218.606586][T11971] netlink: 'syz.2.11852': attribute type 3 has an invalid length. [ 2218.676036][T11971] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11852'. [ 2218.713866][T11979] netlink: 'syz.1.11855': attribute type 3 has an invalid length. [ 2218.754936][T11947] bridge0: port 1(bridge_slave_0) entered blocking state [ 2218.762389][T11947] bridge0: port 1(bridge_slave_0) entered disabled state [ 2218.771339][T11947] device bridge_slave_0 entered promiscuous mode [ 2218.782039][T11947] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.789622][T11947] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.798812][T11947] device bridge_slave_1 entered promiscuous mode [ 2218.828898][T11947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2218.841559][T11947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2218.910590][T11947] team0: Port device team_slave_0 added [ 2218.933903][T11947] team0: Port device team_slave_1 added [ 2219.014876][T11947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2219.029827][T11947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2219.096730][T11947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2219.155041][T11947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2219.176631][T11947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2219.260988][T11947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2219.344313][ T9548] device 0 left promiscuous mode [ 2219.460391][T11947] device hsr_slave_0 entered promiscuous mode [ 2219.478102][T11947] device hsr_slave_1 entered promiscuous mode [ 2219.690779][ T9548] tipc: Left network mode [ 2219.695436][T12004] netlink: 'syz.0.11861': attribute type 21 has an invalid length. [ 2219.765456][T12004] netlink: 'syz.0.11861': attribute type 11 has an invalid length. [ 2219.952615][ T1627] Bluetooth: hci1: command 0x0409 tx timeout [ 2219.964744][T12012] bridge_slave_1: default FDB implementation only supports local addresses [ 2220.249783][T12028] netlink: 'syz.0.11866': attribute type 3 has an invalid length. [ 2220.541069][T12034] netlink: 'syz.1.11868': attribute type 10 has an invalid length. [ 2220.550711][T12034] __nla_validate_parse: 3 callbacks suppressed [ 2220.550754][T12034] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11868'. [ 2220.575845][T12041] netlink: 'syz.1.11868': attribute type 10 has an invalid length. [ 2220.630998][T12037] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11867'. [ 2221.044493][T12048] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.11870'. [ 2221.231058][T12065] netlink: 'syz.0.11876': attribute type 3 has an invalid length. [ 2221.286514][T12065] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11876'. [ 2221.399913][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2221.494348][T11947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2221.583350][T11947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2221.606560][T11947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2221.624439][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.630825][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.668544][T11947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2222.026412][ T1627] Bluetooth: hci1: command 0x041b tx timeout [ 2222.539015][T12097] netlink: 'syz.2.11881': attribute type 10 has an invalid length. [ 2222.553743][T12097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11881'. [ 2222.581090][T12097] batman_adv: batadv0: Adding interface: veth1_vlan [ 2222.626334][T12097] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2222.752863][T12097] batman_adv: batadv0: Interface activated: veth1_vlan [ 2222.851401][ T7368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2223.137354][T11947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2223.284674][ T9548] device hsr_slave_0 left promiscuous mode [ 2223.332742][ T9548] device hsr_slave_1 left promiscuous mode [ 2223.550377][T12128] netlink: 'syz.2.11887': attribute type 3 has an invalid length. [ 2223.605306][T12128] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11887'. [ 2223.769864][ T9548] device veth1_macvtap left promiscuous mode [ 2223.802759][ T9548] device veth0_macvtap left promiscuous mode [ 2224.107533][ T1627] Bluetooth: hci1: command 0x040f tx timeout [ 2224.689260][T12138] delete_channel: no stack [ 2226.192378][ T1627] Bluetooth: hci1: command 0x0419 tx timeout [ 2226.962827][ T9548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2227.009996][ T9548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2227.056573][ T9548] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2227.302901][ T9548] bond0 (unregistering): Released all slaves [ 2227.346280][T11947] 8021q: adding VLAN 0 to HW filter on device team0 [ 2227.353476][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2227.361346][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2227.371636][T12124] device syzkaller0 entered promiscuous mode [ 2227.382902][T12146] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.11891'. [ 2227.392643][T12154] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11895'. [ 2227.455813][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2227.467548][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2227.500572][ T7360] bridge0: port 1(bridge_slave_0) entered blocking state [ 2227.507766][ T7360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2227.603392][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2227.621808][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2227.642089][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2227.662151][ T7360] bridge0: port 2(bridge_slave_1) entered blocking state [ 2227.669390][ T7360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2227.703701][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2227.760884][T12184] netlink: 'syz.4.11899': attribute type 10 has an invalid length. [ 2227.836336][T12184] team0: Device vxcan1 is of different type [ 2227.877301][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2227.898862][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2227.920559][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2227.930680][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2227.940650][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2227.950434][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2227.959578][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2227.987076][T11947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2228.002037][T11947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2228.014025][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2228.029151][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2228.048823][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2228.171490][T12190] netlink: 'syz.4.11902': attribute type 3 has an invalid length. [ 2228.179915][T12190] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11902'. [ 2228.393172][T12193] netlink: 'syz.0.11900': attribute type 3 has an invalid length. [ 2228.443029][T12193] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11900'. [ 2228.681930][T12198] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.11903'. [ 2228.743021][T12198] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2228.955393][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2228.973571][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2228.991569][T11947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2229.136714][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2229.158837][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2229.214434][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2229.235672][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2229.277370][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2229.293326][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2229.306345][T11947] device veth0_vlan entered promiscuous mode [ 2229.333595][T11947] device veth1_vlan entered promiscuous mode [ 2229.367208][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2229.386967][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2229.398115][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2229.407734][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2229.423082][T11947] device veth0_macvtap entered promiscuous mode [ 2229.431428][T12221] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.11908'. [ 2229.441891][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2229.467589][T11947] device veth1_macvtap entered promiscuous mode [ 2229.474483][T12217] delete_channel: no stack [ 2229.507822][T11947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.541884][T11947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.561416][T11947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2229.594397][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2229.607836][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2229.620262][T11947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.640896][T11947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.653455][T11947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2229.661967][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2229.671668][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2229.698599][T11947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.732811][T11947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.753609][T11947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.768045][T11947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.918583][T28563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2229.965845][T28563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2230.000099][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2230.026415][ T9515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2230.048043][ T9515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2230.060180][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2230.112005][T12240] netlink: 'syz.0.11915': attribute type 3 has an invalid length. [ 2230.162649][T12240] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11915'. [ 2230.199077][T12246] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.11916'. [ 2230.446188][T12255] device wlan1 entered promiscuous mode [ 2230.498205][T12262] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.11920'. [ 2230.539053][T12257] delete_channel: no stack [ 2230.633599][T12253] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11919'. [ 2231.061515][T12282] netlink: 'syz.1.11928': attribute type 3 has an invalid length. [ 2231.381842][ T9548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.400003][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2231.410568][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2231.421626][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2231.431580][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2231.457135][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2231.467320][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2231.559841][ T9548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.738814][ T9548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.756398][T12299] netlink: 'syz.0.11932': attribute type 17 has an invalid length. [ 2232.006918][ T9548] bond0: (slave netdevsim0): Releasing backup interface [ 2232.033198][ T9548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2232.082986][T12293] chnl_net:caif_netlink_parms(): no params data found [ 2232.541332][T12293] bridge0: port 1(bridge_slave_0) entered blocking state [ 2232.595140][T12293] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.626756][T12293] device bridge_slave_0 entered promiscuous mode [ 2232.656657][ T9548] device .*! left promiscuous mode [ 2232.936328][T12330] netlink: 'syz.0.11939': attribute type 3 has an invalid length. [ 2232.979497][T12330] __nla_validate_parse: 5 callbacks suppressed [ 2232.979548][T12330] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11939'. [ 2233.051517][T12309] device syzkaller0 entered promiscuous mode [ 2233.113591][T12293] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.120859][T12293] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.158687][T12293] device bridge_slave_1 entered promiscuous mode [ 2233.542550][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 2233.657749][ T9548] tipc: Left network mode [ 2233.666311][T12328] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11938'. [ 2235.626223][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 2237.301182][T12293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2237.318185][T12293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2237.610559][T12293] team0: Port device team_slave_0 added [ 2237.705982][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 2237.867238][T12384] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.11946'. [ 2237.899709][T12293] team0: Port device team_slave_1 added [ 2237.907828][T12384] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2238.223512][T12293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2238.230526][T12293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2238.285320][T12293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2238.356093][T12293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2238.363453][T12293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2238.412932][T12293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2238.516519][T12395] netlink: 'syz.3.11949': attribute type 3 has an invalid length. [ 2238.550100][T12395] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11949'. [ 2238.646232][T12403] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11951'. [ 2238.748402][T12405] netlink: 'syz.3.11952': attribute type 2 has an invalid length. [ 2239.050829][T12403] device veth0_to_team left promiscuous mode [ 2239.098762][T12403] Ÿë: port 1(veth0_to_team) entered disabled state [ 2239.214594][T12293] device hsr_slave_0 entered promiscuous mode [ 