last executing test programs: 17.57306561s ago: executing program 1 (id=7409): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x3540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async) socket$kcm(0x11, 0x7, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x8100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xa1, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r4, 0x0, 0x0, 0x8a, 0x0, &(0x7f0000000880)=""/138, 0xffffffff, 0x0, 0x0, 0x30, &(0x7f0000000940), &(0x7f0000000a00)="4662d0bd9ccc8d587b2fad27fe5f4c557a0c5d99255b6e75c9be12d56e67977b28d9028ac24bce0bf0fc09309ac468ae", 0x2, 0x0, 0x1}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x22, &(0x7f0000000800)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0xc, 0x0, 0x1, 0x2, 0x2, 0x8, 0x8}, @jmp={0x5, 0x0, 0x6, 0x7, 0x6, 0x30, 0xe}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x34, &(0x7f0000000180)=""/52, 0x41100, 0x40, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000940)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x10, 0x0, 0x6e}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[r1, r1], &(0x7f0000000b40)=[{0x3, 0x1, 0xc, 0x7}, {0x5, 0x2, 0xf}, {0x5, 0x4, 0xe, 0x7}], 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="0d00ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x7fff}, 0x14100, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="81fefff4c8"], 0x0}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r7, @ANYRES8=r9], 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 17.291208704s ago: executing program 1 (id=7412): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="3000000019007f089ea6690ca4dc04f11c672274119dd27d616f7efd9a0a2ff3b91a90dfc950244cfea8d0898789b61c", 0x30}], 0x1}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 16.849130036s ago: executing program 1 (id=7413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) (async) close(r0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104e000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r2 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) write$cgroup_type(r3, &(0x7f0000000180), 0x13bb711e) (async, rerun: 32) setsockopt$sock_attach_bpf(r2, 0x84, 0x7d, &(0x7f0000000000), 0x10) (async, rerun: 32) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r4}, 0xc) sendmsg$sock(r2, &(0x7f0000000280)={&(0x7f0000000080)=@llc={0x1a, 0x323, 0x8, 0x4, 0x6, 0x4, @multicast}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="18db4042fa7a60428cfcc9d588e06ca42b1c36b60e352e4c7e10838c509ba762ded5cb0feb278ad125483de9d181e7a2dc1f7ac3746cb9aade32f4c9804d30bda6232fd7ed367f177b6cadcea86844e9a2f66b7e4357d81ac838eb7cea90b30b781c8b4e02f797b94ab980a8dec0df30abe7530dd4f42aecb3f16c68f37a63d8ab38ac99a5fe9072173d9b8f0b9d9340d0db5b4bcaefd73f2c6de06588cfa1ab9d28a648e6293fdb0ab332995609e1216d13323f054e133472e21f30b76ac987ae81a09865c5483397b6cc2e8f185a49adbf6611e2e50f622d67e6a69bc842ad01f474eadc3b", 0xe6}], 0x1, &(0x7f0000000240)=[@mark={{0x14}}], 0x18}, 0x200008f0) 11.620672874s ago: executing program 1 (id=7419): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x72cd2ffa4b754971) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x0, 0x77, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x0, 0x0, &(0x7f0000000640), 0x8, 0xae, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1a0020335dd28a977ae20000", @ANYRES32=r4, @ANYRES64=0x0], 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x5, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x10c002, 0x3, 0x10, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffbff, r6, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063110800100000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r7 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r7, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r6}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000007000000090000000200000000200000", @ANYRES32=r2, @ANYBLOB="01000080000000000000000000000000000000004d6ca334f53e80e41e9194330758a58f053c01bd940e77e56b686a02c48337e5260d4f75c5", @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="01000000030000000100"/28], 0x50) 11.203984765s ago: executing program 1 (id=7423): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x2, 0x10, 0xcc0, 0x58000, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x8, @value=r1, @void, @value=r3}, 0x50) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, r4, 0x0, 0x2, 0x4}, 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200004, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x12bc}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 10.820944024s ago: executing program 1 (id=7426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x82, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.912987879s ago: executing program 0 (id=7431): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f96b24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x51}, 0x1}, 0xffffffffffffff28, &(0x7f00000001c0)=[{&(0x7f0000000140)="d18e07e50170dfa6f9f5fab6a2caa4e99b9f8c1aae6d9ee86eea1a8bd1", 0x1d}, {&(0x7f0000000180)="0240e666fb44213024b4b5a5c2ecac9934b6c8194b73e0e0c8143ff20486d044cf1ec96caf298b7489c06761ab8e1ed59d490e41036f2a908af7c140c1b3b5e1", 0x40}], 0x2, &(0x7f00000003c0)=[{0x90, 0x10e, 0x81, "935563734f74741215339836008a51be38fbf6c89e710f9465deb2db094b44cdb34c00fbf6fe2651b4e8d189fadc15131ce627cb1ab20d5b9026eab68b592fe2c4f40adbfdc6840f2850d5827549cfcada71489f8c3c6f629895820aa37ae0b93d865d176d46b0f8317f01d22fb800f6f72df989ee159ec7441f91204c21f117"}, {0x88, 0x10f, 0x27, "e14b01cff8a7f754b979fdbf9d5bf9770d38bb9abd805fab907cae2d26421b5642e5579fdc3c71791a7bfc5b15f5f449ba7d523225cd23fc8ae308f5e30d33140cc148f5f1f956730c3207664a1d8e4dd2a3a7921b7ea63b5fe675542cec7e897780da67f08022e0f6575a5027ffc3a94b0f62ac0496"}, {0x40, 0x0, 0xfffffff8, "2092a43df0d2494e3d39563e06cf122523a037d9eb70c4f5a7a4d5dbface030136989891d6f3daafdd9914"}], 0x158}, 0x20040081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 7.081383959s ago: executing program 0 (id=7434): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xfffffffffffffffe}, {0x0}], 0x9}, 0x10000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfdef) syz_open_procfs$namespace(0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.952266345s ago: executing program 4 (id=7438): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0x2, 0x8, 0x4, 0x0, 0x52, 0x800, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x55, 0x616, 0x9, 0x4, 0x0, 0xfb49b05, 0xe, 0x0, 0x8, 0x0, 0x6}, r2, 0xa, r0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x2, 0x40, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r4}, &(0x7f0000000980), &(0x7f00000002c0)=r3}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000ff00000000000006d00000200000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 6.44972002s ago: executing program 4 (id=7441): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82c10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x420040, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000000c0)=r3) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x0) 6.241236531s ago: executing program 0 (id=7442): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x2, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000980)={r2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) r5 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x69, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x69, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$inet(r5, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4c804) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000000)={'batadv_slave_1\x00', @random="440000001000"}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x139}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xb7, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x229, 0x0, 0x0, 0x0, 0x1800000}, 0x0, 0x8, r1, 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xb7, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x229, 0x0, 0x0, 0x0, 0x1800000}, 0x0, 0x8, r1, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 6.214514262s ago: executing program 2 (id=7444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0x0, &(0x7f0000000880)="3d25ab324119c4cbd0017085080092624cf43f7b", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)="27030200590200000000002f1eafbcf706e105000000894f000f1104ee162bd4b8bf4a82f6184b8a34f90186cee84400000008000000001900000000", 0x3c}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653c1d6e4b0f5d5299879523255ccecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000", 0x87}, {&(0x7f0000000280)="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", 0xfea1}, {&(0x7f0000000040)="6fe4dd9eeba3271dc700b58144028420f6590138", 0x14}], 0x4}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) 6.097499998s ago: executing program 4 (id=7445): perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40, 0x8, 0x0, 0x1, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 5.866084929s ago: executing program 0 (id=7446): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f00)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xe1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x8000cc19, 0x3, 0x1, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015950900142603600e1208000f4f1b000401a8001200200005400400027c035c0461c1d67f6f94007134cf6efb8000a045a29045a20189b316277ce06bbace8017cbec4c2ee5a7def4090000001fb791643a5ee4ce1b147c9f8775000500000a0000004edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f2106e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4386b7401c13a5370e9703920723f9fea39f7418", 0xd8}], 0x1}, 0x2000) close(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000bc0), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/25, 0x19}, {&(0x7f0000000c80)=""/32, 0x20}, {&(0x7f0000000cc0)=""/34, 0x22}, {&(0x7f0000000d00)=""/116, 0x74}, {&(0x7f0000000d80)=""/110, 0x6e}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x6, &(0x7f0000000e80)=[@cred={{0x1c}}], 0x20}, 0x2001) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00"/12, @ANYRES32=r4, @ANYBLOB="b0b82287816807eda58fa434e7ed44e10b45e19cd543ab9cbb7e8741b956b653eee1592cc029336e335be104915e86772ca9f4404d8255da40a787f5b9489b40ceeef87f8f836fa42f6e251e0ae3dd265b9e2608a7dfba8a5de16151bd857eb46aa7c3de8f8afe7ffd470a955ed1e9cb136588ddf0ec3969d7d4cdb979249f204676023f166adab648a93c6868b8446489f2198228eedfa86a4680dd7f2dd949b66f0a9c0319b443cd13cebd2ab58cd88e70250b5c352e536023982d7df1b510b07cfdac5895d65d06cb449277a4495b16", @ANYRES64=r7], 0x20) close(r5) gettid() r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x5, 0x0, 0x1, 0x4c}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xff, 0x0, 0x8, 0x7, 0x0, 0x100002, 0x20095, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x7fffffff, 0x7ff, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0xffffffe1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 5.821828061s ago: executing program 4 (id=7447): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x82, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.496091468s ago: executing program 0 (id=7448): socketpair(0x10, 0x80000, 0x8, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100108}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x3680, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x22, 0x0, &(0x7f0000000300)="ba353a7bbcaeb1f6fe5a6c5b738111ab90a7107bc77c5296040d31558e3945e3032d"}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYRES8=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x2}, 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="050000120000000071115e00000000008510000002000000854000000000000095000000000000009500a50500000000141673c2b573261181c48d10d31b7e10df34700931dfc7d5047687f4d85d6da89108ab716e47a263d917ad4fb3376cea25692eacb4059e1256c49ab54a93160759d2a993ed645d3e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0xf}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x17, &(0x7f0000000200)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ba0000000000000005000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000430000009500000000000000d461bb13a0adc04d117bbdde372918174c26ebe185cd05000000000000004e4de6e28150a668e11d624259168841e575ea5b95bb409f4c1d8dd62c64958bd9396a73c6ef4abe3231c6b6e270fd91e30737f73115467ed40dac083da51d9c18ec115b02ae8290810fe352248082db6965c929025e737d1d1bb529f5e23da5a49755c2652f384dcc4a88d68afc0f457cdf9921934a7ea037519e86"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.495693407s ago: executing program 2 (id=7449): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trwr'], 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="14000000210081043881c8050000000000030000", 0x14}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141644029f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 5.206920392s ago: executing program 3 (id=7450): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 5.077356568s ago: executing program 2 (id=7451): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8850) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) socket$kcm(0x29, 0x2, 0x0) close(r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.697543317s ago: executing program 3 (id=7452): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x37, 0x1, 0xffffffff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0]}, 0x40) 4.618522161s ago: executing program 4 (id=7453): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x18, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000800000000020"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000013006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000700)="8b68b11abffd18aed1235c66a601cab19939c8b1dfd2c72ffb783a1a3446d1cd07897515c61e48cc80bdd47b95aedcc61defc982971eb0b0b83990ee82e353b2b0f9b97ea4e9d1fdab809f8d6f83079659477f65a76b83e89410d87aa09a4e9169c33ccac6a2cbea3f42e92f89d8180513b897dd8b54e023bc5671e49697ebea08dc7d4b7ff953423edc60f8e0990c8b528e9e15f073a6b08e98c413c479d1e24db0b6ec51d6a5a7047cee2f9d787cc2d851d30999e6dc18f69a29b3dbf3d4cee88e2cb8571fd4f5eb491d8862dc820a0c326a553e818fbc5f15cda43e", 0xdd}, {&(0x7f0000000800)="069631b27104b63c125eb32cad9d807e783c4787ac42706cd9c196ce8674c097b914ebd61631392cea8937aeba43ebeb445fa8231457e649b2a071c7e10846544e6d39c0cf4051b42d7c38e6d6d596a6be043e0c9890c42c98915cfb2037adfa370196de9fe2", 0x66}, {&(0x7f0000000880)="8ee99ac76821a0abe93345ec1cd0683bc20836e5a497bfd20eda493d3d30dc1dec4b3bff7a07853d9839535ee422405fa36ea2a508efec09f9d2ec1930d5d20dfe384761466093b56a7b91ddfa5858163a", 0x51}, {&(0x7f0000000900)="995cc4b00daedc348eacdfe95535b4fffcc58824f0a9caeeb370ea800c00c98bb276a7a883f2ec18c57b666c29702520316640a37451ba570efb99254d5f00b09c69d499e654b9d645ef67152dc361fe00beb414d090ec3234d933551bf61fd3e7a5ebc71eb8619c813b948818e28acfef4f2fbeb2b6eb1015bfca06afb5d8f6648cfed04a27fbca70f226c98d27c9900c8ef879709fe0e3950cb8f0aa11e3f85b95353b0ac68ebb1bcdfb757a4d100f41999e99f44e966b871cdc1cc056d14c", 0xc0}], 0x4}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r7, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'netdevsim0\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113f00000000008510000002000000850000000500ff0095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 4.597591662s ago: executing program 2 (id=7454): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x2d0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200, 0x0, 0x0, 0x3, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000011000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000)={0x0, 0xb0}, 0x143}, 0x48) close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.579033543s ago: executing program 0 (id=7455): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008308d1711c3a2361df0ad527427cc8df0e502af936a8fa6b1468e0e287f85fececac72fa8b740c344ce467f5a2715c1948414916d2b4f10d81ffd0931ce00e60c1166754816fdef607f350fa54c251567e474fb0ab88e08eb22036e8462cc87f28ce3f468feb0d8ff57fc68f7c8885732ea5e5c09862345306d53d0028883bc8e37a87"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$kcm(0x10, 0x400000002, 0x0) recvmsg$unix(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x40}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000b009500000000000000707e45e094830eef7d491bb69e984e7928d25ecc994515eaff4d3e2800f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.4469983s ago: executing program 3 (id=7456): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x38, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xb00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) 4.23458798s ago: executing program 3 (id=7457): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="4000000000000000000000060700000001441cca1164010102000003ef7f00000100009f029344a5ee0a01010200000000ac141427ffffffff"], 0x40}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="4000000000000000000000060700000001441cca1164010102000003ef7f00000100009f029344a5ee0a01010200000000ac141427ffffffff"], 0x40}, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r1 = socket$kcm(0x2, 0x4, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0085001000006911000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) 3.541013384s ago: executing program 4 (id=7458): socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, 0x0, 0xfca6) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x9}, 0x10c002, 0xac5d}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x1000, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xcd, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x8, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4001000}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x90, 0x2, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0xe9a, 0x7baf376b, 0x8, 0x5, 0x0, 0x4}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) 3.519833555s ago: executing program 2 (id=7459): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000005df6e2add7e4235000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000005df6e2add7e4235000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)="d88dba52d5f1c148c2c1611eca3218ebfdd60f5d005ca7bf6c447c6839cca3081d5c8a89b269b35d1791cfa4f140d847467aa0a7f0745de179a25f49f1321518283e59db365632e368b5dd54758af298f272c7d3778ae4aa2af8ab3a514903776a29ee873292a1aaeafe88fb3c1e6a806f59e99ce5", 0x75, 0x4840}, 0x8000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a001600250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630, 0x0, @perf_config_ext={0xfffffffffffff001, 0xfffffffffffffff8}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000300000000000200ff010000850000002f0000000501000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000004000085000000170000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x9, 0x18}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000000000000000003"], 0x0, 0x42}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000000000000000003"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d00)={&(0x7f0000001bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x0, 0x0, 0x0, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c001}, 0x20000040) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(0x3) (async) close(0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021f08020a000000040000a118000200000000e4ffff0d1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.309433986s ago: executing program 3 (id=7460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYRES32=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000080), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000100)}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/134, 0x86}, {&(0x7f00000004c0)=""/151, 0x97}], 0x4, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40000102) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.172406223s ago: executing program 2 (id=7461): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) (async) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xfc, 0x0, 0x0, 0x0, 0xc040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffb}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x461c574afe861d41) r3 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24", 0x12}], 0x1, 0x0, 0x0, 0x74000000}, 0x8010) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24", 0x12}], 0x1, 0x0, 0x0, 0x74000000}, 0x8010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) (async) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700), 0x1, 0x0, 0x89}, 0x24008005) (async) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700), 0x1, 0x0, 0x89}, 0x24008005) sendmsg$inet(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4000) sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) (async) sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x43}}, @ip_tos_u8={{0x14, 0x29, 0x36}}, @ip_pktinfo={{0x9, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x24}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 3 (id=7462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32=0x0, @ANYBLOB="000000000000104ad2f3f2c8298c3b449a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): team0: Port device netdevsim0 added [ 940.947021][T25552] mac80211_hwsim hwsim142 »»»»»»: renamed from wlan0 [ 942.753123][T25587] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.5716'. [ 943.039754][T25597] netlink: 'syz.4.5717': attribute type 27 has an invalid length. [ 943.667340][T25617] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5724'. [ 944.136099][T25623] netlink: 'syz.2.5726': attribute type 21 has an invalid length. [ 944.158915][T25623] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5726'. [ 944.212123][T25623] netlink: 'syz.2.5726': attribute type 4 has an invalid length. [ 944.259459][T25623] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5726'. [ 944.371425][T25632] netlink: 'syz.3.5729': attribute type 11 has an invalid length. [ 944.412768][T25632] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5729'. [ 944.518749][T25631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.932290][T25651] netlink: 'syz.4.5734': attribute type 17 has an invalid length. [ 944.959675][T25651] netlink: 'syz.4.5734': attribute type 41 has an invalid length. [ 944.981170][T25651] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5734'. [ 945.399018][T25667] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5738'. [ 945.614200][T25672] netlink: 'syz.0.5740': attribute type 1 has an invalid length. [ 945.639339][T25672] netlink: 'syz.0.5740': attribute type 4 has an invalid length. [ 945.652591][T25677] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.5741'. [ 945.675399][T25672] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5740'. [ 946.434338][T25699] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5746'. [ 946.533685][T25710] device wlan1 entered promiscuous mode [ 947.139763][T25738] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5756'. [ 948.324994][T25742] netlink: 'syz.4.5757': attribute type 3 has an invalid length. [ 948.357649][T25742] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5757'. [ 948.523487][T25752] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5759'. [ 948.554032][T25752] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5759'. [ 948.588660][T25760] sctp: [Deprecated]: syz.0.5762 (pid 25760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 948.588660][T25760] Use struct sctp_sack_info instead [ 948.620179][T25757] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5759'. [ 949.531044][T25788] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5770'. [ 952.625506][T25884] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.5799'. [ 952.892950][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 952.902142][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 952.910693][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 952.921019][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 952.928632][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 952.936418][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 953.167321][T25893] chnl_net:caif_netlink_parms(): no params data found [ 953.290597][T24695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.359285][T25907] netlink: 'syz.2.5806': attribute type 21 has an invalid length. [ 953.512802][T24695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.699058][T24695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.717216][T25893] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.760769][T25893] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.768688][T25893] device bridge_slave_0 entered promiscuous mode [ 953.878361][T24695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.902857][T25893] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.924106][T25893] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.987632][T25893] device bridge_slave_1 entered promiscuous mode [ 954.161463][T25893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.198047][T25893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.276748][T25933] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5812'. [ 954.350659][T24695] device 0 left promiscuous mode [ 954.388330][T25893] team0: Port device team_slave_0 added [ 954.415279][T25893] team0: Port device team_slave_1 added [ 954.504471][T25893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.539879][T25893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.594089][T25893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.680129][T25945] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.5816'. [ 954.695068][T25893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.706663][T25945] netlink: 'syz.3.5816': attribute type 1 has an invalid length. [ 954.714853][T25893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.749007][T25893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.751122][T25945] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.5816'. [ 954.974617][T25893] device hsr_slave_0 entered promiscuous mode [ 954.981357][T15178] Bluetooth: hci2: command 0x0409 tx timeout [ 954.991913][T25893] device hsr_slave_1 entered promiscuous mode [ 955.001002][T25893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 955.008622][T25893] Cannot create hsr debugfs directory [ 956.029529][T25971] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5821'. [ 956.172637][T25982] netlink: 'syz.2.5822': attribute type 10 has an invalid length. [ 956.774561][T25893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 956.831932][T25893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 956.879749][T25893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 956.939069][T25893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 957.064271][T15178] Bluetooth: hci2: command 0x041b tx timeout [ 957.487849][T25893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.646043][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 957.664176][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 957.721847][T25893] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.785602][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 957.818638][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 957.854438][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.861642][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.926991][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 957.954036][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 957.977625][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 958.001245][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.008437][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.022965][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 958.034455][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 958.093818][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 958.125118][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 958.145866][T26042] FAULT_INJECTION: forcing a failure. [ 958.145866][T26042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.157042][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 958.175576][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 958.183843][T26042] CPU: 1 PID: 26042 Comm: syz.3.5834 Not tainted syzkaller #0 [ 958.191327][T26042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 958.201399][T26042] Call Trace: [ 958.204689][T26042] [ 958.207630][T26042] dump_stack_lvl+0x188/0x24e [ 958.212338][T26042] ? show_regs_print_info+0x12/0x12 [ 958.217651][T26042] ? load_image+0x400/0x400 [ 958.222174][T26042] ? __lock_acquire+0x7d10/0x7d10 [ 958.227231][T26042] should_fail_ex+0x399/0x4d0 [ 958.231928][T26042] _copy_from_user+0x2c/0x170 [ 958.236628][T26042] ___sys_sendmsg+0x1c3/0x360 [ 958.241339][T26042] ? __sys_sendmsg+0x290/0x290 [ 958.246140][T26042] ? __lock_acquire+0x7d10/0x7d10 [ 958.251205][T26042] __se_sys_sendmsg+0x1bb/0x2a0 [ 958.256080][T26042] ? __x64_sys_sendmsg+0x80/0x80 [ 958.261047][T26042] ? lockdep_hardirqs_on+0x94/0x140 [ 958.266267][T26042] do_syscall_64+0x4c/0xa0 [ 958.270703][T26042] ? clear_bhb_loop+0x60/0xb0 [ 958.275410][T26042] ? clear_bhb_loop+0x60/0xb0 [ 958.280193][T26042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 958.286113][T26042] RIP: 0033:0x7f0ba539c799 [ 958.290541][T26042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.310168][T26042] RSP: 002b:00007f0ba35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.318762][T26042] RAX: ffffffffffffffda RBX: 00007f0ba5615fa0 RCX: 00007f0ba539c799 [ 958.326754][T26042] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 958.334745][T26042] RBP: 00007f0ba35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 958.343171][T26042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.351334][T26042] R13: 00007f0ba5616038 R14: 00007f0ba5615fa0 R15: 00007ffdd28da298 [ 958.359348][T26042] [ 958.372374][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 958.384729][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 958.394774][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 958.422374][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 958.435269][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 958.489642][T25893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 959.139207][T15178] Bluetooth: hci2: command 0x040f tx timeout [ 959.216242][T24695] team0: Port device wlan1 removed [ 959.410162][T24705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 959.417651][T24705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 959.446200][T26084] netlink: 'syz.1.5844': attribute type 29 has an invalid length. [ 959.453040][T25893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.468291][T26084] netlink: 'syz.1.5844': attribute type 29 has an invalid length. [ 959.502714][T24695] device vlan0 left promiscuous mode [ 959.509704][T24695] À: port 1(vlan0) entered disabled state [ 959.530826][T24695] device hsr_slave_0 left promiscuous mode [ 959.547925][T24695] device hsr_slave_1 left promiscuous mode [ 959.570569][T24695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.583026][T24695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.645501][T24695] device veth0_macvtap left promiscuous mode [ 959.664637][T24695] device veth1_vlan left promiscuous mode [ 959.678904][T24695] device veth0_vlan left promiscuous mode [ 960.131722][T26096] FAULT_INJECTION: forcing a failure. [ 960.131722][T26096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.177228][T26096] CPU: 0 PID: 26096 Comm: syz.4.5847 Not tainted syzkaller #0 [ 960.184749][T26096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 960.194831][T26096] Call Trace: [ 960.198129][T26096] [ 960.201075][T26096] dump_stack_lvl+0x188/0x24e [ 960.205774][T26096] ? show_regs_print_info+0x12/0x12 [ 960.210983][T26096] ? load_image+0x400/0x400 [ 960.215485][T26096] ? __lock_acquire+0x7d10/0x7d10 [ 960.220516][T26096] should_fail_ex+0x399/0x4d0 [ 960.225184][T26096] _copy_from_user+0x2c/0x170 [ 960.229860][T26096] __copy_msghdr+0x3b7/0x580 [ 960.234456][T26096] ___sys_sendmsg+0x210/0x360 [ 960.239322][T26096] ? __sys_sendmsg+0x290/0x290 [ 960.244097][T26096] ? __lock_acquire+0x7d10/0x7d10 [ 960.249130][T26096] __se_sys_sendmsg+0x1bb/0x2a0 [ 960.253977][T26096] ? __x64_sys_sendmsg+0x80/0x80 [ 960.258918][T26096] ? lockdep_hardirqs_on+0x94/0x140 [ 960.264108][T26096] do_syscall_64+0x4c/0xa0 [ 960.268521][T26096] ? clear_bhb_loop+0x60/0xb0 [ 960.273209][T26096] ? clear_bhb_loop+0x60/0xb0 [ 960.277904][T26096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.283800][T26096] RIP: 0033:0x7f92ac59c799 [ 960.288210][T26096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.307825][T26096] RSP: 002b:00007f92ad377028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 960.316235][T26096] RAX: ffffffffffffffda RBX: 00007f92ac815fa0 RCX: 00007f92ac59c799 [ 960.324200][T26096] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 960.332165][T26096] RBP: 00007f92ad377090 R08: 0000000000000000 R09: 0000000000000000 [ 960.340130][T26096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.348093][T26096] R13: 00007f92ac816038 R14: 00007f92ac815fa0 R15: 00007ffc37d8d6b8 [ 960.356064][T26096] [ 960.373749][T26098] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5848'. [ 960.594363][T24695] team0 (unregistering): Port device team_slave_1 removed [ 960.613327][T26103] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5849'. [ 960.651789][T24695] team0 (unregistering): Port device team_slave_0 removed [ 961.037879][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 961.046934][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 961.055630][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 961.065023][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 961.079340][T26092] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5845'. [ 961.090363][T26099] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5848'. [ 961.105979][T26103] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5849'. [ 961.126117][T25893] device veth0_vlan entered promiscuous mode [ 961.140154][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 961.148138][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 961.195370][T25893] device veth1_vlan entered promiscuous mode [ 961.219378][T15178] Bluetooth: hci2: command 0x0419 tx timeout [ 961.406839][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 