last executing test programs: 10.191294398s ago: executing program 2 (id=4312): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000480)=r0, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0xf2, 0x80, 0x3, 0x8, 0x0, 0x10000, 0x124, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x200, 0x4, 0x1, 0x3, 0x2, 0xf1bf, 0x2, 0x0, 0xc5e}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000100)}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x2c, 0x4, 0x8, 0x0, 0x200, 0x10000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x283c64f2, 0x4, @perf_config_ext={0x7}, 0x40, 0x8, 0x1, 0xe, 0xd, 0x6, 0xf2c3, 0x0, 0x700, 0x0, 0x6f}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4004) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e002e000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfdef) socketpair(0x1, 0x5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 8.371797656s ago: executing program 3 (id=4328): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xb, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES8=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10004000000000000b010000000100001000000000000000100100000b0000005d65a82c1b453745a91bcff99cca56b47c3fee"], 0x20}, 0x8040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000c300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 6.601820343s ago: executing program 3 (id=4335): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000800000000071121a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8a}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp, 0x2111, 0x0, 0xc29a, 0x9, 0x1}, 0x0, 0x3, r3, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) recvmsg$kcm(r7, 0x0, 0x143) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 6.52711666s ago: executing program 2 (id=4336): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x10810000}, 0x80, 0x0}, 0x20000002) syz_clone(0xa43c7506, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000090000002f49", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000180000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000780)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.835184394s ago: executing program 3 (id=4342): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1, 0x0, 0x0, 0x2000000}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x404c000) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='memory.stat\x00') sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000)={0xf00}, 0xfffffe51}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000ac00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 5.490991011s ago: executing program 2 (id=4347): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x105, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="00000000000000000000120166c285907abf2c", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0xff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000040000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.43266715s ago: executing program 0 (id=4348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r7) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) r8 = perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x66) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_devices(r6, 0x0, 0xffdd) 5.271738821s ago: executing program 2 (id=4349): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31e0cf876c1d0000007ea60864160af36514001ac00800050004000c00060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x86, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8080, 0x7fffffffffd, 0x5, 0x1, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0xc}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xffffffffffffffc0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000000802000000000000000000000900000000000000000100008400000000000000000100000000000000000061"], &(0x7f00000000c0)=""/209, 0x4c, 0xd1, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80}, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x16) syz_clone(0x24130780, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 4.93937197s ago: executing program 3 (id=4354): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000e5ffff7f000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0xf7, 0x5, 0x0, 0x4, 0x0, 0x40, 0x2, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x3}, 0x10208, 0x1, 0x5, 0x1, 0x8, 0x19, 0x7, 0x0, 0x8, 0x0, 0xd3d5}, r4, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000002700)=ANY=[], 0xffdd) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000180)) 4.799666075s ago: executing program 4 (id=4356): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400"/27], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4]}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/4096, 0x1000}}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x101000000000000) 2.947734757s ago: executing program 4 (id=4358): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xd, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES8=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10004000000000000b010000000100001000000000000000100100000b0000005d65a82c1b453745a91bcff99cca56b47c3fee"], 0x20}, 0x8040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000c300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 2.464681769s ago: executing program 1 (id=4359): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611894000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) 1.903595476s ago: executing program 1 (id=4360): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c008848eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.235915545s ago: executing program 4 (id=4361): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) 1.198410608s ago: executing program 0 (id=4362): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.numa_stat\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x416, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000e00)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000cf510000000000000701000000feffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1.146289139s ago: executing program 1 (id=4363): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x1, 0x3, 0x0, 0x3, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x100088, 0x6, 0x0, 0x5, 0x6, 0x2, 0xdfff, 0x0, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9c83d5f40f72ab587497cc0872c73260d0a12cb6127da9203656dbae73405c71927ff9b42c4c3e227e1ce6c331e5b88ba97c994f941d38c65d0a5de3b42dd28a2b7c018333a7ba93bf2434dd949260eb6f798c49d50c8", 0x0, 0x402}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000001f80)="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", 0xf04}], 0x2, 0x0, 0x48}, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0), 0x0, 0xdf, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), 0x0, 0x0, 0x85, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003180)={r2, 0x20, &(0x7f0000003140)={&(0x7f0000003040), 0x0, 0x0, &(0x7f0000003080)=""/191, 0xbf}}, 0x10) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061117c000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xfc03}, 0x80) 1.145202958s ago: executing program 2 (id=4364): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000500f37538e486dd630080fc09042c"], 0xfdef) 1.04685734s ago: executing program 3 (id=4365): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x3, 0x6e, 0x7, 0x5, 0x0, 0x4, 0x1000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x3, 0x2ef}, 0x8000, 0x1, 0x3e38, 0x3, 0x7fff, 0xdaf, 0xfffa, 0x0, 0x800, 0x0, 0x3f}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xd) r2 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000006c0)="d6", 0x1}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc909}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYRES8=r8], 0x9a) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x8, 0x7f, 0xbd, 0x80000c0}, {0x5, 0x3, 0x7, 0xfffffffa}]}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3, 0x7, 0x11, 0x7, 0x0, 0x9, 0x5b3d1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0x1, 0xb}, 0x80, 0x3, 0x1000007, 0x9, 0x8, 0x5, 0x5, 0x0, 0x2, 0x0, 0x40000002}, 0x0, 0x8, r1, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socket$kcm(0x2, 0x5, 0x84) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x8, 0x7f}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x14041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x8010, 0x0, 0xfffffffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) socket$kcm(0x11, 0x3, 0x0) 964.491155ms ago: executing program 0 (id=4366): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001f50001"], 0x18}, 0x0) 894.190212ms ago: executing program 2 (id=4367): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000280), &(0x7f0000000140)=r5}, 0x22) sendmsg$inet(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0xd, &(0x7f0000000040), 0x3) sendmsg$inet(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) 893.299222ms ago: executing program 1 (id=4377): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040007000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x2b, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 779.753761ms ago: executing program 0 (id=4368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb709000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) close(r0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00', 0x400}) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x9, 0x10001, 0x6, 0xdb7d, 0x0, 0x5, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x6, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x23, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc581, 0x2, @perf_bp={&(0x7f0000000280), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x4d, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 738.403334ms ago: executing program 1 (id=4369): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(0x0, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, &(0x7f0000000340)}, 0x20) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000000) 708.170518ms ago: executing program 4 (id=4370): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, 0x0}, 0x8d0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x202, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={0x0, r3}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000c20000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200}, 0x50) socket$kcm(0x10, 0x2, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000000, 0x2}, 0x50) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0, r7}) 543.730199ms ago: executing program 0 (id=4371): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xd, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES8=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10004000000000000b010000000100001000000000000000100100000b0000005d65a82c1b453745a91bcff99cca56b47c3fee"], 0x20}, 0x8040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000c300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 525.045345ms ago: executing program 1 (id=4372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r7) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) r8 = perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x66) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_devices(r6, 0x0, 0xffdd) 380.762529ms ago: executing program 4 (id=4373): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000b2c00db5b686158bbcfe8875a060300001123000000000001000000000000ac1414aa2b"], 0xfdef) 155.809608ms ago: executing program 4 (id=4374): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000080)="af888cedf2f1f18ca18fb683568a94fbaf60e041bba7f3b476067396251165a9da60ff92baedfa2ba41eb471c2308c74f7c368a4d2a37c6d25e6e4c446e017ae44fca721204504a99262253e1fa4ebbbfaacc72fe181f822c47cb25b86e6728a164f0880b57ecbb11158cdbd3422b8ed4ff2c12b96a681cad73cc64cc78b66f89928c28827eee977abd315af8925123675803acc8aa4e11f4b6fa8be5f02d6675a4d98327b651c328e3d27188127b11fdb9ba7a1f852e1ae780032bb16658547da93015322ac24b814c5fd94529aa89a4276f3bc639f827451cdd9109b", 0xdd}, {&(0x7f0000000280)="c151eed6"}], 0x2}, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.25193ms ago: executing program 3 (id=4375): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31e0cf876c1d0000007ea60864160af36514001ac00800050004000c00060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x86, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8080, 0x7fffffffffd, 0x5, 0x1, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0xc}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xffffffffffffffc0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000000802000000000000000000000900000000000000000100008400000000000000000100000000000000000061"], &(0x7f00000000c0)=""/209, 0x4c, 0xd1, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80}, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x16) syz_clone(0x24130780, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 0s ago: executing program 0 (id=4386): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000070000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000280)={r5}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18f800000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x2e, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x4, 0x1, 0x0, 0x7, 0x5, 0x10, 0xfffffffffffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0x0, 0xa, 0x30, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0x5, 0xa, 0x8, 0x8, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000240)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 7] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2635'. [ 523.367089][T12027] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 523.383585][T12028] netlink: 'syz.4.2635': attribute type 10 has an invalid length. [ 523.395858][T12028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2635'. [ 523.406122][T12028] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 523.667294][T12070] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.2648'. [ 524.286871][T12090] netlink: 'syz.4.2654': attribute type 21 has an invalid length. [ 524.305765][T12090] netlink: 'syz.4.2654': attribute type 1 has an invalid length. [ 524.334056][T12090] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2654'. [ 525.193236][T12111] device syzkaller0 entered promiscuous mode [ 525.503430][T12144] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2673'. [ 526.882028][T12138] netlink: 'syz.3.2672': attribute type 10 has an invalid length. [ 527.368886][T12175] netlink: 'syz.0.2681': attribute type 3 has an invalid length. [ 527.411952][T12175] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2681'. [ 527.985344][T12195] device syzkaller0 entered promiscuous mode [ 531.868199][T12269] delete_channel: no stack [ 532.035308][T12275] device syzkaller0 entered promiscuous mode [ 532.379993][T12291] netlink: 'syz.4.2725': attribute type 3 has an invalid length. [ 532.388080][T12291] netlink: 'syz.4.2725': attribute type 8 has an invalid length. [ 532.397256][T12291] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.2725'. [ 535.247036][T12353] device syzkaller0 entered promiscuous mode [ 537.785797][T12388] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2763'. [ 538.470393][T12422] netlink: 'syz.0.2777': attribute type 21 has an invalid length. [ 538.493638][T12422] netlink: 'syz.0.2777': attribute type 10 has an invalid length. [ 538.525982][T12422] netlink: 'syz.0.2777': attribute type 12 has an invalid length. [ 538.552697][T12422] netlink: 'syz.0.2777': attribute type 13 has an invalid length. [ 538.584108][T12422] netlink: 'syz.0.2777': attribute type 14 has an invalid length. [ 538.617011][T12422] netlink: 'syz.0.2777': attribute type 15 has an invalid length. [ 538.643786][T12422] netlink: 'syz.0.2777': attribute type 16 has an invalid length. [ 538.675485][T12422] netlink: 'syz.0.2777': attribute type 19 has an invalid length. [ 538.704439][T12422] netlink: 'syz.0.2777': attribute type 21 has an invalid length. [ 538.732489][T12422] netlink: 'syz.0.2777': attribute type 22 has an invalid length. [ 538.753484][T12422] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.2777'. [ 