2239.221854][T12293] device hsr_slave_1 entered promiscuous mode [ 2239.228729][T12293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2239.236451][T12293] Cannot create hsr debugfs directory [ 2239.345687][T12405] device 0 entered promiscuous mode [ 2239.356088][T12409] netlink: 'syz.3.11952': attribute type 10 has an invalid length. [ 2239.782475][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 2239.859058][T12421] netlink: 'syz.0.11954': attribute type 10 has an invalid length. [ 2239.871261][T12421] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11954'. [ 2239.918258][T12430] tipc: Started in network mode [ 2239.930430][T12430] tipc: Node identity 9215a268, cluster identity 4711 [ 2239.970467][T12430] tipc: Node number set to 2450891368 [ 2240.178390][ T9548] team0: Port device wlan1 removed [ 2240.408397][T12438] netlink: 60687 bytes leftover after parsing attributes in process `syz.0.11959'. [ 2241.065678][T12448] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.11962'. [ 2246.355068][ T9548] team0 (unregistering): Port device geneve1 removed [ 2246.564867][ T9548] team0 (unregistering): Port device team_slave_1 removed [ 2246.612935][ T9548] team0 (unregistering): Port device team_slave_0 removed [ 2246.655335][ T9548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2246.664616][ T9548] device bond_slave_1 left promiscuous mode [ 2246.961351][ T9548] bond0 (unregistering): Released all slaves [ 2246.994440][T12448] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2247.003932][T12448] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2247.020118][T12448] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2247.233940][T12293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2247.262080][T12293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2247.388274][T12498] device syzkaller0 entered promiscuous mode [ 2247.428313][T12293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2247.461680][T12504] netlink: 'syz.2.11973': attribute type 10 has an invalid length. [ 2247.473246][T12504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11973'. [ 2247.483456][T12506] netlink: 'syz.3.11971': attribute type 33 has an invalid length. [ 2247.492379][T12506] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11971'. [ 2247.508256][T12293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2252.460974][T12524] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11975'. [ 2252.630949][T12293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2252.671614][T12551] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.11979'. [ 2252.702592][T12293] 8021q: adding VLAN 0 to HW filter on device team0 [ 2252.709653][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2252.718747][T12551] netlink: zone id is out of range [ 2252.721606][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2252.744011][T12551] netlink: zone id is out of range [ 2252.749448][T12551] netlink: zone id is out of range [ 2252.757520][T12551] netlink: zone id is out of range [ 2252.798024][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2252.806663][T12551] netlink: zone id is out of range [ 2252.815925][T12551] netlink: zone id is out of range [ 2252.821320][T12551] netlink: zone id is out of range [ 2252.828449][T12551] netlink: zone id is out of range [ 2252.828518][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2252.834342][T12551] netlink: zone id is out of range [ 2252.860985][T12551] netlink: zone id is out of range [ 2252.870594][ T9548] bridge0: port 1(bridge_slave_0) entered blocking state [ 2252.877792][ T9548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2252.894516][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2252.906303][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2252.915150][ T9548] bridge0: port 2(bridge_slave_1) entered blocking state [ 2252.922320][ T9548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2252.948575][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2252.957941][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2252.967435][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2252.997966][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2253.024049][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2253.046625][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2253.069349][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2253.091172][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2253.116259][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2253.125559][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2253.168013][T12293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2253.209897][T12293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2253.237156][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2253.256926][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2254.053439][ T7368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2254.064700][ T7368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2254.091045][T12293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2255.101868][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2255.130881][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2255.173880][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2255.204530][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2255.223209][T12614] netlink: 'syz.3.11995': attribute type 3 has an invalid length. [ 2255.237891][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2255.251211][T12614] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11995'. [ 2255.273421][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2255.294118][T12293] device veth0_vlan entered promiscuous mode [ 2255.319925][T12293] device veth1_vlan entered promiscuous mode [ 2255.349296][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2255.361700][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2255.370555][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2255.380604][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2255.392677][T12293] device veth0_macvtap entered promiscuous mode [ 2255.426860][T12293] device veth1_macvtap entered promiscuous mode [ 2255.487713][T12293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2255.548232][T12293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.615341][T12293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2255.670829][T12293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.738389][T12293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2255.748708][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2255.763413][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2255.771867][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2255.785819][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2255.798372][T12293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2255.811473][T12293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.828432][T12293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2255.839347][T12293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.861884][T12293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2255.885823][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2255.897141][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2255.919077][T12293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.938362][T12293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.950876][T12293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.985693][T12293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2256.188752][T12632] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12001'. [ 2256.216587][ T9515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2256.236530][T12632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12001'. [ 2256.238256][ T9515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2256.275512][ T7368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2256.303736][T12636] netlink: 'syz.2.12003': attribute type 10 has an invalid length. [ 2256.313684][ T7368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2256.327703][ T7368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2256.337551][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2256.483356][T12638] netlink: 'syz.0.12005': attribute type 10 has an invalid length. [ 2256.508227][T12641] netlink: 'syz.4.11925': attribute type 3 has an invalid length. [ 2256.526853][T12641] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11925'. [ 2256.549094][T12644] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12006'. [ 2256.572966][T12645] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12006'. [ 2256.629140][T12638] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12005'. [ 2256.947979][T12658] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12010'. [ 2259.541384][T12666] netlink: 15978 bytes leftover after parsing attributes in process `syz.4.12013'. [ 2259.551335][T12680] netlink: 'syz.0.12016': attribute type 39 has an invalid length. [ 2259.819418][T12702] netlink: 'syz.0.12023': attribute type 22 has an invalid length. [ 2259.852852][T12702] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.12023'. [ 2260.038789][T12708] netlink: 'syz.3.12026': attribute type 3 has an invalid length. [ 2260.085432][T12708] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12026'. [ 2260.416347][T12725] tipc: Started in network mode [ 2260.421268][T12725] tipc: Node identity 9215a268, cluster identity 4711 [ 2260.452517][T12725] tipc: Node number set to 2450891368 [ 2260.630293][T12732] netlink: 'syz.2.12033': attribute type 29 has an invalid length. [ 2260.656852][T12732] netlink: 'syz.2.12033': attribute type 29 has an invalid length. [ 2260.716076][T12735] netlink: 'syz.1.12031': attribute type 12 has an invalid length. [ 2260.771232][T12735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12031'. [ 2260.849188][T12734] netlink: 'syz.2.12033': attribute type 29 has an invalid length. [ 2260.876644][T12738] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12034'. [ 2261.107043][T12742] netlink: 'syz.1.12035': attribute type 2 has an invalid length. [ 2261.134026][T12742] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12035'. [ 2261.689312][T12770] netlink: 'syz.1.12043': attribute type 3 has an invalid length. [ 2261.722614][T12770] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12043'. [ 2262.089066][T12792] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12049'. [ 2262.297497][T12797] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12053'. [ 2264.226498][ T1627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2264.236578][ T1627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2264.258267][ T1627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2264.266323][ T1627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2264.276751][ T1627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2264.284384][ T1627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2264.647567][T12862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12074'. [ 2264.719636][T12866] netlink: 'syz.0.12075': attribute type 27 has an invalid length. [ 2264.728299][T12866] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12075'. [ 2265.075402][ T7360] tipc: Left network mode [ 2265.078855][T12853] chnl_net:caif_netlink_parms(): no params data found [ 2265.798392][T12853] bridge0: port 1(bridge_slave_0) entered blocking state [ 2265.846068][T12853] bridge0: port 1(bridge_slave_0) entered disabled state [ 2265.874667][T12853] device bridge_slave_0 entered promiscuous mode [ 2265.940408][T12910] netlink: 'syz.0.12085': attribute type 2 has an invalid length. [ 2266.011580][T12910] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.12085'. [ 2266.072739][T12907] netlink: 'syz.0.12085': attribute type 7 has an invalid length. [ 2266.080872][T12853] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.103282][T12853] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.111425][T12853] device bridge_slave_1 entered promiscuous mode [ 2266.347653][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 2266.351653][T12853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2267.323790][T12853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2267.568393][T12853] team0: Port device team_slave_0 added [ 2267.665330][T12942] device syzkaller0 entered promiscuous mode [ 2267.747765][T12853] team0: Port device team_slave_1 added [ 2267.800362][T12945] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.12094'. [ 2268.424050][ T1627] Bluetooth: hci0: command 0x041b tx timeout [ 2270.372923][T12953] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2270.446209][T12853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2270.459854][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2270.502381][ T1627] Bluetooth: hci0: command 0x040f tx timeout [ 2270.562463][T12853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2270.660487][T12985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12099'. [ 2270.702816][T12853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2270.720956][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2270.821180][T12853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2271.012073][T12991] netlink: 'syz.3.12100': attribute type 29 has an invalid length. [ 2271.174458][T12991] netlink: 'syz.3.12100': attribute type 29 has an invalid length. [ 2271.277919][T12853] device hsr_slave_0 entered promiscuous mode [ 2271.324017][T12853] device hsr_slave_1 entered promiscuous mode [ 2271.338915][T12853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2271.357442][T12853] Cannot create hsr debugfs directory [ 2271.459498][T12993] netlink: 'syz.3.12100': attribute type 29 has an invalid length. [ 2272.162306][T13012] netlink: 'syz.1.12103': attribute type 21 has an invalid length. [ 2272.170308][T13012] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12103'. [ 2272.212374][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12103'. [ 