961.483738][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 961.493837][T26115] netlink: 'syz.2.5852': attribute type 21 has an invalid length. [ 961.502170][T26115] netlink: 'syz.2.5852': attribute type 1 has an invalid length. [ 961.553060][T26115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5852'. [ 961.623665][T25893] device veth0_macvtap entered promiscuous mode [ 961.672713][T25893] device veth1_macvtap entered promiscuous mode [ 961.941482][T26115] device syzkaller0 entered promiscuous mode [ 961.965381][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.976012][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.999106][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.014676][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.025493][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.036689][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.050778][T25893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.171772][ T22] syzkaller0: tun_net_xmit 48 [ 962.176716][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 962.189555][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 962.189561][T26137] FAULT_INJECTION: forcing a failure. [ 962.189561][T26137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.198011][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 962.217665][T26137] CPU: 0 PID: 26137 Comm: syz.3.5858 Not tainted syzkaller #0 [ 962.220584][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 962.225617][T26137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 962.225629][T26137] Call Trace: [ 962.241052][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.243700][T26137] [ 962.243710][T26137] dump_stack_lvl+0x188/0x24e [ 962.247058][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.257439][T26137] ? show_regs_print_info+0x12/0x12 [ 962.257465][T26137] ? load_image+0x400/0x400 [ 962.257486][T26137] ? __lock_acquire+0x7d10/0x7d10 [ 962.257511][T26137] should_fail_ex+0x399/0x4d0 [ 962.257531][T26137] _copy_from_user+0x2c/0x170 [ 962.257552][T26137] iovec_from_user+0x143/0x360 [ 962.262603][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.265186][T26137] __import_iovec+0x6d/0x500 [ 962.265210][T26137] ? __might_fault+0xc2/0x120 [ 962.275440][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.280192][T26137] import_iovec+0x6f/0xa0 [ 962.280221][T26137] ___sys_sendmsg+0x252/0x360 [ 962.280250][T26137] ? __sys_sendmsg+0x290/0x290 [ 962.286305][T25893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.289762][T26137] ? __lock_acquire+0x7d10/0x7d10 [ 962.289810][T26137] __se_sys_sendmsg+0x1bb/0x2a0 [ 962.289836][T26137] ? __x64_sys_sendmsg+0x80/0x80 [ 962.369029][T26137] ? lockdep_hardirqs_on+0x94/0x140 [ 962.374232][T26137] do_syscall_64+0x4c/0xa0 [ 962.378641][T26137] ? clear_bhb_loop+0x60/0xb0 [ 962.383312][T26137] ? clear_bhb_loop+0x60/0xb0 [ 962.387981][T26137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.393872][T26137] RIP: 0033:0x7f0ba539c799 [ 962.398277][T26137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.417978][T26137] RSP: 002b:00007f0ba35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.426395][T26137] RAX: ffffffffffffffda RBX: 00007f0ba5615fa0 RCX: 00007f0ba539c799 [ 962.434371][T26137] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 962.442340][T26137] RBP: 00007f0ba35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 962.450308][T26137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.458267][T26137] R13: 00007f0ba5616038 R14: 00007f0ba5615fa0 R15: 00007ffdd28da298 [ 962.466237][T26137] [ 962.532752][T26138] netlink: 'syz.4.5857': attribute type 3 has an invalid length. [ 962.550928][T26138] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5857'. [ 965.601136][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 965.613552][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 965.640068][T25893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.655624][T25893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.665189][T25893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.678509][T25893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.707325][T26140] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5859'. [ 965.724924][T26141] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5859'. [ 965.773782][T26155] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 965.808692][T26155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 965.891586][T26163] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5865'. [ 965.928549][T26165] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5864'. [ 966.011436][T24701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.049286][T24701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.092808][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 966.128974][T24690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.155330][T24690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.177301][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 966.670053][T26186] netlink: 'syz.1.5871': attribute type 16 has an invalid length. [ 966.765090][T26186] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5871'. [ 966.927471][T26186] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 967.835412][T26208] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5879'. [ 967.899170][T26209] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 967.946850][T26209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 968.213620][T26217] sock: sock_set_timeout: `syz.2.5884' (pid 26217) tries to set negative timeout [ 968.753979][T26239] netlink: 'syz.3.5887': attribute type 16 has an invalid length. [ 968.801760][T26239] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5887'. [ 969.425892][T26248] syzkaller: port 1(erspan0) entered blocking state [ 969.447988][T26248] syzkaller: port 1(erspan0) entered disabled state [ 969.461281][T26248] device erspan0 entered promiscuous mode [ 969.500360][T26248] syzkaller: port 1(erspan0) entered blocking state [ 969.507319][T26248] syzkaller: port 1(erspan0) entered forwarding state [ 969.644176][T26254] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5894'. [ 970.496518][T26275] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 970.658594][T26275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 970.724881][T26283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.515392][T26309] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5910'. [ 971.854418][T26307] netlink: 'syz.2.5907': attribute type 16 has an invalid length. [ 971.878978][T26307] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5907'. [ 972.223032][T26320] netlink: 87536 bytes leftover after parsing attributes in process `syz.3.5913'. [ 972.530055][T26339] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 972.575253][T26339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 972.655397][T26341] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 972.736269][T26341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 972.835126][T26348] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5922'. [ 973.618627][T26374] bˆ¡cÊRݘOC‰ÿæ: renamed from lo [ 974.264399][T26396] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5936'. [ 974.686164][T26404] netlink: 'syz.2.5938': attribute type 11 has an invalid length. [ 974.738944][T26404] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5938'. [ 974.767923][T26403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.133095][T26419] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5943'. [ 975.820127][T26419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.875227][T26419] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 975.917061][T26419] bond0 (unregistering): Released all slaves [ 975.964204][T26421] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5941'. [ 976.004496][T26429] device lo entered promiscuous mode [ 976.048007][T26429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 976.173511][T26415] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5941'. [ 977.056618][T26481] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5958'. [ 979.219908][T26525] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5972'. [ 979.303701][T26527] netlink: 'syz.1.5973': attribute type 9 has an invalid length. [ 979.335369][T26527] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5973'. [ 980.026891][T26557] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 980.764281][T26556] delete_channel: no stack [ 980.901043][T26571] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5989'. [ 982.078275][T26604] netlink: 'syz.2.5999': attribute type 21 has an invalid length. [ 982.144360][T26604] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5999'. [ 982.848606][T26619] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6004'. [ 983.924291][T26651] netlink: 'syz.3.6014': attribute type 11 has an invalid length. [ 984.317710][T26671] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6019'. [ 984.350214][T26663] netlink: 'syz.4.6016': attribute type 21 has an invalid length. [ 984.358084][T26663] netlink: 'syz.4.6016': attribute type 13 has an invalid length. [ 984.477900][T26663] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6016'. [ 984.829165][T26674] netlink: 'syz.0.6020': attribute type 28 has an invalid length. [ 984.840364][T26674] netlink: 'syz.0.6020': attribute type 29 has an invalid length. [ 984.868233][T26674] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6020'. [ 986.197121][T26701] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6031'. [ 986.315482][T26704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6032'. [ 986.533918][T26713] netlink: 'syz.3.6034': attribute type 10 has an invalid length. [ 986.718604][T26713] team0: Device wg1 is of different type [ 987.054458][T26724] device syzkaller0 entered promiscuous mode [ 987.323224][T15178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 987.336764][T15178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 987.345416][T15178] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 987.370167][T15178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 987.381603][T15178] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 987.389458][T15178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 987.876934][T26730] chnl_net:caif_netlink_parms(): no params data found [ 988.014807][T26749] tipc: Started in network mode [ 988.028322][T26749] tipc: Node identity 9215a268, cluster identity 4711 [ 988.037526][T26749] tipc: Node number set to 2450891368 [ 988.058453][T26730] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.084440][T26730] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.139107][T26730] device bridge_slave_0 entered promiscuous mode [ 988.154738][T26749] netlink: 'syz.4.6044': attribute type 10 has an invalid length. [ 988.235393][T26749] team0: Port device hsr_slave_0 added [ 988.247226][T26730] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.255325][T26730] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.266734][T26730] device bridge_slave_1 entered promiscuous mode [ 988.294178][ T4275] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 988.306447][T26761] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6047'. [ 988.367728][T26730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.467747][T26730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.871558][T26730] team0: Port device team_slave_0 added [ 988.932226][T26730] team0: Port device team_slave_1 added [ 989.060036][T26730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.067035][T26730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.131057][T26730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.165405][T26730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.196671][T26730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.274254][T26730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.459564][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 989.466793][T26730] device hsr_slave_0 entered promiscuous mode [ 989.642410][T26730] device hsr_slave_1 entered promiscuous mode [ 989.872368][T26790] netlink: 'syz.0.6057': attribute type 8 has an invalid length. [ 989.899823][T26790] netlink: 'syz.0.6057': attribute type 9 has an invalid length. [ 989.941348][T26790] netlink: 'syz.0.6057': attribute type 10 has an invalid length. [ 989.983398][T26790] netlink: 'syz.0.6057': attribute type 11 has an invalid length. [ 990.025239][T26790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6057'. [ 990.376771][T26730] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.482925][T26813] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6059'. [ 990.604401][T26730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.539684][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 991.723853][T26825] netlink: 'syz.1.6066': attribute type 21 has an invalid length. [ 991.740030][T26825] IPv6: NLM_F_CREATE should be specified when creating new route [ 991.763800][T26825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 991.771087][T26825] IPv6: NLM_F_CREATE should be set when creating new route [ 991.778322][T26825] IPv6: NLM_F_CREATE should be set when creating new route [ 991.785573][T26825] IPv6: NLM_F_CREATE should be set when creating new route [ 991.883209][T26730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.167301][T26730] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.203755][T26831] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6069'. [ 992.228918][T26831] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.6069'. [ 992.255223][T26831] tc_dump_action: action bad kind [ 992.276289][T26831] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6069'. [ 992.307424][T26831] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.6069'. [ 992.329098][T26831] tc_dump_action: action bad kind [ 992.341867][T26829] netlink: 'syz.4.6067': attribute type 10 has an invalid length. [ 992.389069][T26829] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.793970][T26831] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6069'. [ 992.814414][T26831] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.6069'. [ 992.865120][T26831] tc_dump_action: action bad kind [ 993.019943][T26843] netlink: 'syz.4.6071': attribute type 21 has an invalid length. [ 993.154727][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.161273][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.251390][T26849] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6073'. [ 993.333066][T26849] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 993.362962][T26849] CPU: 1 PID: 26849 Comm: syz.1.6073 Not tainted syzkaller #0 [ 993.370492][T26849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 993.380572][T26849] Call Trace: [ 993.383860][T26849] [ 993.386794][T26849] dump_stack_lvl+0x188/0x24e [ 993.391506][T26849] ? show_regs_print_info+0x12/0x12 [ 993.396737][T26849] ? load_image+0x400/0x400 [ 993.401302][T26849] sysfs_warn_dup+0x8a/0xa0 [ 993.405819][T26849] sysfs_do_create_link_sd+0xc0/0x110 [ 993.411203][T26849] device_add+0x7ed/0xfb0 [ 993.415554][T26849] wiphy_register+0x1d9f/0x2ac0 [ 993.420425][T26849] ? cfg80211_event_work+0x40/0x40 [ 993.425535][T26849] ? minstrel_ht_alloc+0x894/0xa20 [ 993.430654][T26849] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 993.436720][T26849] ieee80211_register_hw+0x2d00/0x39f0 [ 993.442190][T26849] ? ieee80211_register_hw+0xee1/0x39f0 [ 993.447739][T26849] ? ieee80211_register_hw+0xee1/0x39f0 [ 993.453288][T26849] ? ieee80211_tasklet_handler+0x20/0x20 [ 993.458926][T26849] ? memset+0x1e/0x40 [ 993.462904][T26849] ? __hrtimer_init+0x186/0x270 [ 993.467749][T26849] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 993.473483][T26849] hwsim_new_radio_nl+0xafa/0xce0 [ 993.478519][T26849] genl_family_rcv_msg_doit+0x22a/0x330 [ 993.484061][T26849] ? end_current_label_crit_section+0x170/0x170 [ 993.490302][T26849] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 993.496213][T26849] ? bpf_lsm_capable+0x5/0x10 [ 993.500890][T26849] ? security_capable+0x85/0xb0 [ 993.505742][T26849] genl_rcv_msg+0x604/0x790 [ 993.510248][T26849] ? genl_bind+0x360/0x360 [ 993.514659][T26849] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 993.521002][T26849] netlink_rcv_skb+0x1fb/0x450 [ 993.525775][T26849] ? genl_bind+0x360/0x360 [ 993.530189][T26849] ? netlink_ack+0x1170/0x1170 [ 993.534974][T26849] ? down_read+0x1a8/0x2d0 [ 993.539401][T26849] genl_rcv+0x24/0x40 [ 993.543374][T26849] netlink_unicast+0x74d/0x8d0 [ 993.548143][T26849] netlink_sendmsg+0x8ad/0xbd0 [ 993.552912][T26849] ? netlink_getsockopt+0x550/0x550 [ 993.558197][T26849] ? aa_sock_msg_perm+0x94/0x150 [ 993.563131][T26849] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 993.568412][T26849] ? security_socket_sendmsg+0x7c/0xa0 [ 993.573871][T26849] ? netlink_getsockopt+0x550/0x550 [ 993.579068][T26849] ____sys_sendmsg+0x5be/0x970 [ 993.583837][T26849] ? __sys_sendmsg_sock+0x30/0x30 [ 993.588857][T26849] ? __import_iovec+0x315/0x500 [ 993.593709][T26849] ? import_iovec+0x6f/0xa0 [ 