last executing test programs: 1m10.590582619s ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000200000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001600850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, r2, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 53.385818829s ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000200000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001600850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, r2, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 42.087689935s ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000200000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001600850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, r2, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 27.645945429s ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000200000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001600850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, r2, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 14.175677727s ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000200000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001600850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, r2, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.217855485s ago: executing program 3 (id=2430): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_devices(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="61202a3a2a2072776d0094f081d152d08b676c79"], 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0xffffffffffffff52, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="610000000000000101"], 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3.41339384s ago: executing program 3 (id=2436): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.26526035s ago: executing program 3 (id=2438): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000bc0)=ANY=[@ANYRES8], 0xa) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x64a043, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 3.146159651s ago: executing program 4 (id=2439): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0xc0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2.804023013s ago: executing program 4 (id=2440): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x20000041) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) unlink(&(0x7f0000000200)='./cgroup\x00') bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000300110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000900)=r1, 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x2) r6 = socket$kcm(0xa, 0x2, 0x73) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac437", 0x1a}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x5efe) 2.172955857s ago: executing program 4 (id=2442): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={&(0x7f00000005c0)="f84d7e9af7a172d6490c9aac424957d5ad910d1c0318bb424542e0cc4e4ef5c2e7496e1755b3", &(0x7f0000000600)=""/54, &(0x7f0000000640)="3f074878663c1c7cd97658c4a606a998af0f05afc965ba063d6a5e4d29104879e58ddd817c9634b6e1e2c4935bfc2d8dba1265058614485115c4a017d51af279dc26e7c85ddad07c80fe197191dc2305e742a3847ac8ad1cf6b50a4e8dc86e06a981891f89a0077b6f3515f7c8b5f1b25e1bab54b3da0af5f06b46c975fc209effb40b3cef4d3a8b05e0e946c3283149dd35cbe458c2d745c060d23b12283dd373dc15254fd5d3ca82dafae6365ce1c8b6ec2365b8e93d46612e02f62d72ebaf253a8ab34dfe4b858ee23d6d1357ebd11e4c32b5cbc90abbe549", &(0x7f0000000740)="facc7b79ed", 0xfffffffe, r0, 0x4}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000f3ffffffff7459e3cd2e08"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x42b81b7, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.895437629s ago: executing program 2 (id=2445): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.769487799s ago: executing program 3 (id=2446): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='objagg_obj_parent_assign\x00', r0, 0x0, 0xa33}, 0x18) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000014c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @local}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188020ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.6541201s ago: executing program 2 (id=2447): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x2}, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='GPL\x00') setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x204002, 0x0) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_bp={&(0x7f0000000100), 0xe}, 0x110104, 0x32, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x10000009}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000180)=@tipc=@id, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f00000005c0)=""/244, 0xf4}], 0x2, &(0x7f0000000400)=""/122, 0x7a}, 0x40000000) socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001e40)='syz0\x00', 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x80) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, &(0x7f0000000080)="1ec005977beccf6ade50cfd01fd207de945a781074f20fa0c475daa08bf917cd0e967a6ef2ce", &(0x7f0000000100)=""/37}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.53368365s ago: executing program 0 (id=2448): r0 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x28000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0500000007000000070000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000085972a754033d46ea6be3a5fa190de41f82deb0511423d4b26ace3bfb70cf00eea165e9309c61683226294ea0ffe51"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000617800006c344438f790a9426f12f0000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x23000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x4}, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x5) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000004f0d67c26ecbec554083ac93a6ffc2957f84cc16502c1d75e4ab1cdb84480f455381c98e7f145379452ff631a5b6ab2eff52d7e02bb99bfa505c798b80af2d1e1577860fea327870df84c2a59a754ea0221e1214b9122593bad20e8f74a8381d166fb4aee04d51178e38e75bac416fea5db626230c43430952bb24de0458e6011381fe280d5bfc06fff7d2fdb8f3dc61799b7b24c7c44ce570b0e5146d015a003600449bd2163904da92dc97e99e1f9f19cd9e3b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000200000085000000860000009500"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r8, 0x58, &(0x7f0000000a80)}, 0x10) r11 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000340), &(0x7f0000000440)='%pS \x00'}, 0x20) write$cgroup_pid(r11, &(0x7f0000000040), 0x12) 1.460728061s ago: executing program 2 (id=2449): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040202080006007c09e8fe0ba10a000dc00200142603600e120800080024000000a8000900", 0x34}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.196015563s ago: executing program 4 (id=2450): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000000180)=""/250, 0xfa}, 0x40010151) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000002c0)='THAWED\x00', 0x7) 1.133300443s ago: executing program 3 (id=2451): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b904021d08020a000000040000a118000200fc00000000000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000dd897b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8000000000000001, 0x3}, 0x2018, 0x1, 0x2, 0x0, 0x0, 0x81, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000280)=0x7) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x56, 0x1, 0x0, 0x3, 0x0, 0x7fef, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f00000001c0), 0x6}, 0x15105, 0x8, 0xfffffbff, 0x3, 0x2, 0x2, 0x6, 0x0, 0x0, 0x0, 0x800000a9e6}, 0x0, 0xffffffffffffffff, r4, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x3, 0x73, 0x0, 0x80, 0x0, 0x12, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x19, 0x1dc}, 0x11400, 0x100002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000001}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000380)={'veth0_vlan\x00', @random="010000201000"}) 1.116495843s ago: executing program 0 (id=2452): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x20000041) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) unlink(&(0x7f0000000200)='./cgroup\x00') bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000300110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000900)=r1, 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x2) r6 = socket$kcm(0xa, 0x2, 0x73) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac437", 0x1a}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x5efe) 1.076289393s ago: executing program 2 (id=2453): r0 = perf_event_open(&(0x7f0000001380)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_ID(r0, 0xc0189436, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000005c0)={r2, 0x0, 0x63, 0x0, &(0x7f0000000380)="24b7c465897bb8548da7556ae82968b6d6f939c5435e784b8780cf1a6cdb8a3836c1cb472a789f4199d1e7e046d21c5f9744e086814d39ebcda94744d34aaa452fa1e83c8f0def2f310e322b0f1bdef8400f5f7aabbec361b054e246560eefea840fe9", 0x0, 0x7, 0x0, 0x5b, 0x0, &(0x7f00000004c0)="81b5e9924ea08fdfb0ae4f4fd053597815c5b3ef32300a12baac8f2f6ebd79391f4040d951ea9db8fedb9f2bce762c070705e792375bbdd35b0304ecaf215c208caae06a09ce2eee30f596794f36392ace8ab1473e4a6874229a80"}, 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000000000000000700000044180511"], 0x30}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0) 996.262374ms ago: executing program 4 (id=2454): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb546c4ff25020222}, 0x100400, 0x0, 0x0, 0x0, 0x0, 0x220, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x4, &(0x7f0000001300), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'vlan1\x00', 0x10}) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xfff}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r5}, 0xc) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000008000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="2d6d656d6f7279202b6e63745f635773202d63c962a0ec0fed63e8"], 0x26) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x29, 0x0, 0xc) 702.853356ms ago: executing program 0 (id=2455): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) r2 = socket$kcm(0x29, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', r3, r0, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='rxrpc_skb\x00', r0, 0x0, 0xf}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000640)={0x2}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a48}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @exit, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x3, 0x6, 0x4, 0xc, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x0, 0x1, 0xa, 0xfffffffffffffff0, 0x4}]}, &(0x7f0000000740)='syzkaller\x00', 0x200, 0x56, &(0x7f0000000780)=""/86, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r4, r1, r4, 0x1, r4, r0, r0, r0], 0x0, 0x10, 0x9, @void, @value}, 0x94) (async) write$cgroup_subtree(r0, &(0x7f0000000940)={[{0x2b, 'freezer'}, {0x2d, 'freezer'}, {0x2d, 'net'}, {0x2d, 'cpuacct'}, {0x2d, 'rlimit'}, {0x2b, 'io'}]}, 0x2c) r10 = openat$cgroup_ro(r5, &(0x7f0000000980)='memory.numa_stat\x00', 0x0, 0x0) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x18, r8}, 0x18) close(r11) (async) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000a40)=r2, 0x4) (async) sendmsg$kcm(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="35f51cd3199ba8af03646664f241b5ed5839f86d98e6936f00688045f9a29638e2d7a83e1bc9da0e95be6f09e94403c977c76ff20eedc0fb30ec136e7fff2140b0a8cda431b6ccc1f4e93adec196810e3cbb05816f2f62e0bbece67054cd79edcb7dcfb9d98d522c5743", 0x6a}], 0x1, &(0x7f0000000b40)=[{0x98, 0x1, 0x9, "76b97b1755752a80a24ed8cef315fedb86fcf9848f3c20ee45e3987abf6133f5f35424b788a11deb79ccdc088dad7e87d8706c00a9fbdaf51295f1d9d799fd58f38f7bc84868d1da0beb407e7e2372a5ef69c0b8b29e9e39b094b195003fc4b0728c4b3576d96e057bae6845c96d6d0480ab455b5c52c480f1dcb058e05caeffe5e7c58c5c7aa358"}, {0xc8, 0x112, 0x1, "34f6cebb351b4ec59f8fadef89235af2e313d19d74d759a432cc889ede897d00045dbba485b0d5593b760ba78167b41d3e89f73c26a2e78bc6c07637ab43bb372431414e7a6b03ad227f362054017a4f268154ac8b3ea09876c8920d82b019cb24409ea7f86d191209d7814c4bb549b03812c2c517b1b063f2cd806d82e372a6c1ddef04c9dd28f715e4aca649cac2c62dd2c444807e1816eaaa20ef92cda0395a3bb863fde344b79c944d2d19fde56d7bbb9102"}, {0x28, 0x113, 0x80, "b3730f17191c21a419f06cefb9dc922ab475f24779990c11"}, {0x90, 0x108, 0x1, "70e2f05cbfcbcd707929bb5f7044e859bbad0d33fac64855eba7da7b046bc0719b26472dae463613219b909ab99afc0fffee6eaa60876a4bdeea006680724fb5fad97956b203062b6f15c7697447866a7cda99309786db08a7ea284147acc4e530378d0a2afaa7b1df684c4f0d349cd5008573e4a0f8caf599d1c90405deb68b"}, {0x108, 0x10c, 0x7fff, "b1824c6a3a403d3050f1ba47f34b265a4b082042fb06c9e02977d3e4db6d2d7d145eba2f5cef26098ed1c4ba1562730abfac010b935bc58ebad31b6c1a4f5172898c20cb9085dcebaec187566ddb804555294a2d66ba5a7287dd7438d19c47a7dd002f09e83998bb6afa720d066acb40d88bae43b21335be7ca48c752cff224147ea1896218ecd6a299cd45a1df7b193cfdd44915595a320c9ec9f20efe900ce0a803309da6c005319efc5b43693407f037a52afae9e271e3f111d6b8ba29b73f2cba8c58f69dff5041b49d098dc1a4715baa2e2bd405b8b0c48dfbb6455e90d280c392060d490ca9873aeb50f4b1ab704"}, {0x50, 0x2e, 0x1, "021ef2b5df070fbff113898b67c6ef75b3da778a91187e22a8b06bf038491c86b0e9b43890fb7dd65a29b7b050fbda6a64ed59e52d55b71f996627309cad79"}, {0x110, 0x108, 0x100, "b79909a2b990c9f68e3b0cf27d6b0bd67aaaf4a5537fb94e9edd1e0db117c1b380df1fb450358d07055e738832914dd4664fac65beccc27ba126d0f91f711222c631228836f497014b98d69340b8eb9313f7eade1f0c84e6bef34320f38822f733e031a4f06fd3aab7f045f627373430f5dce898d99461d3004b19a880c69fc1d18bc2fa533b8a8bfd145d90cb745651559dca633fd1ee79e97ed447a7023e10ce87d050a0e5d35100512a59ffe00149148c6662e5887596459eed61a23e1fbf24f4163049a8766678205be2a8ef889a65940eb017b6fa863b6fc24f0c2dd3ab13a117b269d6be1d500e9081f1bbfb2281a6eacda36e69cc0f70a1eb1998"}, {0x28, 0x108, 0x7fff, "0700b0b843e7b8fe8c55c813dcd217d03713bb5d9483aa5e"}], 0x4a8}, 0x4040044) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000001080)={0x6, &(0x7f0000001040)=[{0x8624, 0x8, 0x1e, 0x1c0}, {0xc, 0x9, 0x2, 0x4}, {0x8c7, 0xed, 0x8, 0x9}, {0xffff, 0x40, 0x7, 0x1}, {0xff9f, 0x6, 0x9, 0x40}, {0x0, 0xb, 0x80, 0x2}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002200)=@bpf_lsm={0x1d, 0x2, &(0x7f00000010c0)=@raw=[@ldst={0x1, 0x1, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1}, @jmp={0x5, 0x1, 0x3, 0x7, 0x2, 0x18}], &(0x7f0000001100)='GPL\x00', 0x81, 0x1000, &(0x7f0000001140)=""/4096, 0x41100, 0x10, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002140)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, 0x0, 0x1, &(0x7f0000002180)=[r0], &(0x7f00000021c0)=[{0x1, 0x3, 0x10, 0x9}], 0x10, 0xffffffff, @void, @value}, 0x94) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002300)=@generic={&(0x7f00000022c0)='./file0\x00', r9}, 0x18) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003500)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x7, '\x00', r3, r0, 0x2, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003580)={&(0x7f0000002340)="513adb53acc0e9f49a62ef134cca69f24f0e0827add465caa03eeaa52600b54e15ef4f18f09e5e2c7b8c57b4ae1de05914c6caefe02ed51dbc4466eaa8109385526f44853836889ec88594a378991ee893ce2a195149a072db5174159ea725fd7ac8115b7195385dabf1adf93cc77794dbecfd03e1e59ea0f8872974d1b67a", &(0x7f00000023c0)=""/99, &(0x7f0000002440)="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", &(0x7f0000003440)="95bd6fe04605a76f30ea080ba72218d3d32148bcf2639dc1c03cceb309ff3470436ee39d6e4a83e29c94eff9cf852b0c2d64d1aa300b1bb3920b5d9e6abff9dd0969e5358bd0fab0dcceb260a107a8239655ddde34e7c69b629e950416d4fce805996d77959f9af96e49f8343acf4b23a253c145b7677f2f236a7595d5c6d5939c", 0x8, r12}, 0x38) socketpair(0x2e, 0x4, 0x5, &(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000003600)=r10, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003680)={&(0x7f0000003640)='f2fs_issue_flush\x00', r9, 0x0, 0x3}, 0x18) syz_clone(0x8000, &(0x7f00000036c0)="affc600ce775c555f864bdce71050dffa0e2b2eeb53bd1de58b27f51a74226973bf1b769858d02024a8259ee987b9a35342360966d152e4045743310cb3258c07e3629024bffdb9e65d761afbf6cfef0049b112492c5d730971cf6d4de7ec5ac41349c8d3f9264458117b8cdc81c409b3d1eee1670d0445fde19a6f31cf556b7a1688fea13af168136c0ba8060b828c7aa88b237c16530d795eefb354b19db9e0afa7f5c1f291c350601e45bd8f285c44ed778a0ead6be0dc316e2d0ac2c1e3b58f956fb1688774f49be82ffa8b0222a150dcca6929aecd392f17e24af", 