539.173067][T12431] device syzkaller0 entered promiscuous mode [ 541.721213][T12487] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2799'. [ 544.370520][T12501] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2804'. [ 545.314937][T12524] validate_nla: 2 callbacks suppressed [ 545.314976][T12524] netlink: 'syz.4.2810': attribute type 10 has an invalid length. [ 545.707560][T12536] netlink: 'syz.3.2818': attribute type 10 has an invalid length. [ 546.609684][T12574] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2831'. [ 548.465127][T12632] delete_channel: no stack [ 548.487272][T12632] delete_channel: no stack [ 548.718410][T12640] netlink: 'syz.0.2855': attribute type 3 has an invalid length. [ 548.727599][T12640] netlink: 'syz.0.2855': attribute type 8 has an invalid length. [ 548.749439][T12640] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.2855'. [ 550.556264][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 550.752220][T12678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.100203][T12698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2876'. [ 552.044023][T12724] netlink: 'syz.3.2885': attribute type 3 has an invalid length. [ 552.135556][T12724] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2885'. [ 552.190236][ T5628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.259169][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 552.272839][T12730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 552.282402][T12730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 552.292941][T12730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 552.304672][T12730] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 552.312813][T12730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 552.505062][ T5628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.671109][ T5628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.750289][ T5628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.009287][T12744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.281746][T12727] chnl_net:caif_netlink_parms(): no params data found [ 553.303398][T12752] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2891'. [ 553.327398][T12752] device hsr_slave_0 left promiscuous mode [ 553.365461][T12752] device hsr_slave_1 left promiscuous mode [ 553.999260][T12727] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.050231][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.132456][T12727] device bridge_slave_0 entered promiscuous mode [ 554.161026][T12727] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.202548][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.247208][T12727] device bridge_slave_1 entered promiscuous mode [ 554.422080][T12730] Bluetooth: hci0: command 0x0409 tx timeout [ 554.504743][T12727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.558962][T12727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.789530][T12727] team0: Port device team_slave_0 added [ 554.827108][T12727] team0: Port device team_slave_1 added [ 554.999341][T12727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.027326][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.098537][T12727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.410740][T12809] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 555.521732][T12809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.582162][T12727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.595979][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.652866][T12727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.808338][T12727] device hsr_slave_0 entered promiscuous mode [ 555.827406][T12727] device hsr_slave_1 entered promiscuous mode [ 555.845816][T12727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.853437][T12727] Cannot create hsr debugfs directory [ 556.495887][T12730] Bluetooth: hci0: command 0x041b tx timeout [ 556.927364][T12854] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2914'. [ 557.747161][T12875] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 558.005064][T12875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.459679][ T5628] device hsr_slave_0 left promiscuous mode [ 558.574612][ T5628] device hsr_slave_1 left promiscuous mode [ 558.580803][T12730] Bluetooth: hci0: command 0x040f tx timeout [ 558.703828][ T5628] device veth0_macvtap left promiscuous mode [ 559.534108][ T5628] team0 (unregistering): Port device team_slave_1 removed [ 559.575910][ T5628] team0 (unregistering): Port device team_slave_0 removed [ 559.615161][ T5628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.653073][ T5628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.863670][ T5628] bond0 (unregistering): (slave team0): Releasing backup interface [ 559.893794][ T5628] bond0 (unregistering): Released all slaves [ 560.507295][T12727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 560.556591][T12727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 560.588426][T12727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 560.636994][T12727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 560.655744][T12730] Bluetooth: hci0: command 0x0419 tx timeout [ 560.929529][T12727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.980419][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 561.018639][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 561.034498][T12727] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.079150][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 561.107670][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 561.128748][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.135957][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.197810][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 561.236917][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 561.256654][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 561.274295][T11092] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.281514][T11092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.332588][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 561.353446][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 561.378955][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 561.408993][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 561.428979][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 561.448792][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 561.502923][T12727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 561.524028][T12727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 561.559643][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 561.588087][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 561.608080][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 561.638983][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 561.676799][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 561.717144][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 561.764115][T12970] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2944'. [ 561.807320][T12963] netlink: 'syz.3.2944': attribute type 11 has an invalid length. [ 561.830692][T12963] netlink: 'syz.3.2944': attribute type 7 has an invalid length. [ 561.858007][T12963] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2944'. [ 562.052542][T12978] pimreg: tun_chr_ioctl cmd 1074812118 [ 562.553664][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 562.567061][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 562.599278][T13006] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2955'. [ 562.652862][T12727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.899553][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.905952][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.776905][T13044] netlink: 'syz.0.2964': attribute type 10 has an invalid length. [ 564.057944][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 564.091314][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 564.159860][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 564.186882][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 564.231516][T12727] device veth0_vlan entered promiscuous mode [ 564.247316][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 564.278825][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 564.335245][T12727] device veth1_vlan entered promiscuous mode [ 564.355262][T13058] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2970'. [ 564.624489][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 564.641664][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 564.678144][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 564.726695][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 564.847211][T12727] device veth0_macvtap entered promiscuous mode [ 564.887477][T12727] device veth1_macvtap entered promiscuous mode [ 564.942935][T12727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.986104][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 565.027606][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 565.046185][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 565.081053][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 565.120850][T13078] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2975'. [ 565.151425][T12727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.177341][T12727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.207397][T12727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.243973][T12727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.266826][T12727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.300063][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 565.359526][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 565.638272][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.682466][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.787907][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 565.815273][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.833907][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.879853][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 568.000866][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 568.010006][ T4273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 568.042054][ T4273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 568.051273][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 568.059111][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 568.067204][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 568.161907][T13152] netlink: 'syz.4.2996': attribute type 30 has an invalid length. [ 568.393080][ T5628] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.827957][T13171] netlink: 'syz.3.3001': attribute type 3 has an invalid length. [ 568.857664][T13171] netlink: 'syz.3.3001': attribute type 8 has an invalid length. [ 568.875977][T13171] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.3001'. [ 568.917702][ T5628] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.192510][ T5628] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.374506][ T5628] bond0: (slave netdevsim0): Releasing backup interface [ 569.409112][ T5628] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.698866][T13153] chnl_net:caif_netlink_parms(): no params data found [ 570.002102][T13153] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.062003][T13153] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.085014][T13153] device bridge_slave_0 entered promiscuous mode [ 570.096743][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 570.514520][T13153] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.528936][T13153] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.567676][T13153] device bridge_slave_1 entered promiscuous mode [ 570.820143][T13153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.842232][T13153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.263238][T13153] team0: Port device team_slave_0 added [ 571.294562][T13153] team0: Port device team_slave_1 added [ 571.574216][T13153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.620050][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.676665][T13153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.762407][T13153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.778003][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.866512][T13153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.215956][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 572.460697][T13275] Â: renamed from pim6reg1 [ 572.549358][T13153] device hsr_slave_0 entered promiscuous mode [ 572.621235][T13153] device hsr_slave_1 entered promiscuous mode [ 572.738476][T13153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.754860][T13153] Cannot create hsr debugfs directory [ 573.968803][T13153] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 574.043565][ T5628] device hsr_slave_0 left promiscuous mode [ 574.054434][ T5628] device hsr_slave_1 left promiscuous mode [ 574.065230][ T5628] device bridge_slave_1 left promiscuous mode [ 574.073749][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.099111][ T5628] device veth0_macvtap left promiscuous mode [ 574.256396][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 574.662299][ T5628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.699714][ T5628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.878379][ T5628] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 574.887321][ T5628] bond0 (unregistering): Released all slaves [ 574.965043][T13153] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 574.981405][T13337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3046'. [ 574.991564][T13153] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 575.009640][T13153] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 575.180155][T13153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.278635][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 575.376913][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.422699][T13153] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.479810][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 575.511259][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.521249][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.528493][ T5629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.608195][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 575.715587][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 575.739124][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 575.767727][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.774967][ T5629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.836154][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 575.860579][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 575.891813][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 575.909175][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 575.936601][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 576.023615][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 576.057904][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 576.139274][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 576.169504][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 576.212802][T13374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3056'. [ 576.248994][T13153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.293045][T13153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 576.336463][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 576.344204][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 576.378352][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 576.980745][T13402] delete_channel: no stack [ 577.205694][T13415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3068'. [ 577.254409][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 577.283642][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 577.320918][T13153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.393507][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 577.417928][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 577.484440][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 