993.598210][T26849] ___sys_sendmsg+0x2a2/0x360 [ 993.602888][T26849] ? try_to_wake_up+0x67c/0x1080 [ 993.607827][T26849] ? __sys_sendmsg+0x290/0x290 [ 993.612636][T26849] __se_sys_sendmsg+0x1bb/0x2a0 [ 993.617487][T26849] ? __x64_sys_sendmsg+0x80/0x80 [ 993.622433][T26849] ? lockdep_hardirqs_on+0x94/0x140 [ 993.627626][T26849] do_syscall_64+0x4c/0xa0 [ 993.632041][T26849] ? clear_bhb_loop+0x60/0xb0 [ 993.636720][T26849] ? clear_bhb_loop+0x60/0xb0 [ 993.641395][T26849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 993.647281][T26849] RIP: 0033:0x7f630079c799 [ 993.651689][T26849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.671288][T26849] RSP: 002b:00007f63016cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 993.679697][T26849] RAX: ffffffffffffffda RBX: 00007f6300a16090 RCX: 00007f630079c799 [ 993.687661][T26849] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 993.695622][T26849] RBP: 00007f6300832c99 R08: 0000000000000000 R09: 0000000000000000 [ 993.703584][T26849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.711546][T26849] R13: 00007f6300a16128 R14: 00007f6300a16090 R15: 00007ffec295aeb8 [ 993.719525][T26849] [ 993.729305][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 993.776844][T26730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 993.853735][T26730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 993.889308][T26730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 993.917228][T26730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 994.129168][T26858] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6077'. [ 994.211498][T26730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.296172][T24690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 994.313017][T24690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 994.378550][T26730] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.439676][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 994.453471][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 994.477874][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.485081][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.533945][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 994.561005][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 994.591919][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 994.627100][T24701] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.634321][T24701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.693197][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 994.714280][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 994.758104][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 994.803114][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 994.848557][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 994.894264][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 994.914837][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 995.002142][T26730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 995.070491][T26730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 995.193383][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 995.217735][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 995.282722][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 995.342375][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 995.392426][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 995.779198][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 995.937313][T26910] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.6092'. [ 996.137671][T26915] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6093'. [ 996.716274][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 996.762624][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 996.833877][T26730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.940447][T26938] IPv6: NLM_F_CREATE should be specified when creating new route [ 996.962653][T26938] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6098'. [ 997.028249][T26941] netlink: 'syz.0.6098': attribute type 3 has an invalid length. [ 997.066393][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 997.109826][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 997.125627][T26941] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6098'. [ 997.389097][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 997.397795][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 997.450721][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 997.485709][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 997.514606][T26730] device veth0_vlan entered promiscuous mode [ 997.542086][T26730] device veth1_vlan entered promiscuous mode [ 997.644274][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 997.687820][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 997.718729][T26730] device veth0_macvtap entered promiscuous mode [ 997.881536][T26952] sctp: [Deprecated]: syz.0.6103 (pid 26952) Use of int in max_burst socket option deprecated. [ 997.881536][T26952] Use struct sctp_assoc_value instead [ 1000.664637][T26730] device veth1_macvtap entered promiscuous mode [ 1000.690855][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1000.700441][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1000.756137][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.796310][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.833797][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.864341][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.888858][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.906465][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.924667][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.935669][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.954851][T26730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.985206][T26963] syzkaller1: tun_chr_ioctl cmd 21731 [ 1001.003586][T24704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1001.044603][T24704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1001.170621][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.187009][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.221508][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.253553][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.264514][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.288229][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.303591][T26730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.321770][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1001.338434][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1001.361751][T26972] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6107'. [ 1001.401277][T26730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.425651][T26730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.443127][T26730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.455666][T26730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.740003][T24690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.747867][T24690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.792042][T24690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1001.891456][T24696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.918167][T24696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.938101][T24696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1002.588963][T27006] netlink: 'syz.0.6118': attribute type 3 has an invalid length. [ 1002.598736][T27003] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6117'. [ 1002.638235][T27006] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6118'. [ 1005.430115][T27022] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6123'. [ 1006.339421][T27041] device wlan1 entered promiscuous mode [ 1006.476023][T27045] netlink: 'syz.3.6130': attribute type 29 has an invalid length. [ 1006.511638][T27045] netlink: 'syz.3.6130': attribute type 29 has an invalid length. [ 1006.536648][T27041] netlink: 'syz.3.6130': attribute type 29 has an invalid length. [ 1006.552968][T27051] netlink: 'syz.3.6130': attribute type 29 has an invalid length. [ 1006.608333][T27049] netlink: 'syz.0.6133': attribute type 10 has an invalid length. [ 1006.688462][T27049] team0: Device wg1 is of different type [ 1006.981088][T27063] netlink: 'syz.3.6137': attribute type 2 has an invalid length. [ 1007.088276][T27063] netlink: 'syz.3.6137': attribute type 8 has an invalid length. [ 1007.099158][T27063] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6137'. [ 1007.135711][T27064] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6138'. [ 1007.183791][T27066] netlink: 'syz.2.6139': attribute type 9 has an invalid length. [ 1007.200464][T27070] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6140'. [ 1007.236540][T27066] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1007.895056][T27084] netlink: 'syz.3.6147': attribute type 10 has an invalid length. [ 1007.942803][T27084] team0: Device wg1 is of different type [ 1007.976901][T27087] netlink: 'syz.3.6147': attribute type 10 has an invalid length. [ 1008.061935][T27087] team0: Device wg1 is of different type [ 1008.436098][T27111] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6155'. [ 1008.843090][T27125] netlink: 'syz.2.6159': attribute type 2 has an invalid length. [ 1008.871499][T27125] netlink: 'syz.2.6159': attribute type 8 has an invalid length. [ 1008.891812][T27125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6159'. [ 1009.824425][T27149] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6168'. [ 1009.947241][T27149] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1010.061979][ T4275] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 1010.090097][T27153] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1010.253477][T27156] netlink: 'syz.2.6170': attribute type 41 has an invalid length. [ 1010.972616][T27183] netlink: 'syz.4.6175': attribute type 12 has an invalid length. [ 1011.054927][T27183] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6175'. [ 1011.715615][T27201] netlink: 'syz.1.6182': attribute type 21 has an invalid length. [ 1011.754458][T27201] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6182'. [ 1012.099035][T15178] Bluetooth: hci3: command 0x0409 tx timeout [ 1013.642737][T27250] __nla_validate_parse: 1 callbacks suppressed [ 1013.642774][T27250] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6199'. [ 1015.824220][T27293] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6212'. [ 1017.805184][T27337] Ÿë: port 1(syz_tun) entered blocking state [ 1017.856090][T27337] Ÿë: port 1(syz_tun) entered disabled state [ 1017.908482][T27337] device syz_tun entered promiscuous mode [ 1018.424760][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1018.434804][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1018.449706][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1018.457523][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1018.465921][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1018.473288][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1018.591704][T27356] FAULT_INJECTION: forcing a failure. [ 1018.591704][T27356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.639615][T27356] CPU: 1 PID: 27356 Comm: syz.2.6233 Not tainted syzkaller #0 [ 1018.647136][T27356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1018.657208][T27356] Call Trace: [ 1018.660501][T27356] [ 1018.663441][T27356] dump_stack_lvl+0x188/0x24e [ 1018.668135][T27356] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1018.674312][T27356] ? show_regs_print_info+0x12/0x12 [ 1018.679534][T27356] ? load_image+0x400/0x400 [ 1018.684073][T27356] should_fail_ex+0x399/0x4d0 [ 1018.688774][T27356] _copy_from_user+0x2c/0x170 [ 1018.693472][T27356] __sys_bpf+0x2ea/0x780 [ 1018.697811][T27356] ? bpf_link_show_fdinfo+0x380/0x380 [ 1018.703216][T27356] ? lock_chain_count+0x20/0x20 [ 1018.708092][T27356] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1018.714113][T27356] __x64_sys_bpf+0x78/0x90 [ 1018.718644][T27356] do_syscall_64+0x4c/0xa0 [ 1018.723084][T27356] ? clear_bhb_loop+0x60/0xb0 [ 1018.727777][T27356] ? clear_bhb_loop+0x60/0xb0 [ 1018.732469][T27356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1018.738382][T27356] RIP: 0033:0x7f4f0719c799 [ 1018.742810][T27356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.762434][T27356] RSP: 002b:00007f4f0812c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1018.770872][T27356] RAX: ffffffffffffffda RBX: 00007f4f07415fa0 RCX: 00007f4f0719c799 [ 1018.778865][T27356] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 1018.786855][T27356] RBP: 00007f4f0812c090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.794845][T27356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.802830][T27356] R13: 00007f4f07416038 R14: 00007f4f07415fa0 R15: 00007ffd1e4d8408 [ 1018.810840][T27356] [ 1019.255645][T27353] chnl_net:caif_netlink_parms(): no params data found [ 1019.655645][T27353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.698374][T27353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.746504][T27353] device bridge_slave_0 entered promiscuous mode [ 1019.841459][T27353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.848656][T27353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.876768][T27353] device bridge_slave_1 entered promiscuous mode [ 1019.964435][T27353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.002057][T27353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.116420][T27353] team0: Port device team_slave_0 added [ 1020.154301][T27353] team0: Port device team_slave_1 added [ 1020.234560][T27353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.274983][T27353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.369199][T27353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.432770][T27353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.448963][T27353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.498924][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 1020.589852][T27353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.647946][T27400] netlink: 'syz.3.6246': attribute type 27 has an invalid length. [ 1020.721329][T27400] netlink: 'syz.3.6246': attribute type 2 has an invalid length. [ 1020.832050][T27353] device hsr_slave_0 entered promiscuous mode [ 1020.862279][T27353] device hsr_slave_1 entered promiscuous mode [ 1020.893887][T27353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1020.899185][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 1020.930538][T27353] Cannot create hsr debugfs directory [ 1021.525515][T27353] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.662063][T27353] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.807273][T27353] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.928987][T27353] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.971705][T27429] netlink: 'syz.3.6256': attribute type 21 has an invalid length. [ 1022.332709][T27353] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1022.397998][T27353] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1022.464914][T27353] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1022.493770][T27353] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1022.579550][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 1022.856241][T27353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.921880][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1022.971870][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1023.014268][T27353] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.042127][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1023.071095][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1023.095727][T24710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.102931][T24710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.139645][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1023.171634][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1023.200207][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1023.249529][T24710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.256692][T24710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.284963][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1023.341991][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1023.374430][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1023.394473][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1023.460729][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1023.489754][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1023.535800][T27353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1023.568643][T27353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1023.585248][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1023.594495][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1023.618862][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1023.628094][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1023.637258][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1023.675701][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1024.659151][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 