2272.426538][T13020] netlink: 'syz.3.12105': attribute type 3 has an invalid length. [ 2272.473997][T13020] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12105'. [ 2272.582472][ T1627] Bluetooth: hci0: command 0x0419 tx timeout [ 2272.697269][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2272.705208][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2272.729921][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2272.757227][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2272.812349][ T7360] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 2272.819521][ T7360] batman_adv: batadv0: Removing interface: veth1_vlan [ 2272.861217][ T7360] batman_adv: batadv0: Interface deactivated: vlan1 [ 2272.878337][ T7360] batman_adv: batadv0: Removing interface: vlan1 [ 2272.908288][ T7360] device veth0_vlan left promiscuous mode [ 2273.750875][ T7360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2274.131649][ T7360] bond0 (unregistering): Released all slaves [ 2274.191923][T13034] netlink: 'syz.1.12107': attribute type 10 has an invalid length. [ 2274.202704][T13034] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12107'. [ 2274.919562][T12853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2274.972376][T12853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2274.990855][T12853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2275.013208][T12853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2275.274569][T12853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2275.338786][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2275.355171][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2275.395868][T12853] 8021q: adding VLAN 0 to HW filter on device team0 [ 2275.462732][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2275.490179][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2275.519062][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.526256][ T9523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2275.586216][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2275.650097][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2275.772678][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.772970][T13079] netlink: 'syz.0.12115': attribute type 29 has an invalid length. [ 2275.779791][ T9523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2275.806728][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2275.824018][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2275.857078][T13079] netlink: 'syz.0.12115': attribute type 29 has an invalid length. [ 2275.892761][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2275.908960][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2275.932104][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2275.975886][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2276.027692][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2276.037075][T13083] net_ratelimit: 3546 callbacks suppressed [ 2276.037090][T13083] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2276.118214][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2276.164435][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2276.272973][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2276.407392][T13095] netlink: 'syz.3.12120': attribute type 10 has an invalid length. [ 2276.444010][T13095] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12120'. [ 2276.510577][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2276.524852][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2276.554094][T12853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2276.576385][T13103] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.12121'. [ 2276.830049][T13114] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12125'. [ 2276.876279][T13116] netlink: 'syz.1.12124': attribute type 3 has an invalid length. [ 2276.888237][T13116] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12124'. [ 2277.278047][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2277.297386][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2277.444979][T12853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2277.494321][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2277.525993][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2277.543717][T13134] netlink: 'syz.3.12128': attribute type 3 has an invalid length. [ 2277.558079][T13134] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.12128'. [ 2277.572862][T13137] bridge0: port 3(syz_tun) entered blocking state [ 2277.586014][T13137] bridge0: port 3(syz_tun) entered disabled state [ 2277.607941][T13137] device syz_tun entered promiscuous mode [ 2277.622080][T13137] bridge0: port 3(syz_tun) entered blocking state [ 2277.629019][T13137] bridge0: port 3(syz_tun) entered forwarding state [ 2277.651460][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2277.665931][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2277.678179][T12853] device veth0_vlan entered promiscuous mode [ 2277.687968][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2277.699361][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2277.718979][T12853] device veth1_vlan entered promiscuous mode [ 2277.803731][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2277.816492][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2277.858533][T12853] device veth0_macvtap entered promiscuous mode [ 2277.871164][T12853] device veth1_macvtap entered promiscuous mode [ 2277.911002][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2277.953231][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.985270][T13145] delete_channel: no stack [ 2277.992427][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2278.026122][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.049624][T12853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2278.077788][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2278.098495][T13150] netlink: 'syz.4.12133': attribute type 29 has an invalid length. [ 2278.115098][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.115123][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2278.115139][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.116794][T12853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2278.177981][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2278.216557][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2278.291680][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2278.321467][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2278.368089][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2278.393537][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2278.437361][T12853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.456529][T12853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.496578][T12853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.511827][T12853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.536907][T13150] netlink: 'syz.4.12133': attribute type 29 has an invalid length. [ 2278.616355][T13157] netlink: 'syz.0.12134': attribute type 10 has an invalid length. [ 2278.635092][T13157] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12134'. [ 2278.676643][T13152] netlink: 'syz.4.12133': attribute type 29 has an invalid length. [ 2278.839021][T13174] netlink: 'syz.1.12137': attribute type 10 has an invalid length. [ 2278.865598][T13174] device veth1_macvtap left promiscuous mode [ 2279.125873][ T7360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2279.140265][ T7360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2279.164159][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2279.249097][ T9532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2279.272711][ T9532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2279.290580][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2279.449360][T13197] netlink: 'syz.3.12141': attribute type 29 has an invalid length. [ 2279.472806][T13197] netlink: 'syz.3.12141': attribute type 29 has an invalid length. [ 2281.462173][T13262] device wlan1 left promiscuous mode [ 2281.846388][T13279] validate_nla: 6 callbacks suppressed [ 2281.846406][T13279] netlink: 'syz.2.12160': attribute type 10 has an invalid length. [ 2281.948621][T13279] device veth0_vlan left promiscuous mode [ 2282.005929][T13279] device veth0_vlan entered promiscuous mode [ 2282.085794][T13279] team0: Device veth0_vlan failed to register rx_handler [ 2282.234991][T13288] netlink: 'syz.0.12161': attribute type 21 has an invalid length. [ 2282.535158][T13310] tap0: tun_chr_ioctl cmd 1074025677 [ 2282.553222][T13310] tap0: linktype set to 6 [ 2283.068067][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.074430][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.181558][T13380] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12184'. [ 2284.337738][T13380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2284.386198][T13380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2284.426824][T13380] bond0 (unregistering): Released all slaves [ 2284.452661][T13375] netlink: 'syz.1.12182': attribute type 10 has an invalid length. [ 2284.513543][T13385] netlink: 'syz.0.12185': attribute type 10 has an invalid length. [ 2284.529419][T13385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12185'. [ 2284.546729][T13385] device dummy0 entered promiscuous mode [ 2284.553717][T13385] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 2284.572990][T13385] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 2284.580431][T13385] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2286.370412][T13432] netlink: 'syz.3.12197': attribute type 7 has an invalid length. [ 2286.680842][T13446] tap0: tun_chr_ioctl cmd 1074025677 [ 2286.734632][T13446] tap0: linktype set to 1 [ 2286.756028][T13447] tap0: tun_chr_ioctl cmd 1074025677 [ 2286.761514][T13447] tap0: linktype set to 1 [ 2287.032060][T13462] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12206'. [ 2287.087477][T13461] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12206'. [ 2287.527081][T13479] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.12211'. [ 2288.489855][T13501] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12219'. [ 2288.641748][ T48] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 2289.056506][T13527] netlink: 'syz.3.12227': attribute type 3 has an invalid length. [ 2289.149329][T13527] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.12227'. [ 2289.597230][T13546] netlink: 'syz.3.12231': attribute type 49 has an invalid length. [ 2289.708820][T13548] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12232'. [ 2289.747119][T13548] ksmbd: Unknown IPC event: 10, ignore. [ 2289.981694][ T48] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 2290.020809][T13556] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.12233'. [ 2290.108588][T13556] openvswitch: netlink: Flow actions attr not present in new flow. [ 2290.271525][T13561] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12233'. [ 2290.338334][T13569] netlink: 'syz.1.12239': attribute type 21 has an invalid length. [ 2290.352767][T13569] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12239'. [ 2290.760528][ T48] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2291.131706][T13601] device syzkaller0 entered promiscuous mode [ 2291.176579][T13619] netlink: 188 bytes leftover after parsing attributes in process `syz.2.12249'. [ 2291.233558][T13619] ksmbd: Unknown IPC event: 10, ignore. [ 2294.759880][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 2296.102400][ T1627] Bluetooth: hci1: command 0x0406 tx timeout [ 2296.912526][ T1627] Bluetooth: hci3: command 0x0406 tx timeout [ 2297.640308][T13653] netlink: 'syz.3.12256': attribute type 21 has an invalid length. [ 2297.649541][T13653] netlink: 'syz.3.12256': attribute type 20 has an invalid length. [ 2297.661065][T13656] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12258'. [ 2298.492247][T13688] device wlan1 entered promiscuous mode [ 2298.987919][T13696] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.12269'. [ 2299.719951][T13708] netlink: 188 bytes leftover after parsing attributes in process `syz.1.12272'. [ 2299.762375][T13708] ksmbd: Unknown IPC event: 10, ignore. [ 2300.744482][ T9523] wlan1: Trigger new scan to find an IBSS to join [ 2300.839117][T13715] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2300.894320][T13715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2301.169834][T13727] bridge0: port 3(syz_tun) entered disabled state [ 2301.176475][T13727] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.183936][T13727] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.210602][T13722] netlink: 'syz.1.12277': attribute type 4 has an invalid length. [ 2301.268518][T13722] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12277'. [ 2301.621474][T13758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12287'. [ 2301.901805][T13762] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12288'. [ 2301.911579][T13762] ksmbd: Unknown IPC event: 10, ignore. [ 2304.742488][ T7368] wlan1: Trigger new scan to find an IBSS to join [ 2306.846944][T13798] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12300'. [ 2307.590428][T13819] netlink: 'syz.2.12305': attribute type 1 has an invalid length. [ 2307.716374][ T9523] wlan1: Trigger new scan to find an IBSS to join [ 2307.815291][ T9532] wlan1: Creating new IBSS network, BSSID ce:6d:7a:a3:cc:68 [ 2307.870216][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2308.265050][T13842] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2308.326528][T13842] syzkaller1: linktype set to 773 [ 2308.335788][T13841] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12312'. [ 2308.382567][T13841] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2308.429293][T13841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2308.654389][T13847] netlink: 'syz.1.12313': attribute type 3 has an invalid length. [ 2308.676884][T13847] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12313'. [ 