577.508972][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 577.528848][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 577.547892][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 577.664052][T13153] device veth0_vlan entered promiscuous mode [ 577.717646][T13153] device veth1_vlan entered promiscuous mode [ 577.778466][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 577.789228][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 577.818281][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 577.839734][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 577.872471][T13153] device veth0_macvtap entered promiscuous mode [ 577.911365][T13153] device veth1_macvtap entered promiscuous mode [ 577.996979][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.068826][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.101168][T13153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.689745][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 578.706991][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 578.716283][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 578.726216][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 578.750475][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.765232][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.777898][T13153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.805904][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 578.814746][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 578.840014][T13153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.898415][T13153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.934088][T13153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.953395][T13153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.062705][T13468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3081'. [ 579.103928][ T5629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.176055][ T5629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.235893][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 579.246999][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.267202][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.274853][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 580.179594][T13496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.206120][T13496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.250267][T13496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.336484][T13496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.719891][T13499] netlink: 'syz.2.3088': attribute type 41 has an invalid length. [ 581.107549][T13517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3094'. [ 581.426088][T12730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.456283][T12730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.473967][T12730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.482181][T12730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.492560][T12730] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 581.494097][ T5628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.511052][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 582.459558][T13528] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3098'. [ 582.519680][ T5628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.603093][T13538] netlink: 'syz.3.3101': attribute type 6 has an invalid length. [ 582.619273][T13538] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3101'. [ 582.691069][ T5628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.809839][T13549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3106'. [ 582.856576][ T5628] bond0: (slave netdevsim0): Releasing backup interface [ 582.928296][ T5628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.524530][ T5628] tipc: Left network mode [ 583.536274][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 583.590411][T13554] netlink: 'syz.3.3108': attribute type 41 has an invalid length. [ 583.962927][T13525] chnl_net:caif_netlink_parms(): no params data found [ 584.610955][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.647940][T13525] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.697648][T13525] device bridge_slave_0 entered promiscuous mode [ 584.706225][T13599] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3117'. [ 584.811213][T13599] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.962407][T13599] device bridge_slave_0 left promiscuous mode [ 584.978600][T13599] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.100228][T13525] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.109913][T13525] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.135206][T13525] device bridge_slave_1 entered promiscuous mode [ 585.164554][T13600] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3115'. [ 585.207780][T13608] netlink: 'syz.2.3118': attribute type 10 has an invalid length. [ 585.406339][T13525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.463822][T13525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.537061][T13612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.554416][T13612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.582853][T13612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.610430][T13612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.618526][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 586.078610][T13525] team0: Port device team_slave_0 added [ 586.198940][T13525] team0: Port device team_slave_1 added [ 586.796498][T13525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.810618][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.944077][T13525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.080543][T13635] netlink: 'syz.1.3125': attribute type 41 has an invalid length. [ 587.177720][T13525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.184728][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.295835][T13525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.572260][T13525] device hsr_slave_0 entered promiscuous mode [ 587.596106][T13525] device hsr_slave_1 entered promiscuous mode [ 587.603158][T13525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.616060][T13525] Cannot create hsr debugfs directory [ 587.695718][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 588.196717][T13667] tipc: Started in network mode [ 588.206463][T13667] tipc: Node identity 9215a268, cluster identity 4711 [ 588.259926][T13667] tipc: Node number set to 2450891368 [ 588.644558][ T5628] device veth0_macvtap left promiscuous mode [ 589.776450][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 590.528555][ T5628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.576333][ T5628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.620670][ T5628] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 590.831639][ T5628] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 590.841130][ T5628] bond0 (unregistering): Released all slaves [ 591.637238][T13718] netlink: 'syz.4.3146': attribute type 10 has an invalid length. [ 591.669360][T13718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3146'. [ 591.718194][T13718] device dummy0 entered promiscuous mode [ 591.759761][T13718] bridge0: port 1(dummy0) entered blocking state [ 591.785259][T13718] bridge0: port 1(dummy0) entered disabled state [ 591.822778][T13718] bridge0: port 1(dummy0) entered blocking state [ 591.829917][T13718] bridge0: port 1(dummy0) entered forwarding state [ 591.928984][T13709] device syzkaller0 entered promiscuous mode [ 591.949659][T13726] netlink: 'syz.3.3147': attribute type 10 has an invalid length. [ 591.998344][T13726] team0: Device wlan1 is of different type [ 592.031187][T13525] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 592.157120][T13525] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 594.101963][T13525] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 594.111088][T13525] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 594.294092][T13525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.374027][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 594.387477][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 594.408050][T13525] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.456659][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 594.476115][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 594.496457][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.503732][ T5630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.563497][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 594.603651][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 594.649081][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 594.685874][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.693133][ T5630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.728454][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 594.773121][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 594.804762][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 594.852671][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 594.926755][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 594.951448][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 594.980509][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 595.001330][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 595.027905][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 595.053876][T13525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 595.099043][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 595.117448][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 595.131338][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 595.525081][T13786] netlink: 'syz.3.3160': attribute type 10 has an invalid length. [ 595.554080][T13786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3160'. [ 595.584565][T13786] device dummy0 entered promiscuous mode [ 595.611413][T13786] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 595.875191][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 595.886372][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 595.910221][T13525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.967744][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 595.984931][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 596.018143][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 596.028305][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 596.040875][T13525] device veth0_vlan entered promiscuous mode [ 596.049968][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 596.060371][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 596.074946][T13525] device veth1_vlan entered promiscuous mode [ 596.114022][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 596.125230][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 596.135574][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 596.145302][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 596.158777][T13525] device veth0_macvtap entered promiscuous mode [ 596.177382][T13525] device veth1_macvtap entered promiscuous mode [ 596.189956][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 596.207319][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 596.230957][T13525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.239955][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 596.251920][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 596.267937][T13525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.281385][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 596.291714][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 596.307478][T13525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.322088][T13525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.333886][T13525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.345472][T13525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.594871][T13820] device syzkaller0 entered promiscuous mode [ 597.690949][ T5628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.706521][ T5628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.798652][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 600.823581][ T5631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.832641][ T5631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.861531][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 601.875397][T13910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3185'. [ 602.067667][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 602.079645][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 602.106588][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 602.121073][T12730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 602.129141][T12730] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 602.141209][T12730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 602.163810][ T32] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.206801][T13923] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3189'. [ 602.265252][T13923] device batadv_slave_1 entered promiscuous mode [ 602.404998][ T32] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.469368][T13915] device syzkaller0 entered promiscuous mode [ 602.698447][ T32] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.238869][T13952] netlink: 'syz.4.3200': attribute type 3 has an invalid length. [ 603.248179][T13952] netlink: 'syz.4.3200': attribute type 8 has an invalid length. [ 603.256370][T13952] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.3200'. [ 604.176868][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 604.645758][T13956] netlink: 'syz.4.3202': attribute type 30 has an invalid length. [ 604.689347][ T32] bond0: (slave netdevsim0): Releasing backup interface [ 604.726956][ T32] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.227733][T13919] chnl_net:caif_netlink_parms(): no params data found [ 605.242967][ T4279] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 605.773607][T13919] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.844447][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.853515][T13919] device bridge_slave_0 entered promiscuous mode [ 605.954646][T13919] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.968568][T13919] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.994813][T13919] device bridge_slave_1 entered promiscuous mode [ 606.090838][T13919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.144097][T13919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.251921][T14006] device syzkaller0 entered promiscuous mode [ 606.255887][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 606.342002][T14012] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3215'. [ 606.502362][T13919] team0: Port device team_slave_0 added [ 606.569767][T13919] team0: Port device team_slave_1 added [ 608.338211][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 610.380265][T14025] netlink: 'syz.0.3219': attribute type 10 has an invalid length. [ 610.415908][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 610.483510][T14025] team0 (unregistering): Port device team_slave_0 removed [ 610.503005][T14025] team0 (unregistering): Port device team_slave_1 removed [ 610.556805][T14055] netlink: 'syz.4.3231': attribute type 10 has an invalid length. [ 610.611030][T14055] team0: Port device geneve1 added [ 610.697890][T13919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.705058][T13919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.775850][T13919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.808734][T13919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.834721][T13919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.922061][T13919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.270266][T13919] device hsr_slave_0 entered promiscuous mode [ 611.320071][T13919] device hsr_slave_1 entered promiscuous mode [ 611.331969][T13919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.364140][T13919] Cannot create hsr debugfs directory [ 611.514700][T14116] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.3246'. [ 611.534500][T14116] netlink: zone id is out of range [ 