1024.806783][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1024.837643][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1024.889141][T27353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.051598][T27554] device syzkaller0 entered promiscuous mode [ 1026.079518][T27554] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 1026.104909][T27558] FAULT_INJECTION: forcing a failure. [ 1026.104909][T27558] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.168641][T27558] CPU: 0 PID: 27558 Comm: syz.0.6292 Not tainted syzkaller #0 [ 1026.176161][T27558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1026.186232][T27558] Call Trace: [ 1026.189692][T27558] [ 1026.192638][T27558] dump_stack_lvl+0x188/0x24e [ 1026.197342][T27558] ? show_regs_print_info+0x12/0x12 [ 1026.202565][T27558] ? load_image+0x400/0x400 [ 1026.207096][T27558] ? __might_sleep+0xd0/0xd0 [ 1026.211701][T27558] ? __lock_acquire+0x7d10/0x7d10 [ 1026.216741][T27558] should_fail_ex+0x399/0x4d0 [ 1026.221415][T27558] should_failslab+0x5/0x20 [ 1026.226008][T27558] slab_pre_alloc_hook+0x59/0x310 [ 1026.231053][T27558] ? perf_swevent_event+0xc8/0x530 [ 1026.236177][T27558] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1026.242062][T27558] __kmem_cache_alloc_node+0x4f/0x260 [ 1026.247445][T27558] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1026.253166][T27558] __kmalloc+0xa0/0x240 [ 1026.257322][T27558] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1026.262873][T27558] ? tomoyo_path_number_perm+0x205/0x650 [ 1026.268504][T27558] tomoyo_path_number_perm+0x22f/0x650 [ 1026.273961][T27558] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1026.279420][T27558] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1026.285155][T27558] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1026.291300][T27558] ? lockdep_hardirqs_on+0x94/0x140 [ 1026.296491][T27558] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1026.302643][T27558] security_file_ioctl+0x6c/0xa0 [ 1026.307580][T27558] __se_sys_ioctl+0x48/0x170 [ 1026.312198][T27558] do_syscall_64+0x4c/0xa0 [ 1026.316659][T27558] ? clear_bhb_loop+0x60/0xb0 [ 1026.321328][T27558] ? clear_bhb_loop+0x60/0xb0 [ 1026.326004][T27558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1026.331890][T27558] RIP: 0033:0x7f165279c799 [ 1026.336296][T27558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.355911][T27558] RSP: 002b:00007f16535f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1026.364326][T27558] RAX: ffffffffffffffda RBX: 00007f1652a15fa0 RCX: 00007f165279c799 [ 1026.372291][T27558] RDX: 0000200000000000 RSI: 0000000000008b28 RDI: 0000000000000005 [ 1026.380261][T27558] RBP: 00007f16535f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.388226][T27558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.396186][T27558] R13: 00007f1652a16038 R14: 00007f1652a15fa0 R15: 00007ffc5e517658 [ 1026.404177][T27558] [ 1026.599080][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1026.625296][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1026.729796][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1026.739553][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 1026.769285][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1026.779235][T27558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1026.810565][T27353] device veth0_vlan entered promiscuous mode [ 1026.833592][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1026.879313][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1026.928365][T27353] device veth1_vlan entered promiscuous mode [ 1027.011449][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1027.036980][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1027.075523][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1027.106474][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.136413][T27353] device veth0_macvtap entered promiscuous mode [ 1027.165375][T27353] device veth1_macvtap entered promiscuous mode [ 1027.237169][T27353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.322987][T27353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.341730][T27353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.353048][T27353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.388960][T27353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.409681][T27353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.435768][T27353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.465208][T27353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.517195][T27353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.546814][T27353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.620789][T27353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.630040][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1027.666066][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1027.709673][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.782261][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.825801][T27353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.888922][T27353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.971046][T27353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.010101][T27353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.058850][T27353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.109000][T27353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.146830][T27353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.178724][T27353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.235677][T27353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.260762][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1028.290500][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1028.342977][T27353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.360174][T27353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.389024][T27353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.438677][T27353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.351950][T27603] FAULT_INJECTION: forcing a failure. [ 1030.351950][T27603] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.383899][T24704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.407679][T24704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.430225][T27603] CPU: 0 PID: 27603 Comm: syz.1.6306 Not tainted syzkaller #0 [ 1030.437823][T27603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1030.447890][T27603] Call Trace: [ 1030.451179][T27603] [ 1030.454111][T27603] dump_stack_lvl+0x188/0x24e [ 1030.458807][T27603] ? show_regs_print_info+0x12/0x12 [ 1030.464024][T27603] ? load_image+0x400/0x400 [ 1030.468553][T27603] ? __might_sleep+0xd0/0xd0 [ 1030.473165][T27603] ? __lock_acquire+0x7d10/0x7d10 [ 1030.478212][T27603] should_fail_ex+0x399/0x4d0 [ 1030.482897][T27603] should_failslab+0x5/0x20 [ 1030.487408][T27603] slab_pre_alloc_hook+0x59/0x310 [ 1030.492447][T27603] ? tomoyo_encode+0x27e/0x540 [ 1030.497217][T27603] __kmem_cache_alloc_node+0x4f/0x260 [ 1030.502588][T27603] ? tomoyo_encode+0x27e/0x540 [ 1030.507349][T27603] __kmalloc+0xa0/0x240 [ 1030.511509][T27603] tomoyo_encode+0x27e/0x540 [ 1030.516098][T27603] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1030.521731][T27603] ? tomoyo_path_number_perm+0x205/0x650 [ 1030.527360][T27603] tomoyo_path_number_perm+0x22f/0x650 [ 1030.532817][T27603] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1030.538357][T27603] ? common_file_perm+0x171/0x1c0 [ 1030.543399][T27603] ? __fget_files+0x28/0x4b0 [ 1030.547989][T27603] ? __fget_files+0x28/0x4b0 [ 1030.552585][T27603] security_file_ioctl+0x6c/0xa0 [ 1030.557527][T27603] __se_sys_ioctl+0x48/0x170 [ 1030.562188][T27603] do_syscall_64+0x4c/0xa0 [ 1030.566608][T27603] ? clear_bhb_loop+0x60/0xb0 [ 1030.571282][T27603] ? clear_bhb_loop+0x60/0xb0 [ 1030.575962][T27603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1030.581846][T27603] RIP: 0033:0x7f630079c799 [ 1030.586259][T27603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.605855][T27603] RSP: 002b:00007f63016ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.614258][T27603] RAX: ffffffffffffffda RBX: 00007f6300a15fa0 RCX: 00007f630079c799 [ 1030.622220][T27603] RDX: 0000200000000000 RSI: 0000000000008b28 RDI: 0000000000000005 [ 1030.630191][T27603] RBP: 00007f63016ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.638153][T27603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.646111][T27603] R13: 00007f6300a16038 R14: 00007f6300a15fa0 R15: 00007ffec295aeb8 [ 1030.654091][T27603] [ 1030.681991][T24704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1030.747028][ T6479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.772884][ T6479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.824665][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1031.127760][T27618] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6227'. [ 1031.594532][T27603] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1031.619407][T27626] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6312'. [ 1032.269113][T27648] tipc: Started in network mode [ 1032.281146][T27648] tipc: Node identity 9215a268, cluster identity 4711 [ 1032.308626][T27648] tipc: Node number set to 2450891368 [ 1032.511146][T27657] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6322'. [ 1032.684170][T27664] netlink: 'syz.4.6324': attribute type 3 has an invalid length. [ 1032.728909][T27664] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6324'. [ 1032.845137][T27664] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.6324'. [ 1033.314361][T27671] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.6326'. [ 1033.350028][T27671] netlink: zone id is out of range [ 1033.664344][T27683] netlink: 'syz.4.6333': attribute type 33 has an invalid length. [ 1033.694088][T27683] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6333'. [ 1033.917107][T27692] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6336'. [ 1035.014901][T27730] netlink: 'syz.3.6346': attribute type 28 has an invalid length. [ 1037.884401][T27739] netlink: 'syz.3.6349': attribute type 29 has an invalid length. [ 1037.930816][T27742] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6350'. [ 1037.984387][T27739] netlink: 'syz.3.6349': attribute type 29 has an invalid length. [ 1039.424929][T27798] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6366'. [ 1040.536354][T27845] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6384'. [ 1042.918114][T27890] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6399'. [ 1043.110010][T27894] netlink: 'syz.4.6400': attribute type 3 has an invalid length. [ 1043.117813][T27894] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6400'. [ 1045.708317][T27925] device wlan1 entered promiscuous mode [ 1045.910684][T27929] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6414'. [ 1047.904681][T27956] device vcan0 entered promiscuous mode [ 1047.949722][T27956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1048.473371][T27964] netlink: 'syz.3.6423': attribute type 2 has an invalid length. [ 1049.026775][T27964] device 0 entered promiscuous mode [ 1051.985783][T27987] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6431'. [ 1054.607603][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.614343][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.264175][T28020] IPv6: NLM_F_CREATE should be specified when creating new route [ 1055.293805][T28020] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1055.333960][T28024] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6446'. [ 1059.709096][T28067] netlink: 'syz.1.6457': attribute type 17 has an invalid length. [ 1059.749242][T28067] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6457'. [ 1060.220741][T28077] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6461'. [ 1060.719016][T28097] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6466'. [ 1061.919583][T28140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.926980][T28140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.038122][T28139] netlink: 'syz.1.6478': attribute type 1 has an invalid length. [ 1062.103244][T28139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6478'. [ 1062.138257][T28144] device bridge_slave_1 left promiscuous mode [ 1062.149785][T28144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.207082][T28144] device bridge_slave_0 left promiscuous mode [ 1062.227807][T28144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.473541][T28150] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6481'. [ 1062.807492][T28164] Ÿë: port 1(gretap0) entered blocking state [ 1062.847310][T28164] Ÿë: port 1(gretap0) entered disabled state [ 1062.906322][T28164] device gretap0 entered promiscuous mode [ 1063.065337][T28169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1063.245981][T28169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1063.472446][T28180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6489'. [ 1063.557652][T28180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6489'. [ 1063.614154][T28185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6489'. [ 1064.988125][T28211] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6499'. [ 1065.055632][T28217] netlink: 'syz.4.6501': attribute type 10 has an invalid length. [ 1065.133113][T28217] team0: Device ipvlan1 failed to register rx_handler [ 1065.258579][T28225] netlink: 'syz.3.6504': attribute type 9 has an invalid length. [ 1065.277882][T28225] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.6504'. [ 1065.530305][T28231] netlink: 'syz.1.6506': attribute type 16 has an invalid length. [ 1065.572808][T28233] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6507'. [ 1065.591156][T28231] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6506'. [ 1065.615840][T28235] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6508'. [ 1065.665023][T28235] netlink: 'syz.2.6508': attribute type 21 has an invalid length. [ 1066.281436][T28256] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1066.329367][T28256] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1066.483536][T28264] netlink: 'syz.2.6517': attribute type 21 has an invalid length. [ 1066.702214][T28271] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6520'. [ 1066.714707][T28268] delete_channel: no stack [ 1066.810432][T28274] syz.2.6521[28274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1066.810584][T28274] syz.2.6521[28274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1067.085753][T28285] netlink: 'syz.4.6525': attribute type 2 has an invalid length. [ 1067.113678][T28285] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6525'. [ 1067.253791][T28292] netlink: 763 bytes leftover after parsing attributes in process `syz.2.6526'. [ 1068.139661][T28323] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6536'. [ 1068.471661][T28336] netlink: 'syz.0.6538': attribute type 1 has an invalid length. [ 1069.310260][T28371] netlink: 'syz.2.6549': attribute type 2 has an invalid length. [ 1069.687138][T28367] team0: Port device team_slave_0 removed [ 1069.702874][T28367] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1069.748318][T28373] netlink: 'syz.2.6549': attribute type 11 has an invalid length. [ 1070.033817][T28395] netlink: 'syz.4.6552': attribute type 1 has an invalid length. [ 1070.046988][T28395] __nla_validate_parse: 5 callbacks suppressed [ 1070.047001][T28395] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1070.785790][T28419] : port 1(ip6gretap0) entered blocking state [ 1070.809096][T28419] : port 1(ip6gretap0) entered disabled state [ 1070.830474][T28419] device ip6gretap0 entered promiscuous mode [ 1070.856674][T28428] device ip6gretap0 left promiscuous mode [ 1070.875515][T28428] : port 1(ip6gretap0) entered disabled state [ 1071.435072][T28432] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6564'. [ 1071.455389][T28436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1071.685057][T28440] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6565'. [ 1072.255102][T28470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6573'. [ 1072.644404][T28480] netlink: 'syz.2.6579': attribute type 10 has an invalid length. [ 1072.798013][T28480] device geneve0 entered promiscuous mode [ 1073.230653][T28480] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1073.253106][T28497] netlink: 'syz.1.6582': attribute type 2 has an invalid length. [ 1073.329920][T28497] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.6582'. [ 1073.373449][T28492] netlink: 'syz.4.6581': attribute type 40 has an invalid length. [ 1073.425956][T28493] netlink: 'syz.4.6581': attribute type 21 has an invalid length. [ 1073.470646][T28493] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6581'. [ 1073.512252][T28493] netlink: 'syz.4.6581': attribute type 4 has an invalid length. [ 1073.566367][T28493] netlink: 'syz.4.6581': attribute type 5 has an invalid length. [ 1073.649307][T28493] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6581'. [ 1073.750802][T28503] bond0: (slave »»»»»»): Enslaving as an active