2309.155645][T13864] netlink: 'syz.2.12319': attribute type 3 has an invalid length. [ 2309.212713][T13864] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12319'. [ 2310.119235][T13886] netlink: 'syz.3.12325': attribute type 3 has an invalid length. [ 2310.152638][T13886] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12325'. [ 2313.638012][T13913] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12332'. [ 2313.749959][T13922] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12335'. [ 2314.048747][T13933] netlink: 'syz.2.12338': attribute type 3 has an invalid length. [ 2314.057228][T13933] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12338'. [ 2315.064810][T13953] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.12346'. [ 2316.242545][T13976] netlink: 'syz.1.12353': attribute type 3 has an invalid length. [ 2316.275182][T13976] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12353'. [ 2317.695098][T14012] netlink: 'syz.1.12363': attribute type 9 has an invalid length. [ 2317.734758][T14012] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.12363'. [ 2318.091527][T14021] netlink: 'syz.1.12367': attribute type 3 has an invalid length. [ 2318.114694][T14021] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12367'. [ 2318.158232][T14026] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2318.165121][T14026] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2318.871788][T14050] netlink: 'syz.0.12375': attribute type 19 has an invalid length. [ 2319.920509][T14070] netlink: 'syz.4.12383': attribute type 10 has an invalid length. [ 2319.958144][T14070] netlink: 2 bytes leftover after parsing attributes in process `syz.4.12383'. [ 2320.073275][T14071] netlink: 'syz.3.12379': attribute type 2 has an invalid length. [ 2320.186379][T14071] netlink: 'syz.3.12379': attribute type 3 has an invalid length. [ 2320.226968][T14071] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12379'. [ 2320.399190][T14056] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.12379'. [ 2320.909436][T14093] netlink: 'syz.1.12388': attribute type 19 has an invalid length. [ 2321.260500][T14109] netlink: 'syz.1.12394': attribute type 3 has an invalid length. [ 2321.279305][T14109] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12394'. [ 2322.730437][T14130] device syzkaller0 entered promiscuous mode [ 2322.813643][T14134] netlink: 'syz.3.12403': attribute type 19 has an invalid length. [ 2323.677978][T14152] netlink: 'syz.2.12408': attribute type 3 has an invalid length. [ 2323.687581][T14152] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12408'. [ 2326.584325][T14174] netlink: 'syz.3.12414': attribute type 19 has an invalid length. [ 2326.599747][T14174] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.12414'. [ 2326.702577][T14179] netlink: 'syz.4.12416': attribute type 3 has an invalid length. [ 2326.753318][T14179] netlink: 'syz.4.12416': attribute type 1 has an invalid length. [ 2326.781114][T14179] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.12416'. [ 2326.906125][T14181] netlink: 'syz.3.12419': attribute type 3 has an invalid length. [ 2326.947007][T14181] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12419'. [ 2327.208941][T14191] netlink: 176 bytes leftover after parsing attributes in process `syz.4.12420'. [ 2327.578022][T14206] netlink: 'syz.3.12426': attribute type 3 has an invalid length. [ 2327.586268][T14206] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12426'. [ 2327.695349][T14211] netlink: 'syz.1.12427': attribute type 1 has an invalid length. [ 2327.712388][T14211] netlink: 'syz.1.12427': attribute type 3 has an invalid length. [ 2327.732701][T14211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12427'. [ 2327.821365][T14214] netlink: 'syz.4.12428': attribute type 3 has an invalid length. [ 2327.829827][T14214] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12428'. [ 2328.150936][T14232] netlink: 'syz.1.12432': attribute type 3 has an invalid length. [ 2328.161428][T14232] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12432'. [ 2328.176247][T14234] tipc: Started in network mode [ 2328.189817][T14234] tipc: Node identity 9215a268, cluster identity 4711 [ 2328.205968][T14234] tipc: Node number set to 2450891368 [ 2328.336305][T14237] device syzkaller0 entered promiscuous mode [ 2328.373004][T14240] netlink: 'syz.4.12435': attribute type 2 has an invalid length. [ 2328.381694][T14240] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12435'. [ 2330.492383][T14253] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.12439'. [ 2330.604302][T14262] FAULT_INJECTION: forcing a failure. [ 2330.604302][T14262] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.673754][T14262] CPU: 0 PID: 14262 Comm: syz.3.12441 Not tainted syzkaller #0 [ 2330.681355][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2330.691404][T14262] Call Trace: [ 2330.691413][T14262] [ 2330.691422][T14262] dump_stack_lvl+0x188/0x24e [ 2330.702293][T14262] ? show_regs_print_info+0x12/0x12 [ 2330.707504][T14262] ? load_image+0x400/0x400 [ 2330.712029][T14262] ? __might_sleep+0xd0/0xd0 [ 2330.716633][T14262] ? __lock_acquire+0x7d10/0x7d10 [ 2330.721681][T14262] should_fail_ex+0x399/0x4d0 [ 2330.726377][T14262] should_failslab+0x5/0x20 [ 2330.730897][T14262] slab_pre_alloc_hook+0x59/0x310 [ 2330.735941][T14262] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2330.741681][T14262] __kmem_cache_alloc_node+0x4f/0x260 [ 2330.747071][T14262] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2330.752815][T14262] __kmalloc+0xa0/0x240 [ 2330.757017][T14262] tomoyo_realpath_from_path+0xdf/0x5d0 [ 2330.762595][T14262] ? tomoyo_path_number_perm+0x205/0x650 [ 2330.768247][T14262] tomoyo_path_number_perm+0x22f/0x650 [ 2330.773732][T14262] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2330.779246][T14262] ? __fget_files+0x28/0x4b0 [ 2330.783865][T14262] ? __fget_files+0x28/0x4b0 [ 2330.788484][T14262] security_file_ioctl+0x6c/0xa0 [ 2330.793442][T14262] __se_sys_ioctl+0x48/0x170 [ 2330.798055][T14262] do_syscall_64+0x4c/0xa0 [ 2330.802481][T14262] ? clear_bhb_loop+0x60/0xb0 [ 2330.807174][T14262] ? clear_bhb_loop+0x60/0xb0 [ 2330.811868][T14262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2330.817776][T14262] RIP: 0033:0x7fd6bdb9ce59 [ 2330.822202][T14262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2330.841819][T14262] RSP: 002b:00007fd6beabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2330.850252][T14262] RAX: ffffffffffffffda RBX: 00007fd6bde15fa0 RCX: 00007fd6bdb9ce59 [ 2330.858231][T14262] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 2330.866212][T14262] RBP: 00007fd6beabe090 R08: 0000000000000000 R09: 0000000000000000 [ 2330.874193][T14262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2330.882173][T14262] R13: 00007fd6bde16038 R14: 00007fd6bde15fa0 R15: 00007ffc67a1ab68 [ 2330.890157][T14262] [ 2330.930433][T14262] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2331.659563][T14291] __nla_validate_parse: 2 callbacks suppressed [ 2331.659582][T14291] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12450'. [ 2332.126014][T14306] validate_nla: 2 callbacks suppressed [ 2332.126033][T14306] netlink: 'syz.2.12454': attribute type 10 has an invalid length. [ 2332.171875][T14306] bridge0: port 2(bridge_slave_1) entered disabled state [ 2332.210946][T14306] device bridge_slave_1 left promiscuous mode [ 2332.294352][T14306] bridge0: port 2(bridge_slave_1) entered disabled state [ 2332.360276][T14306] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2332.410621][T14313] netlink: 'syz.0.12456': attribute type 3 has an invalid length. [ 2332.431308][T14311] netlink: 'syz.1.12457': attribute type 3 has an invalid length. [ 2332.441097][T14313] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12456'. [ 2332.457827][T14311] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12457'. [ 2333.750365][T14359] netlink: 'syz.1.12468': attribute type 11 has an invalid length. [ 2333.786939][T14359] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.12468'. [ 2333.833265][T14360] netlink: 'syz.1.12468': attribute type 11 has an invalid length. [ 2333.869209][T14360] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.12468'. [ 2334.212794][T14369] netlink: 'syz.0.12471': attribute type 3 has an invalid length. [ 2334.227831][T14370] delete_channel: no stack [ 2334.235401][T14369] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12471'. [ 2334.358127][T14375] netlink: 'syz.4.12472': attribute type 3 has an invalid length. [ 2334.377068][T14375] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12472'. [ 2334.693671][T14388] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.12474'. [ 2334.738947][T14382] netlink: 'syz.1.12475': attribute type 3 has an invalid length. [ 2334.770053][T14392] FAULT_INJECTION: forcing a failure. [ 2334.770053][T14392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2334.800397][T14388] netlink: 'syz.2.12474': attribute type 2 has an invalid length. [ 2334.801306][T14382] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12475'. [ 2334.812670][T14392] CPU: 0 PID: 14392 Comm: syz.0.12478 Not tainted syzkaller #0 [ 2334.825351][T14392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2334.835415][T14392] Call Trace: [ 2334.838705][T14392] [ 2334.841648][T14392] dump_stack_lvl+0x188/0x24e [ 2334.846337][T14392] ? show_regs_print_info+0x12/0x12 [ 2334.851523][T14392] ? load_image+0x400/0x400 [ 2334.856019][T14392] ? __lock_acquire+0x7d10/0x7d10 [ 2334.861049][T14392] should_fail_ex+0x399/0x4d0 [ 2334.865735][T14392] _copy_from_user+0x2c/0x170 [ 2334.870415][T14392] get_user_ifreq+0x67/0x170 [ 2334.875000][T14392] sock_ioctl+0x637/0x710 [ 2334.879323][T14392] ? sock_poll+0x410/0x410 [ 2334.883736][T14392] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2334.888672][T14392] ? security_file_ioctl+0x7c/0xa0 [ 2334.893780][T14392] ? sock_poll+0x410/0x410 [ 2334.898189][T14392] __se_sys_ioctl+0xfa/0x170 [ 2334.902783][T14392] do_syscall_64+0x4c/0xa0 [ 2334.907190][T14392] ? clear_bhb_loop+0x60/0xb0 [ 2334.911860][T14392] ? clear_bhb_loop+0x60/0xb0 [ 2334.916540][T14392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2334.922432][T14392] RIP: 0033:0x7fdfc6f9ce59 [ 2334.926838][T14392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2334.946431][T14392] RSP: 002b:00007fdfc7f3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2334.954835][T14392] RAX: ffffffffffffffda RBX: 00007fdfc7215fa0 RCX: 00007fdfc6f9ce59 [ 2334.962797][T14392] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 2334.970764][T14392] RBP: 00007fdfc7f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 2334.978725][T14392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2334.986695][T14392] R13: 00007fdfc7216038 R14: 00007fdfc7215fa0 R15: 00007ffee5e2daa8 [ 2334.994670][T14392] [ 2335.004239][T14388] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12474'. [ 2335.531578][T14418] netlink: 'syz.2.12484': attribute type 3 has an invalid length. [ 2336.427997][T14445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2336.647617][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2336.658044][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2336.682461][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2336.691217][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2336.699283][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2336.706739][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2336.944744][T14450] __nla_validate_parse: 39 callbacks suppressed [ 2336.944761][T14450] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12495'. [ 2337.288854][ T9548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.376348][T14455] validate_nla: 4 callbacks suppressed [ 2337.376383][T14455] netlink: 'syz.1.12497': attribute type 3 has an invalid length. [ 2337.441206][T14455] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12497'. [ 2337.544023][ T9548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.646329][T14461] FAULT_INJECTION: forcing a failure. [ 2337.646329][T14461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2337.732425][T14461] CPU: 0 PID: 14461 Comm: syz.3.12498 Not tainted syzkaller #0 [ 2337.740022][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2337.750086][T14461] Call Trace: [ 2337.753376][T14461] [ 2337.756325][T14461] dump_stack_lvl+0x188/0x24e [ 2337.761021][T14461] ? show_regs_print_info+0x12/0x12 [ 2337.766235][T14461] ? load_image+0x400/0x400 [ 2337.770756][T14461] ? __lock_acquire+0x7d10/0x7d10 [ 2337.775805][T14461] should_fail_ex+0x399/0x4d0 [ 2337.780502][T14461] _copy_from_user+0x2c/0x170 [ 2337.785200][T14461] br_dev_siocdevprivate+0x115/0x17a0 [ 2337.790596][T14461] ? br_handle_local_finish+0x20/0x20 [ 2337.795982][T14461] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2337.802154][T14461] ? __mutex_lock+0x806/0xaf0 [ 2337.806845][T14461] ? __lock_acquire+0x7d10/0x7d10 [ 2337.811895][T14461] ? do_raw_spin_unlock+0x11d/0x230 [ 2337.817107][T14461] ? full_name_hash+0x8e/0xe0 [ 2337.821804][T14461] dev_ifsioc+0xa4a/0xd40 [ 2337.826149][T14461] ? dev_ioctl+0xe80/0xe80 [ 2337.830584][T14461] ? full_name_hash+0x8e/0xe0 [ 2337.835275][T14461] ? dev_load+0x1d/0x1e0 [ 2337.839552][T14461] ? dev_load+0x1d/0x1e0 [ 2337.843810][T14461] dev_ioctl+0x5f8/0xe80 [ 2337.848060][T14461] ? get_user_ifreq+0xc7/0x170 [ 2337.852818][T14461] sock_ioctl+0x691/0x710 [ 2337.857144][T14461] ? sock_poll+0x410/0x410 [ 2337.861557][T14461] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2337.866524][T14461] ? security_file_ioctl+0x7c/0xa0 [ 2337.871634][T14461] ? sock_poll+0x410/0x410 [ 2337.876042][T14461] __se_sys_ioctl+0xfa/0x170 [ 2337.880627][T14461] do_syscall_64+0x4c/0xa0 [ 2337.885032][T14461] ? clear_bhb_loop+0x60/0xb0 [ 2337.889701][T14461] ? clear_bhb_loop+0x60/0xb0 [ 2337.894379][T14461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2337.900263][T14461] RIP: 0033:0x7fd6bdb9ce59 [ 