611.542099][T14119] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.3250'. [ 611.544825][T14116] netlink: get zone limit has 8 unknown bytes [ 611.636770][ T32] device hsr_slave_0 left promiscuous mode [ 611.663958][ T32] device hsr_slave_1 left promiscuous mode [ 611.672802][ T32] device bridge_slave_1 left promiscuous mode [ 611.708193][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.616503][ T32] device veth0_macvtap left promiscuous mode [ 613.654099][ T32] team0 (unregistering): Port device team_slave_1 removed [ 613.667087][T14140] delete_channel: no stack [ 613.712034][ T32] team0 (unregistering): Port device team_slave_0 removed [ 613.761184][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.815146][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.065146][ T32] bond0 (unregistering): (slave team0): Releasing backup interface [ 614.093448][ T32] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 614.103083][ T32] bond0 (unregistering): Released all slaves [ 614.186422][T14121] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3246'. [ 614.241062][T14111] device syzkaller0 entered promiscuous mode [ 614.450210][T14153] FAULT_INJECTION: forcing a failure. [ 614.450210][T14153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.492197][T14153] CPU: 1 PID: 14153 Comm: syz.0.3260 Not tainted syzkaller #0 [ 614.499721][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 614.509798][T14153] Call Trace: [ 614.513084][T14153] [ 614.516016][T14153] dump_stack_lvl+0x188/0x24e [ 614.520702][T14153] ? show_regs_print_info+0x12/0x12 [ 614.525907][T14153] ? load_image+0x400/0x400 [ 614.530446][T14153] ? ___ratelimit+0x4f0/0x5f0 [ 614.535126][T14153] should_fail_ex+0x399/0x4d0 [ 614.539814][T14153] strncpy_from_user+0x32/0x350 [ 614.544677][T14153] bpf_prog_load+0x1f3/0x1560 [ 614.549364][T14153] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 614.555436][T14153] ? lock_chain_count+0x20/0x20 [ 614.560302][T14153] ? map_freeze+0x390/0x390 [ 614.564813][T14153] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 614.570973][T14153] ? lockdep_hardirqs_on+0x94/0x140 [ 614.576187][T14153] ? copy_user_enhanced_fast_string+0xa/0x40 [ 614.582171][T14153] ? bpf_lsm_bpf+0x5/0x10 [ 614.586498][T14153] ? security_bpf+0x7a/0xa0 [ 614.591124][T14153] __sys_bpf+0x5b8/0x780 [ 614.595374][T14153] ? bpf_link_show_fdinfo+0x380/0x380 [ 614.600776][T14153] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 614.606970][T14153] __x64_sys_bpf+0x78/0x90 [ 614.611395][T14153] do_syscall_64+0x4c/0xa0 [ 614.615816][T14153] ? clear_bhb_loop+0x60/0xb0 [ 614.620492][T14153] ? clear_bhb_loop+0x60/0xb0 [ 614.625169][T14153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 614.631059][T14153] RIP: 0033:0x7f2c6039c799 [ 614.635476][T14153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.655309][T14153] RSP: 002b:00007f2c612fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 614.663818][T14153] RAX: ffffffffffffffda RBX: 00007f2c60615fa0 RCX: 00007f2c6039c799 [ 614.671906][T14153] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 614.679989][T14153] RBP: 00007f2c612fe090 R08: 0000000000000000 R09: 0000000000000000 [ 614.687962][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.695932][T14153] R13: 00007f2c60616038 R14: 00007f2c60615fa0 R15: 00007ffcfd4283a8 [ 614.703923][T14153] [ 617.110347][T14180] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.3269'. [ 617.408283][T14188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3272'. [ 617.689588][T14197] netlink: 'syz.1.3276': attribute type 7 has an invalid length. [ 617.850543][T14207] netlink: 'syz.3.3279': attribute type 10 has an invalid length. [ 618.080933][T14207] bond0: (slave team0): Releasing backup interface [ 618.272015][T14207] team0 (unregistering): Port device team_slave_0 removed [ 618.394919][T14207] team0 (unregistering): Port device team_slave_1 removed [ 618.490200][T14211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3279'. [ 618.553258][T14224] device syzkaller0 entered promiscuous mode [ 620.801927][T14252] netlink: 'syz.3.3288': attribute type 21 has an invalid length. [ 620.812058][T14252] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3288'. [ 620.983187][T13919] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 621.022406][T13919] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 621.064727][T13919] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 621.099798][T13919] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 621.129236][T14276] netlink: 'syz.4.3295': attribute type 10 has an invalid length. [ 621.673233][T14276] team0 (unregistering): Port device team_slave_0 removed [ 621.744746][T14276] team0 (unregistering): Port device team_slave_1 removed [ 621.811922][T14276] team0 (unregistering): Port device geneve1 removed [ 621.871802][T14281] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3295'. [ 621.932392][T14283] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3297'. [ 622.278201][T13919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.300748][T14297] netlink: 'syz.3.3300': attribute type 3 has an invalid length. [ 622.320283][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.335417][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.339342][T14297] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3300'. [ 622.357474][T13919] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.393935][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.420998][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.460980][T13780] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.468444][T13780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.518030][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 622.553521][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.574592][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.629225][T13780] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.636653][T13780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.702249][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.724032][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.744574][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.788033][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.824027][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.868293][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.894708][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.006659][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.048322][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.092370][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.133783][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.346812][T14311] device syzkaller0 entered promiscuous mode [ 623.463044][T13919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.348945][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.355299][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.755379][T14343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3310'. [ 625.776049][T14354] netlink: 'syz.4.3312': attribute type 7 has an invalid length. [ 626.349337][T14376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3318'. [ 626.401046][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.452229][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 626.511499][T13919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.986520][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 627.064824][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 627.308689][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 627.321194][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.340212][T13919] device veth0_vlan entered promiscuous mode [ 627.348688][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.459180][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.649957][T13919] device veth1_vlan entered promiscuous mode [ 628.021903][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 628.046818][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 628.103025][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 628.156667][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 628.203817][T13919] device veth0_macvtap entered promiscuous mode [ 628.270719][T13919] device veth1_macvtap entered promiscuous mode [ 628.379912][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.449222][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.561588][T13919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.710931][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 628.758457][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 628.892153][T13780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.023780][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.104751][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.244890][T13919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.520415][T14405] team0: Port device team_slave_0 removed [ 629.566459][T14405] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 629.657722][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.679441][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.765258][T13919] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.827661][T13919] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.853226][T13919] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.887158][T13919] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.408164][ T5631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.426423][ T5631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.596123][T14419] netlink: 'syz.0.3337': attribute type 10 has an invalid length. [ 630.640579][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 630.731399][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.775710][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.816846][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 630.986515][T14432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3331'. [ 631.179896][T14432] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.436881][T14432] device bridge_slave_0 left promiscuous mode [ 631.483850][T14432] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.215229][T14464] device syzkaller0 entered promiscuous mode [ 632.281564][T14473] FAULT_INJECTION: forcing a failure. [ 632.281564][T14473] name failslab, interval 1, probability 0, space 0, times 0 [ 632.315994][T14473] CPU: 1 PID: 14473 Comm: syz.2.3341 Not tainted syzkaller #0 [ 632.323974][T14473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.334413][T14473] Call Trace: [ 632.338214][T14473] [ 632.341729][T14473] dump_stack_lvl+0x188/0x24e [ 632.346994][T14473] ? show_regs_print_info+0x12/0x12 [ 632.352392][T14473] ? load_image+0x400/0x400 [ 632.357084][T14473] ? __might_sleep+0xd0/0xd0 [ 632.361770][T14473] ? __lock_acquire+0x7d10/0x7d10 [ 632.366807][T14473] should_fail_ex+0x399/0x4d0 [ 632.371785][T14473] should_failslab+0x5/0x20 [ 632.376380][T14473] slab_pre_alloc_hook+0x59/0x310 [ 632.381495][T14473] ? __get_vm_area_node+0x122/0x330 [ 632.386696][T14473] __kmem_cache_alloc_node+0x4f/0x260 [ 632.392076][T14473] ? __get_vm_area_node+0x122/0x330 [ 632.397283][T14473] kmalloc_node_trace+0x22/0xe0 [ 632.402145][T14473] __get_vm_area_node+0x122/0x330 [ 632.407181][T14473] __vmalloc_node_range+0x357/0x13b0 [ 632.412465][T14473] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 632.418109][T14473] ? free_vm_area+0x50/0x50 [ 632.422632][T14473] ? end_current_label_crit_section+0x170/0x170 [ 632.428879][T14473] ? __lock_acquire+0x7d10/0x7d10 [ 632.433919][T14473] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 632.439488][T14473] __vmalloc+0x76/0x80 [ 632.443584][T14473] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 632.449238][T14473] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 632.454621][T14473] ? bpf_lsm_capable+0x5/0x10 [ 632.459324][T14473] bpf_prog_alloc+0x1c/0x1b0 [ 632.463927][T14473] bpf_prog_load+0x7c9/0x1560 [ 632.468659][T14473] ? map_freeze+0x390/0x390 [ 632.473189][T14473] ? __might_fault+0xa6/0x120 [ 632.477888][T14473] ? __might_fault+0xa6/0x120 [ 632.482565][T14473] ? __might_fault+0xc2/0x120 [ 632.487239][T14473] ? __might_fault+0xa6/0x120 [ 632.491916][T14473] ? bpf_lsm_bpf+0x5/0x10 [ 632.496246][T14473] ? security_bpf+0x7a/0xa0 [ 632.500764][T14473] __sys_bpf+0x5b8/0x780 [ 632.505024][T14473] ? bpf_link_show_fdinfo+0x380/0x380 [ 632.510423][T14473] ? lock_chain_count+0x20/0x20 [ 632.515332][T14473] __x64_sys_bpf+0x78/0x90 [ 632.519772][T14473] do_syscall_64+0x4c/0xa0 [ 632.524220][T14473] ? clear_bhb_loop+0x60/0xb0 [ 632.528915][T14473] ? clear_bhb_loop+0x60/0xb0 [ 632.533598][T14473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.539579][T14473] RIP: 0033:0x7f6d83b9c799 [ 632.543999][T14473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.563608][T14473] RSP: 002b:00007f6d84ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.572028][T14473] RAX: ffffffffffffffda RBX: 00007f6d83e15fa0 RCX: 00007f6d83b9c799 [ 632.580006][T14473] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 632.588074][T14473] RBP: 00007f6d84ac3090 R08: 0000000000000000 R09: 0000000000000000 [ 632.596044][T14473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.604277][T14473] R13: 00007f6d83e16038 R14: 00007f6d83e15fa0 R15: 00007ffd8d27cde8 [ 632.612363][T14473] [ 632.831240][T14473] syz.2.3341: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 632.908207][T14473] CPU: 1 PID: 14473 Comm: syz.2.3341 Not tainted syzkaller #0 [ 632.915731][T14473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.925909][T14473] Call Trace: [ 632.929198][T14473] [ 632.932131][T14473] dump_stack_lvl+0x188/0x24e [ 632.936931][T14473] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 632.943368][T14473] ? show_regs_print_info+0x12/0x12 [ 632.948576][T14473] ? load_image+0x400/0x400 [ 632.953090][T14473] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 632.959506][T14473] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 632.966013][T14473] warn_alloc+0x242/0x330 [ 632.970353][T14473] ? rcu_is_watching+0x11/0xa0 [ 632.975126][T14473] ? zone_watermark_ok_safe+0x270/0x270 [ 632.980686][T14473] ? lockdep_hardirqs_on+0x94/0x140 [ 632.985891][T14473] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 632.992073][T14473] __vmalloc_node_range+0x37c/0x13b0 [ 632.997400][T14473] ? free_vm_area+0x50/0x50 [ 633.001933][T14473] ? end_current_label_crit_section+0x170/0x170 [ 633.008182][T14473] ? __lock_acquire+0x7d10/0x7d10 [ 633.013220][T14473] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 633.018775][T14473] __vmalloc+0x76/0x80 [ 633.022847][T14473] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 633.028410][T14473] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 633.033788][T14473] ? bpf_lsm_capable+0x5/0x10 [ 633.038475][T14473] bpf_prog_alloc+0x1c/0x1b0 [ 633.043084][T14473] bpf_prog_load+0x7c9/0x1560 [ 633.047782][T14473] ? map_freeze+0x390/0x390 [ 633.052292][T14473] ? __might_fault+0xa6/0x120 [ 633.056992][T14473] ? __might_fault+0xa6/0x120 [ 633.061753][T14473] ? __might_fault+0xc2/0x120 [ 633.066425][T14473] ? __might_fault+0xa6/0x120 [ 633.071106][T14473] ? bpf_lsm_bpf+0x5/0x10 [ 633.075433][T14473] ? security_bpf+0x7a/0xa0 [ 633.079949][T14473] __sys_bpf+0x5b8/0x780 [ 633.084208][T14473] ? bpf_link_show_fdinfo+0x380/0x380 [ 633.089695][T14473] ? lock_chain_count+0x20/0x20 [ 633.094569][T14473] __x64_sys_bpf+0x78/0x90 [ 633.098990][T14473] do_syscall_64+0x4c/0xa0 [ 633.103411][T14473] ? clear_bhb_loop+0x60/0xb0 [ 633.108100][T14473] ? clear_bhb_loop+0x60/0xb0 [ 633.112778][T14473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.118674][T14473] RIP: 0033:0x7f6d83b9c799 [ 633.123093][T14473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.142789][T14473] RSP: 002b:00007f6d84ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.151208][T14473] RAX: ffffffffffffffda RBX: 00007f6d83e15fa0 RCX: 00007f6d83b9c799 [ 633.159182][T14473] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 633.167154][T14473] RBP: 00007f6d84ac3090 R08: 0000000000000000 R09: 0000000000000000 [ 633.175254][T14473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.184220][T14473] R13: 00007f6d83e16038 