interface with an up link [ 1073.779392][T28502] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6585'. [ 1074.600934][T28542] netlink: 'syz.3.6596': attribute type 2 has an invalid length. [ 1074.609098][T28542] netlink: 'syz.3.6596': attribute type 4 has an invalid length. [ 1074.647402][T28542] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6596'. [ 1077.145442][T15178] Bluetooth: hci2: command 0x0406 tx timeout [ 1078.140861][T28550] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6599'. [ 1078.426467][T15178] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1078.433291][T28572] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6604'. [ 1079.447784][T28602] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6616'. [ 1079.475274][T28602] netlink: 'syz.2.6616': attribute type 10 has an invalid length. [ 1079.618147][T28602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.679804][T28602] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1079.990107][T28618] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6620'. [ 1080.034179][T28625] netlink: 'syz.0.6622': attribute type 3 has an invalid length. [ 1080.168419][T28625] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6622'. [ 1080.269691][T28631] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6623'. [ 1080.655185][T28645] netlink: 'syz.2.6627': attribute type 21 has an invalid length. [ 1080.676897][T28645] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1080.729523][T28645] netlink: 'syz.2.6627': attribute type 4 has an invalid length. [ 1080.808905][T28645] netlink: 'syz.2.6627': attribute type 5 has an invalid length. [ 1080.816679][T28645] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1080.887699][T28658] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6630'. [ 1081.247740][T28674] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6635'. [ 1082.691423][T28720] netlink: 'syz.3.6650': attribute type 2 has an invalid length. [ 1086.186725][T28727] __nla_validate_parse: 2 callbacks suppressed [ 1086.186748][T28727] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6653'. [ 1086.224768][T28736] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6654'. [ 1086.357832][T28744] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6656'. [ 1086.971716][T28761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6662'. [ 1087.372615][T28761] device syzkaller0 entered promiscuous mode [ 1090.864757][T28789] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6670'. [ 1090.899528][T28803] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6673'. [ 1091.246185][T15178] Bluetooth: hci3: ISO packet too small [ 1091.465365][T28834] netlink: 'syz.2.6680': attribute type 27 has an invalid length. [ 1091.499091][T28834] netlink: 'syz.2.6680': attribute type 3 has an invalid length. [ 1091.506876][T28834] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6680'. [ 1091.943108][T28856] netlink: 'syz.2.6686': attribute type 2 has an invalid length. [ 1091.966764][T28856] netlink: 'syz.2.6686': attribute type 1 has an invalid length. [ 1092.083595][T28862] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6687'. [ 1092.129243][T28846] netlink: 'syz.1.6684': attribute type 3 has an invalid length. [ 1092.137183][T28846] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.6684'. [ 1092.242463][T28864] tap0: tun_chr_ioctl cmd 1074025677 [ 1092.256063][T28864] tap0: linktype set to 773 [ 1092.344174][T28869] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6690'. [ 1092.375202][T28869] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6690'. [ 1092.423888][T28869] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6690'. [ 1092.626628][T28878] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6693'. [ 1092.658507][T28874] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1093.027963][T28884] netlink: 'syz.2.6695': attribute type 39 has an invalid length. [ 1093.726471][T28913] netlink: 'syz.2.6704': attribute type 21 has an invalid length. [ 1094.479291][T28935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6710'. [ 1094.538103][T28935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6710'. [ 1096.109814][T28997] netlink: 'syz.2.6733': attribute type 17 has an invalid length. [ 1096.128250][T28997] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1096.183671][T28997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1096.534404][T29002] netlink: 'syz.4.6735': attribute type 10 has an invalid length. [ 1096.661982][T29002] team0: Port device dummy0 added [ 1096.688006][T29005] netlink: 'syz.0.6734': attribute type 21 has an invalid length. [ 1096.762096][T29005] netlink: 'syz.0.6734': attribute type 4 has an invalid length. [ 1096.829545][T29005] __nla_validate_parse: 3 callbacks suppressed [ 1096.829561][T29005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6734'. [ 1097.269544][T29017] netlink: 'syz.2.6738': attribute type 13 has an invalid length. [ 1097.288984][T29017] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6738'. [ 1097.334445][T29017] erspan0: refused to change device tx_queue_len [ 1097.399955][T29017] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1097.864251][T29036] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6743'. [ 1098.091637][T29035] device veth0_vlan left promiscuous mode [ 1098.207105][T29035] device veth0_vlan entered promiscuous mode [ 1098.740452][T29055] netlink: 'syz.4.6749': attribute type 11 has an invalid length. [ 1098.820915][T29057] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6750'. [ 1099.609152][T29081] netlink: 'syz.2.6757': attribute type 3 has an invalid length. [ 1099.646916][T29081] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6757'. [ 1099.818092][T29085] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6759'. [ 1100.009646][T29092] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6761'. [ 1100.439624][T29100] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1100.478309][T29100] device syzkaller0 entered promiscuous mode [ 1105.289067][T29132] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6772'. [ 1106.784150][T29163] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6782'. [ 1107.518961][T29192] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6790'. [ 1107.988432][T29193] tipc: Started in network mode [ 1107.999269][T29193] tipc: Node identity 9215a268, cluster identity 4711 [ 1108.019160][T29193] tipc: Node number set to 2450891368 [ 1108.151929][T29198] netlink: 'syz.0.6791': attribute type 21 has an invalid length. [ 1108.569293][T29210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.577064][T29210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.595613][T29210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.647050][T29210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.895866][T29226] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6801'. [ 1109.854496][T29269] netlink: 'syz.3.6816': attribute type 10 has an invalid length. [ 1109.968109][T29274] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6815'. [ 1110.231301][T29280] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.6818'. [ 1110.630548][T29295] team0: Port device team_slave_0 removed [ 1111.041534][T29312] netlink: 'syz.4.6829': attribute type 10 has an invalid length. [ 1111.224605][T29312] bond0: (slave bond_slave_0): Releasing backup interface [ 1111.242279][T29321] netlink: 'syz.3.6826': attribute type 1 has an invalid length. [ 1111.270936][T29321] netlink: 'syz.3.6826': attribute type 3 has an invalid length. [ 1111.326950][T29316] netlink: 'syz.3.6826': attribute type 21 has an invalid length. [ 1111.368497][T29316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6826'. [ 1111.368530][T29321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6826'. [ 1112.579012][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 1112.852851][T29377] netlink: 'syz.4.6849': attribute type 10 has an invalid length. [ 1112.979230][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 1113.073680][T29377] team0: Port device geneve1 added [ 1113.963426][T29401] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6852'. [ 1115.136270][T29421] : port 1(ip6gretap0) entered blocking state [ 1115.156477][T29421] : port 1(ip6gretap0) entered disabled state [ 1115.185962][T29421] device ip6gretap0 entered promiscuous mode [ 1115.216847][T29423] device ip6gretap0 left promiscuous mode [ 1115.249204][T29423] : port 1(ip6gretap0) entered disabled state [ 1115.325333][T29426] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.6861'. [ 1116.033883][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.040340][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.659646][T29448] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6867'. [ 1119.217324][T29495] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6882'. [ 1119.627312][T29502] netlink: 'syz.0.6883': attribute type 12 has an invalid length. [ 1119.678281][T29502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6883'. [ 1120.019259][T24690] wlan1: Trigger new scan to find an IBSS to join [ 1120.630485][T29518] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6889'. [ 1121.285802][T29523] netlink: 'syz.0.6892': attribute type 29 has an invalid length. [ 1121.340453][T29523] netlink: 'syz.0.6892': attribute type 29 has an invalid length. [ 1121.406913][T29525] netlink: 'syz.0.6892': attribute type 29 has an invalid length. [ 1121.467752][T29526] netlink: 'syz.0.6892': attribute type 29 has an invalid length. [ 1121.756208][T29526] netlink: 'syz.0.6892': attribute type 29 has an invalid length. [ 1122.322844][T29546] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6896'. [ 1122.502014][T29546] sock: sock_set_timeout: `syz.2.6896' (pid 29546) tries to set negative timeout [ 1122.566715][T29551] netlink: 'syz.0.6898': attribute type 22 has an invalid length. [ 1123.060182][T24690] wlan1: Trigger new scan to find an IBSS to join [ 1123.919288][T29569] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6902'. [ 1123.954068][T24693] wlan1: Creating new IBSS network, BSSID 6a:e1:ec:4c:d1:0d [ 1124.166641][T29569] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6902'. [ 1124.395177][T29569] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1124.410334][T29569] CPU: 1 PID: 29569 Comm: syz.1.6902 Not tainted syzkaller #0 [ 1124.417877][T29569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1124.427970][T29569] Call Trace: [ 1124.431279][T29569] [ 1124.434243][T29569] dump_stack_lvl+0x188/0x24e [ 1124.438990][T29569] ? show_regs_print_info+0x12/0x12 [ 1124.444246][T29569] ? load_image+0x400/0x400 [ 1124.448846][T29569] sysfs_warn_dup+0x8a/0xa0 [ 1124.453408][T29569] sysfs_do_create_link_sd+0xc0/0x110 [ 1124.458914][T29569] device_add+0x7ed/0xfb0 [ 1124.463332][T29569] wiphy_register+0x1d9f/0x2ac0 [ 1124.468292][T29569] ? cfg80211_event_work+0x40/0x40 [ 1124.473471][T29569] ? ieee80211_register_hw+0x2be1/0x39f0 [ 1124.479148][T29569] ? ieee80211_register_hw+0x2a3c/0x39f0 [ 1124.484828][T29569] ? kasan_check_range+0x10/0x290 [ 1124.489994][T29569] ieee80211_register_hw+0x2d00/0x39f0 [ 1124.495541][T29569] ? ieee80211_register_hw+0xee1/0x39f0 [ 1124.501132][T29569] ? ieee80211_register_hw+0xee1/0x39f0 [ 1124.506756][T29569] ? ieee80211_tasklet_handler+0x20/0x20 [ 1124.512433][T29569] ? lockdep_hardirqs_on+0x94/0x140 [ 1124.517674][T29569] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1124.523924][T29569] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1124.529753][T29569] hwsim_new_radio_nl+0xafa/0xce0 [ 1124.534877][T29569] genl_family_rcv_msg_doit+0x22a/0x330 [ 1124.540481][T29569] ? end_current_label_crit_section+0x170/0x170 [ 1124.546790][T29569] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1124.552773][T29569] ? bpf_lsm_capable+0x5/0x10 [ 1124.557498][T29569] ? security_capable+0x85/0xb0 [ 1124.562593][T29569] genl_rcv_msg+0x604/0x790 [ 1124.567143][T29569] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1124.573378][T29569] ? genl_bind+0x360/0x360 [ 1124.577842][T29569] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1124.584247][T29569] ? lock_acquire+0x225/0x4a0 [ 1124.588990][T29569] netlink_rcv_skb+0x1fb/0x450 [ 1124.593805][T29569] ? genl_bind+0x360/0x360 [ 1124.598266][T29569] ? netlink_ack+0x1170/0x1170 [ 1124.603119][T29569] ? down_read+0x1a8/0x2d0 [ 1124.607594][T29569] genl_rcv+0x24/0x40 [ 1124.611614][T29569] netlink_unicast+0x74d/0x8d0 [ 1124.616468][T29569] netlink_sendmsg+0x8ad/0xbd0 [ 1124.621312][T29569] ? netlink_getsockopt+0x550/0x550 [ 1124.626568][T29569] ? aa_sock_msg_perm+0x94/0x150 [ 1124.631560][T29569] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1124.636883][T29569] ? security_socket_sendmsg+0x7c/0xa0 [ 1124.642399][T29569] ? netlink_getsockopt+0x550/0x550 [ 1124.647646][T29569] ____sys_sendmsg+0x5be/0x970 [ 1124.652493][T29569] ? __sys_sendmsg_sock+0x30/0x30 [ 1124.657556][T29569] ? __import_iovec+0x315/0x500 [ 1124.662482][T29569] ? import_iovec+0x6f/0xa0 [ 1124.667049][T29569] ___sys_sendmsg+0x2a2/0x360 [ 1124.671778][T29569] ? try_to_wake_up+0x6ae/0x1080 [ 1124.676777][T29569] ? __sys_sendmsg+0x290/0x290 [ 1124.681655][T29569] ? btf_new_fd+0x396/0x780 [ 1124.686373][T29569] __se_sys_sendmsg+0x1bb/0x2a0 [ 1124.691268][T29569] ? ct_nmi_exit+0x145/0x1c0 [ 1124.695907][T29569] ? __x64_sys_sendmsg+0x80/0x80 [ 1124.700948][T29569] ? lockdep_hardirqs_on+0x94/0x140 [ 1124.706201][T29569] do_syscall_64+0x4c/0xa0 [ 1124.710663][T29569] ? clear_bhb_loop+0x60/0xb0 [ 1124.715371][T29569] ? clear_bhb_loop+0x60/0xb0 [ 1124.720099][T29569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1124.726031][T29569] RIP: 0033:0x7f630079c799 [ 1124.730490][T29569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.750137][T29569] RSP: 002b:00007f63016ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.758603][T29569] RAX: ffffffffffffffda RBX: 00007f6300a15fa0 RCX: 00007f630079c799 [ 1124.766608][T29569] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1124.774618][T29569] RBP: 00007f6300832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1124.782619][T29569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.790626][T29569] R13: 00007f6300a16038 R14: 00007f6300a15fa0 R15: 00007ffec295aeb8 [ 1124.798686][T29569] [ 1124.980183][T29574] netlink: 'syz.3.6905': attribute type 21 has an invalid length. [ 1125.009428][T29583] netlink: 'syz.3.6905': attribute type 4 has an invalid length. [ 1125.017223][T29583] netlink: 73924 bytes leftover after parsing attributes in process `syz.3.6905'. [ 1125.099468][T29574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6905'. [ 1125.194783][T29574] netlink: 'syz.3.6905': attribute type 10 has an invalid length. [ 1125.207789][T29588] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.6909'. [ 1125.252217][T29589] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.6909'. [ 1125.274085][T29574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6905'. [ 1125.389289][T29574] bridge0: port 3(veth0_vlan) entered blocking state [ 1125.399923][T29574] bridge0: port 3(veth0_vlan) entered disabled state [ 1125.499549][T29574] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1125.765800][T29600] netlink: 'syz.4.6910': attribute type 8 has an invalid length. [ 1125.794528][T29600] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.6910'. [ 1126.984519][T29617] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6913'. [ 1126.984787][T29616] netlink: 'syz.1.6914': attribute type 3 has an invalid length. [ 1127.519020][T29618] __nla_validate_parse: 1 callbacks suppressed [ 1127.519042][T29618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6914'. [ 1127.632024][T29618] tc_dump_action: action bad kind [ 1128.265357][T29629] device syzkaller0 entered promiscuous mode [ 1130.508959][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 1135.295229][T29681] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6935'. [ 1135.710248][T29696] netlink: 'syz.4.6938': attribute type 28 has an invalid length. [ 1135.990923][T29703] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6950'. [ 1136.809766][T29707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6940'. [ 1136.868459][T29707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6940'. [ 1136.995007][T29719] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6940'. [ 1138.865498][T29740] netlink: 'syz.1.6951': attribute type 28 has an invalid length. [ 1139.083964][T29743] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6954'. [ 1139.448745][T29753] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6959'. [ 1140.039371][T29772] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6965'. [ 1140.102821][T29772] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6965'. [ 1140.168589][T29765] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6962'. [ 1140.899594][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1141.776652][T29799] __nla_validate_parse: 2 callbacks suppressed [ 1141.776692][T29799] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6972'. [ 1142.512301][T29813] netlink: 'syz.3.6977': attribute type 5 has an invalid