2337.904669][T14461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2337.924264][T14461] RSP: 002b:00007fd6beabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2337.932674][T14461] RAX: ffffffffffffffda RBX: 00007fd6bde15fa0 RCX: 00007fd6bdb9ce59 [ 2337.940636][T14461] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 2337.948595][T14461] RBP: 00007fd6beabe090 R08: 0000000000000000 R09: 0000000000000000 [ 2337.956557][T14461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2337.964517][T14461] R13: 00007fd6bde16038 R14: 00007fd6bde15fa0 R15: 00007ffc67a1ab68 [ 2337.972490][T14461] [ 2338.321736][ T9548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.371338][T14448] chnl_net:caif_netlink_parms(): no params data found [ 2338.498139][ T9548] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.667920][T14448] bridge0: port 1(bridge_slave_0) entered blocking state [ 2338.742691][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 2338.743124][T14448] bridge0: port 1(bridge_slave_0) entered disabled state [ 2338.788760][T14448] device bridge_slave_0 entered promiscuous mode [ 2338.822025][T14448] bridge0: port 2(bridge_slave_1) entered blocking state [ 2338.847832][T14448] bridge0: port 2(bridge_slave_1) entered disabled state [ 2338.878439][T14448] device bridge_slave_1 entered promiscuous mode [ 2338.977093][T14448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2339.050589][T14448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2339.137156][T14509] netlink: 'syz.2.12509': attribute type 3 has an invalid length. [ 2339.157553][T14509] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12509'. [ 2339.166047][T14448] team0: Port device team_slave_0 added [ 2339.208005][T14448] team0: Port device team_slave_1 added [ 2339.233247][ T9548] device 0 left promiscuous mode [ 2339.337387][T14448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2339.367685][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2339.497400][T14448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2339.538368][ T9548] tipc: Left network mode [ 2339.581620][T14448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2339.593935][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2339.738056][T14448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2339.890486][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12512'. [ 2340.852260][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 2341.848040][T14558] netlink: 'syz.3.12520': attribute type 3 has an invalid length. [ 2341.879470][T14558] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12520'. [ 2342.600072][T14448] device hsr_slave_0 entered promiscuous mode [ 2342.648719][T14448] device hsr_slave_1 entered promiscuous mode [ 2342.680286][T14448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2342.692848][T14448] Cannot create hsr debugfs directory [ 2342.803135][T14569] netlink: 'syz.3.12523': attribute type 29 has an invalid length. [ 2342.902894][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 2344.300870][T14599] netlink: 'syz.1.12532': attribute type 3 has an invalid length. [ 2344.391501][T14599] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12532'. [ 2344.505546][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.511924][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.938637][T14613] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.12535'. [ 2344.984897][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 2345.162799][T14448] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2345.221123][T14448] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2345.272424][T14448] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2345.320445][T14448] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2345.911380][T14448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2345.985781][T14448] 8021q: adding VLAN 0 to HW filter on device team0 [ 2345.995782][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2346.008130][ T7360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2346.045103][ T9548] device hsr_slave_0 left promiscuous mode [ 2346.078333][ T9548] device hsr_slave_1 left promiscuous mode [ 2346.130487][ T9548] device veth1_macvtap left promiscuous mode [ 2346.143587][ T9548] device veth0_macvtap left promiscuous mode [ 2346.256200][T14652] netlink: 'syz.3.12544': attribute type 3 has an invalid length. [ 2346.297500][T14652] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12544'. [ 2346.373220][ T9548] team0 (unregistering): Port device geneve1 removed [ 2346.744984][ T9548] team0 (unregistering): Port device team_slave_1 removed [ 2346.785442][ T9548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2346.821998][ T9548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2346.863592][ T9548] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2347.091898][ T9548] bond0 (unregistering): Released all slaves [ 2347.130783][T14654] netlink: 830 bytes leftover after parsing attributes in process `syz.4.12545'. [ 2347.196312][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2347.213026][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2347.228599][ T9515] bridge0: port 1(bridge_slave_0) entered blocking state [ 2347.235760][ T9515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2347.262369][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2347.296213][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2347.359183][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2347.386346][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state [ 2347.393533][ T9515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2347.401969][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2347.442466][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2347.474913][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2347.495930][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2347.514525][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2347.534632][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2347.552635][T14681] netlink: 'syz.2.12553': attribute type 2 has an invalid length. [ 2347.565776][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2347.610092][T14448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2347.647777][T14681] netlink: 'syz.2.12553': attribute type 1 has an invalid length. [ 2347.673242][T14448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2347.740081][T14681] netlink: 'syz.2.12553': attribute type 4 has an invalid length. [ 2347.765169][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2347.810377][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2347.835439][T14681] netlink: 208312 bytes leftover after parsing attributes in process `syz.2.12553'. [ 2347.856196][T14688] can: request_module (can-proto-0) failed. [ 2347.863347][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2347.880261][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2347.889783][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2348.034678][T14697] netlink: 'syz.4.12556': attribute type 3 has an invalid length. [ 2348.076534][T14697] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12556'. [ 2348.686634][T14712] netlink: 'syz.2.12558': attribute type 21 has an invalid length. [ 2348.709154][T14712] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12558'. [ 2348.987626][T14730] netlink: 23127 bytes leftover after parsing attributes in process `syz.1.12559'. [ 2349.025908][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2349.034474][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2349.048056][T14448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2349.066626][T14733] netlink: 'syz.3.12561': attribute type 13 has an invalid length. [ 2349.089868][T14733] netlink: 'syz.3.12561': attribute type 58 has an invalid length. [ 2349.101141][T14733] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12561'. [ 2349.116492][T14734] netlink: 'syz.3.12561': attribute type 13 has an invalid length. [ 2349.124541][T14734] netlink: 'syz.3.12561': attribute type 58 has an invalid length. [ 2349.136086][T14734] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12561'. [ 2349.148227][T14740] netlink: 'syz.4.12563': attribute type 21 has an invalid length. [ 2349.175621][T14741] netlink: 'syz.4.12563': attribute type 21 has an invalid length. [ 2349.217672][T14740] tc_dump_action: action bad kind [ 2349.251401][ T7368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2349.297051][ T7368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2349.377330][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2349.406504][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2349.442871][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2349.461610][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2349.478565][T14448] device veth0_vlan entered promiscuous mode [ 2349.535494][T14754] __nla_validate_parse: 3 callbacks suppressed [ 2349.535529][T14754] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12566'. [ 2349.587432][T14448] device veth1_vlan entered promiscuous mode [ 2349.750774][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2349.767858][T14771] netlink: 'syz.3.12569': attribute type 3 has an invalid length. [ 2349.783223][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2349.802859][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2349.803522][T14773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12570'. [ 2349.822040][T14771] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12569'. [ 2349.838720][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2349.902353][T14448] device veth0_macvtap entered promiscuous mode [ 2349.929782][T14778] netlink: 'syz.4.12571': attribute type 21 has an invalid length. [ 2349.953273][T14778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12571'. [ 2349.997127][T14448] device veth1_macvtap entered promiscuous mode [ 2350.054507][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2350.074136][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2350.128214][T14448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.162116][T14448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.200232][T14448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.232280][T14448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.245718][T14448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2350.257898][T14448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.276040][T14448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2350.320334][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2350.343664][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2350.390666][T14448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.443623][T14448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.469621][T14448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.492314][T14448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.502155][T14448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.520552][T14448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.537316][T14448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2350.565720][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2350.586556][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2350.602470][T14800] IPv6: Can't replace route, no match found [ 2350.614039][T14448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.634274][T14448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.657847][T14448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.672325][T14448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.943044][T28563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2350.950908][T28563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2351.003732][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2351.096720][ T9547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2351.132720][ T9547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2351.149278][T14825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12583'. [ 2351.160494][T14823] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12581'. [ 2351.226302][T14825] device macvlan1 entered promiscuous mode [ 2351.286709][T14825] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 2351.340708][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2351.998981][T14856] delete_channel: no stack [ 2352.595648][T14872] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12593'. [ 2352.672054][ T48] Bluetooth: hci5: unexpected event 0x20 length: 15 > 7 [ 2352.914708][T14887] mac80211_hwsim hwsim112 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2353.091110][T14897] validate_nla: 8 callbacks suppressed [ 2353.091128][T14897] netlink: 'syz.2.12602': attribute type 29 has an invalid length. [ 2353.217949][T14897] netlink: 'syz.2.12602': attribute type 29 has an invalid length. [ 2353.304011][T14898] netlink: 'syz.2.12602': attribute type 29 has an invalid length. [ 2353.338022][T14900] can: request_module (can-proto-0) failed. [ 2353.844739][T14921] netlink: 'syz.1.12608': attribute type 3 has an invalid length. [ 2353.867615][T14921] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12608'. [ 2354.453850][T14947] netlink: 'syz.4.12617': attribute type 10 has an invalid length. [ 2354.471938][T14947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12617'. [ 2354.541354][T14947] batman_adv: batadv0: Adding interface: vlan1 [ 2354.584386][T14947] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2354.697098][T14947] batman_adv: batadv0: Interface activated: vlan1 [ 2355.246598][T14957] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12619'. [ 2355.447669][T14964] netlink: 'syz.1.12621': attribute type 3 has an invalid length. [ 2355.497291][T14964] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12621'. [ 2355.635866][T14974] netlink: 'syz.0.12623': attribute type 17 has an invalid length. [ 2355.691471][T14974] netlink: 'syz.0.12623': attribute type 16 has an invalid length. [ 2355.703019][ T9515] wlan1: Trigger