R14: 00007f6d83e15fa0 R15: 00007ffd8d27cde8 [ 633.192250][T14473] [ 633.262260][T14473] Mem-Info: [ 633.265609][T14473] active_anon:6155 inactive_anon:0 isolated_anon:0 [ 633.265609][T14473] active_file:24909 inactive_file:40155 isolated_file:0 [ 633.265609][T14473] unevictable:768 dirty:175 writeback:0 [ 633.265609][T14473] slab_reclaimable:21126 slab_unreclaimable:96817 [ 633.265609][T14473] mapped:29717 shmem:1362 pagetables:632 [ 633.265609][T14473] sec_pagetables:0 bounce:0 [ 633.265609][T14473] kernel_misc_reclaimable:0 [ 633.265609][T14473] free:1316031 free_pcp:7445 free_cma:0 [ 633.394617][T14473] Node 0 active_anon:24616kB inactive_anon:0kB active_file:99636kB inactive_file:160420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123604kB dirty:708kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10540kB pagetables:2572kB sec_pagetables:0kB all_unreclaimable? no [ 633.429459][T14473] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 633.472891][T14473] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 633.473034][ T4273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 633.501560][T14473] lowmem_reserve[]: [ 633.513245][ T4273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 633.518159][T14473] 0 [ 633.525753][ T4273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 633.532619][T14473] 2527 [ 633.538083][T12730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 633.548983][T12730] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 633.557148][T12730] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 633.580762][T14473] 2528 2528 2528 [ 633.607196][T14473] Node 0 DMA32 free:1348516kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:24716kB inactive_anon:0kB active_file:99636kB inactive_file:160420kB unevictable:1536kB writepending:708kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:21600kB local_pcp:20444kB free_cma:0kB [ 633.689220][T14473] lowmem_reserve[]: 0 0 1 1 1 [ 633.694885][T14473] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 633.745945][T14473] lowmem_reserve[]: 0 0 0 0 0 [ 633.751123][T14473] Node 1 Normal free:3899512kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18856kB local_pcp:11688kB free_cma:0kB [ 633.798195][T14479] netlink: 'syz.0.3342': attribute type 21 has an invalid length. [ 633.799487][T14473] lowmem_reserve[]: 0 0 0 0 0 [ 633.812691][T14473] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 633.827853][T14473] Node 0 DMA32: 1013*4kB (ME) 1452*8kB (ME) 1225*16kB (UME) 817*32kB (UME) 1108*64kB (UME) 865*128kB (UME) 251*256kB (UME) 170*512kB (UME) 61*1024kB (UM) 17*2048kB (UME) 214*4096kB (UM) = 1368164kB [ 633.851125][T14473] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 633.867245][T14473] Node 1 Normal: 244*4kB (UME) 45*8kB (UME) 28*16kB (UE) 32*32kB (UME) 24*64kB (UME) 9*128kB (UME) 3*256kB (UM) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3899512kB [ 633.892112][T14473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.927579][T14473] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.948401][T14473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.976827][T14473] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.995123][T14473] 66426 total pagecache pages [ 634.016314][T14473] 0 pages in swap cache [ 634.025915][T14473] Free swap = 124996kB [ 634.047816][T14473] Total swap = 124996kB [ 634.053598][T14473] 2097051 pages RAM [ 634.067566][T14473] 0 pages HighMem/MovableOnly [ 634.072310][T14473] 415205 pages reserved [ 634.116025][T14473] 0 pages cma reserved [ 635.789763][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 636.077953][T14497] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3344'. [ 636.117213][T14500] team0: Port device team_slave_0 removed [ 636.123400][T14500] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 636.265832][ T5631] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.370062][T14530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3349'. [ 636.397383][T14530] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.504337][T14530] device bridge_slave_0 left promiscuous mode [ 636.510817][T14530] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.199879][ T5631] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.266834][T14549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3355'. [ 637.369192][ T5631] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.582266][ T5631] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.649890][T14556] device syzkaller0 entered promiscuous mode [ 637.865095][T14485] chnl_net:caif_netlink_parms(): no params data found [ 637.868555][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 638.261148][T14585] netlink: 'syz.0.3368': attribute type 1 has an invalid length. [ 638.276629][T14585] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3368'. [ 638.394470][T14587] Dead loop on virtual device ip6_vti0, fix it urgently! [ 639.754034][T14584] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.808694][T14586] device bridge_slave_1 left promiscuous mode [ 639.836009][T14586] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.937444][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 640.352829][T14611] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3376'. [ 640.746001][T14485] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.774629][T14485] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.783906][T14485] device bridge_slave_0 entered promiscuous mode [ 641.119648][T14485] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.146082][T14485] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.165846][T14485] device bridge_slave_1 entered promiscuous mode [ 641.284647][T14485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.472024][T14633] device syzkaller0 entered promiscuous mode [ 641.505953][T14485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.816930][T14656] netlink: 'syz.2.3386': attribute type 10 has an invalid length. [ 642.022457][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 643.953815][T14485] team0: Port device team_slave_0 added [ 643.983409][T14665] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3389'. [ 644.021546][T14672] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3391'. [ 644.042375][T14485] team0: Port device team_slave_1 added [ 644.171953][T14485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.211618][T14485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.352764][T14485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.777214][T14485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.792888][T14485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.845312][T14485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.053424][T14485] device hsr_slave_0 entered promiscuous mode [ 645.131194][T14485] device hsr_slave_1 entered promiscuous mode [ 645.231080][T14485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.255709][T14485] Cannot create hsr debugfs directory [ 646.098064][ T5631] device veth0_to_team left promiscuous mode [ 646.121559][ T5631] Ÿë: port 1(veth0_to_team) entered disabled state [ 646.159528][ T5631] device hsr_slave_0 left promiscuous mode [ 646.209857][ T5631] device hsr_slave_1 left promiscuous mode [ 647.392287][ T5631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.452608][ T5631] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 647.640972][ T5631] bond0 (unregistering): Released all slaves [ 647.727377][T14717] device syzkaller0 entered promiscuous mode [ 649.629757][T14749] netlink: 'syz.0.3412': attribute type 10 has an invalid length. [ 649.956998][T14763] device syzkaller0 entered promiscuous mode [ 649.988354][T14485] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 650.110093][T14485] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 650.180791][T14485] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 650.241167][T14485] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 650.524196][T14485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.580148][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 650.592551][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 650.672047][T14485] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.802045][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 650.814144][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 650.823075][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.830326][ T5628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.839161][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 650.864779][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 650.884419][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 650.933420][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.940843][ T5631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.992951][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 651.087739][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 651.116808][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 651.158559][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 651.237261][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 651.312889][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 651.404415][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 651.518856][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 651.540888][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 651.557240][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 651.590486][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 651.637132][T14485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.020148][T14817] device syzkaller0 entered promiscuous mode [ 654.022813][T14850] netlink: 'syz.0.3433': attribute type 3 has an invalid length. [ 654.030736][T14850] netlink: 'syz.0.3433': attribute type 8 has an invalid length. [ 654.042912][T14856] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3434'. [ 654.043312][T14850] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.3433'. [ 654.726897][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.745249][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 654.849996][T14485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.932188][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 654.961475][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 655.013732][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 655.041158][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 655.078765][T14485] device veth0_vlan entered promiscuous mode [ 655.095550][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 655.115152][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 655.150610][T14485] device veth1_vlan entered promiscuous mode [ 655.227133][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 655.239493][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 655.287191][T14485] device veth0_macvtap entered promiscuous mode [ 655.314274][T14485] device veth1_macvtap entered promiscuous mode [ 656.140848][T14485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.151497][T14485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.162221][T14485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.173467][T14485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.211617][T14485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.246716][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 656.270673][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 656.302721][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 656.413834][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 656.453446][T14485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.476232][T14485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.495788][T14485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.536454][T14485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.563249][T14485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.628305][T14911] device syzkaller0 entered promiscuous mode [ 656.635594][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 656.649898][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 656.661853][T14485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.671255][T14485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.680966][T14485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.714237][T14485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.621325][T14947] device veth1_macvtap left promiscuous mode [ 658.627786][T14947] device macsec0 entered promiscuous mode [ 658.798076][ T5630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.819711][ T5630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.856404][ T5628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 658.891679][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.911162][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.941796][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 660.024315][T14994] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.3468'. [ 660.072258][T14994] netlink: 'syz.4.3468': attribute type 1 has an invalid length. [ 660.110770][T14994] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.3468'. [ 660.386553][T15001] device syzkaller0 entered promiscuous mode [ 662.843471][T15035] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3479'. [ 663.031827][T15040] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3484'. [ 663.118413][T15047] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3485'. [ 663.291530][T15050] netlink: 'syz.2.3486': attribute type 1 has an invalid length. [ 663.355915][T15050] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3486'. [ 663.387113][T15044] netlink: 'syz.2.3486': attribute type 1 has an invalid length. [ 663.438223][T15044] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3486'. [ 663.620899][T15063] netlink: 'syz.4.3494': attribute type 10 has an invalid length. [ 663.735212][T15066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.755876][T15066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.778576][T15066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.820792][T15066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.983583][T15080] netlink: 'syz.4.3498': attribute type 10 has an invalid length. [ 664.282037][T15073] device syzkaller0 entered promiscuous mode [ 664.877002][T15108] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 664.911117][T15108] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.3507'. [ 664.986054][T15105] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 664.996322][T15113] delete_channel: no stack [ 665.000897][T15113] delete_channel: no stack [ 665.004020][T15105] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.3507'. [ 666.777991][T15117] device sit0 entered promiscuous mode [ 666.844947][T15124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.866493][T15124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.886497][T15124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.894058][T15124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.145566][T15148] netlink: 'syz.3.3523': attribute type 3 has an invalid length. [ 667.163589][T15148] netlink: 'syz.3.3523': attribute type 8 has an invalid length. [ 667.181552][T15148] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.3523'. [ 667.261143][T15150] device wg2 entered promiscuous mode [ 667.487526][T15159] netlink: 'syz.1.3524': attribute type 1 has an invalid length. [ 667.494873][T15153] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.3524'. [ 667.495562][T15159] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.3524'. [ 667.728371][T15163] device syzkaller0 entered promiscuous mode [ 668.550712][T15205] netlink: 'syz.3.3541': attribute type 1 has an invalid length. [ 668.559176][T15205] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3541'. [ 668.842938][T15211] netlink: 'syz.2.3544': attribute type 3 has an invalid length. [ 668.852145][T15211] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3544'. [ 669.144670][T15220] netlink: 'syz.2.3546': attribute type 3 has an invalid length. [ 669.155418][T15220] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3546'. [ 670.740423][T15191] netlink: 