length. [ 1143.479584][T29838] netlink: 'syz.3.6983': attribute type 7 has an invalid length. [ 1143.520750][T29833] netlink: 'syz.2.6982': attribute type 11 has an invalid length. [ 1143.538477][T29833] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6982'. [ 1143.565221][T29830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1143.698962][T15178] Bluetooth: hci0: command 0x0406 tx timeout [ 1143.804210][T29846] netlink: 'syz.4.6986': attribute type 21 has an invalid length. [ 1143.861079][T29846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6986'. [ 1143.929713][T29850] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6988'. [ 1144.279654][T29862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6990'. [ 1144.359515][T29862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6990'. [ 1144.469405][T29865] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6990'. [ 1144.539982][T29862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6990'. [ 1144.639965][T29863] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6990'. [ 1144.761303][T29863] netlink: 'syz.1.6990': attribute type 39 has an invalid length. [ 1145.003115][T29872] device syzkaller0 entered promiscuous mode [ 1151.869620][T29911] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7004'. [ 1152.062022][T29917] netlink: 'syz.3.7007': attribute type 2 has an invalid length. [ 1152.087722][T29917] netlink: 'syz.3.7007': attribute type 8 has an invalid length. [ 1152.124858][T29917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7007'. [ 1152.137524][T29924] netlink: 'syz.3.7007': attribute type 2 has an invalid length. [ 1152.151268][T29924] netlink: 'syz.3.7007': attribute type 8 has an invalid length. [ 1152.165448][T29924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7007'. [ 1152.336084][T29933] netlink: 'syz.2.7012': attribute type 10 has an invalid length. [ 1152.633368][T29933] team0: Cannot enslave team device to itself [ 1152.680949][T29940] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7013'. [ 1152.714731][T29952] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1152.800992][T29952] device syzkaller0 entered promiscuous mode [ 1153.956080][T24690] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1158.358694][T29971] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7023'. [ 1158.401747][T29989] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.7028'. [ 1159.270293][T30031] netlink: 'syz.2.7040': attribute type 10 has an invalid length. [ 1160.207982][T30062] netlink: 'syz.0.7051': attribute type 10 has an invalid length. [ 1160.292592][T30062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.361780][T30062] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1160.483582][T30063] netlink: 'syz.0.7051': attribute type 4 has an invalid length. [ 1160.511611][T30063] netlink: 'syz.0.7051': attribute type 8 has an invalid length. [ 1160.569211][T30063] netlink: 109560 bytes leftover after parsing attributes in process `syz.0.7051'. [ 1161.217918][T30080] netlink: 2739 bytes leftover after parsing attributes in process `syz.0.7056'. [ 1161.775991][T30092] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7058'. [ 1161.836845][T30092] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1162.596517][T30108] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.7065'. [ 1162.625760][T30108] netlink: zone id is out of range [ 1162.646371][T30108] netlink: zone id is out of range [ 1162.661999][T30108] netlink: zone id is out of range [ 1162.667601][T30108] netlink: zone id is out of range [ 1162.694985][T30108] netlink: zone id is out of range [ 1162.703857][T30108] netlink: zone id is out of range [ 1162.721965][T30108] netlink: zone id is out of range [ 1162.727927][T30108] netlink: zone id is out of range [ 1162.729600][T30120] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7068'. [ 1162.746407][T30108] netlink: zone id is out of range [ 1162.806669][T30120] tc_dump_action: action bad kind [ 1166.670132][T30129] device syzkaller0 entered promiscuous mode [ 1166.694166][T30139] netlink: 'syz.4.7071': attribute type 21 has an invalid length. [ 1166.719060][T30154] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1166.848179][T30154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.871945][T30154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.909844][T30154] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1166.936492][T30154] bond0 (unregistering): Released all slaves [ 1167.566071][T30182] netlink: 'syz.4.7083': attribute type 3 has an invalid length. [ 1167.593679][T30182] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7083'. [ 1167.766567][T30198] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7089'. [ 1167.822395][T30198] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7089'. [ 1167.859952][T30205] netlink: 'syz.1.7091': attribute type 27 has an invalid length. [ 1167.880847][T30205] net_ratelimit: 3661 callbacks suppressed [ 1167.880865][T30205] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1167.932896][T30199] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7089'. [ 1168.198026][T30210] netlink: 'syz.1.7092': attribute type 13 has an invalid length. [ 1168.219103][T30210] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7092'. [ 1168.262743][T30210] syz_tun: refused to change device tx_queue_len [ 1168.270576][T30210] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1168.320095][T30219] netlink: 'syz.1.7092': attribute type 13 has an invalid length. [ 1168.331410][T30219] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7092'. [ 1168.346483][T30219] syz_tun: refused to change device tx_queue_len [ 1168.363563][T30219] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1168.393654][T30210] netlink: 'syz.1.7092': attribute type 10 has an invalid length. [ 1168.414143][T30210] batman_adv: batadv0: Removing interface: netdevsim0 [ 1168.586114][T30210] team0: Port device netdevsim0 added [ 1169.806375][T30241] Ÿë: port 1(gretap0) entered blocking state [ 1169.853422][T30241] Ÿë: port 1(gretap0) entered disabled state [ 1169.885446][T30241] device gretap0 entered promiscuous mode [ 1169.903656][T30249] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.7102'. [ 1169.955142][T30249] netlink: zone id is out of range [ 1170.010240][T30249] netlink: zone id is out of range [ 1170.076761][T30249] netlink: zone id is out of range [ 1170.131461][T30249] netlink: zone id is out of range [ 1170.197674][T30249] netlink: zone id is out of range [ 1170.269280][T30249] netlink: zone id is out of range [ 1170.274585][T30249] netlink: zone id is out of range [ 1170.917340][T30270] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7107'. [ 1171.216112][T30278] netlink: 'syz.3.7109': attribute type 10 has an invalid length. [ 1171.299042][T30278] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7109'. [ 1171.590376][T30283] netlink: 'syz.4.7111': attribute type 10 has an invalid length. [ 1171.666875][T30283] netlink: 'syz.4.7111': attribute type 10 has an invalid length. [ 1171.755719][T30283] __nla_validate_parse: 4 callbacks suppressed [ 1171.755737][T30283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7111'. [ 1172.590258][T30306] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7118'. [ 1173.076377][T30326] netlink: 'syz.1.7124': attribute type 9 has an invalid length. [ 1173.114814][T30326] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7124'. [ 1174.313297][T30363] netlink: 'syz.1.7133': attribute type 10 has an invalid length. [ 1174.373642][T30363] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7133'. [ 1174.483844][T30360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.501917][T30360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.557207][T30360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.575049][T30360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.731045][T30360] bond0: (slave batadv0): Releasing backup interface [ 1174.813998][T30361] netlink: 'syz.2.7134': attribute type 21 has an invalid length. [ 1174.872133][T30361] netlink: 'syz.2.7134': attribute type 6 has an invalid length. [ 1174.951606][T30361] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7134'. [ 1175.225423][T30371] syz.0.7137[30371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1175.225902][T30371] syz.0.7137[30371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1175.545172][T30387] netlink: 'syz.1.7141': attribute type 21 has an invalid length. [ 1175.696948][T30387] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7141'. [ 1175.966929][T30400] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7143'. [ 1176.378663][T30413] device syzkaller0 entered promiscuous mode [ 1176.946775][T30424] netlink: 'syz.1.7153': attribute type 21 has an invalid length. [ 1176.969288][T30424] netlink: 'syz.1.7153': attribute type 1 has an invalid length. [ 1176.977339][T30424] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.7153'. [ 1177.125743][T30432] netlink: 'syz.2.7158': attribute type 3 has an invalid length. [ 1177.143861][T30432] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7158'. [ 1177.466105][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.472686][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.545503][T30511] netlink: 'syz.0.7176': attribute type 33 has an invalid length. [ 1179.679107][T30511] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7176'. [ 1180.532951][T30534] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7186'. [ 1182.451130][T30560] sctp: [Deprecated]: syz.4.7192 (pid 30560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1182.451130][T30560] Use struct sctp_sack_info instead [ 1182.577449][T30562] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7194'. [ 1182.577737][T30565] netlink: 177648 bytes leftover after parsing attributes in process `syz.2.7196'. [ 1183.185055][T30575] netlink: 'syz.1.7199': attribute type 6 has an invalid length. [ 1183.219127][T30575] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.7199'. [ 1184.494291][T30609] netlink: 'syz.1.7208': attribute type 1 has an invalid length. [ 1185.002115][T30618] netlink: 'syz.3.7211': attribute type 29 has an invalid length. [ 1185.138930][T30618] netlink: 'syz.3.7211': attribute type 29 has an invalid length. [ 1185.192359][T30624] netlink: 'syz.3.7211': attribute type 29 has an invalid length. [ 1185.219337][T30620] netlink: 'syz.3.7211': attribute type 29 has an invalid length. [ 1185.308126][T30629] netlink: 'syz.3.7211': attribute type 29 has an invalid length. [ 1185.701153][ T6502] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1185.815395][T30644] netlink: 'syz.1.7218': attribute type 11 has an invalid length. [ 1185.882613][T30644] netlink: 91080 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1186.095536][T30642] netlink: 'syz.2.7215': attribute type 10 has an invalid length. [ 1186.212484][T30642] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7215'. [ 1186.355587][T30642] device batadv_slave_1 entered promiscuous mode [ 1186.567635][T30647] netlink: 'syz.2.7215': attribute type 10 has an invalid length. [ 1186.618940][T30647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7215'. [ 1186.628420][T30647] device dummy0 entered promiscuous mode [ 1186.640014][T30647] bridge0: port 3(dummy0) entered blocking state [ 1186.666948][T30647] bridge0: port 3(dummy0) entered disabled state [ 1186.740664][T30647] bridge0: port 3(dummy0) entered blocking state [ 1186.747156][T30647] bridge0: port 3(dummy0) entered forwarding state [ 1188.142280][T30659] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.7222'. [ 1190.375031][T30685] can: request_module (can-proto-0) failed. [ 1190.413778][T30699] netlink: 'syz.0.7234': attribute type 10 has an invalid length. [ 1190.515139][T30699] team0: Device hsr_slave_0 failed to register rx_handler [ 1190.586170][T30705] netlink: 'syz.1.7235': attribute type 22 has an invalid length. [ 1190.607117][T30705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7235'. [ 1190.887251][T30712] netlink: 'syz.3.7238': attribute type 2 has an invalid length. [ 1190.929292][T30713] netlink: 'syz.3.7238': attribute type 2 has an invalid length. [ 1190.960600][T30713] device 0 entered promiscuous mode [ 1191.016800][T30712] device 1 entered promiscuous mode [ 1191.126602][T30721] netlink: 'syz.0.7241': attribute type 2 has an invalid length. [ 1191.190917][T30721] netlink: 'syz.0.7241': attribute type 1 has an invalid length. [ 1191.555887][T30740] netlink: 'syz.0.7244': attribute type 1 has an invalid length. [ 1191.628124][T30740] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.7244'. [ 1192.717890][T30758] can: request_module (can-proto-0) failed. [ 1194.000146][T30790] netlink: 'syz.4.7258': attribute type 10 has an invalid length. [ 1194.013487][T30790] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7258'. [ 1194.028129][T30790] device batadv_slave_1 entered promiscuous mode [ 1194.071897][T30790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.106807][T30796] netlink: 'syz.3.7261': attribute type 3 has an invalid length. [ 1194.108232][T30790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.144130][T30796] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7261'. [ 1194.633830][T30797] netlink: 'syz.4.7258': attribute type 10 has an invalid length. [ 1194.692533][T30797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7258'. [ 1194.750221][T30797] device dummy0 entered promiscuous mode [ 1194.990470][T30797] team0: Port device dummy0 removed [ 1195.033793][T30797] bridge0: port 3(dummy0) entered blocking state [ 1195.061075][T30797] bridge0: port 3(dummy0) entered disabled state [ 1195.362392][T30813] can: request_module (can-proto-0) failed. [ 1195.666839][T30828] netlink: 'syz.1.7269': attribute type 2 has an invalid length. [ 1195.775434][T30828] device 0 entered promiscuous mode [ 1196.004618][T30839] netlink: 'syz.4.7272': attribute type 21 has an invalid length. [ 1197.156874][T30872] netlink: 'syz.3.7280': attribute type 21 has an invalid length. [ 1197.194289][T30872] netlink: 'syz.3.7280': attribute type 1 has an invalid length. [ 1197.228588][T30871] netlink: 'syz.3.7280': attribute type 21 has an invalid length. [ 1197.262315][T30871] netlink: 'syz.3.7280': attribute type 1 has an invalid length. [ 1197.505024][T30880] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7283'. [ 1197.654734][T30885] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7281'. [ 1197.835372][T30892] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7287'. [ 1197.874359][T30892] net_ratelimit: 3664 callbacks suppressed [ 1197.874397][T30892] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1198.051781][T30885] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1198.058681][T30901] netlink: 'syz.1.7289': attribute type 4 has an invalid length. [ 1198.102049][T30901] netlink: 'syz.1.7289': attribute type 1 has an invalid length. [ 1198.144483][T30901] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.7289'. [ 1198.728581][T30918] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7291'. [ 1199.068967][T30921] FAULT_INJECTION: forcing a failure. [ 1199.068967][T30921] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.125348][T30921] CPU: 1 PID: 30921 Comm: syz.1.7292 Not tainted syzkaller #0 [ 1199.132865][T30921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1199.142943][T30921] Call Trace: [ 1199.146245][T30921] [ 1199.149195][T30921] dump_stack_lvl+0x188/0x24e [ 1199.153902][T30921] ? show_regs_print_info+0x12/0x12 [ 1199.159131][T30921] ? load_image+0x400/0x400 [ 1199.163662][T30921] ? __might_sleep+0xd0/0xd0 [ 1199.168268][T30921] ? __lock_acquire+0x7d10/0x7d10 [ 1199.173323][T30921] should_fail_ex+0x399/0x4d0 [ 1199.178020][T30921] should_failslab+0x5/0x20 [ 1199.182547][T30921] slab_pre_alloc_hook+0x59/0x310 [ 1199.187734][T30921] ? kvmalloc_node+0x6c/0x180 [ 1199.192525][T30921] __kmem_cache_alloc_node+0x4f/0x260 [ 1199.197928][T30921] ? kvmalloc_node+0x6c/0x180 [ 1199.202632][T30921] __kmalloc_node+0xa0/0x240 [ 1199.207249][T30921] kvmalloc_node+0x6c/0x180 [ 1199.211764][T30921] bpf_test_run_xdp_live+0x209/0x1a90 [ 1199.217148][T30921] ? 0xffffffffa00041c0 [ 1199.221305][T30921] ? text_poke_copy+0x79/0x90 [ 1199.226098][T30921] ? 0xffffffffa00041c0 [ 1199.230270][T30921] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1199.236169][T30921] ? 