0xdd, &(0x7f00000037c0), &(0x7f0000003800), &(0x7f0000003840)="41147910a748d529b7dc6c1b875f8fc34561b9113b2ab15f778a4b0a9a86fd207556610bf6ef5708720590a259851b7e2ee2a1a5e4a69bfd0b2cff5b0e18a6c3fa86c2d7838dd1bb504112e311daa03a2528acf470a07095053b8a2c6b9405ba4f6cc3d2e6d9705090e7a2d790f62b3d30070cb4e4112a35d2118c8d1e5e920c4434bae7a2b5657ee391377d13cac315318593d8ffdcdb20b2b13b121574d60d6912b8c49189174698d517866aeb8d683d2387a88ab7ec71cdd0eda0f134d6e5963ef505df789de1316b8a7e7f2880dbd64bca6c8c025763d4db45d3e66468c6b512f6a827d9e60f813242238467aeb5874e26d67cf8a0a8f6e7c6ebe5ccea1057f578e295e5046feb80e27de8144f6bbadfe3088e061d6070fef7bd64b9267d7710337fd70cc28da055b960e30f7d8a8c2b7274d95ad6d9cf43d159793e768d887a1230977b567ad5d7407e4592cce39e83f26e21acbbe1bbff12da12d6bde877a1443f10aa7a25a343e9cc8a40b14f67aa9460d17132b1aeef9f6cb53ff28b49187cd109dc75e7044316998dbf4044fbf96f8cc6fa68e4d08ad45e144fbb7b7fb71295db495e340f4a2dd6484a9836a3d727e704d7fe4b5664086f46e922b66b89226347ef8f4d218d3deb91f6d0e80a2903cc35769594b610e9502bc15c1c6915dd2eb20d1a10309cf8856e248257dd26e33a0806f38c039d2799db26cf3ea09bfe3d57b3b85a29569feeb28f559c47185aa9b92bd3ffa53699bd1bf20ecec7da08ff3d940701bb48f17d81b3919e1e62e7f18d9b22a55e4c82d79c3c08d386a3b3e9c4231859d877f4f3838f4b43331a14fe032a6dd59e84c0a52ee2580df717949ab7f7d572be271b9a39a19a024a31b27f69c209f1b0ef4e8453876027a5c9b58b4f287aa4b73e91f9f2d0bd216eebbd6077a5da8113039f24b233833bcabdd0f31a97b6b825e26ee638b48ae1a42cab83354bde64709a77986b4d04e8a267aa0ec075288f32f93c9865712652be773d06747125625fad1b5b492302141cc410a6829af47826ee8dfd1aeed78da1fceedc0a8d2eccc26caf0dfa4531ec6996ea75c41f4c8c621a249284688e0d61274489f44425862b16f791238975ecda3d1e3921570d056b30b519e59bcee4199246950195f8dcdd001bd7e1ea7a46b1140b0ecb73aaa4d7a170063e4bf19022ac7930e164cc0e409f63d9c06d9fa338acfda9e4079a58558001a9b97e4d13ecda1f22a1d4574670b5e47f53601f12137db0898c2c4fa947694f3294d012ed52183d8fe5260249e888980b37685e469b801b54dbce1faf595481e4b67e1721bfbd2cf29fd57971b738bc81bcf69d0182e86bbc2db07182a85a6602d91c9d6c9337c77c80f226d67ed265f2d758fd706a3a4947e3ea5929a57547a81b8a68fe0d8c50d7a1ea7fc503fa4da24dd66a5644b492c92669c23e16f042f758937bd5c4917dee4cc26aa2f06a8a6a7ba71ffa96838a8c788492461368028887f3717f15de0953b0b6ebc4165481e0da42b837faf6c1f9a31ba52979d5868afc6441576c944e1315be00ad41ff3a4c2d0e8a922c21e9d0e39abff565e08d15681509e7bc9355b7d5b8073f8fef3e1d9cc84c15edf5d95db7a8d6128e61326633e5fe3d74fa6f3e24afd2aef6c940ec6e9da49890050201b2fe7fdbc1dc7b1b9a83ab9260b07f1e7e49a3be3419f9b0c60f8c0f385357e3e975473799d2d2f62257f8e7333568d57e37a22171f6deba8a3a43423548c217a5fa97dd1410cb58c295796c5b289bc1ecbd6b6d2c449af9dc9ec632bbde7f6a6f58a2a5a771e18556d7b80e83f037c71405ce33d88e88ad445c7c1e3c6e9f3d6374519d9c2d03efdca1f9de71d38afffe9ee6f1f42fc44cac8a088e4426858ceea52f12b2a4529ccfb1d05a33e8d3cb87d2e8689528e381cf2d51abed57091233614b63c86591bfb5bc1becba70aade150920eb0c5c71b19fde02e424dacd760ee2be7270440824b86aac66a7348adbf3af85b313aa391450ad2bb0517f093bb2cf53aa4f67d07f38602dc7440935e4667e0dbf7a24b53c893a26e43e5d5a642618a1f93f35c3b32e142278ea5875f8b840bbb8ed7e52265741690c65e3bff402cee1e98ac128728b9c27955b73d8a73ea7437f66ad1b02c021db15ed777d778f0c6dc4c1ae285178f3bf85efe8d01f40e8ca5add64f29e7cf3d93bf7eeac65788687768d3f9062cae2c90f5504eb20308a4bcf6f021fda47da116418ba1b6ee957c78c673bd8dfd61589161a95fd26766d6a320dff469f723908150ec5b2fa354910fe58d81f3b144b02153c6a4556d59e043cce52d00c66d4b6b27045fd2363a74f34540ee5f9a5115e17c32e2e7d2dfaa6d5c7f125e26671a1a65d682d2df799d8fe8899343578920598449f931efab27d95a98ab3fe8dc2f259e82eda197e2674729f083a1e529321e37793142f1c2e5830e87d525f7b7a29106ec4b62ca18e524a1a20e4850b567fdd07d522e4a3d47cd8b3caae960f2f34b89b5d758ba6bd82055ce1c9b6866cb43bc66c96fcc033cba1deba5eef600402f8d847cbb9958720632cb05b15f574db0c705fc42b9d1aa7f96c6bf91a9c0e24fe58181c901ac76860df3b5ae270c1466d8cb47c072b55c4f4d10135b47e9c4844f49a006d7e191211a4ee859d762a488b06468dc6ff047ce88de186649891693f84dca8a9cb263ca069d142adae60b32886fa44fbc14a994464185a9284ad9fa23e48ba1c225c0c59791a8df59437ccd58f3034b5ffdf016e266b1a0463c93ef2f04eb2c780451645fb3b4968baa9afacca930df0229f1180cf11b9d9fd547846bd440a2312dba1c875f1a20bc927e0d145f89faadc264265f4543435333706d05d1010d4b3f77fcc3f8449e6f63df779c2d041db0ab37dfd29121e52f1ad50f29920d0bc15612d0ad7a26d8c03837dec504d3f84fa50400de17fd7b2575e8140f02f54c6f97f0431ba95de84b7c4a3807230c05a375e47cf0dfb3e1b034bd633e4092b0b14991a86a2fa52ada83d22372dc5ba40564873f076978c019150663f79b3ac054d877a09271d43514661a0bf446ffdd83417f6aca289ac8988c0c4cbe3a1682e5289d600803cf831a70dc3ba373c6f30898d8f1958c0b9ff2f9c4cdb9a412a6afe0fde594745a72f4f66df7b5d36a587668481e498cc47af3d705b1ff1c8b6709772d4658eb50a5eeb5b6c3b74ecc1381db8b069b99ad4087d6bce3d3a73259643b524cbff288aacc838d04a70f12f0a87318c2856f382d7a9e997e0a89deac0027e251c05633070e61390c886ae50edeb6d9216882a01e9062d94ebb1077ae0124c9a5b2dc604e308d63c88151213f89b7657b8fc692beeb4eb7c3fdde7bc6617ba63a3b1d6b2c488b7879da07b05ec3fdf3bf94000e9b3b2ab35fa7ef87e4fc876aca0a1d1ac81766c5cd69f3ede4920f480e7752138df5f6b60f9d760ff189f9d77d6e7fd6b1c4bcf2e517f5fa99483177da802b5f176ceef52b85537a9ee4a9c9e3308de5d302a7727522128082a6e7bf86b3aceaa3fc0b8a6635705df71aea224eab5da79f60ff099e21a36c378bb31b7387ee9478e0b8afdaa842e08e4952a112a834690684049405e6e6f28257644234a371a2cee75062bc09922b8af4f9d7787639f5c3d8058966273b58d0c6013fef52ebf3d2ec45f594e0c91d162c88c3607072a36cb11e7ffd9e350b1560655b28fb062fb381b0ea79a9925e7c7ef1a42963d4650222cac653e0f1fc3c61994b78db5cf29a371d9aa21bd71381a4d6ce9129bae8ced362f988647be7c78a008838d1f798304e0f8ad4c06f405d8c825253b7c54a6efa303ebd22a97ba3776e66c84d225186f682203135bab6bbd2e9e9d1fa2556399b4f0277f7d0f77ff37bd8c14ca94e0ef8090b7a105cd2e55b1e88520897d1ff0a06178ead354de1488a54ec773616402b7d4bc7c838264160192323775761bef9ccf4535e6f45f927124446aea3d46bf048c25db9f99d92735549d6b90de497c54548189f63eaa1f33d0820f53ab4e9aaddc78882a2a26257f34798daa391d2889309bce3acecaef1a79f5efa2db32b337df25394d09e7f40b2a20b1b73a0ec370ec59178bc8306ef87c43998abf1df90bc38c0ddbf9e0c5443fb1bcf1e63f10b602a131cf0e5f2388e083713d9d98931bcb1b498ec29e8fc53b64b154245c8bda1d80c25f1aeca14e1fdd22a4a7435bdb2042c9b9e6fed2f1da8a1d5b84eaa026f0bfa38e6097aa9d6997de1f8c081545e9eaa677fc5e3f76e35e2ee67616575bdd6756e0e4174e4932d0fb41c15d7e5c005b4f4ad36c7eb2ff7b36c5df7eafd1e5253cdb2d17e82e7e3a34ec67ede9dfee879a6d90e2a92e10574d49486d71372cdf4703a8c348a32dc0d7393a1d0a35fab8d98fd6af58c158bb37e9cda25e8a47be92beeea2e156366df776f2c829b387da1ffc43b35f1a2ca37836324472fd783e94a8762f5e392f7557cbe42884ca9cacf33a44787f0c6f04a738e6fc9e52a12600c2690640d84235df7b2f14036f1050aec2a17027afbee78a9c7368a97a1aa5fe9a3f18a4e577ca14134f5c789a82b719e846e1dcbc91b61a68f4ca6f07405e51e97dac1866a9683fec84275c79d1127d15c67be517877c338dab793f45dd703264f475fe48f9717da7697bf64f082a6d4be5bcdf746f6d4c4fe8b1018147d385e7050ae3651f844d5cdd4ee7d2d4f880e746eb4586cc9ddc894f01a1da066d04aae58f1a67bb2521e12937ee02efcee51532fd7531284d4955582bbe6cade58c2e6deb38fd10202f994ecf593247c342152205a373896de36e91e164f8f9bdc1145cd524835e978db57df249ff2353dd2d819d64b2d69a063615617dd94b25a331e463ac508e7f58528780aa7aca29502ae98e857452d0df1899579e340ade8b7c8c908ba1a5ae8a66cf27a089a053f208813424cf0529824f2213cd64f49943e219b5da58ff2a40da85eed533934d3a4bc942f057186659262c95de5e1b02e18b74ea03c59bf9b9d0253f950a6026fef503843a39adabc5a104f55613cfcb898737860bff519112f493438c21c3118d6be5d7fcbeef3cdfd1467e75d8917887e17ff188af1eaabd699265468bc4ade500082505fdc5ea0b98f88092cc6945aec92c8047a701238f0bb3d687bec7fc2f5f9beb9d377946e50e18fea13f57839e702c0b3322adbd5a4a5c7bc05280932a51f7050335daace0d623ee2a75df6a5786f1ca409172aed340542096789124b47ae13d25050cc66925f5e50bf1395ce83fcccae5bce24947d1e0c30b250f2adbce30ecaab8441ee5bdab412518c734fb6837df6d53455df56677a7dd6910e7d4875b99c14a5da66327d7244177599310a351091b338cf8e1883b2f04eeafc9c583fb9c9ac2ad25952d39cebaafaf5fc03e0da869b203c1bf15fe7c90d8cbe9b4d06914429cb66cf907be024acc8014fa0a17fe3ea5272f2964f9a3f846ea0f8e4e5d64090f2b513869e3d1aa23fbf712d975076eff6f43917513eed09bf6d79093860cf5b6154d7378bcb457cf924ce4346a7e50bcbbc6a2c35dffd07537d86be55b7291ffc08a47a94bfd55c7bf843d0fe1116dbf5afc8d0a0d12f11943c47f898366fb69dfbc042c6c128c435d1e5321651a3b35253c5fb7f54e1752b57c710b44703e6e2ac5b7d9b345bc04e2d03e37a3556f094fd2d462b0f441486ba5627d069c9244ed4b940bc8f580298eb419b9eb07e950c9b5f9eaa7829f0ba1aabe") (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000049c0)={&(0x7f0000004840)="107be0d9640ecd3b465213873d3f71378c6454da575a02a267427331776fdc8610e228cbe084720ecccd85446c42c7f7477ff69336de19bb60c34d0755560b805556f9d7021448cc9a02386029a408e4225ea878db0a4af9ec155eb0411bab35e4956b6902a0667f5ec81a91", &(0x7f00000048c0)=""/72, &(0x7f0000004940)="bb48d61be01f", &(0x7f0000004980), 0x5, r10, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000004c00)={0x5, 0x4, &(0x7f0000004a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x1, 0x34e3e8cf2aadc73, 0x8, 0x1, 0xfffffffffffffffe, 0x8}]}, &(0x7f0000004a40)='syzkaller\x00', 0xd9a, 0x92, &(0x7f0000004a80)=""/146, 0x40f00, 0x1, '\x00', r3, @fallback=0x28, r10, 0x8, &(0x7f0000004b40)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000004b80)={0x3, 0xf, 0x101, 0x8001}, 0x10, r7, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000004bc0)=[{0x2, 0x3, 0x9, 0x3}, {0x1, 0x5, 0x4, 0x3}, {0x3, 0x4, 0x2, 0x1}], 0x10, 0x2, @void, @value}, 0x94) 619.251956ms ago: executing program 2 (id=2456): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000bc0)=ANY=[@ANYRES8], 0xa) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x64a043, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 421.730607ms ago: executing program 0 (id=2457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0={0x18, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 408.878737ms ago: executing program 4 (id=2458): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) close(0x3) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8917, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r5, r4}) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)="9e", 0x1}], 0x1}, 0x40000) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1a002}], 0x1}, 0x0) 189.448019ms ago: executing program 0 (id=2459): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000a40)=""/248, 0xf8}], 0x1, &(0x7f0000000480)=""/19, 0x13, 0x18}, 0x0) 109.388639ms ago: executing program 0 (id=2460): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 79.881999ms ago: executing program 3 (id=2461): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={&(0x7f00000005c0)="f84d7e9af7a172d6490c9aac424957d5ad910d1c0318bb424542e0cc4e4ef5c2e7496e1755b3", &(0x7f0000000600)=""/54, &(0x7f0000000640)="3f074878663c1c7cd97658c4a606a998af0f05afc965ba063d6a5e4d29104879e58ddd817c9634b6e1e2c4935bfc2d8dba1265058614485115c4a017d51af279dc26e7c85ddad07c80fe197191dc2305e742a3847ac8ad1cf6b50a4e8dc86e06a981891f89a0077b6f3515f7c8b5f1b25e1bab54b3da0af5f06b46c975fc209effb40b3cef4d3a8b05e0e946c3283149dd35cbe458c2d745c060d23b12283dd373dc15254fd5d3ca82dafae6365ce1c8b6ec2365b8e93d46612e02f62d72ebaf253a8ab34dfe4b858ee23d6d1357ebd11e4c32b5cbc90abbe549", &(0x7f0000000740)="facc7b79ed", 0xfffffffe, r0, 0x4}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000f3ffffffff7459e3cd2e08"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x42b81b7, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.28915ms ago: executing program 2 (id=2462): r0 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x28000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0500000007000000070000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000085972a754033d46ea6be3a5fa190de41f82deb0511423d4b26ace3bfb70cf00eea165e9309c61683226294ea0ffe51"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000617800006c344438f790a9426f12f0000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x23000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x4}, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x5) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000004f0d67c26ecbec554083ac93a6ffc2957f84cc16502c1d75e4ab1cdb84480f455381c98e7f145379452ff631a5b6ab2eff52d7e02bb99bfa505c798b80af2d1e1577860fea327870df84c2a59a754ea0221e1214b9122593bad20e8f74a8381d166fb4aee04d51178e38e75bac416fea5db626230c43430952bb24de0458e6011381fe280d5bfc06fff7d2fdb8f3dc61799b7b24c7c44ce570b0e5146d015a003600449bd2163904da92dc97e99e1f9f19cd9e3b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000200000085000000860000009500"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r8, 0x58, &(0x7f0000000a80)}, 0x10) r11 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000340), &(0x7f0000000440)='%pS \x00'}, 0x20) write$cgroup_pid(r11, &(0x7f0000000040), 0x12) 0s ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000200000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001600850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, r2, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): 268.317932][ T9869] ? panic+0x860/0x860 [ 268.322018][ T9869] ? bpf_cgroup_storage_free+0x8b/0xb0 [ 268.327518][ T9869] ? bpf_test_run+0x7e5/0x8a0 [ 268.332227][ T9869] should_fail+0x38a/0x4c0 [ 268.336666][ T9869] _copy_to_user+0x2d/0x130 [ 268.341184][ T9869] bpf_test_finish+0x27f/0x4c0 [ 268.345970][ T9869] ? convert_skb_to___skb+0x350/0x350 [ 268.351368][ T9869] ? convert_skb_to___skb+0x1fe/0x350 [ 268.356761][ T9869] bpf_prog_test_run_skb+0xd4d/0x1420 [ 268.362174][ T9869] ? cpu_online+0x70/0x70 [ 268.366519][ T9869] ? cpu_online+0x70/0x70 [ 268.370857][ T9869] bpf_prog_test_run+0x32f/0x3a0 [ 268.375819][ T9869] __sys_bpf+0x3ac/0x670 [ 268.380083][ T9869] ? bpf_link_show_fdinfo+0x300/0x300 [ 268.385477][ T9869] ? syscall_enter_from_user_mode+0x2e/0x240 [ 268.391478][ T9869] ? syscall_enter_from_user_mode+0x2e/0x240 [ 268.397512][ T9869] ? lockdep_hardirqs_on+0x94/0x130 [ 268.402741][ T9869] __x64_sys_bpf+0x78/0x90 [ 268.407202][ T9869] do_syscall_64+0x3b/0xb0 [ 268.411637][ T9869] ? clear_bhb_loop+0x15/0x70 [ 268.416319][ T9869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.422223][ T9869] RIP: 0033:0x7f8806fdb169 [ 268.426650][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.446265][ T9869] RSP: 002b:00007f8804e44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.454690][ T9869] RAX: ffffffffffffffda RBX: 00007f88071f3fa0 RCX: 00007f8806fdb169 [ 268.462673][ T9869] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 268.470656][ T9869] RBP: 00007f8804e44090 R08: 0000000000000000 R09: 0000000000000000 [ 268.478636][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.486612][ T9869] R13: 0000000000000000 R14: 00007f88071f3fa0 R15: 00007ffea25fecf8 [ 268.494608][ T9869] [ 268.739524][ T9886] netlink: 'syz.2.1580': attribute type 39 has an invalid length. [ 268.938729][ T9893] netlink: 'syz.3.1581': attribute type 39 has an invalid length. [ 269.416430][ T9901] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1583'. [ 269.771536][ T9758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.836622][ T9758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.954063][ T9758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.981267][ T9758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.192272][ T9928] netlink: 'syz.3.1593': attribute type 39 has an invalid length. [ 270.270290][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 270.371197][ T9758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.385699][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.419321][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.495065][ T9758] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.531363][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.555612][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.598648][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.599535][ T9946] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 270.605958][ T4496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.701634][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.754692][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.774406][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.819853][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.827060][ T4496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.921364][ T9949] netlink: 'syz.2.1598': attribute type 39 has an invalid length. [ 270.974192][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.024895][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.076451][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.112377][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.146425][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.172448][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.239032][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.262779][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.285664][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.336762][ T9976] netlink: 'syz.3.1607': attribute type 39 has an invalid length. [ 271.362836][ T9758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.412941][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.452464][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.474326][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.970655][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.978310][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.068642][ T9758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.162605][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.186813][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.299397][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.339371][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.352221][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 272.398212][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.451649][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.497458][ T9758] device veth0_vlan entered promiscuous mode [ 272.559541][T10014] netlink: 'syz.3.1617': attribute type 39 has an invalid length. [ 272.617596][ T9758] device veth1_vlan entered promiscuous mode [ 272.651358][T10015] netlink: 'syz.0.1616': attribute type 46 has an invalid length. [ 272.755406][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.781788][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.839658][T10030] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.1620'. [ 272.849618][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.875621][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.911114][T10030] openvswitch: netlink: Message has 20476 unknown bytes. [ 272.924030][ T9758] device veth0_macvtap entered promiscuous mode [ 273.093469][ T9758] device veth1_macvtap entered promiscuous mode [ 273.155679][T10036] netlink: 'syz.2.1622': attribute type 39 has an invalid length. [ 273.227282][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.243706][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.307263][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.365296][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.399037][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.454426][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.502009][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.561476][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.581457][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.644991][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.676771][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.717787][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.759246][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.808822][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.850654][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.876765][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.944443][ T9758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.986095][ T9758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.018912][ T9758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.069716][ T9758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.132504][T10067] netlink: 'syz.4.1631': attribute type 39 has an invalid length. [ 274.380788][ T5804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.388955][ T5804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.456090][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.510582][ T5804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.518782][ T5804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.563350][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.855584][T10096] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1640'. [ 274.921508][T10096] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 274.940384][T10096] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 274.949038][T10092] netlink: 'syz.4.1639': attribute type 39 has an invalid length. [ 275.154801][T10107] netlink: 'syz.3.1642': attribute type 39 has an invalid length. [ 275.491574][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.565580][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.572793][T10121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.643542][T10121] device bridge0 entered promiscuous mode [ 276.105940][T10136] netlink: 'syz.0.1655': attribute type 39 has an invalid length. [ 276.284242][T10143] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1656'. [ 276.325346][T10139] netlink: 'syz.4.1657': attribute type 39 has an invalid length. [ 276.359601][T10143] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1656'. [ 276.427716][T10143] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 277.677423][ T5821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.717016][ T5821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.757508][ T5821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.826543][ T5821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.151855][T10162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1662'. [ 278.637944][T10186] netlink: 'syz.4.1669': attribute type 39 has an invalid length. [ 279.324810][T10212] netlink: 'syz.3.1674': attribute type 39 has an invalid length. [ 279.370218][T10185] chnl_net:caif_netlink_parms(): no params data found [ 279.612638][T10225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1680'. [ 279.824850][T10232] netlink: 'syz.2.1681': attribute type 39 has an invalid length. [ 279.934049][T10240] netlink: 'syz.0.1683': attribute type 39 has an invalid length. [ 280.051812][T10240] device veth0_macvtap left promiscuous mode [ 280.159112][T10185] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.169571][T10185] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.188404][T10185] device bridge_slave_0 entered promiscuous mode [ 280.212392][T10257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1684'. [ 280.250178][T10185] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.257282][T10185] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.273963][T10185] device bridge_slave_1 entered promiscuous mode [ 280.297825][ T5821] device hsr_slave_0 left promiscuous mode [ 280.309060][ T5821] device hsr_slave_1 left promiscuous mode [ 280.347151][T10265] FAULT_INJECTION: forcing a failure. [ 280.347151][T10265] name failslab, interval 1, probability 0, space 0, times 0 [ 280.360806][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.379318][T10265] CPU: 1 PID: 10265 Comm: syz.3.1688 Not tainted 5.15.179-syzkaller #0 [ 280.387614][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.397739][T10265] Call Trace: [ 280.401049][T10265] [ 280.404006][T10265] dump_stack_lvl+0x1e3/0x2d0 [ 280.404486][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.408718][T10265] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 280.421504][T10265] ? panic+0x860/0x860 [ 280.425617][T10265] ? __might_sleep+0xc0/0xc0 [ 280.430262][T10265] should_fail+0x38a/0x4c0 [ 280.434731][T10265] should_failslab+0x5/0x20 [ 280.439265][T10265] slab_pre_alloc_hook+0x53/0xc0 [ 280.444372][T10265] __kmalloc+0x6e/0x300 [ 280.448557][T10265] ? tomoyo_encode+0x26b/0x530 [ 280.453370][T10265] tomoyo_encode+0x26b/0x530 [ 280.457999][T10265] ? sock_free_inode+0x20/0x20 [ 280.462807][T10265] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 280.468497][T10265] tomoyo_path_number_perm+0x225/0x810 [ 280.474010][T10265] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 280.479589][T10265] ? __fget_files+0x413/0x480 [ 280.484319][T10265] security_file_ioctl+0x6d/0xa0 [ 280.489293][T10265] __se_sys_ioctl+0x47/0x160 [ 280.493918][T10265] do_syscall_64+0x3b/0xb0 [ 280.498361][T10265] ? clear_bhb_loop+0x15/0x70 [ 280.503071][T10265] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.508993][T10265] RIP: 0033:0x7f5e781d7169 [ 280.513443][T10265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.533081][T10265] RSP: 002b:00007f5e76040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.541533][T10265] RAX: ffffffffffffffda RBX: 00007f5e783effa0 RCX: 00007f5e781d7169 [ 280.549708][T10265] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000004 [ 280.557709][T10265] RBP: 00007f5e76040090 R08: 0000000000000000 R09: 0000000000000000 [ 280.565706][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.573709][T10265] R13: 0000000000000000 R14: 00007f5e783effa0 R15: 00007ffc6c4e4388 [ 280.581754][T10265] [ 280.586270][ T4211] Bluetooth: hci1: command 0x0409 tx timeout [ 280.594734][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.605669][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.655298][ T5821] device bridge_slave_1 left promiscuous mode [ 280.698909][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.780532][ T5821] device bridge_slave_0 left promiscuous mode [ 280.787091][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.840372][T10265] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.855802][ T5821] device veth1_macvtap left promiscuous mode [ 280.862852][ T5821] device veth0_macvtap left promiscuous mode [ 280.869698][ T5821] device veth1_vlan left promiscuous mode [ 280.924635][ T5821] device veth0_vlan left promiscuous mode [ 281.341165][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 281.355084][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 281.374335][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.390042][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.459445][ T5821] bond0 (unregistering): Released all slaves [ 281.517322][T10267] netlink: 'syz.4.1689': attribute type 39 has an invalid length. [ 281.686463][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.716112][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.746000][T10279] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1692'. [ 281.917520][T10185] team0: Port device team_slave_0 added [ 281.964811][T10185] team0: Port device team_slave_1 added [ 282.078016][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.089863][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.152256][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.169214][T10291] netlink: 'syz.3.1698': attribute type 39 has an invalid length. [ 282.186465][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.226119][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.309399][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.535502][T10185] device hsr_slave_0 entered promiscuous mode [ 282.617556][T10185] device hsr_slave_1 entered promiscuous mode [ 282.637395][T10185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.683650][ T4158] Bluetooth: hci1: command 0x041b tx timeout [ 282.730280][T10185] Cannot create hsr debugfs directory [ 282.745352][T10314] netlink: 'syz.2.1704': attribute type 39 has an invalid length. [ 283.256395][T10335] netlink: 'syz.2.1711': attribute type 39 has an invalid length. [ 284.184789][T10185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 284.283043][T10366] netlink: 'syz.0.1718': attribute type 39 has an invalid length. [ 284.318263][T10185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 284.355896][T10185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 284.488544][T10185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 284.740473][ T4158] Bluetooth: hci1: command 0x040f tx timeout [ 284.955226][T10383] netlink: 'syz.3.1723': attribute type 39 has an invalid length. [ 284.987935][T10389] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1724'. [ 285.038163][T10185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.162809][T10185] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.169763][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.188665][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.237643][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.254475][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.296837][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.304031][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.364988][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.406611][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.458777][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.491124][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.498275][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.538870][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.613752][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.645370][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.679111][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.742316][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.799289][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.851261][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.886857][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.935374][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.970368][T10416] netlink: 'syz.0.1731': attribute type 39 has an invalid length. [ 285.987965][T10185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.034985][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.070388][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.096028][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.583584][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.603292][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.631767][T10185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.751080][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.794121][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.820540][ T4158] Bluetooth: hci1: command 0x0419 tx timeout [ 286.866263][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.891919][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.918332][T10185] device veth0_vlan entered promiscuous mode [ 286.926716][T10451] netlink: 'syz.2.1737': attribute type 39 has an invalid length. [ 286.961014][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.000977][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.026970][T10185] device veth1_vlan entered promiscuous mode [ 287.180689][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.227964][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.286244][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.318251][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.372991][T10468] netlink: 'syz.3.1740': attribute type 16 has an invalid length. [ 287.464140][T10468] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1740'. [ 287.548437][T10185] device veth0_macvtap entered promiscuous mode [ 287.584107][T10185] device veth1_macvtap entered promiscuous mode [ 287.722414][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.794622][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.856920][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.908881][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.933312][T10185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.955666][T10486] netlink: 'syz.2.1743': attribute type 39 has an invalid length. [ 287.979894][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.998546][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.035601][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.100981][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.212200][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.275971][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.326223][T10185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.384233][T10185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.417075][T10185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.476459][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.498733][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.578741][T10185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.617076][T10185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.641520][T10185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.663580][T10185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.719876][T10520] netlink: 'syz.2.1750': attribute type 39 has an invalid length. [ 288.915660][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.943746][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.007280][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.042274][ T5804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.093921][ T5804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.147845][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.744218][T10560] netlink: 'syz.2.1757': attribute type 39 has an invalid length. [ 289.825147][ T5821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.979916][ T5821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.079074][ T5821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.161026][ T5821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.077472][ T5821] device hsr_slave_0 left promiscuous mode [ 291.087476][ T5821] device hsr_slave_1 left promiscuous mode [ 291.098953][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.130128][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.138166][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.148646][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.156741][ T5821] device bridge_slave_1 left promiscuous mode [ 291.165395][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.186013][ T5821] device bridge_slave_0 left promiscuous mode [ 291.192492][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.209814][ T5821] device veth1_macvtap left promiscuous mode [ 291.216125][ T5821] device veth0_macvtap left promiscuous mode [ 291.233840][ T5821] device veth1_vlan left promiscuous mode [ 291.239866][ T5821] device veth0_vlan left promiscuous mode [ 291.801550][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 291.878982][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 291.941140][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.961776][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.076037][ T5821] bond0 (unregistering): Released all slaves [ 292.154966][T10607] netlink: 'syz.3.1761': attribute type 39 has an invalid length. [ 292.611261][T10647] netlink: 'syz.0.1771': attribute type 39 has an invalid length. [ 292.731618][T10622] chnl_net:caif_netlink_parms(): no params data found [ 293.246207][T10622] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.304075][T10622] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.335808][T10622] device bridge_slave_0 entered promiscuous mode [ 293.395041][T10622] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.426345][T10622] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.471224][T10622] device bridge_slave_1 entered promiscuous mode [ 293.489433][T10678] netlink: 'syz.4.1778': attribute type 39 has an invalid length. [ 293.613441][T10622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.657899][T10622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.734142][T10692] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1779'. [ 293.940747][ T4212] Bluetooth: hci1: command 0x0409 tx timeout [ 293.948766][T10692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.052548][T10692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.156687][T10692] bond0 (unregistering): Released all slaves [ 294.355263][T10705] netlink: 'syz.4.1784': attribute type 39 has an invalid length. [ 294.454877][T10622] team0: Port device team_slave_0 added [ 294.485843][T10710] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1785'. [ 294.499879][T10622] team0: Port device team_slave_1 added [ 294.807049][T10727] netlink: 'syz.2.1789': attribute type 29 has an invalid length. [ 295.012778][T10622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.050263][T10622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.190182][T10622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.268550][T10727] netlink: 'syz.2.1789': attribute type 29 has an invalid length. [ 295.624206][T10731] netlink: 'syz.3.1791': attribute type 39 has an invalid length. [ 295.655032][T10622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.683523][T10622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.711990][T10622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.831781][T10622] device hsr_slave_0 entered promiscuous mode [ 295.895291][T10622] device hsr_slave_1 entered promiscuous mode [ 295.924815][T10622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.933974][T10622] Cannot create hsr debugfs directory [ 296.020280][ T4212] Bluetooth: hci1: command 0x041b tx timeout [ 296.300651][T10754] netlink: 'syz.3.1797': attribute type 39 has an invalid length. [ 297.556931][T10773] netlink: 'syz.4.1803': attribute type 39 has an invalid length. [ 297.801295][T10622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.844694][T10622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.886517][T10622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.938173][T10622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 298.100449][ T2303] Bluetooth: hci1: command 0x040f tx timeout [ 298.241097][T10800] netlink: 'syz.2.1809': attribute type 39 has an invalid length. [ 298.356251][T10622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.468364][T10622] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.477057][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.511522][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.550198][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.586457][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.618634][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.625809][ T5824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.727949][T10816] netlink: 'syz.4.1815': attribute type 10 has an invalid length. [ 298.755008][T10817] netlink: 'syz.2.1816': attribute type 1 has an invalid length. [ 298.782169][T10816] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1815'. [ 298.802340][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.813000][T10817] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1816'. [ 298.821207][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.872640][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.883276][T10817] netlink: 'syz.2.1816': attribute type 1 has an invalid length. [ 298.909088][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.916338][ T5824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.957833][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.048777][T10820] netlink: 'syz.0.1817': attribute type 39 has an invalid length. [ 299.111692][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.191224][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.206153][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.281642][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.321692][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.388858][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.430630][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.474835][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.521427][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.590768][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.668616][T10622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.213973][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 300.361697][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.381611][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.419396][T10622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.551013][T10872] netlink: 'syz.4.1827': attribute type 21 has an invalid length. [ 300.597663][T10869] netlink: 'syz.0.1826': attribute type 39 has an invalid length. [ 300.630984][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.646361][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.737376][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.759464][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.825251][T10622] device veth0_vlan entered promiscuous mode [ 300.848232][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.876034][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.914099][T10622] device veth1_vlan entered promiscuous mode [ 300.935720][T10883] netlink: 'syz.4.1830': attribute type 39 has an invalid length. [ 301.049332][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.067203][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.116241][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.155380][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.199610][T10622] device veth0_macvtap entered promiscuous mode [ 301.248570][T10622] device veth1_macvtap entered promiscuous mode [ 301.336647][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.396855][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.437499][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.478562][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.519323][T10622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.549109][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.573421][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.633152][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.662517][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.703180][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.729275][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.761499][T10622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.771583][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.784357][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.835260][T10622] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.857972][T10622] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.884167][T10622] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.917253][T10622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.989457][T10914] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1836'. [ 302.257886][T10923] netlink: 'syz.4.1839': attribute type 39 has an invalid length. [ 302.418858][ T5804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.443607][ T5804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.512469][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.539620][ T5821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.595810][ T5821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.609157][T10941] netlink: 'syz.2.1843': attribute type 39 has an invalid length. [ 302.716251][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.978748][T10956] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1846'. [ 303.163000][T10964] delete_channel: no stack [ 303.669135][T10996] netlink: 'syz.4.1856': attribute type 39 has an invalid length. [ 303.901952][T11003] netlink: 'syz.3.1859': attribute type 39 has an invalid length. [ 304.363950][T11023] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1863'. [ 304.540800][T11032] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 304.590975][T11032] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1868'. [ 304.694815][ T5821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.878704][ T5821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.000078][ T5821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.074898][ T5821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.279338][ T5821] device hsr_slave_0 left promiscuous mode [ 306.295510][ T5821] device hsr_slave_1 left promiscuous mode [ 306.314433][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.333685][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.355393][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.363460][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.371991][ T5821] device bridge_slave_1 left promiscuous mode [ 306.378251][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.389484][ T5821] device bridge_slave_0 left promiscuous mode [ 306.397710][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.412054][ T5821] device veth1_macvtap left promiscuous mode [ 306.418119][ T5821] device veth0_macvtap left promiscuous mode [ 306.424823][ T5821] device veth1_vlan left promiscuous mode [ 306.430799][ T5821] device veth0_vlan left promiscuous mode [ 307.093594][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 307.109419][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 307.125982][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.144124][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.226992][ T5821] bond0 (unregistering): Released all slaves [ 307.293556][T11086] netlink: 'syz.3.1872': attribute type 39 has an invalid length. [ 307.305151][T11085] netlink: 'syz.0.1870': attribute type 39 has an invalid length. [ 307.817946][T11094] chnl_net:caif_netlink_parms(): no params data found [ 308.255310][T11094] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.293114][T11094] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.399859][T11094] device bridge_slave_0 entered promiscuous mode [ 308.429370][T11143] netlink: 'syz.2.1886': attribute type 39 has an invalid length. [ 308.518421][T11094] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.536158][T11094] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.555226][T11094] device bridge_slave_1 entered promiscuous mode [ 308.571827][T11147] netlink: 'syz.4.1887': attribute type 39 has an invalid length. [ 308.729314][T11094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.762102][T11094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.852406][T11157] syz.4.1891[11157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.892160][T11154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.073755][ T4212] Bluetooth: hci1: command 0x0409 tx timeout [ 309.098506][T11094] team0: Port device team_slave_0 added [ 309.126183][T11094] team0: Port device team_slave_1 added [ 309.283491][T11094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.341609][T11094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.434481][T11094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.495208][T11094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.522849][T11094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.597146][T11094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.635065][T11183] netlink: 'syz.3.1898': attribute type 39 has an invalid length. [ 309.818708][T11094] device hsr_slave_0 entered promiscuous mode [ 309.903038][T11094] device hsr_slave_1 entered promiscuous mode [ 309.946216][T11094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.000569][T11094] Cannot create hsr debugfs directory [ 310.044845][T11201] netlink: 'syz.0.1902': attribute type 39 has an invalid length. [ 311.036103][T11094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.103301][T11094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.141526][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 311.154572][T11094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.178019][T11237] netlink: 'syz.3.1914': attribute type 39 has an invalid length. [ 311.189184][T11094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.414924][T11245] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1916'. [ 311.550921][T11094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.577529][T11251] netlink: 'syz.2.1917': attribute type 39 has an invalid length. [ 311.657972][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.694379][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.712371][T11094] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.739560][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.772904][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.853392][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.860674][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.916913][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.956579][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.969089][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.994415][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.001708][ T5824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.018239][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.086075][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.148426][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.174529][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.213723][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.226039][T11280] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1926'. [ 312.254665][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.268348][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.276249][T11280] openvswitch: netlink: Message has 20476 unknown bytes. [ 312.317971][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.356331][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.416554][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.458753][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.519548][T11094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.560346][T11292] netlink: 'syz.3.1929': attribute type 39 has an invalid length. [ 312.890547][T11308] netlink: 'syz.3.1933': attribute type 39 has an invalid length. [ 313.125401][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.178003][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.224803][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 313.273925][T11094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.407548][T11337] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1940'. [ 313.600918][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.644705][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.717989][T11337] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1940'. [ 313.733385][T11094] device veth0_vlan entered promiscuous mode [ 313.762065][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.776000][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.804462][T11337] openvswitch: netlink: Key type 7440 is out of range max 29 [ 313.813178][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.813920][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.835413][T11094] device veth1_vlan entered promiscuous mode [ 313.885768][T11345] netlink: 'syz.4.1942': attribute type 10 has an invalid length. [ 313.965065][T11345] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1942'. [ 313.996241][T11344] netlink: 'syz.3.1943': attribute type 39 has an invalid length. [ 314.053548][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.083817][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.173998][T11094] device veth0_macvtap entered promiscuous mode [ 314.209141][T11094] device veth1_macvtap entered promiscuous mode [ 314.285938][T11094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.320044][T11094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.359345][T11094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.384753][T11094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.411926][T11094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.435167][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.446896][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.455859][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.482457][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.528282][T11357] netlink: 