'syz.4.3535': attribute type 10 has an invalid length. [ 670.748475][T15191] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3535'. [ 670.773804][T15187] device syzkaller0 entered promiscuous mode [ 670.781592][T15209] device veth1_macvtap left promiscuous mode [ 670.796230][T15209] device macsec0 entered promiscuous mode [ 671.402155][T15243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3552'. [ 673.136201][T15243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3552'. [ 673.353653][T15263] device syzkaller0 entered promiscuous mode [ 675.659457][T15278] netlink: 'syz.1.3567': attribute type 10 has an invalid length. [ 675.682820][T15278] team0: Port device macvlan1 added [ 675.689201][T15282] netlink: 'syz.4.3568': attribute type 10 has an invalid length. [ 677.615797][T12730] Bluetooth: hci0: command 0x0406 tx timeout [ 679.404250][T15333] netlink: 'syz.4.3585': attribute type 4 has an invalid length. [ 679.476967][T15333] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3585'. [ 679.544730][T15333] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 679.620678][T15326] netlink: 'syz.2.3583': attribute type 6 has an invalid length. [ 679.974492][T15348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3591'. [ 682.651446][T15383] device syzkaller0 entered promiscuous mode [ 684.825054][T15392] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3617'. [ 685.606332][T15435] netlink: 'syz.4.3619': attribute type 10 has an invalid length. [ 685.663116][T15437] netlink: 'syz.1.3620': attribute type 1 has an invalid length. [ 685.737688][T15437] netlink: 'syz.1.3620': attribute type 3 has an invalid length. [ 685.787793][T15437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3620'. [ 685.798755][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.805192][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.260196][T15451] netlink: 'syz.2.3627': attribute type 11 has an invalid length. [ 686.277784][T15451] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3627'. [ 686.400386][T15451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.667724][T15465] netlink: 'syz.3.3633': attribute type 21 has an invalid length. [ 686.695891][T15465] netlink: 'syz.3.3633': attribute type 6 has an invalid length. [ 686.704390][T15465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3633'. [ 686.724600][T15465] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3633'. [ 686.896970][T15476] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 686.934361][T15476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.093606][T15490] netlink: 'syz.1.3640': attribute type 10 has an invalid length. [ 687.118786][T15487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.129409][T15487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.158782][T15487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.169604][T15487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.294975][T15494] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3643'. [ 687.431775][T15501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3645'. [ 687.472690][T15501] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.542954][T15501] device bridge_slave_0 left promiscuous mode [ 687.559851][T15501] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.799990][T15508] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3648'. [ 690.880659][T15523] netlink: 'syz.0.3653': attribute type 3 has an invalid length. [ 690.921342][T15523] netlink: 'syz.0.3653': attribute type 8 has an invalid length. [ 690.965976][T15523] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.3653'. [ 691.216388][T15521] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3652'. [ 692.976083][T12730] Bluetooth: hci2: command 0x0406 tx timeout [ 694.296057][T15541] delete_channel: no stack [ 694.384891][T15556] netlink: 'syz.0.3666': attribute type 2 has an invalid length. [ 694.394957][T15556] netlink: 'syz.0.3666': attribute type 4 has an invalid length. [ 694.434515][T15556] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3666'. [ 694.526755][T15560] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3669'. [ 695.083979][T15570] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 695.166285][T15570] syzkaller0: linktype set to 776 [ 696.234272][T15609] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3684'. [ 696.371930][T15615] netlink: 'syz.4.3687': attribute type 10 has an invalid length. [ 696.396468][T15615] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.3687'. [ 696.526202][T15593] delete_channel: no stack [ 696.596700][T15625] FAULT_INJECTION: forcing a failure. [ 696.596700][T15625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.614611][T15625] CPU: 1 PID: 15625 Comm: syz.1.3689 Not tainted syzkaller #0 [ 696.622125][T15625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.632195][T15625] Call Trace: [ 696.635484][T15625] [ 696.638409][T15625] dump_stack_lvl+0x188/0x24e [ 696.643182][T15625] ? show_regs_print_info+0x12/0x12 [ 696.648379][T15625] ? load_image+0x400/0x400 [ 696.652892][T15625] ? __lock_acquire+0x7d10/0x7d10 [ 696.657983][T15625] should_fail_ex+0x399/0x4d0 [ 696.662675][T15625] _copy_from_user+0x2c/0x170 [ 696.667355][T15625] ___sys_sendmsg+0x1c3/0x360 [ 696.672051][T15625] ? __sys_sendmsg+0x290/0x290 [ 696.676824][T15625] ? __lock_acquire+0x7d10/0x7d10 [ 696.681861][T15625] __se_sys_sendmsg+0x1bb/0x2a0 [ 696.686711][T15625] ? __x64_sys_sendmsg+0x80/0x80 [ 696.691672][T15625] ? lockdep_hardirqs_on+0x94/0x140 [ 696.696864][T15625] do_syscall_64+0x4c/0xa0 [ 696.701390][T15625] ? clear_bhb_loop+0x60/0xb0 [ 696.706076][T15625] ? clear_bhb_loop+0x60/0xb0 [ 696.710750][T15625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.716638][T15625] RIP: 0033:0x7f432e59c799 [ 696.721155][T15625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.740762][T15625] RSP: 002b:00007f432f48d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.749226][T15625] RAX: ffffffffffffffda RBX: 00007f432e815fa0 RCX: 00007f432e59c799 [ 696.757232][T15625] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 696.765208][T15625] RBP: 00007f432f48d090 R08: 0000000000000000 R09: 0000000000000000 [ 696.773180][T15625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.781184][T15625] R13: 00007f432e816038 R14: 00007f432e815fa0 R15: 00007ffccd1dfda8 [ 696.789167][T15625] [ 696.928169][T15632] FAULT_INJECTION: forcing a failure. [ 696.928169][T15632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.008747][T15632] CPU: 0 PID: 15632 Comm: syz.3.3693 Not tainted syzkaller #0 [ 697.016287][T15632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 697.026462][T15632] Call Trace: [ 697.029747][T15632] [ 697.032685][T15632] dump_stack_lvl+0x188/0x24e [ 697.037387][T15632] ? show_regs_print_info+0x12/0x12 [ 697.042604][T15632] ? load_image+0x400/0x400 [ 697.047125][T15632] ? __lock_acquire+0x7d10/0x7d10 [ 697.052193][T15632] ? snprintf+0xe5/0x140 [ 697.056444][T15632] should_fail_ex+0x399/0x4d0 [ 697.061140][T15632] _copy_to_user+0x2c/0x130 [ 697.065653][T15632] simple_read_from_buffer+0xe3/0x150 [ 697.071047][T15632] proc_fail_nth_read+0x1a6/0x220 [ 697.076095][T15632] ? proc_fault_inject_write+0x310/0x310 [ 697.081754][T15632] ? fsnotify_perm+0x248/0x550 [ 697.086538][T15632] ? proc_fault_inject_write+0x310/0x310 [ 697.092198][T15632] vfs_read+0x2de/0xa00 [ 697.096404][T15632] ? kernel_read+0x1e0/0x1e0 [ 697.101011][T15632] ? __fget_files+0x28/0x4b0 [ 697.105584][T15632] ? __fget_files+0x28/0x4b0 [ 697.110165][T15632] ? __fget_files+0x43d/0x4b0 [ 697.114834][T15632] ? __fdget_pos+0x2ae/0x360 [ 697.119424][T15632] ? ksys_read+0x71/0x250 [ 697.123761][T15632] ksys_read+0x14c/0x250 [ 697.128004][T15632] ? vfs_write+0xa30/0xa30 [ 697.132511][T15632] ? lockdep_hardirqs_on+0x94/0x140 [ 697.137711][T15632] do_syscall_64+0x4c/0xa0 [ 697.142125][T15632] ? clear_bhb_loop+0x60/0xb0 [ 697.146794][T15632] ? clear_bhb_loop+0x60/0xb0 [ 697.151463][T15632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.157348][T15632] RIP: 0033:0x7f61fcd5cfce [ 697.161768][T15632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 697.181462][T15632] RSP: 002b:00007f61fdbadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 697.189873][T15632] RAX: ffffffffffffffda RBX: 00007f61fdbae6c0 RCX: 00007f61fcd5cfce [ 697.197837][T15632] RDX: 000000000000000f RSI: 00007f61fdbae0a0 RDI: 0000000000000008 [ 697.205911][T15632] RBP: 00007f61fdbae090 R08: 0000000000000000 R09: 0000000000000000 [ 697.213876][T15632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.221861][T15632] R13: 00007f61fd016038 R14: 00007f61fd015fa0 R15: 00007fff4f364128 [ 697.229853][T15632] [ 699.283773][T15694] netlink: 'syz.1.3714': attribute type 10 has an invalid length. [ 699.658145][T15703] netlink: 'syz.3.3717': attribute type 10 has an invalid length. [ 699.669144][T15703] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 700.187608][T15697] delete_channel: no stack [ 700.386664][T15721] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.394163][T15721] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.422511][T15728] device bridge_slave_1 left promiscuous mode [ 700.494166][T15728] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.527575][T15728] device bridge_slave_0 left promiscuous mode [ 700.544123][T15728] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.720937][T15736] netlink: 31355 bytes leftover after parsing attributes in process `syz.0.3732'. [ 700.747448][T15738] netlink: 'syz.4.3731': attribute type 10 has an invalid length. [ 700.831813][T15740] device syzkaller0 entered promiscuous mode [ 703.304021][T15794] netlink: 'syz.3.3752': attribute type 4 has an invalid length. [ 703.332847][T15794] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3752'. [ 703.381685][T15794] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 703.504902][T15796] sock: sock_timestamping_bind_phc: sock not bind to device [ 703.535362][T15803] sock: sock_timestamping_bind_phc: sock not bind to device [ 703.660879][T15813] netlink: 'syz.2.3758': attribute type 3 has an invalid length. [ 703.700529][T15813] netlink: 'syz.2.3758': attribute type 8 has an invalid length. [ 703.722818][T15813] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.3758'. [ 703.768659][T15818] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3761'. [ 703.935067][T15826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3762'. [ 704.243848][T15838] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3768'. [ 708.335894][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 708.969683][T15903] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3794'. [ 709.281362][T15887] delete_channel: no stack [ 709.511017][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3797'. [ 709.547352][T15914] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3797'. [ 709.934477][T15939] netlink: 'syz.1.3807': attribute type 29 has an invalid length. [ 709.944567][T15939] netlink: 'syz.1.3807': attribute type 29 has an invalid length. [ 709.954665][T15939] netlink: 'syz.1.3807': attribute type 29 has an invalid length. [ 710.106338][T15938] device syzkaller0 entered promiscuous mode [ 710.986293][T15942] delete_channel: no stack [ 711.035437][T15940] device syzkaller0 entered promiscuous mode [ 714.100480][T15962] netlink: 'syz.2.3814': attribute type 10 has an invalid length. [ 714.108812][T15962] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 714.117989][T15965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3815'. [ 714.349278][T15982] netlink: 'syz.2.3817': attribute type 10 has an invalid length. [ 714.890770][T15997] netlink: 'syz.0.3827': attribute type 11 has an invalid length. [ 714.904548][T15997] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3827'. [ 715.559406][T16006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3831'. [ 716.182914][T15989] delete_channel: no stack [ 716.555770][T16028] netlink: 'syz.1.3840': attribute type 11 has an invalid length. [ 716.607335][T16028] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3840'. [ 717.686759][T16040] delete_channel: no stack [ 718.100495][T16074] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3857'. [ 719.399719][T16105] device veth1_macvtap left promiscuous mode [ 719.434815][T16105] device macsec0 entered promiscuous mode [ 719.846457][T16097] delete_channel: no stack [ 720.288576][T16131] FAULT_INJECTION: forcing a failure. [ 720.288576][T16131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.323470][T16131] CPU: 0 PID: 16131 Comm: syz.4.3874 Not tainted syzkaller #0 [ 720.331104][T16131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 720.341274][T16131] Call Trace: [ 720.344570][T16131] [ 720.347514][T16131] dump_stack_lvl+0x188/0x24e [ 720.352216][T16131] ? show_regs_print_info+0x12/0x12 [ 720.357439][T16131] ? load_image+0x400/0x400 [ 720.361968][T16131] ? __lock_acquire+0x7d10/0x7d10 [ 720.367038][T16131] should_fail_ex+0x399/0x4d0 [ 720.371754][T16131] _copy_from_user+0x2c/0x170 [ 720.376455][T16131] iovec_from_user+0x143/0x360 [ 720.381247][T16131] __import_iovec+0x6d/0x500 [ 720.385857][T16131] ? __might_fault+0xc2/0x120 [ 720.390562][T16131] import_iovec+0x6f/0xa0 [ 720.394917][T16131] ___sys_sendmsg+0x252/0x360 [ 720.399635][T16131] ? __sys_sendmsg+0x290/0x290 [ 720.404448][T16131] ? __lock_acquire+0x7d10/0x7d10 [ 720.409520][T16131] __se_sys_sendmsg+0x1bb/0x2a0 [ 720.414488][T16131] ? __x64_sys_sendmsg+0x80/0x80 [ 720.419475][T16131] ? lockdep_hardirqs_on+0x94/0x140 [ 720.424701][T16131] do_syscall_64+0x4c/0xa0 [ 720.429147][T16131] ? clear_bhb_loop+0x60/0xb0 [ 720.433850][T16131] ? clear_bhb_loop+0x60/0xb0 [ 720.438555][T16131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.444476][T16131] RIP: 0033:0x7fef7259c799 [ 720.448998][T16131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.468628][T16131] RSP: 002b:00007fef73404028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.477174][T16131] RAX: ffffffffffffffda RBX: 00007fef72815fa0 RCX: 00007fef7259c799 [ 720.485259][T16131] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 720.493253][T16131] RBP: 00007fef73404090 R08: 0000000000000000 R09: 0000000000000000 [ 720.501247][T16131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.509245][T16131] R13: 00007fef72816038 R14: 00007fef72815fa0 R15: 00007fff1ebd3568 [ 720.517260][T16131] [ 721.880020][T16154] delete_channel: no stack [ 724.300637][T16201] device syzkaller0 entered promiscuous mode [ 724.782024][T16218] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3900'. [ 724.797216][T16208] netlink: 'syz.2.3900': attribute type 2 has an invalid length. [ 725.338262][T16212] delete_channel: no stack [ 728.079518][T16231] device veth1_macvtap left promiscuous mode [ 728.093761][T16233] device veth1_macvtap entered promiscuous mode [ 728.100435][T16233] device macsec0 entered promiscuous mode [ 728.251408][T16255] netlink: 'syz.4.3916': attribute type 10 has an invalid length. [ 728.318928][T16259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3917'. [ 728.527551][T16266] netlink: 'syz.1.3919': attribute type 10 has an invalid length. [ 728.550478][T16266] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3919'. [ 728.815861][T12730] Bluetooth: hci4: command 0x0406 tx timeout [ 728.962170][T16276] netlink: 'syz.2.3924': attribute type 4 has an invalid length. [ 728.974099][T16276] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3924'. [ 729.038749][T16276] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 729.167670][T16256] delete_channel: no stack [ 729.439010][T16280] device syzkaller0 entered promiscuous mode [ 729.682890][T16284] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3928'. [ 731.962534][T16284] netlink: 'syz.0.3928': attribute type 2 has an invalid length. [ 732.408500][T16325] FAULT_INJECTION: forcing a failure. [ 732.408500][T16325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.456000][T16325] CPU: 0 PID: 16325 Comm: syz.0.3942 Not tainted syzkaller #0 [ 732.463557][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.473657][T16325] Call Trace: [ 732.476973][T16325] [ 732.479939][T16325] dump_stack_lvl+0x188/0x24e [ 