new scan to find an IBSS to join [ 2355.745517][T14974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12623'. [ 2357.180667][T15007] netlink: 'syz.3.12636': attribute type 3 has an invalid length. [ 2357.212063][T15007] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12636'. [ 2357.245666][T15009] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.12637'. [ 2358.339659][T15052] netlink: 'syz.1.12650': attribute type 3 has an invalid length. [ 2358.386089][T15052] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12650'. [ 2358.530885][T15062] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.12653'. [ 2358.721460][T15073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12657'. [ 2358.748155][ T7368] wlan1: Trigger new scan to find an IBSS to join [ 2359.170976][T15078] netlink: 'syz.0.12658': attribute type 11 has an invalid length. [ 2359.208306][T15078] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12658'. [ 2359.756366][T15090] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.12661'. [ 2360.127370][T15100] device bridge_slave_1 entered promiscuous mode [ 2360.290217][ T9515] wlan1: Creating new IBSS network, BSSID 92:c8:1f:5e:3c:60 [ 2360.637887][T15111] netlink: 'syz.2.12666': attribute type 3 has an invalid length. [ 2360.683807][T15111] __nla_validate_parse: 1 callbacks suppressed [ 2360.683837][T15111] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12666'. [ 2360.773758][T15117] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.12668'. [ 2360.885608][T15119] netlink: 'syz.1.12669': attribute type 10 has an invalid length. [ 2360.922428][T15119] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12669'. [ 2360.956511][T15119] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 2361.105462][T15124] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12670'. [ 2361.414013][T15131] netlink: 'syz.1.12673': attribute type 10 has an invalid length. [ 2361.421970][T15131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12673'. [ 2361.559325][T15131] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 2361.711174][T15132] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.12673'. [ 2362.209393][T15143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2362.481230][T15148] netlink: 'syz.3.12680': attribute type 3 has an invalid length. [ 2362.528225][T15148] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12680'. [ 2362.968665][T15154] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.12682'. [ 2363.257425][T15164] netlink: 'syz.3.12684': attribute type 10 has an invalid length. [ 2363.301839][T15164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12684'. [ 2363.352812][T15164] batman_adv: batadv0: Adding interface: vlan1 [ 2363.380971][T15164] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2363.463312][T15164] batman_adv: batadv0: Interface activated: vlan1 [ 2363.635551][T15167] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12686'. [ 2364.007572][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 2364.661716][T15186] netlink: 'syz.4.12693': attribute type 3 has an invalid length. [ 2365.327415][T15199] netlink: 'syz.2.12699': attribute type 21 has an invalid length. [ 2365.350375][T15199] netlink: 'syz.2.12699': attribute type 1 has an invalid length. [ 2365.434200][ T48] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 2365.549476][T15207] device pim6reg1 entered promiscuous mode [ 2366.292954][ T48] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2366.350419][T15227] netlink: 'syz.0.12704': attribute type 2 has an invalid length. [ 2366.541861][T15227] netlink: 'syz.0.12704': attribute type 4 has an invalid length. [ 2366.564206][T15227] __nla_validate_parse: 3 callbacks suppressed [ 2366.564221][T15227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12704'. [ 2369.230557][T15240] netlink: 'syz.1.12710': attribute type 28 has an invalid length. [ 2369.559277][T15245] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.12714'. [ 2369.641760][T15245] tipc: Started in network mode [ 2369.703525][T15245] tipc: Node identity 9215a268, cluster identity 4711 [ 2369.740156][T15247] netlink: 'syz.4.12715': attribute type 3 has an invalid length. [ 2369.781162][T15245] tipc: Node number set to 2450891368 [ 2369.791619][T15247] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12715'. [ 2370.307574][ T48] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 2370.520079][T15267] sctp: [Deprecated]: syz.1.12721 (pid 15267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2370.520079][T15267] Use struct sctp_sack_info instead [ 2371.120975][T15296] tap0: tun_chr_ioctl cmd 1074025677 [ 2371.136011][T15296] tap0: linktype set to 780 [ 2371.843372][T15337] bond0: (slave dummy0): Error: Slave device does not support XDP [ 2371.875809][T15337] netlink: 'syz.1.12755': attribute type 10 has an invalid length. [ 2371.906874][T15337] netlink: 'syz.1.12755': attribute type 10 has an invalid length. [ 2371.924140][T15337] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2371.940337][T15339] netlink: 'syz.0.12758': attribute type 10 has an invalid length. [ 2371.982177][T15339] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2373.111158][T15400] bond0: (slave dummy0): Error: Slave device does not support XDP [ 2374.392991][T15460] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12816'. [ 2374.426042][T15464] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 2374.442736][T15464] pim6reg0: linktype set to 805 [ 2374.453123][T15463] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2374.459108][T15463] syzkaller1: linktype set to 270 [ 2375.190291][T15493] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12832'. [ 2375.717917][T15507] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12839'. [ 2376.966700][ T48] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2379.617473][T15536] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12852'. [ 2379.707688][T15536] team0 (unregistering): Port device team_slave_0 removed [ 2379.750135][T15536] team0 (unregistering): Port device team_slave_1 removed [ 2380.001536][ T48] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2380.497989][T15609] netlink: 'syz.1.12880': attribute type 41 has an invalid length. [ 2380.811570][T15625] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12885'. [ 2380.814255][ T48] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2381.049010][T15625] team0 (unregistering): Port device team_slave_0 removed [ 2381.139967][T15625] team0 (unregistering): Port device team_slave_1 removed [ 2381.392152][T15640] netlink: 'syz.4.12890': attribute type 10 has an invalid length. [ 2381.417949][T15640] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12890'. [ 2381.719267][T15652] bridge_slave_0: mtu less than device minimum [ 2382.013223][T15663] netlink: 'syz.3.12897': attribute type 30 has an invalid length. [ 2382.080730][ T48] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2382.468698][T15681] device syzkaller0 entered promiscuous mode [ 2382.813165][T15684] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2382.816473][T15692] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.12908'. [ 2382.861140][T15692] openvswitch: netlink: Key type 386 is out of range max 32 [ 2383.106935][T15684] device syzkaller0 entered promiscuous mode [ 2383.302104][ T48] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2383.538371][T15718] netlink: 'syz.1.12917': attribute type 29 has an invalid length. [ 2383.716595][T15722] can: request_module (can-proto-0) failed. [ 2385.285935][T15718] netlink: 'syz.1.12917': attribute type 29 has an invalid length. [ 2385.294128][T15722] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.12917'. [ 2385.520227][ T48] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2385.587609][T15746] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.12925'. [ 2387.086344][T15765] netlink: 'syz.0.12931': attribute type 29 has an invalid length. [ 2387.100778][T15765] netlink: 'syz.0.12931': attribute type 29 has an invalid length. [ 2387.128665][T15768] netlink: 'syz.0.12931': attribute type 29 has an invalid length. [ 2387.152682][T15767] netlink: 'syz.0.12931': attribute type 29 has an invalid length. [ 2387.176612][T15765] netlink: 'syz.0.12931': attribute type 29 has an invalid length. [ 2387.193036][T15768] netlink: 'syz.0.12931': attribute type 29 has an invalid length. [ 2387.267977][T15765] netlink: 'syz.0.12931': attribute type 2 has an invalid length. [ 2387.377313][T15778] netlink: 'syz.4.12936': attribute type 3 has an invalid length. [ 2387.413107][T15778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12936'. [ 2387.557513][ T48] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2390.120192][ T48] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2390.302040][ T9547] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2391.370444][T15854] netlink: 'syz.1.12958': attribute type 7 has an invalid length. [ 2391.895082][ T48] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2392.234922][T15874] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12965'. [ 2392.295467][T15872] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12964'. [ 2393.239097][T15900] netlink: 'syz.4.12977': attribute type 3 has an invalid length. [ 2393.258006][T15900] netlink: 'syz.4.12977': attribute type 1 has an invalid length. [ 2393.258973][ T48] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2393.276906][T15900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12977'. [ 2394.462717][T15932] netlink: 'syz.2.12986': attribute type 2 has an invalid length. [ 2394.500402][T15932] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.12986'. [ 2394.860567][ T48] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2395.113131][ T48] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2395.348117][T15954] netlink: 'syz.2.12992': attribute type 13 has an invalid length. [ 2395.432478][T15954] netlink: 'syz.2.12992': attribute type 58 has an invalid length. [ 2395.440431][T15954] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12992'. [ 2395.480327][T15951] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2395.725684][T15951] device syzkaller0 entered promiscuous mode [ 2395.759903][T15967] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.12995'. [ 2396.290418][T15980] netlink: 'syz.0.13000': attribute type 3 has an invalid length. [ 2396.321735][T15980] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13000'. [ 2398.475278][ T48] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2399.514933][T15994] bridge_slave_0: mtu less than device minimum [ 2399.665080][T16000] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2399.702044][T16000] device syzkaller0 entered promiscuous mode [ 2399.820621][T16009] netlink: 'syz.2.13012': attribute type 3 has an invalid length. [ 2399.856223][T16009] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13012'. [ 2399.938631][T16014] netlink: 'syz.1.13013': attribute type 3 has an invalid length. [ 2399.946639][T16014] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13013'. [ 2400.037463][ T48] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2404.659561][T16015] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13013'. [ 2404.688842][T16015] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2404.719061][T16015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2405.041019][T16036] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13022'. [ 2405.110166][T16035] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2405.448476][T16048] netlink: 'syz.4.13024': attribute type 3 has an invalid length. [ 2405.473608][T16035] device syzkaller0 entered promiscuous mode [ 2405.505696][T16048] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13024'. [ 2405.515983][ T48] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 2405.879904][T16064] netlink: 'syz.4.13028': attribute type 2 has an invalid length. [ 2405.905651][T16064] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13028'. [ 2405.949578][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.955940][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.412344][T16063] netlink: 'syz.2.13029': attribute type 10 has an invalid length. [ 2407.549695][T16063] team0 (unregistering): Port device team_slave_0 removed [ 2407.598093][T16063] team0 (unregistering): Port device team_slave_1 removed [ 2407.818481][T16083] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.13036'. [ 2407.910911][ T48] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 2407.950830][T16092] netlink: 'syz.2.13038': attribute type 3 has an invalid length. [ 2407.998377][T16092] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13038'. [ 2408.609449][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13042'. [ 2408.796743][T16120] netlink: 'syz.3.13046': attribute type 10 has an invalid length. [ 2408.931265][T16124] tap0: tun_chr_ioctl cmd 1074025677 [ 2408.940314][T16124] tap0: linktype set to 6 [ 2408.994924][T16124] tap0: tun_chr_ioctl cmd 35108 [ 2409.041311][ T48] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2409.059998][T16126] netlink: 'syz.2.13050': attribute type 3 has an invalid length. [ 2409.159718][T16126] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13050'. [ 2409.189747][T16133] netlink: 'syz.1.13053': attribute type 10 has an invalid length. [ 2409.251872][T16137] netlink: 'syz.3.13054': attribute type 11 has an invalid length. [ 2409.259974][T16137] netlink: 168 bytes leftover after parsing attributes in process `syz.3.13054'. [ 2409.397411][T16139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2409.413734][T16139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2409.433067][T16139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2409.440497][T16139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2410.003579][T16153] netlink: 'syz.2.13059': attribute type 1 has an invalid length. [ 2410.042379][T16153] netlink: 'syz.2.13059': attribute type 4 has an