'syz.4.1948': attribute type 39 has an invalid length. [ 314.543326][T11094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.574301][T11094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.600115][T11094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.612630][T11094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.625315][T11094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.686489][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.697837][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.745324][T11094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.765689][T11370] netlink: 'syz.3.1954': attribute type 29 has an invalid length. [ 314.796862][T11094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.831729][T11094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.855236][T11094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.918805][T11370] netlink: 'syz.3.1954': attribute type 29 has an invalid length. [ 314.931216][T11378] netlink: 'syz.2.1956': attribute type 39 has an invalid length. [ 315.015412][T11376] netlink: 'syz.3.1954': attribute type 29 has an invalid length. [ 315.218793][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.250371][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.300461][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 315.342238][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.358357][ T5821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.407576][ T5821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.448473][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.684555][T11404] netlink: 'syz.0.1964': attribute type 39 has an invalid length. [ 316.087775][ T4223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.337481][T11418] team0: Port device wlan1 added [ 316.395267][T11417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.526429][ T4223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.846969][ T4223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.927859][ T4223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.144509][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.150856][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.783754][ T4223] device hsr_slave_0 left promiscuous mode [ 317.794231][ T4223] device hsr_slave_1 left promiscuous mode [ 317.801036][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.808468][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.818105][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.826025][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.834322][ T4223] device bridge_slave_1 left promiscuous mode [ 317.841298][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.849787][ T4223] device bridge_slave_0 left promiscuous mode [ 317.856723][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.868714][ T4223] device veth1_macvtap left promiscuous mode [ 317.874887][ T4223] device veth0_macvtap left promiscuous mode [ 317.881210][ T4223] device veth1_vlan left promiscuous mode [ 317.886994][ T4223] device veth0_vlan left promiscuous mode [ 318.418488][ T4223] team0 (unregistering): Port device team_slave_1 removed [ 318.486019][ T4223] team0 (unregistering): Port device team_slave_0 removed [ 318.536686][ T4223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.560213][ T4223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.736893][ T4223] bond0 (unregistering): Released all slaves [ 318.833283][T11474] validate_nla: 2 callbacks suppressed [ 318.833321][T11474] netlink: 'syz.2.1975': attribute type 39 has an invalid length. [ 318.872435][T11488] netlink: 'syz.0.1979': attribute type 6 has an invalid length. [ 318.884326][T11488] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1979'. [ 318.910343][T11486] netlink: 'syz.4.1980': attribute type 39 has an invalid length. [ 319.540752][T11487] chnl_net:caif_netlink_parms(): no params data found [ 320.162458][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.169735][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.276311][T11487] device bridge_slave_0 entered promiscuous mode [ 320.344544][T11544] netlink: 'syz.2.1992': attribute type 39 has an invalid length. [ 320.406044][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.461499][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.476002][T11487] device bridge_slave_1 entered promiscuous mode [ 320.645632][T11487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.670292][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 320.695304][T11487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.871894][T11560] netlink: 'syz.3.1996': attribute type 39 has an invalid length. [ 321.003608][T11487] team0: Port device team_slave_0 added [ 321.025364][T11487] team0: Port device team_slave_1 added [ 321.162225][T11487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.230032][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.367758][T11487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.422094][T11487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.480088][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.561596][T11487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.835492][T11487] device hsr_slave_0 entered promiscuous mode [ 321.908891][T11487] device hsr_slave_1 entered promiscuous mode [ 322.015112][T11487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.048771][T11487] Cannot create hsr debugfs directory [ 322.107322][T11611] netlink: 'syz.4.2008': attribute type 39 has an invalid length. [ 322.631438][T11625] netlink: 'syz.3.2012': attribute type 39 has an invalid length. [ 322.748487][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 323.917063][T11661] netlink: 'syz.4.2021': attribute type 21 has an invalid length. [ 323.930139][T11661] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2021'. [ 324.306505][T11677] netlink: 'syz.4.2024': attribute type 39 has an invalid length. [ 324.519011][T11675] netlink: 'syz.0.2025': attribute type 39 has an invalid length. [ 324.611603][T11487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.693433][T11487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.741245][T11487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.768383][T11487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.821521][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 325.195490][T11697] tap0: tun_chr_ioctl cmd 1074025677 [ 325.227386][T11697] tap0: linktype set to 780 [ 325.378244][T11487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.497507][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.511826][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.575446][T11487] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.609108][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.640525][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.680315][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.687530][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.722252][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.787095][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.805749][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.854338][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.861487][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.934153][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.979868][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.016320][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.100142][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.136367][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.160791][T11724] netlink: 'syz.4.2038': attribute type 39 has an invalid length. [ 326.212743][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.257684][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.289538][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.336101][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.370791][T11726] netlink: 'syz.0.2039': attribute type 39 has an invalid length. [ 326.443179][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.463821][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.502170][T11487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.522999][T11740] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.2042'. [ 326.901432][ T4221] Bluetooth: hci1: command 0x0419 tx timeout [ 327.052463][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.072702][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.098291][T11487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.184605][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.224451][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.345749][T11487] device veth0_vlan entered promiscuous mode [ 327.390809][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.417743][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.494970][T11487] device veth1_vlan entered promiscuous mode [ 327.554870][T11781] netlink: 'syz.2.2050': attribute type 1 has an invalid length. [ 327.568353][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.589233][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.626314][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 327.635373][T11781] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2050'. [ 327.708824][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 327.737794][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.774005][T11487] device veth0_macvtap entered promiscuous mode [ 327.813937][T11487] device veth1_macvtap entered promiscuous mode [ 327.928869][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.994494][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.035155][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.066158][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.091431][T11487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.129535][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.181339][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.230016][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.260352][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.281651][T11487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.290833][T11791] netlink: 'syz.2.2054': attribute type 39 has an invalid length. [ 328.299852][T11795] netlink: 'syz.4.2056': attribute type 39 has an invalid length. [ 328.335394][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 328.345352][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 328.375853][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 328.401130][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.440535][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 328.470768][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.521106][T11487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.529856][T11487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.596075][T11487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.639115][T11487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.759719][T11813] netlink: 'syz.3.2061': attribute type 39 has an invalid length. [ 328.938756][T11823] device syzkaller0 entered promiscuous mode [ 329.297046][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.360197][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.380112][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 332.345342][T11845] netlink: 'syz.3.2065': attribute type 10 has an invalid length. [ 332.545836][T11845] team0 (unregistering): Port device team_slave_0 removed [ 332.581260][T11845] team0 (unregistering): Port device team_slave_1 removed [ 332.613819][T11847] device wlan0 entered promiscuous mode [ 332.625236][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.746711][T11857] netlink: 'syz.0.2070': attribute type 39 has an invalid length. [ 332.755442][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.813037][T11860] netlink: 'syz.4.2071': attribute type 39 has an invalid length. [ 332.855306][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 333.198825][T11878] netlink: 'syz.0.2075': attribute type 39 has an invalid length. [ 333.307679][ T4496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.407947][ T4496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.573144][ T4496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.708858][ T4496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.957021][ T4496] device hsr_slave_0 left promiscuous mode [ 334.963915][ T4496] device hsr_slave_1 left promiscuous mode [ 334.971300][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.978696][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.989636][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.997161][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.004933][ T4496] device bridge_slave_1 left promiscuous mode [ 335.011194][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.020343][ T4496] device bridge_slave_0 left promiscuous mode [ 335.026575][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.038386][ T4496] device veth1_macvtap left promiscuous mode [ 335.044485][ T4496] device veth0_macvtap left promiscuous mode [ 335.050678][ T4496] device veth1_vlan left promiscuous mode [ 335.056570][ T4496] device veth0_vlan left promiscuous mode [ 335.232355][ T4496] team0 (unregistering): Port device team_slave_1 removed [ 335.247003][ T4496] team0 (unregistering): Port device team_slave_0 removed [ 335.261354][ T4496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.304953][ T4496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.619618][ T4496] bond0 (unregistering): Released all slaves [ 335.843272][T11997] netlink: 'syz.3.2086': attribute type 39 has an invalid length. [ 336.204826][T12010] netlink: 'syz.3.2087': attribute type 39 has an invalid length. [ 336.406035][T12001] chnl_net:caif_netlink_parms(): no params data found [ 336.655401][T12001] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.681072][T12001] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.742342][T12001] device bridge_slave_0 entered promiscuous mode [ 336.782635][T12001] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.820212][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.828503][T12001] device bridge_slave_1 entered promiscuous mode [ 336.944866][T12001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.996606][T12001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.083991][T12001] team0: Port device team_slave_0 added [ 337.103188][T12001] team0: Port device team_slave_1 added [ 337.158146][T12001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.174366][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.229724][T12001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.256160][T12001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.280566][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.340086][T12001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.398718][T12001] device hsr_slave_0 entered promiscuous mode [ 337.405864][T12001] device hsr_slave_1 entered promiscuous mode [ 337.420312][T12001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.427991][T12001] Cannot create hsr debugfs directory [ 337.587075][T12050] netlink: 'syz.2.2093': attribute type 39 has an invalid length. [ 337.614623][T12046] netlink: 'syz.4.2095': attribute type 39 has an invalid length. [ 337.860228][ T2303] Bluetooth: hci1: command 0x0409 tx timeout [ 338.074190][T12065] netlink: 'syz.4.2099': attribute type 39 has an invalid length. [ 338.807455][T12085] netlink: 'syz.3.2104': attribute type 39 has an invalid length. [ 339.081479][T12001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 339.180870][T12001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 339.239572][T12101] netlink: 'syz.3.2120': attribute type 39 has an invalid length. [ 339.270827][T12001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 339.307693][T12104] netlink: 'syz.4.2109': attribute type 39 has an invalid length. [ 339.347629][T12001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.662831][T12115] netlink: 'syz.2.2113': attribute type 39 has an invalid length. [ 339.854571][T12001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.937052][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.950270][ T2303] Bluetooth: hci1: command 0x041b tx timeout [ 339.951450][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.007334][T12001] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.017757][T12128] netlink: 'syz.2.2116': attribute type 39 has an invalid length. [ 