732.485026][T16325] ? show_regs_print_info+0x12/0x12 [ 732.490272][T16325] ? load_image+0x400/0x400 [ 732.494834][T16325] ? __lock_acquire+0x7d10/0x7d10 [ 732.499933][T16325] should_fail_ex+0x399/0x4d0 [ 732.504673][T16325] _copy_from_user+0x2c/0x170 [ 732.509432][T16325] ____sys_sendmsg+0x30a/0x970 [ 732.514271][T16325] ? __sys_sendmsg_sock+0x30/0x30 [ 732.519375][T16325] ? __import_iovec+0x315/0x500 [ 732.524397][T16325] ? import_iovec+0x6f/0xa0 [ 732.528960][T16325] ___sys_sendmsg+0x2a2/0x360 [ 732.533712][T16325] ? __sys_sendmsg+0x290/0x290 [ 732.538598][T16325] ? __lock_acquire+0x7d10/0x7d10 [ 732.543744][T16325] __se_sys_sendmsg+0x1bb/0x2a0 [ 732.548646][T16325] ? __x64_sys_sendmsg+0x80/0x80 [ 732.553640][T16325] ? lockdep_hardirqs_on+0x94/0x140 [ 732.558863][T16325] do_syscall_64+0x4c/0xa0 [ 732.563291][T16325] ? clear_bhb_loop+0x60/0xb0 [ 732.568236][T16325] ? clear_bhb_loop+0x60/0xb0 [ 732.573021][T16325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.578939][T16325] RIP: 0033:0x7f2c6039c799 [ 732.583545][T16325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.603293][T16325] RSP: 002b:00007f2c612fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.611847][T16325] RAX: ffffffffffffffda RBX: 00007f2c60615fa0 RCX: 00007f2c6039c799 [ 732.619838][T16325] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 732.627902][T16325] RBP: 00007f2c612fe090 R08: 0000000000000000 R09: 0000000000000000 [ 732.635879][T16325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.643887][T16325] R13: 00007f2c60616038 R14: 00007f2c60615fa0 R15: 00007ffcfd4283a8 [ 732.652000][T16325] [ 733.016275][T16315] delete_channel: no stack [ 733.057239][T16338] netlink: 'syz.3.3948': attribute type 10 has an invalid length. [ 733.076597][T16338] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.125615][T16338] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.132925][T16338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.146909][T16338] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 733.328421][T16346] device syzkaller0 entered promiscuous mode [ 733.336560][T16348] netlink: 'syz.0.3952': attribute type 2 has an invalid length. [ 734.243951][T16348] device 0 entered promiscuous mode [ 736.033557][T16371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3959'. [ 736.043137][T16379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3960'. [ 736.237520][T16378] delete_channel: no stack [ 736.267295][T16386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3973'. [ 736.338319][T16391] netlink: 'syz.1.3962': attribute type 10 has an invalid length. [ 736.481298][T16391] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.564030][T16391] bond0: (slave team0): Enslaving as an active interface with an up link [ 736.625450][T16395] netlink: 'syz.3.3965': attribute type 10 has an invalid length. [ 736.637032][T16395] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 736.969228][T16419] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3975'. [ 737.033637][T16415] device syzkaller0 entered promiscuous mode [ 737.279277][T16426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3977'. [ 737.336687][T16429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3978'. [ 737.957770][T16421] delete_channel: no stack [ 739.328643][T16434] netlink: 'syz.3.3980': attribute type 27 has an invalid length. [ 739.337952][T16436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3991'. [ 739.669603][T16462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3990'. [ 740.131329][T16477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3995'. [ 740.380079][T16483] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3997'. [ 740.402254][T16483] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 740.748812][T16486] device syzkaller0 entered promiscuous mode [ 740.769827][T16489] netlink: 'syz.1.3999': attribute type 7 has an invalid length. [ 740.778180][T16489] netlink: 'syz.1.3999': attribute type 6 has an invalid length. [ 740.802506][T16492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.809943][T16492] IPv6: NLM_F_CREATE should be set when creating new route [ 740.817396][T16492] IPv6: NLM_F_CREATE should be set when creating new route [ 740.824831][T16492] IPv6: NLM_F_CREATE should be set when creating new route [ 740.835079][T16470] delete_channel: no stack [ 745.058446][T16510] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4008'. [ 745.432856][T16531] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4014'. [ 745.706584][T16534] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4016'. [ 745.723873][T16539] netlink: 'syz.0.4015': attribute type 7 has an invalid length. [ 745.732730][T16539] netlink: 'syz.0.4015': attribute type 6 has an invalid length. [ 746.425933][T16557] netlink: 'syz.0.4020': attribute type 10 has an invalid length. [ 747.219065][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.225414][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.078141][T16527] delete_channel: no stack [ 749.267946][T16565] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4022'. [ 749.826782][T16579] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4029'. [ 749.934427][T16579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.988552][T16579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.030881][T16579] bond0 (unregistering): Released all slaves [ 750.325041][T16588] netlink: 'syz.3.4031': attribute type 7 has an invalid length. [ 750.345158][T16588] netlink: 'syz.3.4031': attribute type 6 has an invalid length. [ 750.546430][T16590] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4033'. [ 751.170433][T16606] netlink: 'syz.2.4037': attribute type 10 has an invalid length. [ 751.350120][T16609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4038'. [ 753.487034][T16591] delete_channel: no stack [ 753.835080][T16622] netlink: 'syz.3.4045': attribute type 10 has an invalid length. [ 753.964280][T16622] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.397892][T16643] device syzkaller0 entered promiscuous mode [ 754.405410][T16642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4052'. [ 759.545723][T12730] Bluetooth: hci5: command 0x0406 tx timeout [ 760.451405][T16661] delete_channel: no stack [ 760.599156][T16674] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.4058'. [ 760.639340][T16674] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 762.059521][T16660] netlink: 'syz.4.4053': attribute type 10 has an invalid length. [ 762.075735][T16680] netlink: 'syz.0.4060': attribute type 10 has an invalid length. [ 762.259314][T16685] netlink: 9679 bytes leftover after parsing attributes in process `syz.1.4061'. [ 762.295698][T16686] netlink: 9679 bytes leftover after parsing attributes in process `syz.1.4061'. [ 762.346694][T16693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4066'. [ 762.873446][T16728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4077'. [ 763.025994][T16734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4081'. [ 763.288655][T16745] C: renamed from team_slave_0 [ 763.336298][T16745] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4079'. [ 763.682321][T16756] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4083'. [ 764.034973][T16766] netlink: 'syz.1.4087': attribute type 3 has an invalid length. [ 764.052596][T16766] netlink: 'syz.1.4087': attribute type 8 has an invalid length. [ 764.060687][T16766] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.4087'. [ 764.353904][T16776] device syzkaller0 entered promiscuous mode [ 764.814162][T16783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4093'. [ 767.008627][T16789] netlink: 'syz.0.4094': attribute type 10 has an invalid length. [ 767.030762][T16822] Ÿë: port 1(veth0_to_team) entered blocking state [ 767.056407][T16822] Ÿë: port 1(veth0_to_team) entered disabled state [ 767.064608][T16822] device veth0_to_team entered promiscuous mode [ 767.164995][T16828] netlink: 'syz.4.4108': attribute type 10 has an invalid length. [ 767.189807][T16826] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4106'. [ 767.790809][T16852] device veth1_macvtap left promiscuous mode [ 767.801825][T16852] device macsec0 entered promiscuous mode [ 768.452967][T16882] FAULT_INJECTION: forcing a failure. [ 768.452967][T16882] name failslab, interval 1, probability 0, space 0, times 0 [ 768.490306][T16882] CPU: 0 PID: 16882 Comm: syz.4.4126 Not tainted syzkaller #0 [ 768.497838][T16882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.507924][T16882] Call Trace: [ 768.511236][T16882] [ 768.514175][T16882] dump_stack_lvl+0x188/0x24e [ 768.518881][T16882] ? show_regs_print_info+0x12/0x12 [ 768.524100][T16882] ? load_image+0x400/0x400 [ 768.528622][T16882] ? __local_bh_enable_ip+0x136/0x1c0 [ 768.534007][T16882] ? lockdep_hardirqs_on+0x94/0x140 [ 768.539226][T16882] ? __local_bh_enable_ip+0x136/0x1c0 [ 768.544613][T16882] should_fail_ex+0x399/0x4d0 [ 768.549321][T16882] should_failslab+0x5/0x20 [ 768.553967][T16882] slab_pre_alloc_hook+0x59/0x310 [ 768.559015][T16882] ? sctp_get_port_local+0xd75/0x1510 [ 768.564416][T16882] ? sctp_add_bind_addr+0x89/0x350 [ 768.569647][T16882] __kmem_cache_alloc_node+0x4f/0x260 [ 768.575041][T16882] ? sctp_add_bind_addr+0x89/0x350 [ 768.580176][T16882] kmalloc_trace+0x26/0xe0 [ 768.584616][T16882] sctp_add_bind_addr+0x89/0x350 [ 768.589600][T16882] sctp_do_bind+0x616/0x990 [ 768.594227][T16882] sctp_connect_new_asoc+0x266/0x6a0 [ 768.599537][T16882] ? __sctp_connect+0xd80/0xd80 [ 768.604425][T16882] ? __local_bh_enable_ip+0x136/0x1c0 [ 768.609911][T16882] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 768.615482][T16882] ? security_sctp_bind_connect+0x85/0xb0 [ 768.622034][T16882] sctp_sendmsg+0x15b0/0x2940 [ 768.626781][T16882] ? sctp_getsockopt+0x8a0/0x8a0 [ 768.631763][T16882] ? __lock_acquire+0x7d10/0x7d10 [ 768.636896][T16882] ? aa_af_perm+0x340/0x340 [ 768.641411][T16882] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 768.647874][T16882] ? inet_sendmsg+0xe5/0x2f0 [ 768.652499][T16882] ? inet_send_prepare+0x260/0x260 [ 768.657635][T16882] ____sys_sendmsg+0x5be/0x970 [ 768.662429][T16882] ? __sys_sendmsg_sock+0x30/0x30 [ 768.667467][T16882] ? __import_iovec+0x315/0x500 [ 768.672340][T16882] ? import_iovec+0x6f/0xa0 [ 768.676862][T16882] ___sys_sendmsg+0x2a2/0x360 [ 768.681561][T16882] ? __sys_sendmsg+0x290/0x290 [ 768.686363][T16882] ? __lock_acquire+0x7d10/0x7d10 [ 768.691432][T16882] __se_sys_sendmsg+0x1bb/0x2a0 [ 768.696306][T16882] ? __x64_sys_sendmsg+0x80/0x80 [ 768.701274][T16882] ? lockdep_hardirqs_on+0x94/0x140 [ 768.706497][T16882] do_syscall_64+0x4c/0xa0 [ 768.710944][T16882] ? clear_bhb_loop+0x60/0xb0 [ 768.715727][T16882] ? clear_bhb_loop+0x60/0xb0 [ 768.720509][T16882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.726420][T16882] RIP: 0033:0x7fef7259c799 [ 768.730850][T16882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.750486][T16882] RSP: 002b:00007fef73404028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.758932][T16882] RAX: ffffffffffffffda RBX: 00007fef72815fa0 RCX: 00007fef7259c799 [ 768.766961][T16882] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 768.774947][T16882] RBP: 00007fef73404090 R08: 0000000000000000 R09: 0000000000000000 [ 768.782981][T16882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.790984][T16882] R13: 00007fef72816038 R14: 00007fef72815fa0 R15: 00007fff1ebd3568 [ 768.798996][T16882] [ 769.190573][T16898] C: renamed from team_slave_0 [ 769.217351][T16898] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4132'. [ 769.357280][T16902] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4134'. [ 769.595093][T16913] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4138'. [ 769.687027][T16913] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4138'. [ 769.722154][T16913] bridge_slave_1: default FDB implementation only supports local addresses [ 770.459415][T16943] C: renamed from team_slave_0 [ 773.241960][T16943] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4150'. [ 773.434209][T16962] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4156'. [ 774.385571][T16999] device veth1_macvtap entered promiscuous mode [ 774.401025][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 774.429543][T16999] netlink: 'syz.4.4170': attribute type 46 has an invalid length. [ 778.123397][T17031] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4182'. [ 778.546529][T17065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4193'. [ 778.574806][T17065] FAULT_INJECTION: forcing a failure. [ 778.574806][T17065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.648505][T17065] CPU: 0 PID: 17065 Comm: syz.2.4193 Not tainted syzkaller #0 [ 778.656039][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.666191][T17065] Call Trace: [ 778.669560][T17065] [ 778.672513][T17065] dump_stack_lvl+0x188/0x24e [ 778.677275][T17065] ? show_regs_print_info+0x12/0x12 [ 778.682578][T17065] ? load_image+0x400/0x400 [ 778.687478][T17065] ? __lock_acquire+0x7d10/0x7d10 [ 778.692533][T17065] ? __might_fault+0x4e/0x120 [ 778.697238][T17065] should_fail_ex+0x399/0x4d0 [ 778.702109][T17065] _copy_from_user+0x2c/0x170 [ 778.707188][T17065] __sys_bpf+0x2ea/0x780 [ 778.711549][T17065] ? bpf_link_show_fdinfo+0x380/0x380 [ 778.717043][T17065] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 778.723204][T17065] __x64_sys_bpf+0x78/0x90 [ 778.727630][T17065] do_syscall_64+0x4c/0xa0 [ 778.732054][T17065] ? clear_bhb_loop+0x60/0xb0 [ 778.737173][T17065] ? clear_bhb_loop+0x60/0xb0 [ 778.741854][T17065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.747751][T17065] RIP: 0033:0x7f6d83b9c799 [ 778.752181][T17065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.771798][T17065] RSP: 002b:00007f6d84ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.780221][T17065] RAX: ffffffffffffffda RBX: 00007f6d83e15fa0 RCX: 00007f6d83b9c799 [ 778.788285][T17065] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000012 [ 778.796269][T17065] RBP: 00007f6d84ac3090 R08: 0000000000000000 R09: 0000000000000000 [ 778.804268][T17065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.812348][T17065] R13: 00007f6d83e16038 R14: 00007f6d83e15fa0 R15: 00007ffd8d27cde8 [ 778.820447][T17065] [ 779.463169][T17094] netlink: 'syz.0.4201': attribute type 10 has an invalid length. [ 779.488963][T17096] FAULT_INJECTION: forcing a failure. [ 779.488963][T17096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.529502][T17096] CPU: 0 PID: 17096 Comm: syz.3.4203 Not tainted syzkaller #0 [ 779.537203][T17096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.547363][T17096] Call Trace: [ 779.550659][T17096] [ 779.553621][T17096] dump_stack_lvl+0x188/0x24e [ 779.558331][T17096] ? show_regs_print_info+0x12/0x12 [ 779.563562][T17096] ? load_image+0x400/0x400 [ 779.568111][T17096] ? __might_fault+0xa6/0x120 [ 779.572820][T17096] should_fail_ex+0x399/0x4d0 [ 779.577538][T17096] copyin+0x1b/0x120 [ 779.581642][T17096] _copy_from_iter+0x447/0x1130 [ 779.586708][T17096] ? copyout_mc+0x110/0x110 [ 779.591352][T17096] ? dev_get_by_index+0x1e/0x2d0 [ 779.596417][T17096] ? dev_get_by_index+0x1e/0x2d0 [ 779.597187][T17100] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4206'. [ 779.602333][T17096] packet_sendmsg+0x3099/0x4e60 [ 779.602373][T17096] ? aa_sk_perm+0x950/0x950 [ 779.602402][T17096] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 779.602424][T17096] ? __might_sleep+0xd0/0xd0 [ 779.602440][T17096] ? lock_chain_count+0x20/0x20 [ 779.602469][T17096] ? aa_sk_perm+0x81f/0x950 [ 779.642216][T17096] ? packet_getsockopt+0x9a0/0x9a0 [ 779.647430][T17096] ? aa_sock_msg_perm+0x94/0x150 [ 779.652490][T17096] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 779.658867][T17096] ? security_socket_sendmsg+0x7c/0xa0 [ 779.664626][T17096] ? packet_getsockopt+0x9a0/0x9a0 [ 779.669786][T17096] ____sys_sendmsg+0x5be/0x970 [ 779.675454][T17096] ? __sys_sendmsg_sock+0x30/0x30 [ 779.680580][T17096] ? __import_iovec+0x315/0x500 [ 779.685520][T17096] ? import_iovec+0x6f/0xa0 [ 779.690016][T17096] ___sys_sendmsg+0x2a2/0x360 [ 779.694702][T17096] ? __sys_sendmsg+0x290/0x290 [ 779.699494][T17096] __se_sys_sendmsg+0x1bb/0x2a0 [ 779.704374][T17096] ? ct_nmi_exit+0x145/0x1c0 [ 779.709063][T17096] ? __x64_sys_sendmsg+0x80/0x80 [ 779.714009][T17096] ? lockdep_hardirqs_on+0x94/0x140 [ 779.719205][T17096] do_syscall_64+0x4c/0xa0 [ 779.723618][T17096] ? clear_bhb_loop+0x60/0xb0 [ 779.728308][T17096] ? clear_bhb_loop+0x60/0xb0 [ 779.732975][T17096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.738889][T17096] RIP: 0033:0x7f61fcd9c799 [ 779.743310][T17096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.763428][T17096] RSP: 002b:00007f61fdbae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.772137][T17096] RAX: ffffffffffffffda RBX: 00007f61fd015fa0 RCX: 00007f61fcd9c799 [ 779.780766][T17096] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 779.788738][T17096] RBP: 00007f61fdbae090 R08: 0000000000000000 R09: 0000000000000000 [ 779.796845][T17096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.805158][T17096] R13: 00007f61fd016038 R14: 00007f61fd015fa0 R15: 00007fff4f364128 [ 779.813448][T17096] [ 779.827374][T17103] netlink: 'syz.4.4204': attribute type 10 has an invalid length. [ 780.059805][T17109] device syzkaller0 entered promiscuous mode [ 782.498613][T17153] netlink: 'syz.3.4222': attribute type 4 has an invalid length. [ 782.520452][T17153] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4222'. [ 782.543569][T17153] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 782.715166][T17163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4228'. [ 782.760700][T17165] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4229'. [ 782.831494][T17168] FAULT_INJECTION: forcing a failure. [ 782.831494][T17168] name failslab, interval 1, probability 0, space 0, times 0 [ 782.945888][T17168] CPU: 0 PID: 17168 Comm: syz.0.4230 Not tainted syzkaller #0 [ 782.953428][T17168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.963538][T17168] Call Trace: [ 782.966858][T17168] [ 782.969819][T17168] dump_stack_lvl+0x188/0x24e [ 782.974559][T17168] ? show_regs_print_info+0x12/0x12 [ 782.979880][T17168] ? load_image+0x400/0x400 [ 782.984429][T17168] ? __might_sleep+0xd0/0xd0 [ 782.989062][T17168] ? __lock_acquire+0x7d10/0x7d10 [ 782.994137][T17168] should_fail_ex+0x399/0x4d0 [ 782.998857][T17168] should_failslab+0x5/0x20 [ 783.003377][T17168] slab_pre_alloc_hook+0x59/0x310 [ 783.008434][T17168] ? sctp_association_new+0x86/0x25d0 [ 783.013918][T17168] __kmem_cache_alloc_node+0x4f/0x260 [ 783.019319][T17168] ? sctp_association_new+0x86/0x25d0 [ 783.024749][T17168] kmalloc_trace+0x26/0xe0 [ 783.029283][T17168] sctp_association_new+0x86/0x25d0 [ 783.034535][T17168] ? sctp_do_bind+0x6bd/0x990 [ 783.039328][T17168] ? __ipv6_addr_type+0x149/0x2f0 [ 783.044653][T17168] sctp_connect_new_asoc+0x2da/0x6a0 [ 783.050596][T17168] ? __sctp_connect+0xd80/0xd80 [ 783.055483][T17168] ? __local_bh_enable_ip+0x136/0x1c0 [ 783.060881][T17168] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 783.066514][T17168] ? security_sctp_bind_connect+0x85/0xb0 [ 783.072612][T17168] sctp_sendmsg+0x15b0/0x2940 [ 783.077402][T17168] ? sctp_getsockopt+0x8a0/0x8a0 [ 783.082426][T17168] ? __lock_acquire+0x7d10/0x7d10 [ 783.087553][T17168] ? aa_af_perm+0x340/0x340 [ 783.092139][T17168] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 783.098561][T17168] ? inet_sendmsg+0xe5/0x2f0 [ 783.103152][T17168] ? inet_send_prepare+0x260/0x260 [ 783.108263][T17168] ____sys_sendmsg+0x5be/0x970 [ 783.113123][T17168] ? __sys_sendmsg_sock+0x30/0x30 [ 783.118185][T17168] ? __import_iovec+0x315/0x500 [ 783.123132][T17168] ? import_iovec+0x6f/0xa0 [ 783.127642][T17168] ___sys_sendmsg+0x2a2/0x360 [ 783.132322][T17168] ? __sys_sendmsg+0x290/0x290 [ 783.137188][T17168] ? __lock_acquire+0x7d10/0x7d10 [ 783.142326][T17168] __se_sys_sendmsg+0x1bb/0x2a0 [ 783.147271][T17168] ? __x64_sys_sendmsg+0x80/0x80 [ 783.152264][T17168] ? lockdep_hardirqs_on+0x94/0x140 [ 783.157997][T17168] do_syscall_64+0x4c/0xa0 [ 783.162553][T17168] ? clear_bhb_loop+0x60/0xb0 [ 783.167228][T17168] ? clear_bhb_loop+0x60/0xb0 [ 783.172376][T17168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.178758][T17168] RIP: 0033:0x7f2c6039c799 [ 783.183180][T17168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.202783][T17168] RSP: 002b:00007f2c612fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.211283][T17168] RAX: ffffffffffffffda RBX: 00007f2c60615fa0 RCX: 00007f2c6039c799 [ 783.219256][T17168] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 783.227311][T17168] RBP: 00007f2c612fe090 R08: 0000000000000000 R09: 0000000000000000 [ 783.235310][T17168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.243282][T17168] R13: 00007f2c60616038 R14: 00007f2c60615fa0 R15: 00007ffcfd4283a8 [ 783.251368][T17168] [ 783.909079][T17184] device syzkaller0 entered promiscuous mode [ 786.562454][T17214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4247'. [ 787.229274][T17247] netlink: 'syz.3.4259': attribute type 10 has an invalid length. [ 787.888366][T17264] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4274'. [ 789.888104][T17274] device syzkaller0 entered promiscuous mode [ 789.955883][T17277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4266'. [ 789.988364][T17290] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4270'. [ 795.134013][T17330] device veth1_macvtap entered promiscuous mode [ 795.181929][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 795.245366][T17330] netlink: 'syz.3.4287': attribute type 46 has an invalid length. [ 796.012852][T17345] netlink: 'syz.0.4292': attribute type 29 has an invalid length. [ 797.850426][T17345] netlink: 'syz.0.4292': attribute type 29 has an invalid length. [ 797.863184][T17347] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4293'. [ 797.883915][T17354] bond0: (slave team0): Error: Slave device does not support XDP [ 797.967361][T17363] device syzkaller0 entered promiscuous mode [ 798.170319][T17376] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4301'. [ 798.323883][T17382] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4303'. [ 799.157149][T17400] netlink: 'syz.2.4308': attribute type 3 has an invalid length. [ 799.165065][T17400] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4308'. [ 799.248001][T17401] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.4308'. [ 800.687323][T17391] netlink: 'syz.3.4306': attribute type 10 has an invalid length. [ 800.695229][T17391] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 800.708921][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4308'. [ 800.718526][T17399] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 800.734602][T17410] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4311'. [ 800.788420][T17410] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 800.987096][T17417] device veth1_macvtap entered promiscuous mode [ 800.995259][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 801.064899][T17421] netlink: 'syz.4.4317': attribute type 4 has an invalid length. [ 801.115821][T17421] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4317'. [ 801.155724][T17421] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 801.218756][T17417] netlink: 'syz.2.4312': attribute type 46 has an invalid length. [ 804.337379][T17443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4322'. [ 804.359008][T17489] netlink: 'syz.4.4334': attribute type 10 has an invalid length. [ 804.368297][T17489] bridge0: port 1(dummy0) entered disabled state [ 804.374798][T17489] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.413547][T17489] bridge0: port 1(dummy0) entered blocking state [ 804.420065][T17489] bridge0: port 1(dummy0) entered forwarding state [ 804.426995][T17489] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.434128][T17489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.445309][T17489] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 804.979586][T17505] netlink: 'syz.0.4339': attribute type 6 has an invalid length. [ 805.005362][T17505] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4339'. [ 805.371132][T17523] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4344'. [ 805.656545][T17535] device syzkaller0 entered promiscuous mode [ 805.757974][T17539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4349'. [ 806.420957][T17562] can: request_module (can-proto-0) failed. [ 808.664528][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.670962][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.394353][T17601] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4369'. [ 810.698931][T17609] device syzkaller0 entered promiscuous mode [ 811.574542][T17595] ------------[ cut here ]------------ [ 811.580198][T17595] WARNING: CPU: 0 PID: 17595 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 811.590236][T17595] Modules linked in: [ 811.594158][T17595] CPU: 0 PID: 17595 Comm: syz.2.4367 Not tainted syzkaller #0 [ 811.601728][T17595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.611890][T17595] RIP: 0010:perf_pending_task+0x358/0x470 [ 811.617683][T17595] Code: ff 84 db 75 14 e8 48 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 7f da ff e8 c7 8d 58 ff eb e5 e8 28 7f da ff <0f> 0b e9 f3 fe ff ff e8 1c 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6 [ 811.637794][T17595] RSP: 0018:ffffc9000399f8e0 EFLAGS: 00010293 [ 811.643895][T17595] RAX: ffffffff81a7f5f8 RBX: ffff88803606b458 RCX: ffff888029fbbb80 [ 811.651964][T17595] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 811.660034][T17595] RBP: 0000000000000001 R08: ffff888029fbc583 R09: 1ffff110053f78b0 [ 811.668155][T17595] R10: dffffc0000000000 R11: ffffed10053f78b1 R12: ffff888029fbbb80 [ 811.676229][T17595] R13: ffff88803a41c560 R14: ffff88803606b220 R15: 1ffff11006c0d644 [ 811.684221][T17595] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 811.693233][T17595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 811.700087][T17595] CR2: 00007f678c403a90 CR3: 000000006154e000 CR4: 00000000003506f0 [ 811.708131][T17595] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 811.716154][T17595] DR3: 0000000000000000 DR6: 00000000ffff0ff3 DR7: 0000000000000600 [ 811.724148][T17595] Call Trace: [ 811.727500][T17595] [ 811.730456][T17595] task_work_run+0x1d0/0x260 [ 811.735088][T17595] ? task_work_cancel+0x220/0x220 [ 811.740180][T17595] ? do_raw_spin_unlock+0x11d/0x230 [ 811.745413][T17595] do_exit+0x982/0x2480 [ 811.749665][T17595] ? lock_chain_count+0x20/0x20 [ 811.754552][T17595] ? put_task_struct+0x80/0x80 [ 811.759391][T17595] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 811.765595][T17595] ? lockdep_hardirqs_on+0x94/0x140 [ 811.770849][T17595] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 811.777060][T17595] do_group_exit+0x217/0x2d0 [ 811.781696][T17595] ? _raw_spin_unlock_irq+0x25/0x40 [ 811.786973][T17595] get_signal+0x1272/0x1350 [ 811.791539][T17595] arch_do_signal_or_restart+0xc4/0x1350 [ 811.797265][T17595] ? perf_trace_preemptirq_template+0x268/0x320 [ 811.803629][T17595] ? irqentry_enter+0x33/0x50 [ 811.808377][T17595] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 811.814406][T17595] ? get_sigframe_size+0x10/0x10 [ 811.819422][T17595] ? lock_chain_count+0x20/0x20 [ 811.824317][T17595] ? rcu_is_watching+0x11/0xa0 [ 811.829168][T17595] exit_to_user_mode_loop+0x70/0x110 [ 811.834477][T17595] exit_to_user_mode_prepare+0xee/0x180 [ 811.840079][T17595] syscall_exit_to_user_mode+0x16/0x40 [ 811.845557][T17595] do_syscall_64+0x58/0xa0 [ 811.850064][T17595] ? clear_bhb_loop+0x60/0xb0 [ 811.854760][T17595] ? clear_bhb_loop+0x60/0xb0 [ 811.859488][T17595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.865401][T17595] RIP: 0033:0x7f6d83b9c799 [ 811.869881][T17595] Code: Unable to access opcode bytes at 0x7f6d83b9c76f. [ 811.876949][T17595] RSP: 002b:00007f6d84ac30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 811.885394][T17595] RAX: fffffffffffffe00 RBX: 00007f6d83e15fa8 RCX: 00007f6d83b9c799 [ 811.893444][T17595] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6d83e15fa8 [ 811.901482][T17595] RBP: 00007f6d83e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 811.909625][T17595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.917660][T17595] R13: 00007f6d83e16038 R14: 00007ffd8d27cd00 R15: 00007ffd8d27cde8 [ 811.925737][T17595] [ 811.928787][T17595] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 811.936087][T17595] CPU: 0 PID: 17595 Comm: syz.2.4367 Not tainted syzkaller #0 [ 811.943938][T17595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.954021][T17595] Call Trace: [ 811.957486][T17595] [ 811.960437][T17595] dump_stack_lvl+0x188/0x24e [ 811.965126][T17595] ? memcpy+0x3c/0x60 [ 811.969194][T17595] ? show_regs_print_info+0x12/0x12 [ 811.974409][T17595] ? load_image+0x400/0x400 [ 811.979041][T17595] panic+0x2e5/0x730 [ 811.982943][T17595] ? bpf_jit_dump+0xd0/0xd0 [ 811.987467][T17595] __warn+0x2f8/0x4f0 [ 811.991522][T17595] ? perf_pending_task+0x358/0x470 [ 811.996629][T17595] ? perf_pending_task+0x358/0x470 [ 812.001730][T17595] report_bug+0x2ba/0x4f0 [ 812.006141][T17595] ? perf_pending_task+0x358/0x470 [ 812.011245][T17595] handle_bug+0x3a/0x70 [ 812.015396][T17595] exc_invalid_op+0x16/0x40 [ 812.019897][T17595] asm_exc_invalid_op+0x16/0x20 [ 812.024741][T17595] RIP: 0010:perf_pending_task+0x358/0x470 [ 812.030455][T17595] Code: ff 84 db 75 14 e8 48 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 7f da ff e8 c7 8d 58 ff eb e5 e8 28 7f da ff <0f> 0b e9 f3 fe ff ff e8 1c 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6 [ 812.051050][T17595] RSP: 0018:ffffc9000399f8e0 EFLAGS: 00010293 [ 812.057127][T17595] RAX: ffffffff81a7f5f8 RBX: ffff88803606b458 RCX: ffff888029fbbb80 [ 812.065088][T17595] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 812.073049][T17595] RBP: 0000000000000001 R08: ffff888029fbc583 R09: 1ffff110053f78b0 [ 812.081118][T17595] R10: dffffc0000000000 R11: ffffed10053f78b1 R12: ffff888029fbbb80 [ 812.089080][T17595] R13: ffff88803a41c560 R14: ffff88803606b220 R15: 1ffff11006c0d644 [ 812.097133][T17595] ? perf_pending_task+0x358/0x470 [ 812.102256][T17595] task_work_run+0x1d0/0x260 [ 812.106855][T17595] ? task_work_cancel+0x220/0x220 [ 812.111876][T17595] ? do_raw_spin_unlock+0x11d/0x230 [ 812.117235][T17595] do_exit+0x982/0x2480 [ 812.121414][T17595] ? lock_chain_count+0x20/0x20 [ 812.126263][T17595] ? put_task_struct+0x80/0x80 [ 812.131023][T17595] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 812.137169][T17595] ? lockdep_hardirqs_on+0x94/0x140 [ 812.142632][T17595] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 812.148781][T17595] do_group_exit+0x217/0x2d0 [ 812.153800][T17595] ? _raw_spin_unlock_irq+0x25/0x40 [ 812.159013][T17595] get_signal+0x1272/0x1350 [ 812.163875][T17595] arch_do_signal_or_restart+0xc4/0x1350 [ 812.169502][T17595] ? perf_trace_preemptirq_template+0x268/0x320 [ 812.175750][T17595] ? irqentry_enter+0x33/0x50 [ 812.180420][T17595] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 812.186612][T17595] ? get_sigframe_size+0x10/0x10 [ 812.191544][T17595] ? lock_chain_count+0x20/0x20 [ 812.196386][T17595] ? rcu_is_watching+0x11/0xa0 [ 812.201200][T17595] exit_to_user_mode_loop+0x70/0x110 [ 812.206483][T17595] exit_to_user_mode_prepare+0xee/0x180 [ 812.212033][T17595] syscall_exit_to_user_mode+0x16/0x40 [ 812.217495][T17595] do_syscall_64+0x58/0xa0 [ 812.221912][T17595] ? clear_bhb_loop+0x60/0xb0 [ 812.226594][T17595] ? clear_bhb_loop+0x60/0xb0 [ 812.231289][T17595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.237190][T17595] RIP: 0033:0x7f6d83b9c799 [ 812.241597][T17595] Code: Unable to access opcode bytes at 0x7f6d83b9c76f. [ 812.248603][T17595] RSP: 002b:00007f6d84ac30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 812.257005][T17595] RAX: fffffffffffffe00 RBX: 00007f6d83e15fa8 RCX: 00007f6d83b9c799 [ 812.264968][T17595] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6d83e15fa8 [ 812.272930][T17595] RBP: 00007f6d83e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 812.280988][T17595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.288952][T17595] R13: 00007f6d83e16038 R14: 00007ffd8d27cd00 R15: 00007ffd8d27cde8 [ 812.296926][T17595] [ 812.300414][T17595] Kernel Offset: disabled [ 812.304743][T17595] Rebooting in 86400 seconds..