invalid length. [ 2410.075307][T16153] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.13059'. [ 2410.117493][T16154] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.13059'. [ 2410.345778][T16167] netlink: 61955 bytes leftover after parsing attributes in process `syz.0.13065'. [ 2410.377853][T16167] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13065'. [ 2410.398519][ T48] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2410.558867][T16174] validate_nla: 3 callbacks suppressed [ 2410.558882][T16174] netlink: 'syz.3.13068': attribute type 10 has an invalid length. [ 2410.800982][T16185] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13072'. [ 2410.838647][T16185] netlink: 'syz.0.13072': attribute type 12 has an invalid length. [ 2410.862137][T16185] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13072'. [ 2410.914323][T16189] netlink: 'syz.1.13074': attribute type 3 has an invalid length. [ 2410.935946][T16189] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13074'. [ 2411.113894][ T48] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2411.218274][T16208] netlink: 'syz.4.13078': attribute type 1 has an invalid length. [ 2411.480155][T16216] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13078'. [ 2411.546967][T16216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2412.616050][ T48] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2413.436232][ T48] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2413.811089][T16290] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13106'. [ 2413.878768][T16290] device hsr_slave_0 left promiscuous mode [ 2413.929671][T16290] device hsr_slave_1 left promiscuous mode [ 2414.288541][T16299] netlink: 61955 bytes leftover after parsing attributes in process `syz.4.13109'. [ 2414.689073][ T48] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2415.482454][ T48] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 2416.803745][T16390] __nla_validate_parse: 2 callbacks suppressed [ 2416.803792][T16390] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.13139'. [ 2416.902508][T16393] netlink: 'syz.0.13141': attribute type 39 has an invalid length. [ 2417.047667][T16401] __sock_release: fasync list not empty! [ 2417.293203][T16406] netlink: 'syz.4.13145': attribute type 2 has an invalid length. [ 2417.552420][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 2417.718083][T16414] netlink: 'syz.3.13148': attribute type 7 has an invalid length. [ 2418.444819][T16445] netlink: 'syz.0.13159': attribute type 39 has an invalid length. [ 2418.931024][T16468] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.13165'. [ 2420.210184][T16512] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.13179'. [ 2421.404913][T28563] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2424.530834][T16535] netlink: 'syz.2.13183': attribute type 22 has an invalid length. [ 2424.538825][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13183'. [ 2424.839532][T16557] netlink: 188 bytes leftover after parsing attributes in process `syz.4.13189'. [ 2426.491630][T16621] netlink: 763 bytes leftover after parsing attributes in process `syz.2.13212'. [ 2426.521422][T16621] netlink: 763 bytes leftover after parsing attributes in process `syz.2.13212'. [ 2426.657203][T16624] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13214'. [ 2426.720615][T16638] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13217'. [ 2426.730047][T16638] openvswitch: netlink: Flow key attr not present in new flow. [ 2426.998009][T16647] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.13220'. [ 2428.137621][T16647] netlink: 'syz.0.13220': attribute type 11 has an invalid length. [ 2428.648928][T16672] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.13228'. [ 2428.861029][T16666] netlink: 'syz.4.13227': attribute type 7 has an invalid length. [ 2431.803152][T16727] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.13241'. [ 2431.841949][T16730] netlink: 'syz.1.13243': attribute type 21 has an invalid length. [ 2431.861750][T16730] netlink: 'syz.1.13243': attribute type 1 has an invalid length. [ 2432.034462][T16729] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.13242'. [ 2432.034818][T16725] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.13242'. [ 2433.723912][T16785] netlink: 144 bytes leftover after parsing attributes in process `syz.2.13260'. [ 2434.816571][T16821] netlink: 'syz.0.13273': attribute type 3 has an invalid length. [ 2434.852593][T16821] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13273'. [ 2434.934316][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13276'. [ 2434.982023][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13276'. [ 2434.995577][T16828] netlink: 33 bytes leftover after parsing attributes in process `syz.4.13276'. [ 2435.027312][T16832] netlink: 'syz.0.13278': attribute type 7 has an invalid length. [ 2435.329457][T16842] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2435.345385][T16840] netlink: 'syz.3.13279': attribute type 21 has an invalid length. [ 2436.954671][T16869] FAULT_INJECTION: forcing a failure. [ 2436.954671][T16869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2436.968015][T16869] CPU: 1 PID: 16869 Comm: syz.0.13291 Not tainted syzkaller #0 [ 2436.975584][T16869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2436.985651][T16869] Call Trace: [ 2436.988934][T16869] [ 2436.991852][T16869] dump_stack_lvl+0x188/0x24e [ 2436.996527][T16869] ? show_regs_print_info+0x12/0x12 [ 2437.001714][T16869] ? load_image+0x400/0x400 [ 2437.006214][T16869] ? __lock_acquire+0x7d10/0x7d10 [ 2437.011244][T16869] should_fail_ex+0x399/0x4d0 [ 2437.015919][T16869] _copy_from_user+0x2c/0x170 [ 2437.020597][T16869] __sys_bpf+0x2ea/0x780 [ 2437.024842][T16869] ? bpf_link_show_fdinfo+0x380/0x380 [ 2437.030223][T16869] ? lock_chain_count+0x20/0x20 [ 2437.035074][T16869] __x64_sys_bpf+0x78/0x90 [ 2437.039495][T16869] do_syscall_64+0x4c/0xa0 [ 2437.043903][T16869] ? clear_bhb_loop+0x60/0xb0 [ 2437.048577][T16869] ? clear_bhb_loop+0x60/0xb0 [ 2437.053252][T16869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2437.059142][T16869] RIP: 0033:0x7f411699ce59 [ 2437.063553][T16869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2437.083152][T16869] RSP: 002b:00007f4114bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2437.091560][T16869] RAX: ffffffffffffffda RBX: 00007f4116c15fa0 RCX: 00007f411699ce59 [ 2437.099526][T16869] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 2437.107493][T16869] RBP: 00007f4114bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2437.115456][T16869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2437.123422][T16869] R13: 00007f4116c16038 R14: 00007f4116c15fa0 R15: 00007ffe5c55c098 [ 2437.131396][T16869] [ 2438.495918][T16855] netlink: 'syz.1.13286': attribute type 21 has an invalid length. [ 2438.506019][T16855] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13286'. [ 2439.683301][T16907] netlink: 'syz.1.13302': attribute type 3 has an invalid length. [ 2439.701463][T16907] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13302'. [ 2442.652156][T16974] FAULT_INJECTION: forcing a failure. [ 2442.652156][T16974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2442.705575][T16974] CPU: 0 PID: 16974 Comm: syz.0.13324 Not tainted syzkaller #0 [ 2442.713164][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2442.723207][T16974] Call Trace: [ 2442.726474][T16974] [ 2442.729395][T16974] dump_stack_lvl+0x188/0x24e [ 2442.734071][T16974] ? show_regs_print_info+0x12/0x12 [ 2442.739260][T16974] ? load_image+0x400/0x400 [ 2442.743762][T16974] ? __lock_acquire+0x7d10/0x7d10 [ 2442.748778][T16974] ? __virt_addr_valid+0x188/0x540 [ 2442.753883][T16974] should_fail_ex+0x399/0x4d0 [ 2442.758553][T16974] _copy_from_user+0x2c/0x170 [ 2442.763225][T16974] bpf_prog_test_run_skb+0x268/0x1890 [ 2442.768616][T16974] ? __fget_files+0x28/0x4b0 [ 2442.773220][T16974] ? __fget_files+0x28/0x4b0 [ 2442.777804][T16974] ? __fget_files+0x43d/0x4b0 [ 2442.782482][T16974] ? cpu_online+0xa0/0xa0 [ 2442.786805][T16974] bpf_prog_test_run+0x31e/0x390 [ 2442.791735][T16974] __sys_bpf+0x62b/0x780 [ 2442.795996][T16974] ? bpf_link_show_fdinfo+0x380/0x380 [ 2442.801372][T16974] ? lock_chain_count+0x20/0x20 [ 2442.806220][T16974] __x64_sys_bpf+0x78/0x90 [ 2442.810631][T16974] do_syscall_64+0x4c/0xa0 [ 2442.815040][T16974] ? clear_bhb_loop+0x60/0xb0 [ 2442.819709][T16974] ? clear_bhb_loop+0x60/0xb0 [ 2442.824380][T16974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2442.830269][T16974] RIP: 0033:0x7f411699ce59 [ 2442.834675][T16974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2442.854272][T16974] RSP: 002b:00007f4114bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2442.862686][T16974] RAX: ffffffffffffffda RBX: 00007f4116c15fa0 RCX: 00007f411699ce59 [ 2442.870646][T16974] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 2442.878602][T16974] RBP: 00007f4114bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2442.886562][T16974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2442.894519][T16974] R13: 00007f4116c16038 R14: 00007f4116c15fa0 R15: 00007ffe5c55c098 [ 2442.902490][T16974] [ 2444.309330][T17017] FAULT_INJECTION: forcing a failure. [ 2444.309330][T17017] name failslab, interval 1, probability 0, space 0, times 0 [ 2444.331158][T17017] CPU: 1 PID: 17017 Comm: syz.3.13339 Not tainted syzkaller #0 [ 2444.338742][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2444.348809][T17017] Call Trace: [ 2444.352097][T17017] [ 2444.355041][T17017] dump_stack_lvl+0x188/0x24e [ 2444.359735][T17017] ? show_regs_print_info+0x12/0x12 [ 2444.364948][T17017] ? load_image+0x400/0x400 [ 2444.369471][T17017] ? __might_sleep+0xd0/0xd0 [ 2444.374071][T17017] ? __lock_acquire+0x7d10/0x7d10 [ 2444.379100][T17017] should_fail_ex+0x399/0x4d0 [ 2444.383773][T17017] should_failslab+0x5/0x20 [ 2444.388281][T17017] slab_pre_alloc_hook+0x59/0x310 [ 2444.393306][T17017] ? sk_prot_alloc+0xe7/0x210 [ 2444.397979][T17017] __kmem_cache_alloc_node+0x4f/0x260 [ 2444.403348][T17017] ? sk_prot_alloc+0xe7/0x210 [ 2444.408021][T17017] __kmalloc+0xa0/0x240 [ 2444.412173][T17017] sk_prot_alloc+0xe7/0x210 [ 2444.416673][T17017] ? sk_alloc+0x20/0x340 [ 2444.420916][T17017] sk_alloc+0x36/0x340 [ 2444.424981][T17017] ? bpf_ctx_init+0x163/0x1a0 [ 2444.429653][T17017] ? bpf_prog_test_run_skb+0x275/0x1890 [ 2444.435196][T17017] bpf_prog_test_run_skb+0x371/0x1890 [ 2444.440568][T17017] ? __fget_files+0x28/0x4b0 [ 2444.445168][T17017] ? cpu_online+0xa0/0xa0 [ 2444.449494][T17017] bpf_prog_test_run+0x31e/0x390 [ 2444.454435][T17017] __sys_bpf+0x62b/0x780 [ 2444.458674][T17017] ? bpf_link_show_fdinfo+0x380/0x380 [ 2444.464057][T17017] ? lock_chain_count+0x20/0x20 [ 2444.468914][T17017] __x64_sys_bpf+0x78/0x90 [ 2444.473331][T17017] do_syscall_64+0x4c/0xa0 [ 2444.477740][T17017] ? clear_bhb_loop+0x60/0xb0 [ 2444.482415][T17017] ? clear_bhb_loop+0x60/0xb0 [ 2444.487087][T17017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2444.492976][T17017] RIP: 0033:0x7fd6bdb9ce59 [ 2444.497387][T17017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2444.516986][T17017] RSP: 002b:00007fd6beabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2444.525391][T17017] RAX: ffffffffffffffda RBX: 00007fd6bde15fa0 RCX: 00007fd6bdb9ce59 [ 2444.533352][T17017] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 2444.541314][T17017] RBP: 00007fd6beabe090 R08: 0000000000000000 R09: 0000000000000000 [ 2444.549275][T17017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2444.557233][T17017] R13: 00007fd6bde16038 R14: 00007fd6bde15fa0 R15: 00007ffc67a1ab68 [ 2444.565211][T17017] [ 2444.786545][T17020] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.13341'. [ 2446.058470][T17012] netlink: 'syz.2.13337': attribute type 21 has an invalid length. [ 2446.067299][T17020] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2446.104675][T17022] netlink: 'syz.4.13341': attribute type 10 has an invalid length. [ 2446.137271][T17020] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2446.182668][T17020] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2446.433984][T17031] netlink: 'syz.2.13344': attribute type 10 has an invalid length. [ 2446.441928][T17031] netlink: 'syz.2.13344': attribute type 19 has an invalid length. [ 2446.550533][T17031] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13344'. [ 2447.133997][ T1627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2447.153317][ T1627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2447.161066][ T1627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2447.175892][ T1627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2447.186369][ T1627] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2447.199807][ T1627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2447.310268][T17053] FAULT_INJECTION: forcing a failure. [ 2447.310268][T17053] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.323992][T17053] CPU: 1 PID: 17053 Comm: syz.2.13350 Not tainted syzkaller #0 [ 2447.331569][T17053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2447.341642][T17053] Call Trace: [ 2447.344939][T17053] [ 2447.347877][T17053] dump_stack_lvl+0x188/0x24e [ 2447.352567][T17053] ? show_regs_print_info+0x12/0x12 [ 2447.357780][T17053] ? load_image+0x400/0x400 [ 2447.362278][T17053] ? __might_sleep+0xd0/0xd0 [ 2447.366861][T17053] ? __lock_acquire+0x7d10/0x7d10 [ 2447.371888][T17053] should_fail_ex+0x399/0x4d0 [ 2447.376566][T17053] should_failslab+0x5/0x20 [ 2447.381064][T17053] slab_pre_alloc_hook+0x59/0x310 [ 2447.386081][T17053] ? apparmor_sk_alloc_security+0x74/0x100 [ 2447.391879][T17053] __kmem_cache_alloc_node+0x4f/0x260 [ 2447.397249][T17053] ? apparmor_sk_alloc_security+0x74/0x100 [ 2447.403050][T17053] kmalloc_trace+0x26/0xe0 [ 2447.407466][T17053] apparmor_sk_alloc_security+0x74/0x100 [ 2447.413090][T17053] security_sk_alloc+0x6a/0xa0 [ 2447.417843][T17053] sk_prot_alloc+0x101/0x210 [ 2447.422426][T17053] ? sk_alloc+0x20/0x340 [ 2447.426665][T17053] sk_alloc+0x36/0x340 [ 2447.430726][T17053] ? bpf_ctx_init+0x163/0x1a0 [ 2447.435394][T17053] ? bpf_prog_test_run_skb+0x275/0x1890 [ 2447.440935][T17053] bpf_prog_test_run_skb+0x371/0x1890 [ 2447.446308][T17053] ? __fget_files+0x28/0x4b0 [ 2447.450901][T17053] ? cpu_online+0xa0/0xa0 [ 2447.455226][T17053] bpf_prog_test_run+0x31e/0x390 [ 2447.460165][T17053] __sys_bpf+0x62b/0x780 [ 2447.464402][T17053] ? bpf_link_show_fdinfo+0x380/0x380 [ 2447.469791][T17053] ? lock_chain_count+0x20/0x20 [ 2447.474637][T17053] __x64_sys_bpf+0x78/0x90 [ 2447.479051][T17053] do_syscall_64+0x4c/0xa0 [ 2447.483456][T17053] ? clear_bhb_loop+0x60/0xb0 [ 2447.488147][T17053] ? clear_bhb_loop+0x60/0xb0 [ 2447.492815][T17053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2447.498700][T17053] RIP: 0033:0x7fc1c239ce59 [ 2447.503105][T17053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2447.522701][T17053] RSP: 002b:00007fc1c31b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2447.531102][T17053] RAX: ffffffffffffffda RBX: 00007fc1c2615fa0 RCX: 00007fc1c239ce59 [ 2447.539063][T17053] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 2447.547024][T17053] RBP: 00007fc1c31b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2447.554981][T17053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2447.562939][T17053] R13: 00007fc1c2616038 R14: 00007fc1c2615fa0 R15: 00007ffc583edda8 [ 2447.570919][T17053] [ 2447.743826][T28563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.887281][T28563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.989646][T28563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2448.087023][T28563] bond0: (slave netdevsim0): Releasing backup interface [ 2448.389591][T17048] chnl_net:caif_netlink_parms(): no params data found [ 2448.725459][T28563] tipc: Left network mode [ 2448.922623][T17048] bridge0: port 1(bridge_slave_0) entered blocking state [ 2448.938744][T17048] bridge0: port 1(bridge_slave_0) entered disabled state [ 2448.969697][T17048] device bridge_slave_0 entered promiscuous mode [ 2449.069181][T17048] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.102477][T17048] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.167295][T17048] device bridge_slave_1 entered promiscuous mode [ 2449.302447][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 2449.379668][T17048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2449.493790][T17083] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13359'. [ 2449.548837][T17083] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2449.584287][T17083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2449.636549][T17048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2449.732027][T17104] netlink: 'syz.2.13363': attribute type 1 has an invalid length. [ 2449.776620][T17048] team0: Port device team_slave_0 added [ 2449.828616][T17048] team0: Port device team_slave_1 added [ 2449.840858][T17104] netlink: 'syz.2.13363': attribute type 21 has an invalid length. [ 2449.850893][T17104] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13363'. [ 2449.910023][T17048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2449.930914][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2449.962486][T17048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2450.040957][T17048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2450.047986][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2450.135339][T17048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2450.233823][T17113] device syzkaller0 entered promiscuous mode [ 2450.245825][ T48] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2450.337096][T17048] device hsr_slave_0 entered promiscuous mode [ 2450.355366][T17048] device hsr_slave_1 entered promiscuous mode [ 2450.362390][T17048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2450.397531][T17048] Cannot create hsr debugfs directory [ 2451.243793][T17141] netlink: 'syz.2.13381': attribute type 10 has an invalid length. [ 2451.246959][T17144] netlink: 'syz.0.13373': attribute type 29 has an invalid length. [ 2451.351573][T17148] device syzkaller0 left promiscuous mode [ 2451.371688][T17144] netlink: 'syz.0.13373': attribute type 29 has an invalid length. [ 2451.382555][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 2451.394723][T17145] netlink: 'syz.0.13373': attribute type 29 has an invalid length. [ 2451.476469][T28563] device hsr_slave_0 left promiscuous mode [ 2451.563248][T28563] device veth1_vlan left promiscuous mode [ 2451.569108][T28563] device veth0_vlan left promiscuous mode [ 2453.043281][T28563] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2453.075672][ T9547] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2453.249919][T28563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2453.344445][T28563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2453.472409][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 2453.846196][T28563] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2453.881616][T28563] bond0 (unregistering): Released all slaves [ 2454.280402][T17192] netlink: 'syz.0.13387': attribute type 3 has an invalid length. [ 2454.284276][T17048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2454.314360][T17048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2454.332485][T17192] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13387'. [ 2454.344738][T17048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2454.367252][T17048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2454.421278][T17197] netlink: 'syz.3.13388': attribute type 2 has an invalid length. [ 2454.457636][T17197] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.13388'. [ 2454.701981][T17048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2454.747841][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2454.777480][T17207] netlink: 'syz.2.13398': attribute type 3 has an invalid length. [ 2454.789068][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2454.808686][T17048] 8021q: adding VLAN 0 to HW filter on device team0 [ 2454.818388][T17207] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13398'. [ 2454.849352][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2454.860000][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2454.877741][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 2454.884919][ T9547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2454.921368][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2454.930119][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2454.948393][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2454.962043][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 2454.969209][ T9547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2455.003685][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2455.022706][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2455.068430][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2455.107760][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2455.133497][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2455.154935][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2455.229141][T17048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2455.265200][T17048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2455.300813][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2455.318484][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2455.348447][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2455.377297][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2455.424877][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2455.468287][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2455.543028][ T4340] Bluetooth: hci4: command 0x0419 tx timeout [ 2456.226311][T17246] netlink: 'syz.4.13399': attribute type 3 has an invalid length. [ 2456.302550][T17246] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.13399'. [ 2456.571860][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2456.601566][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2456.619496][T17048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2456.680926][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2456.696631][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2456.756392][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2456.772790][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2456.808583][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2456.825358][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2456.847959][T17048] device veth0_vlan entered promiscuous mode [ 2456.875675][T17260] netlink: 'syz.3.13402': attribute type 3 has an invalid length. [ 2456.884416][T17048] device veth1_vlan entered promiscuous mode [ 2456.927042][T17260] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13402'. [ 2456.989767][ T7368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2457.002626][ T7368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2457.044857][ T7368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2457.090512][ T7368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2457.128759][T17048] device veth0_macvtap entered promiscuous mode [ 2457.153211][ T48] ------------[ cut here ]------------ [ 2457.159007][ T48] WARNING: CPU: 1 PID: 48 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 2457.168727][ T48] Modules linked in: [ 2457.172664][ T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2457.180051][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2457.190170][ T48] Workqueue: hci5 hci_conn_timeout [ 2457.195338][ T48] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 2457.200998][ T48] Code: 20 8e e8 04 2c 9d f8 48 8b 35 c5 d2 e9 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f8 1d f8 e8 31 24 4c f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 2457.208662][T17048] device veth1_macvtap entered promiscuous mode [ 2457.220638][ T48] RSP: 0018:ffffc90000b97c08 EFLAGS: 00010293 [ 2457.220683][ T48] RAX: ffffffff8936576f RBX: ffff88806259a330 RCX: ffff88801e2dbc00 [ 2457.241000][ T48] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 2457.249022][ T48] RBP: 00000000ffffffff R08: ffff88806259a013 R09: 1ffff1100c4b3402 [ 2457.257028][ T48] R10: dffffc0000000000 R11: ffffed100c4b3403 R12: dffffc0000000000 [ 2457.265035][ T48] R13: dffffc0000000000 R14: ffff88806259a000 R15: ffff88806259a010 [ 2457.273048][ T48] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2457.281988][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2457.288603][ T48] CR2: 000000110c3335e2 CR3: 000000007804c000 CR4: 00000000003506e0 [ 2457.296618][ T48] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 2457.304629][ T48] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2457.312658][ T48] Call Trace: [ 2457.315951][ T48] [ 2457.318901][ T48] ? process_one_work+0x7b0/0x1160 [ 2457.324080][ T48] process_one_work+0x8a2/0x1160 [ 2457.329057][ T48] ? worker_detach_from_pool+0x240/0x240 [ 2457.334761][ T48] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2457.339812][ T48] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2457.345423][ T48] ? kthread_data+0x4b/0xc0 [ 2457.349959][ T48] worker_thread+0xaa2/0x1270 [ 2457.354724][ T48] kthread+0x29d/0x330 [ 2457.358807][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 2457.363894][ T48] ? kthread_blkcg+0xd0/0xd0 [ 2457.368504][ T48] ret_from_fork+0x1f/0x30 [ 2457.372990][ T48] [ 2457.376023][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2457.383306][ T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2457.390678][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2457.400740][ T48] Workqueue: hci5 hci_conn_timeout [ 2457.405879][ T48] Call Trace: [ 2457.409160][ T48] [ 2457.412095][ T48] dump_stack_lvl+0x188/0x24e [ 2457.416786][ T48] ? memcpy+0x3c/0x60 [ 2457.420775][ T48] ? show_regs_print_info+0x12/0x12 [ 2457.425983][ T48] ? load_image+0x400/0x400 [ 2457.430512][ T48] panic+0x2e5/0x730 [ 2457.434424][ T48] ? bpf_jit_dump+0xd0/0xd0 [ 2457.438944][ T48] ? ret_from_fork+0x1f/0x30 [ 2457.443532][ T48] __warn+0x2f8/0x4f0 [ 2457.447503][ T48] ? hci_conn_timeout+0x24f/0x450 [ 2457.452522][ T48] ? hci_conn_timeout+0x24f/0x450 [ 2457.457536][ T48] report_bug+0x2ba/0x4f0 [ 2457.461850][ T48] ? hci_conn_timeout+0x24f/0x450 [ 2457.466878][ T48] handle_bug+0x3a/0x70 [ 2457.471021][ T48] exc_invalid_op+0x16/0x40 [ 2457.475516][ T48] asm_exc_invalid_op+0x16/0x20 [ 2457.480361][ T48] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 2457.485988][ T48] Code: 20 8e e8 04 2c 9d f8 48 8b 35 c5 d2 e9 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f8 1d f8 e8 31 24 4c f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 2457.505581][ T48] RSP: 0018:ffffc90000b97c08 EFLAGS: 00010293 [ 2457.511635][ T48] RAX: ffffffff8936576f RBX: ffff88806259a330 RCX: ffff88801e2dbc00 [ 2457.519595][ T48] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 2457.527556][ T48] RBP: 00000000ffffffff R08: ffff88806259a013 R09: 1ffff1100c4b3402 [ 2457.535513][ T48] R10: dffffc0000000000 R11: ffffed100c4b3403 R12: dffffc0000000000 [ 2457.543471][ T48] R13: dffffc0000000000 R14: ffff88806259a000 R15: ffff88806259a010 [ 2457.551435][ T48] ? hci_conn_timeout+0x24f/0x450 [ 2457.556458][ T48] ? hci_conn_timeout+0x24f/0x450 [ 2457.561472][ T48] ? process_one_work+0x7b0/0x1160 [ 2457.566570][ T48] process_one_work+0x8a2/0x1160 [ 2457.571507][ T48] ? worker_detach_from_pool+0x240/0x240 [ 2457.577132][ T48] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2457.582145][ T48] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2457.587680][ T48] ? kthread_data+0x4b/0xc0 [ 2457.592182][ T48] worker_thread+0xaa2/0x1270 [ 2457.596872][ T48] kthread+0x29d/0x330 [ 2457.600936][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 2457.605948][ T48] ? kthread_blkcg+0xd0/0xd0 [ 2457.610525][ T48] ret_from_fork+0x1f/0x30 [ 2457.614942][ T48] [ 2457.618276][ T48] Kernel Offset: disabled [ 2457.622622][ T48] Rebooting in 86400 seconds..