340.045526][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.065659][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.089787][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.096960][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.135937][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.147793][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.157625][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.185633][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.192761][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.204255][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.240072][T12137] FAULT_INJECTION: forcing a failure. [ 340.240072][T12137] name failslab, interval 1, probability 0, space 0, times 0 [ 340.253331][T12137] CPU: 0 PID: 12137 Comm: syz.3.2118 Not tainted 5.15.179-syzkaller #0 [ 340.261607][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 340.271690][T12137] Call Trace: [ 340.274989][T12137] [ 340.277939][T12137] dump_stack_lvl+0x1e3/0x2d0 [ 340.282665][T12137] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 340.288337][T12137] ? panic+0x860/0x860 [ 340.289068][T12001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.292475][T12137] should_fail+0x38a/0x4c0 [ 340.292552][T12137] should_failslab+0x5/0x20 [ 340.292580][T12137] slab_pre_alloc_hook+0x53/0xc0 [ 340.292612][T12137] ? radix_tree_node_alloc+0x196/0x3b0 [ 340.292641][T12137] kmem_cache_alloc+0x3f/0x280 [ 340.292681][T12137] radix_tree_node_alloc+0x196/0x3b0 [ 340.292727][T12137] idr_get_free+0x292/0xab0 [ 340.292782][T12137] idr_alloc_cyclic+0x1ec/0x5d0 [ 340.342001][T12137] ? idr_alloc+0x2f0/0x2f0 [ 340.346432][T12137] ? do_raw_spin_lock+0x14a/0x370 [ 340.351485][T12137] ? __radix_tree_preload+0x3b2/0x430 [ 340.356875][T12137] rxrpc_maybe_add_conn+0x517/0x11d0 [ 340.362211][T12137] rxrpc_wait_for_channel+0x271/0x700 [ 340.367635][T12137] ? rxrpc_discard_expired_client_conns+0x4c0/0x4c0 [ 340.374260][T12137] ? sched_dynamic_update+0x240/0x240 [ 340.379657][T12137] ? do_raw_spin_unlock+0x137/0x8b0 [ 340.384877][T12137] rxrpc_connect_call+0x622/0xe80 [ 340.389929][T12137] rxrpc_new_client_call+0x891/0xd80 [ 340.395258][T12137] ? rxrpc_do_sendmsg+0xf4d/0x1990 [ 340.400393][T12137] rxrpc_do_sendmsg+0xf4d/0x1990 [ 340.405370][T12137] ? rcu_lock_release+0x20/0x20 [ 340.410261][T12137] ? rxrpc_sendmsg+0x531/0x890 [ 340.415032][T12137] ? rxrpc_getsockopt+0x150/0x150 [ 340.420166][T12137] ____sys_sendmsg+0x59e/0x8f0 [ 340.424938][T12137] ? iovec_from_user+0x5d/0x390 [ 340.429810][T12137] ? __sys_sendmsg_sock+0x30/0x30 [ 340.434888][T12137] ___sys_sendmsg+0x252/0x2e0 [ 340.439605][T12137] ? __sys_sendmsg+0x260/0x260 [ 340.444479][T12137] ? __fdget+0x191/0x220 [ 340.448754][T12137] __se_sys_sendmsg+0x19a/0x260 [ 340.453638][T12137] ? __x64_sys_sendmsg+0x80/0x80 [ 340.458624][T12137] ? syscall_enter_from_user_mode+0x2e/0x240 [ 340.464630][T12137] ? lockdep_hardirqs_on+0x94/0x130 [ 340.469845][T12137] ? syscall_enter_from_user_mode+0x2e/0x240 [ 340.475841][T12137] do_syscall_64+0x3b/0xb0 [ 340.480272][T12137] ? clear_bhb_loop+0x15/0x70 [ 340.484957][T12137] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.490854][T12137] RIP: 0033:0x7f5e781d7169 [ 340.495281][T12137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.514890][T12137] RSP: 002b:00007f5e76040038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.523307][T12137] RAX: ffffffffffffffda RBX: 00007f5e783effa0 RCX: 00007f5e781d7169 [ 340.531290][T12137] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 340.539265][T12137] RBP: 00007f5e76040090 R08: 0000000000000000 R09: 0000000000000000 [ 340.547236][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.555212][T12137] R13: 0000000000000000 R14: 00007f5e783effa0 R15: 00007ffc6c4e4388 [ 340.563216][T12137] [ 340.568167][ T4212] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 340.591435][T12001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.610098][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.629191][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.653954][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.690233][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.703376][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.716584][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.746771][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.765509][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.816890][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.826871][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.835595][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.059831][T12163] netlink: 'syz.0.2123': attribute type 39 has an invalid length. [ 341.307318][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.356195][T12170] netlink: 'syz.2.2124': attribute type 3 has an invalid length. [ 341.362064][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.417868][T12001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.434940][T12170] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2124'. [ 341.542178][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.614441][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.692117][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.737936][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.788876][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.851183][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.899752][T12001] device veth0_vlan entered promiscuous mode [ 341.955485][T12001] device veth1_vlan entered promiscuous mode [ 342.031311][ T4221] Bluetooth: hci1: command 0x040f tx timeout [ 342.153623][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 342.171390][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 342.245952][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 342.296294][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.389143][T12001] device veth0_macvtap entered promiscuous mode [ 342.449448][T12001] device veth1_macvtap entered promiscuous mode [ 342.642193][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.686764][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.710104][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.730015][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.764092][T12001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.780156][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.811376][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.831625][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.852920][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.892779][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.920394][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.963934][T12001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.992389][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 343.034724][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 343.085730][T12001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.138181][T12001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.172862][T12001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.185064][T12001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.247122][T12248] validate_nla: 5 callbacks suppressed [ 343.247161][T12248] netlink: 'syz.2.2143': attribute type 39 has an invalid length. [ 343.382891][ T5824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.437513][T12257] netlink: 'syz.2.2144': attribute type 39 has an invalid length. [ 343.450307][ T5824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.484520][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.593566][T12259] netlink: 'syz.4.2146': attribute type 39 has an invalid length. [ 343.628024][ T5824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.653837][ T5824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.696939][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.831579][T12268] netlink: 'syz.0.2149': attribute type 12 has an invalid length. [ 343.893444][T12268] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2149'. [ 343.996524][T12273] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2151'. [ 344.419370][T12278] netlink: 'syz.3.2153': attribute type 39 has an invalid length. [ 344.467360][T12280] netlink: 'syz.0.2155': attribute type 39 has an invalid length. [ 345.568345][ T5824] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.616254][ T5824] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.667906][ T5824] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.716050][ T5824] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.560875][ T5824] device hsr_slave_0 left promiscuous mode [ 346.568567][ T5824] device hsr_slave_1 left promiscuous mode [ 346.575961][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.583535][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.592501][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.599907][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.607974][ T5824] device bridge_slave_1 left promiscuous mode [ 346.614310][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.623250][ T5824] device bridge_slave_0 left promiscuous mode [ 346.629508][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.642484][ T5824] device veth1_macvtap left promiscuous mode [ 346.648527][ T5824] device veth0_macvtap left promiscuous mode [ 346.656733][ T5824] device veth1_vlan left promiscuous mode [ 346.704538][ T5824] device veth0_vlan left promiscuous mode [ 347.181366][ T5824] team0 (unregistering): Port device team_slave_1 removed [ 347.201633][ T5824] team0 (unregistering): Port device team_slave_0 removed [ 347.218998][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.238530][ T5824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.322998][ T5824] bond0 (unregistering): Released all slaves [ 347.396250][T12335] netlink: 'syz.0.2167': attribute type 39 has an invalid length. [ 347.722507][T12358] netlink: 'syz.2.2164': attribute type 39 has an invalid length. [ 347.978466][T12374] netlink: 'syz.0.2168': attribute type 39 has an invalid length. [ 348.110520][T12346] chnl_net:caif_netlink_parms(): no params data found [ 348.555924][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.583525][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.628412][T12346] device bridge_slave_0 entered promiscuous mode [ 348.751004][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.758118][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.863670][T12346] device bridge_slave_1 entered promiscuous mode [ 349.022803][T12346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.060898][ T4212] Bluetooth: hci1: command 0x0409 tx timeout [ 349.126439][T12346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.240255][T12414] netlink: 'syz.4.2177': attribute type 39 has an invalid length. [ 349.349521][T12346] team0: Port device team_slave_0 added [ 349.368911][T12346] team0: Port device team_slave_1 added [ 349.526176][T12346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.586450][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.697713][T12346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.745441][T12433] netlink: 'syz.0.2182': attribute type 39 has an invalid length. [ 349.771517][T12346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.803622][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.849086][T12443] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2181'. [ 349.945425][T12346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.003652][T12435] netlink: 'syz.2.2181': attribute type 21 has an invalid length. [ 350.033903][T12435] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 350.109927][T12435] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2181'. [ 350.214421][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 350.401334][T12346] device hsr_slave_0 entered promiscuous mode [ 350.443292][T12346] device hsr_slave_1 entered promiscuous mode [ 350.484018][T12346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.504490][T12346] Cannot create hsr debugfs directory [ 350.538195][T12469] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2190'. [ 350.587775][T12466] netlink: 'syz.2.2192': attribute type 39 has an invalid length. [ 351.021899][T12485] netlink: 'syz.0.2198': attribute type 39 has an invalid length. [ 351.141737][ T4212] Bluetooth: hci1: command 0x041b tx timeout [ 351.997220][T12517] netlink: 'syz.0.2207': attribute type 39 has an invalid length. [ 352.306625][T12346] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.366414][T12346] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.428407][T12346] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.496767][T12539] netlink: 'syz.2.2214': attribute type 39 has an invalid length. [ 352.564395][T12346] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.953502][T12346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.035097][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.064431][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.132895][T12346] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.199398][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.218647][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.227467][ T2303] Bluetooth: hci1: command 0x040f tx timeout [ 353.259218][T12565] FAULT_INJECTION: forcing a failure. [ 353.259218][T12565] name failslab, interval 1, probability 0, space 0, times 0 [ 353.287355][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.294651][ T5821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.295346][T12565] CPU: 1 PID: 12565 Comm: syz.4.2221 Not tainted 5.15.179-syzkaller #0 [ 353.310109][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.320184][T12565] Call Trace: [ 353.323477][T12565] [ 353.326416][T12565] dump_stack_lvl+0x1e3/0x2d0 [ 353.331112][T12565] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 353.336778][T12565] ? panic+0x860/0x860 [ 353.340872][T12565] ? lock_acquire+0x252/0x4f0 [ 353.345568][T12565] should_fail+0x38a/0x4c0 [ 353.350002][T12565] should_failslab+0x5/0x20 [ 353.354521][T12565] slab_pre_alloc_hook+0x53/0xc0 [ 353.359484][T12565] ? __alloc_file+0x26/0x240 [ 353.364106][T12565] kmem_cache_alloc+0x3f/0x280 [ 353.364641][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.368968][T12565] ? alloc_file_pseudo+0x248/0x2f0 [ 353.381470][T12565] __alloc_file+0x26/0x240 [ 353.385919][T12565] alloc_empty_file+0x92/0x180 [ 353.390708][T12565] alloc_file+0x5b/0x4f0 [ 353.394972][T12565] alloc_file_pseudo+0x259/0x2f0 [ 353.399918][T12565] ? do_raw_spin_unlock+0x137/0x8b0 [ 353.405131][T12565] ? alloc_empty_file_noaccount+0x80/0x80 [ 353.410855][T12565] ? alloc_fd+0x598/0x630 [ 353.415193][T12565] __anon_inode_getfd+0x2aa/0x430 [ 353.420225][T12565] ? anon_inode_getfd+0x40/0x40 [ 353.425082][T12565] ? security_bpf_map+0x75/0x90 [ 353.429939][T12565] map_create+0x18bb/0x2070 [ 353.434452][T12565] __sys_bpf+0x276/0x670 [ 353.438697][T12565] ? bpf_link_show_fdinfo+0x300/0x300 [ 353.444080][T12565] ? syscall_enter_from_user_mode+0x2e/0x240 [ 353.450076][T12565] ? syscall_enter_from_user_mode+0x2e/0x240 [ 353.456056][T12565] ? lockdep_hardirqs_on+0x94/0x130 [ 353.461259][T12565] __x64_sys_bpf+0x78/0x90 [ 353.465676][T12565] do_syscall_64+0x3b/0xb0 [ 353.470091][T12565] ? clear_bhb_loop+0x15/0x70 [ 353.474770][T12565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.480660][T12565] RIP: 0033:0x7f12600e5169 [ 353.485075][T12565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.504680][T12565] RSP: 002b:00007f125df4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.513100][T12565] RAX: ffffffffffffffda RBX: 00007f12602fdfa0 RCX: 00007f12600e5169 [ 353.521068][T12565] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 353.529035][T12565] RBP: 00007f125df4e090 R08: 0000000000000000 R09: 0000000000000000 [ 353.537003][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.544971][T12565] R13: 0000000000000000 R14: 00007f12602fdfa0 R15: 00007ffd92780a08 [ 353.552955][T12565] [ 353.586642][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.605594][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.627882][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.635044][ T5821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.663832][T12564] netlink: 'syz.3.2222': attribute type 39 has an invalid length. [ 353.694865][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.739832][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.772034][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.829375][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.865377][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.939913][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.959580][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.992808][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.040447][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.063422][T12346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.147308][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.197152][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.267824][T12592] netlink: 'syz.4.2231': attribute type 39 has an invalid length. [ 354.410746][T12602] FAULT_INJECTION: forcing a failure. [ 354.410746][T12602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.465640][T12602] CPU: 1 PID: 12602 Comm: syz.0.2233 Not tainted 5.15.179-syzkaller #0 [ 354.473935][T12602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 354.484013][T12602] Call Trace: [ 354.487309][T12602] [ 354.490250][T12602] dump_stack_lvl+0x1e3/0x2d0 [ 354.494956][T12602] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 354.500612][T12602] ? panic+0x860/0x860 [ 354.504713][T12602] should_fail+0x38a/0x4c0 [ 354.509152][T12602] _copy_from_user+0x2d/0x170 [ 354.513848][T12602] sctp_setsockopt+0xca/0xf90 [ 354.518556][T12602] ? sock_common_recvmsg+0x240/0x240 [ 354.523861][T12602] __sys_setsockopt+0x57e/0x990 [ 354.528727][T12602] ? __ia32_sys_recv+0xb0/0xb0 [ 354.533498][T12602] ? syscall_enter_from_user_mode+0x2e/0x240 [ 354.539476][T12602] __x64_sys_setsockopt+0xb1/0xc0 [ 354.544503][T12602] do_syscall_64+0x3b/0xb0 [ 354.548921][T12602] ? clear_bhb_loop+0x15/0x70 [ 354.553600][T12602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 354.559492][T12602] RIP: 0033:0x7ff9964b9169 [ 354.563909][T12602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.583516][T12602] RSP: 002b:00007ff994322038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 354.591933][T12602] RAX: ffffffffffffffda RBX: 00007ff9966d1fa0 RCX: 00007ff9964b9169 [ 354.599899][T12602] RDX: 000000000000001e RSI: 0000000000000084 RDI: 0000000000000003 [ 354.607865][T12602] RBP: 00007ff994322090 R08: 0000000000000004 R09: 0000000000000000 [ 354.615838][T12602] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.623813][T12602] R13: 0000000000000000 R14: 00007ff9966d1fa0 R15: 00007ffda7c36aa8 [ 354.631791][T12602] [ 354.801675][T12616] netlink: 'syz.0.2237': attribute type 21 has an invalid length. [ 354.840098][T12616] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2237'. [ 354.898436][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.908080][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.923310][T12619] netlink: 'syz.3.2238': attribute type 39 has an invalid length. [ 354.951257][T12346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.979040][T12621] netlink: 'syz.2.2239': attribute type 39 has an invalid length. [ 355.061754][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.137173][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.208595][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.254533][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.308776][ T2303] Bluetooth: hci1: command 0x0419 tx timeout [ 355.325941][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.335196][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.352770][T12346] device veth0_vlan entered promiscuous mode [ 355.418634][T12346] device veth1_vlan entered promiscuous mode [ 355.517302][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.553728][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 355.619063][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.674323][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.703142][T12346] device veth0_macvtap entered promiscuous mode [ 355.736389][T12650] netlink: 'syz.0.2246': attribute type 39 has an invalid length. [ 355.774293][T12346] device veth1_macvtap entered promiscuous mode [ 355.860997][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.924766][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.970376][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.007147][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.103762][T12346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.130933][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.149870][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 356.183614][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.217082][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.546660][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.598789][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.654571][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.705271][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.772536][T12346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.825336][T12666] netlink: 'syz.2.2252': attribute type 39 has an invalid length. [ 356.868567][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.891654][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.928605][T12346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.000099][T12346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.008845][T12346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.076855][T12346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.117904][T12685] netlink: 'syz.3.2255': attribute type 10 has an invalid length. [ 357.274998][T12685] netlink: 'syz.3.2255': attribute type 10 has an invalid length. [ 357.298673][T12685] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 357.560350][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.568566][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.744329][T12699] device syzkaller0 entered promiscuous mode [ 357.761154][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 357.781821][T12710] netlink: 'syz.0.2261': attribute type 39 has an invalid length. [ 357.805793][ T4496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.848409][ T4496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.950759][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 358.022411][T12719] netlink: 'syz.4.2263': attribute type 39 has an invalid length. [ 358.129462][T12728] FAULT_INJECTION: forcing a failure. [ 358.129462][T12728] name failslab, interval 1, probability 0, space 0, times 0 [ 358.218313][T12728] CPU: 0 PID: 12728 Comm: syz.0.2264 Not tainted 5.15.179-syzkaller #0 [ 358.226608][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 358.236683][T12728] Call Trace: [ 358.239969][T12728] [ 358.242906][T12728] dump_stack_lvl+0x1e3/0x2d0 [ 358.247593][T12728] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 358.253238][T12728] ? panic+0x860/0x860 [ 358.257315][T12728] ? __might_sleep+0xc0/0xc0 [ 358.261908][T12728] ? bpf_trace_run2+0x222/0x340 [ 358.266786][T12728] should_fail+0x38a/0x4c0 [ 358.271210][T12728] should_failslab+0x5/0x20 [ 358.275716][T12728] slab_pre_alloc_hook+0x53/0xc0 [ 358.280656][T12728] __kmalloc+0x6e/0x300 [ 358.284810][T12728] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 358.290538][T12728] tomoyo_realpath_from_path+0xd8/0x5e0 [ 358.296097][T12728] tomoyo_path_number_perm+0x225/0x810 [ 358.301563][T12728] ? perf_trace_preemptirq_template+0x31d/0x430 [ 358.307806][T12728] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 358.313275][T12728] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 358.319288][T12728] ? d_alloc_parallel+0x125d/0x1390 [ 358.324499][T12728] tomoyo_path_mknod+0x172/0x1b0 [ 358.329443][T12728] ? tomoyo_path_symlink+0x110/0x110 [ 358.334733][T12728] ? d_hash_and_lookup+0x1b0/0x1b0 [ 358.339845][T12728] security_path_mknod+0xf1/0x150 [ 358.344873][T12728] path_openat+0xc78/0x2f20 [ 358.349405][T12728] ? do_filp_open+0x460/0x460 [ 358.354105][T12728] do_filp_open+0x21c/0x460 [ 358.358622][T12728] ? vfs_tmpfile+0x2e0/0x2e0 [ 358.363258][T12728] ? _raw_spin_unlock+0x24/0x40 [ 358.368117][T12728] ? alloc_fd+0x598/0x630 [ 358.372462][T12728] do_sys_openat2+0x13b/0x4f0 [ 358.377145][T12728] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 358.382872][T12728] ? do_sys_open+0x220/0x220 [ 358.387468][T12728] ? rcu_nmi_exit+0x70/0xf0 [ 358.391981][T12728] __x64_sys_openat+0x243/0x290 [ 358.396835][T12728] ? __ia32_sys_open+0x270/0x270 [ 358.401773][T12728] ? syscall_enter_from_user_mode+0x2e/0x240 [ 358.407763][T12728] ? lockdep_hardirqs_on+0x94/0x130 [ 358.412982][T12728] ? syscall_enter_from_user_mode+0x2e/0x240 [ 358.418986][T12728] do_syscall_64+0x3b/0xb0 [ 358.423419][T12728] ? clear_bhb_loop+0x15/0x70 [ 358.428099][T12728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.434011][T12728] RIP: 0033:0x7ff9964b9169 [ 358.438434][T12728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.458040][T12728] RSP: 002b:00007ff994322038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 358.466455][T12728] RAX: ffffffffffffffda RBX: 00007ff9966d1fa0 RCX: 00007ff9964b9169 [ 358.474423][T12728] RDX: 00000000000026e1 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 358.482400][T12728] RBP: 00007ff994322090 R08: 0000000000000000 R09: 0000000000000000 [ 358.490379][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.498355][T12728] R13: 0000000000000000 R14: 00007ff9966d1fa0 R15: 00007ffda7c36aa8 [ 358.506354][T12728] [ 358.515132][T12728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 358.748338][T12732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2265'. [ 359.024800][ T4496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.256484][ T4496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.345344][ T4496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.451496][ T4496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.307840][ T4496] device hsr_slave_0 left promiscuous mode [ 360.318420][ T4496] device hsr_slave_1 left promiscuous mode [ 360.325162][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.337249][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.345620][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.356798][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.364958][ T4496] device bridge_slave_1 left promiscuous mode [ 360.377029][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.386371][ T4496] device bridge_slave_0 left promiscuous mode [ 360.396606][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.411134][ T4496] device veth1_macvtap left promiscuous mode [ 360.417186][ T4496] device veth0_macvtap left promiscuous mode [ 360.429094][ T4496] device veth1_vlan left promiscuous mode [ 360.436451][ T4496] device veth0_vlan left promiscuous mode [ 360.673603][ T4496] team0 (unregistering): Port device team_slave_1 removed [ 360.689792][ T4496] team0 (unregistering): Port device team_slave_0 removed [ 360.704498][ T4496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.718633][ T4496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.792840][ T4496] bond0 (unregistering): Released all slaves [ 361.305438][T12854] validate_nla: 2 callbacks suppressed [ 361.305479][T12854] netlink: 'syz.4.2274': attribute type 39 has an invalid length. [ 361.453858][T12849] netlink: 'syz.3.2273': attribute type 27 has an invalid length. [ 361.500324][T12849] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2273'. [ 361.601016][T12860] netlink: 'syz.2.2276': attribute type 39 has an invalid length. [ 362.410886][T12901] netlink: 'syz.0.2285': attribute type 39 has an invalid length. [ 362.427378][T12871] chnl_net:caif_netlink_parms(): no params data found [ 362.692975][T12871] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.739344][T12871] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.760847][T12871] device bridge_slave_0 entered promiscuous mode [ 362.791953][T12871] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.880043][T12871] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.888320][T12871] device bridge_slave_1 entered promiscuous mode [ 363.062868][T12930] netlink: 'syz.4.2291': attribute type 39 has an invalid length. [ 363.087733][T12871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.131728][T12871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.306665][T12871] team0: Port device team_slave_0 added [ 363.356237][T12871] team0: Port device team_slave_1 added [ 363.463787][T12943] netlink: 'syz.3.2294': attribute type 10 has an invalid length. [ 363.482199][T12946] netlink: 'syz.0.2293': attribute type 39 has an invalid length. [ 363.550247][T12871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.590032][T12871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.670135][T12871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.723083][T12871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.766506][T12871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.860281][ T4211] Bluetooth: hci1: command 0x0409 tx timeout [ 363.877812][T12871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.013231][T12871] device hsr_slave_0 entered promiscuous mode [ 364.036779][T12871] device hsr_slave_1 entered promiscuous mode [ 364.105136][T12871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.154068][T12871] Cannot create hsr debugfs directory [ 364.161558][T12963] netlink: 'syz.0.2300': attribute type 39 has an invalid length. [ 364.331435][T12971] netlink: 'syz.4.2303': attribute type 39 has an invalid length. [ 364.394429][T12971] device veth0_macvtap left promiscuous mode [ 364.587230][T12974] netlink: 'syz.2.2305': attribute type 39 has an invalid length. [ 365.402666][T13015] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2310'. [ 365.838092][T12871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.931151][T12871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.940100][ T4221] Bluetooth: hci1: command 0x041b tx timeout [ 365.992466][T12871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.081740][T12871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.500969][T12871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.509308][T13045] validate_nla: 4 callbacks suppressed [ 366.509349][T13045] netlink: 'syz.4.2318': attribute type 39 has an invalid length. [ 366.560701][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.589392][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.638997][T12871] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.670700][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.701345][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.741671][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.748794][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.793907][T13050] netlink: 'syz.3.2321': attribute type 39 has an invalid length. [ 366.828609][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.852527][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.871164][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.879771][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.886921][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.964920][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 367.007611][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 367.113698][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 367.132671][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 367.154462][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 367.181951][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 367.211710][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.273635][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.316677][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.379733][T12871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.461381][T12871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.570762][T13078] netlink: 'syz.2.2323': attribute type 39 has an invalid length. [ 367.675892][T13078] device veth0_macvtap left promiscuous mode [ 367.860832][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.890163][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.030370][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 368.227240][T13105] netlink: 'syz.4.2328': attribute type 39 has an invalid length. [ 368.266862][T13109] netlink: 'syz.2.2329': attribute type 39 has an invalid length. [ 368.319419][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.380974][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.449830][T12871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.571064][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 368.590851][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.703003][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 368.740438][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 368.972631][T13130] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.2332'. [ 369.407539][T12871] device veth0_vlan entered promiscuous mode [ 369.418670][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.430979][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.472996][T12871] device veth1_vlan entered promiscuous mode [ 369.948849][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 369.990977][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.060990][T12871] device veth0_macvtap entered promiscuous mode [ 370.079455][T13151] netlink: 'syz.2.2337': attribute type 39 has an invalid length. [ 370.100202][ T4221] Bluetooth: hci1: command 0x0419 tx timeout [ 370.126440][T12871] device veth1_macvtap entered promiscuous mode [ 370.236592][T12871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.315602][T12871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.374641][T12871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.429552][T12871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.462989][T12871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.482326][T13168] netlink: 'syz.0.2341': attribute type 3 has an invalid length. [ 370.521047][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.541056][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.570851][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.579385][T13168] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2341'. [ 370.642040][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.704894][T12871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.759117][T12871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.829999][T12871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.897952][T12871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.969857][T12871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.990282][T13176] netlink: 'syz.2.2343': attribute type 39 has an invalid length. [ 371.103292][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.124267][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.203520][T12871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.242903][T12871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.260327][T12871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.269304][T12871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.295985][T13190] netlink: 'syz.3.2344': attribute type 39 has an invalid length. [ 371.456159][T13192] netlink: 'syz.2.2346': attribute type 10 has an invalid length. [ 371.470258][T13192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2346'. [ 371.486701][T13192] device team0 entered promiscuous mode [ 371.502221][T13192] device team_slave_0 entered promiscuous mode [ 371.508901][T13192] device team_slave_1 entered promiscuous mode [ 371.541143][T13192] device wlan1 entered promiscuous mode [ 371.552540][T13192] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.573385][T13192] bridge0: port 3(team0) entered blocking state [ 371.585875][T13192] bridge0: port 3(team0) entered disabled state [ 371.621061][T13192] bridge0: port 3(team0) entered blocking state [ 371.628026][T13192] bridge0: port 3(team0) entered forwarding state [ 371.678884][T13192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.745291][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.764538][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.882672][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 371.901231][T13207] netlink: 'syz.2.2351': attribute type 39 has an invalid length. [ 371.928863][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.944517][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.045523][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 372.517294][ T5814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.639520][T13222] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2366'. [ 372.734554][ T5814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.775811][T13222] netlink: 'syz.0.2366': attribute type 1 has an invalid length. [ 372.819288][ T5814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.988094][ T5814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.715600][ T5814] device hsr_slave_0 left promiscuous mode [ 373.722854][ T5814] device hsr_slave_1 left promiscuous mode [ 373.729889][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.739331][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.748253][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.756381][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.768320][ T5814] device bridge_slave_1 left promiscuous mode [ 373.774958][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.784477][ T5814] device bridge_slave_0 left promiscuous mode [ 373.791800][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.808092][ T5814] device veth1_macvtap left promiscuous mode [ 373.814493][ T5814] device veth0_macvtap left promiscuous mode [ 373.820787][ T5814] device veth1_vlan left promiscuous mode [ 373.827691][ T5814] device veth0_vlan left promiscuous mode [ 374.046632][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 374.063078][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 374.077249][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.095076][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.167099][ T5814] bond0 (unregistering): Released all slaves [ 374.924514][T13301] netlink: 'syz.4.2360': attribute type 39 has an invalid length. [ 375.291634][T13313] netlink: 'syz.4.2362': attribute type 39 has an invalid length. [ 375.686933][T13320] netlink: 'syz.0.2364': attribute type 10 has an invalid length. [ 375.763641][T13320] netlink: 'syz.0.2364': attribute type 10 has an invalid length. [ 376.156654][T13335] netlink: 'syz.4.2368': attribute type 10 has an invalid length. [ 376.190559][T13342] netlink: 'syz.4.2368': attribute type 10 has an invalid length. [ 376.271693][T13343] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2370'. [ 376.679082][T13319] chnl_net:caif_netlink_parms(): no params data found [ 376.975859][T13378] netlink: 'syz.0.2374': attribute type 39 has an invalid length. [ 377.004625][T13319] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.032274][T13319] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.064961][T13319] device bridge_slave_0 entered promiscuous mode [ 377.134958][T13384] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.146928][T13384] device bridge0 left promiscuous mode [ 377.191140][T13387] netlink: 'syz.4.2377': attribute type 39 has an invalid length. [ 377.219801][T13319] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.231853][T13319] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.249645][T13319] device bridge_slave_1 entered promiscuous mode [ 377.404343][T13319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.473591][T13319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.620235][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 377.667485][T13319] team0: Port device team_slave_0 added [ 377.718294][T13319] team0: Port device team_slave_1 added [ 377.912898][T13319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.927914][T13319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.050024][T13319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.083287][T13319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.111630][T13319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.250139][T13319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.338732][T13426] netlink: 'syz.3.2388': attribute type 39 has an invalid length. [ 378.476541][T13427] netlink: 'syz.2.2389': attribute type 39 has an invalid length. [ 378.578458][T13319] device hsr_slave_0 entered promiscuous mode [ 378.606941][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.613444][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.627002][T13319] device hsr_slave_1 entered promiscuous mode [ 378.661045][T13319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.718736][T13319] Cannot create hsr debugfs directory [ 378.746761][T13439] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.810203][T13438] netlink: 'syz.3.2391': attribute type 39 has an invalid length. [ 378.956810][T13450] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2394'. [ 378.967574][T13446] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2393'. [ 379.177788][T13459] netlink: 'syz.2.2398': attribute type 10 has an invalid length. [ 379.235282][T13459] netlink: 'syz.2.2398': attribute type 10 has an invalid length. [ 379.484773][T13475] netlink: 'syz.2.2401': attribute type 39 has an invalid length. [ 379.700283][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 380.075136][T13494] netlink: 'syz.4.2406': attribute type 39 has an invalid length. [ 380.268561][T13319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 380.327603][T13319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 380.369183][T13319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 380.424914][T13319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 380.702413][T13519] netlink: 'syz.3.2412': attribute type 10 has an invalid length. [ 380.791681][T13319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.824444][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.895493][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.947486][T13319] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.044379][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 381.081421][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 381.136001][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.143276][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.184878][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.221641][T13543] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2417'. [ 381.246631][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 381.293532][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.317110][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.324409][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.364784][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 381.392437][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 381.484005][T13319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.514557][T13319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.596006][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 381.632627][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 381.681089][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 381.722502][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.761264][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 381.784071][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.792374][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 381.813499][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 381.842612][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.877425][T13568] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.982600][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 382.008411][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 382.200461][T13582] validate_nla: 4 callbacks suppressed [ 382.200502][T13582] netlink: 'syz.3.2426': attribute type 39 has an invalid length. [ 382.353886][T13586] device syzkaller0 entered promiscuous mode [ 382.381895][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.440224][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.462232][T13319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.738018][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.771744][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.070804][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 383.098842][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.157567][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.215758][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.254653][T13319] device veth0_vlan entered promiscuous mode [ 383.314298][T13618] netlink: 'syz.4.2433': attribute type 39 has an invalid length. [ 383.362095][T13319] device veth1_vlan entered promiscuous mode [ 383.678093][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.710555][ T5824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.747119][T13319] device veth0_macvtap entered promiscuous mode [ 383.786697][T13319] device veth1_macvtap entered promiscuous mode [ 383.870329][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 383.936090][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.994439][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.046285][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.123784][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.155225][T13319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.243993][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.285525][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.316036][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.347100][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.369145][T13319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.389228][T13647] netlink: 'syz.4.2440': attribute type 39 has an invalid length. [ 384.408153][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 384.428879][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 384.452245][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 384.491809][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 384.516769][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 384.536024][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 384.568558][T13319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.607374][T13319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.675518][T13319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.720734][T13319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.031593][T13676] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2446'. [ 385.429791][T13685] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.2449'. [ 385.583915][T13696] netlink: 'syz.3.2451': attribute type 2 has an invalid length. [ 385.610160][T13696] netlink: 'syz.3.2451': attribute type 1 has an invalid length. [ 385.625035][T13696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2451'. [ 385.714185][T13702] netlink: 'syz.0.2452': attribute type 39 has an invalid length. [ 385.737295][ T5804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.755547][ T5804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.831312][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 385.848614][T13696] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 385.909371][T13696] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 385.958859][ T5804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.978047][ T5804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.057133][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 386.666186][ T4223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.712357][T13741] bridge0: port 3(team0) entered disabled state [ 386.719405][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.727134][T13741] bridge0: port 1(bridge_slave_0) entered disabled state SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=1 req=218 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 387.180400][ T4223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.334108][ T4223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.465870][ T4223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.677625][ T4223] device hsr_slave_0 left promiscuous mode [ 388.684287][ T4223] device hsr_slave_1 left promiscuous mode [ 388.692435][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.699869][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.717041][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.726077][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.737569][ T4223] device bridge_slave_1 left promiscuous mode [ 388.745590][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.757089][ T4223] device bridge_slave_0 left promiscuous mode [ 388.765004][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.783876][ T4223] device veth1_macvtap left promiscuous mode [ 388.789995][ T4223] device veth0_macvtap left promiscuous mode [ 388.800258][ T4223] device veth1_vlan left promiscuous mode [ 388.806083][ T4223] device veth0_vlan left promiscuous mode [ 389.147566][ T4223] team0 (unregistering): Port device team_slave_1 removed [ 389.174218][ T4223] team0 (unregistering): Port device team_slave_0 removed [ 389.189582][ T4223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.209299][ T4223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.316575][ T4223] bond0 (unregistering): Released all slaves [ 391.086456][ T4223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.136309][ T4223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.199557][ T4223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.248144][ T4223] bond0: (slave netdevsim0): Releasing backup interface [ 391.259576][ T4223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.405579][ T4223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.458884][ T4223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.507112][ T4223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.563513][ T4223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.681144][ T4223] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.735822][ T4223] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.777190][ T4223] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.859726][ T4223] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.996809][ T4223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.036467][ T4223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.117972][ T4223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.167171][ T4223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.023709][ T4223] device erspan0 left promiscuous mode [ 393.029261][ T4223] GPL: port 1(erspan0) entered disabled state [ 393.537437][ T4223] team0: Port device wlan1 removed [ 395.335512][ T4223] device wlan1 left promiscuous mode [ 395.348004][ T4223] team0: Port device wlan1 removed