0xffffffffa00041c0 [ 1199.240325][T30921] ? xdp_convert_md_to_buff+0x330/0x330 [ 1199.245900][T30921] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1199.252145][T30921] ? bpf_test_init+0x119/0x140 [ 1199.256908][T30921] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1199.262360][T30921] bpf_prog_test_run_xdp+0x736/0xf10 [ 1199.267651][T30921] ? dev_put+0x80/0x80 [ 1199.271727][T30921] ? dev_put+0x80/0x80 [ 1199.275797][T30921] bpf_prog_test_run+0x31e/0x390 [ 1199.280746][T30921] __sys_bpf+0x62b/0x780 [ 1199.284989][T30921] ? bpf_link_show_fdinfo+0x380/0x380 [ 1199.290389][T30921] ? lock_chain_count+0x20/0x20 [ 1199.295250][T30921] __x64_sys_bpf+0x78/0x90 [ 1199.299673][T30921] do_syscall_64+0x4c/0xa0 [ 1199.304095][T30921] ? clear_bhb_loop+0x60/0xb0 [ 1199.308776][T30921] ? clear_bhb_loop+0x60/0xb0 [ 1199.313462][T30921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1199.319370][T30921] RIP: 0033:0x7f630079c799 [ 1199.323784][T30921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.343530][T30921] RSP: 002b:00007f63016ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1199.351966][T30921] RAX: ffffffffffffffda RBX: 00007f6300a15fa0 RCX: 00007f630079c799 [ 1199.359943][T30921] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1199.367925][T30921] RBP: 00007f63016ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.375913][T30921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.383887][T30921] R13: 00007f6300a16038 R14: 00007f6300a15fa0 R15: 00007ffec295aeb8 [ 1199.391873][T30921] [ 1200.468300][T30954] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7299'. [ 1200.482153][T30948] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7298'. [ 1201.057587][T30959] netlink: 'syz.3.7301': attribute type 41 has an invalid length. [ 1201.897109][T30977] netlink: 'syz.1.7304': attribute type 10 has an invalid length. [ 1201.955923][T30977] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7304'. [ 1204.502772][T31011] netlink: 'syz.4.7311': attribute type 2 has an invalid length. [ 1204.518695][T30977] team0: Port device macvlan1 removed [ 1204.598999][T31011] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7311'. [ 1205.149588][T31023] netlink: 'syz.2.7316': attribute type 10 has an invalid length. [ 1205.219379][T31023] team0: Cannot enslave team device to itself [ 1205.251523][T31031] netlink: 'syz.0.7318': attribute type 2 has an invalid length. [ 1205.336313][T31031] netlink: 'syz.0.7318': attribute type 1 has an invalid length. [ 1205.430092][T31031] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.7318'. [ 1206.785792][T31078] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.7330'. [ 1207.247516][T31084] device veth1_macvtap left promiscuous mode [ 1207.371557][T31084] netlink: 'syz.2.7331': attribute type 29 has an invalid length. [ 1207.482434][T31084] netlink: 'syz.2.7331': attribute type 29 has an invalid length. [ 1208.029551][T31099] netlink: 'syz.2.7335': attribute type 10 has an invalid length. [ 1208.157450][T31099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7335'. [ 1208.172043][T31099] netlink: 'syz.2.7335': attribute type 10 has an invalid length. [ 1208.193033][T31099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7335'. [ 1208.614770][T31116] netlink: 'syz.2.7338': attribute type 10 has an invalid length. [ 1208.680834][T31116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.751476][T31116] bond0: (slave team0): Enslaving as an active interface with an up link [ 1208.968743][T31122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.978052][T31122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.034880][T31129] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1209.042524][T31129] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1210.965140][T31180] netlink: 'syz.1.7355': attribute type 7 has an invalid length. [ 1211.195824][T31184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7357'. [ 1212.373387][T31222] netlink: 'syz.4.7368': attribute type 3 has an invalid length. [ 1212.407312][T31222] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7368'. [ 1212.788137][T31230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7370'. [ 1213.157808][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7370'. [ 1213.182775][T31227] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7370'. [ 1213.263287][T31229] netlink: 'syz.3.7369': attribute type 27 has an invalid length. [ 1213.373395][T31229] bond0: (slave bond_slave_0): Releasing backup interface [ 1214.227418][T31268] netlink: 'syz.4.7382': attribute type 29 has an invalid length. [ 1214.270300][T31268] netlink: 'syz.4.7382': attribute type 29 has an invalid length. [ 1214.312753][T31268] netlink: 'syz.4.7382': attribute type 29 has an invalid length. [ 1214.378408][T31274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.386090][T31274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.636726][T31284] netlink: 'syz.1.7386': attribute type 10 has an invalid length. [ 1214.660848][T31284] device hsr0 entered promiscuous mode [ 1214.720850][T31284] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1214.776199][T31284] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1214.812031][T31284] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1214.842337][T31284] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1215.092478][T31306] netlink: 'syz.1.7392': attribute type 2 has an invalid length. [ 1215.127955][T31306] netlink: 'syz.1.7392': attribute type 8 has an invalid length. [ 1215.163945][T31306] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7392'. [ 1215.527952][T31323] netlink: 'syz.1.7396': attribute type 27 has an invalid length. [ 1215.556771][T31323] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7396'. [ 1216.893122][T31368] device syzkaller0 entered promiscuous mode [ 1216.986162][T31368] netlink: 'syz.3.7408': attribute type 3 has an invalid length. [ 1216.998948][T31368] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7408'. [ 1217.169766][T31378] netlink: 'syz.2.7410': attribute type 10 has an invalid length. [ 1217.185936][T31378] team0: Device bond0 is already an upper device of the team interface [ 1217.209316][T31381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7412'. [ 1217.241988][T31377] delete_channel: no stack [ 1217.852867][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1222.256406][T31385] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1222.258952][T31386] netlink: 'syz.4.7411': attribute type 27 has an invalid length. [ 1222.268137][T31385] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1222.290156][T31385] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1222.815494][T31420] netlink: 'syz.2.7418': attribute type 22 has an invalid length. [ 1222.864071][T31423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7421'. [ 1222.948116][T31423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7421'. [ 1223.838078][T31445] sock: sock_timestamping_bind_phc: sock not bind to device [ 1224.643521][T31461] netlink: 'syz.0.7431': attribute type 3 has an invalid length. [ 1224.724019][T31463] netlink: 'syz.2.7433': attribute type 41 has an invalid length. [ 1224.732615][T31461] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7431'. [ 1224.775280][T31463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7433'. [ 1224.850863][T31463] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1224.906457][T31464] netlink: 'syz.4.7432': attribute type 10 has an invalid length. [ 1227.048198][T31464] device veth1_macvtap left promiscuous mode [ 1227.329807][T31472] netlink: 'syz.0.7434': attribute type 2 has an invalid length. [ 1227.337602][T31472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7434'. [ 1227.455742][T31472] netlink: 'syz.0.7434': attribute type 2 has an invalid length. [ 1227.583337][T31472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7434'. [ 1227.659080][T31480] netlink: 'syz.0.7434': attribute type 10 has an invalid length. [ 1227.730876][T31480] device geneve0 entered promiscuous mode [ 1228.349372][T20247] device syz_tun left promiscuous mode [ 1228.355394][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1228.360381][T20247] Ÿë: port 1(syz_tun) entered disabled state [ 1228.366759][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1228.380647][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1228.389687][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1228.408048][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1228.415531][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1228.425669][T31509] device syzkaller0 entered promiscuous mode [ 1228.492030][T31509] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1228.805915][T31505] Â: renamed from pim6reg1 [ 1228.928266][T31507] chnl_net:caif_netlink_parms(): no params data found [ 1229.231294][T31523] sock: sock_timestamping_bind_phc: sock not bind to device [ 1229.277972][T31507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.316944][T31507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.437867][T31507] device bridge_slave_0 entered promiscuous mode [ 1229.531962][T31507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.592555][T31507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.638967][T31507] device bridge_slave_1 entered promiscuous mode [ 1229.725785][T31507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.802188][T31507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.499084][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 1230.686480][T31507] team0: Port device team_slave_0 added [ 1230.805895][T31547] device syzkaller0 entered promiscuous mode [ 1230.822435][T31507] team0: Port device team_slave_1 added [ 1230.956455][T31566] netlink: 'syz.2.7459': attribute type 2 has an invalid length. [ 1230.971699][T31566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7459'. [ 1230.990598][T31507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.003819][T31507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.041116][T31507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.384993][T15178] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1246.402036][T15178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1246.410811][T15178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1246.419433][T15178] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1246.428655][T15178] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1246.436485][T15178] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1248.146159][ T4282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1248.155981][ T4282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1248.165250][ T4275] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1248.174327][ T4275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1248.182538][ T4282] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1248.190067][ T4282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1248.504582][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 1248.737684][ T4282] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1248.756549][ T4282] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1248.764958][ T4282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1248.773676][ T4282] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1248.781966][ T4282] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1248.789808][ T4282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1248.833114][ T4480] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1250.259029][ T4282] Bluetooth: hci6: command 0x0409 tx timeout [ 1250.439835][ T4282] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1250.457879][ T4282] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1250.466095][ T4282] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1250.479379][ T4282] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1250.487111][ T4282] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1250.494967][ T4282] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1250.578946][T15178] Bluetooth: hci5: command 0x041b tx timeout [ 1250.819237][T15178] Bluetooth: hci7: command 0x0409 tx timeout [ 1252.339027][T15178] Bluetooth: hci6: command 0x041b tx timeout [ 1252.582876][T15178] Bluetooth: hci8: command 0x0409 tx timeout [ 1252.663054][T15178] Bluetooth: hci5: command 0x040f tx timeout [ 1252.902844][T15178] Bluetooth: hci7: command 0x041b tx timeout [ 1254.418972][T15178] Bluetooth: hci6: command 0x040f tx timeout [ 1254.662712][T15178] Bluetooth: hci8: command 0x041b tx timeout [ 1254.743080][T15178] Bluetooth: hci5: command 0x0419 tx timeout [ 1254.983124][T15178] Bluetooth: hci7: command 0x040f tx timeout [ 1256.498972][T15178] Bluetooth: hci6: command 0x0419 tx timeout [ 1256.742793][T15178] Bluetooth: hci8: command 0x040f tx timeout [ 1257.068847][T15178] Bluetooth: hci7: command 0x0419 tx timeout [ 1258.103405][T15186] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2675 jiffies s: 150141 root: 0x1/. [ 1258.144892][T15186] rcu: blocking rcu_node structures (internal RCU debug): [ 1258.168413][T15186] Sending NMI from CPU 1 to CPUs 0: [ 1258.173855][ C0] NMI backtrace for cpu 0 [ 1258.173867][ C0] CPU: 0 PID: 31581 Comm: syz.2.7461 Not tainted syzkaller #0 [ 1258.173883][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1258.173891][ C0] RIP: 0010:__lock_acquire+0x12f4/0x7d10 [ 1258.173917][ C0] Code: 00 00 48 8b 44 24 18 8b 00 89 c3 81 e3 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 40 62 af 90 be 08 00 00 00 e8 2c 0a 6f 00 <48> 0f a3 1d 24 0d 4b 0f 73 1a 48 8d 04 5b c1 e0 06 48 8d 98 00 e1 [ 1258.173929][ C0] RSP: 0018:ffffc900038e6a40 EFLAGS: 00000056 [ 1258.173942][ C0] RAX: 0000000000000001 RBX: 0000000000000015 RCX: ffffffff81645514 [ 1258.173953][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90af6240 [ 1258.173962][ C0] RBP: ffffc900038e6c90 R08: ffffffff90af6247 R09: 1ffffffff215ec48 [ 1258.173973][ C0] R10: dffffc0000000000 R11: fffffbfff215ec49 R12: 0000000086542727 [ 1258.173984][ C0] R13: 00000000ac40c02a R14: 000000001034b149 R15: ffff888057caa890 [ 1258.173995][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1258.174007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1258.174018][ C0] CR2: 00007f19d1ffb000 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 1258.174031][ C0] DR0: 0000200000000300 DR1: 8000000000000000 DR2: 0000000000000000 [ 1258.174042][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1258.174051][ C0] Call Trace: [ 1258.174056][ C0] [ 1258.174066][ C0] ? mark_lock+0x94/0x320 [ 1258.174088][ C0] ? mark_lock+0x94/0x320 [ 1258.174104][ C0] ? verify_lock_unused+0x140/0x140 [ 1258.174124][ C0] ? mark_lock+0x94/0x320 [ 1258.174141][ C0] ? __lock_acquire+0x12f4/0x7d10 [ 1258.174160][ C0] lock_acquire+0x1bb/0x4a0 [ 1258.174177][ C0] ? __virt_addr_valid+0x188/0x540 [ 1258.174275][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1258.174292][ C0] ? verify_lock_unused+0x140/0x140 [ 1258.174308][ C0] ? llist_add_batch+0x12b/0x180 [ 1258.174325][ C0] ? find_next_clump8+0x1a0/0x1a0 [ 1258.174339][ C0] ? __virt_addr_valid+0x188/0x540 [ 1258.174355][ C0] __virt_addr_valid+0x1a5/0x540 [ 1258.174372][ C0] ? __virt_addr_valid+0x188/0x540 [ 1258.174389][ C0] kasan_addr_to_slab+0x9/0xc0 [ 1258.174406][ C0] __kasan_record_aux_stack+0xf/0xc0 [ 1258.174420][ C0] irq_work_queue_on+0x10f/0x260 [ 1258.174473][ C0] rcu_read_unlock_special+0x3c9/0x510 [ 1258.174515][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1258.174529][ C0] ? __cant_sleep+0x220/0x220 [ 1258.174545][ C0] __rcu_read_unlock+0x78/0xd0 [ 1258.174558][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1258.174575][ C0] trace_call_bpf+0x5bb/0x6b0 [ 1258.174591][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1258.174610][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1258.174626][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1258.174642][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 1258.174658][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1258.174676][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1258.174697][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 1258.174740][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1258.174757][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1258.174774][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1258.174793][ C0] ? lock_chain_count+0x20/0x20 [ 1258.174811][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1258.174826][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 1258.174845][ C0] trace_hardirqs_on+0x24/0x40 [ 1258.174867][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1258.174882][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1258.174897][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1258.174909][ C0] RSP: 0018:ffffc900038e72e0 EFLAGS: 00000206 [ 1258.174922][ C0] RAX: 19e9648c3adbbb00 RBX: 1ffff9200071ce64 RCX: 19e9648c3adbbb00 [ 1258.174933][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 1258.174944][ C0] RBP: ffffc900038e73d8 R08: ffffffff90af6247 R09: 1ffffffff215ec48 [ 1258.174955][ C0] R10: dffffc0000000000 R11: fffffbfff215ec49 R12: 0000000000000246 [ 1258.174966][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 1258.174984][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1258.174998][ C0] ? folio_memcg_lock+0xf2/0x320 [ 1258.175039][ C0] ? folio_memcg_lock+0x7d/0x320 [ 1258.175054][ C0] ? mem_cgroup_get_oom_group+0x350/0x350 [ 1258.175072][ C0] __rcu_read_unlock+0x78/0xd0 [ 1258.175086][ C0] __folio_memcg_unlock+0xea/0x110 [ 1258.175103][ C0] page_remove_rmap+0x7e3/0xea0 [ 1258.175122][ C0] unmap_page_range+0x114a/0x2500 [ 1258.175152][ C0] unmap_vmas+0x260/0x390 [ 1258.175169][ C0] ? unmap_vmas+0x1bd/0x390 [ 1258.175186][ C0] ? unmap_page_range+0x2500/0x2500 [ 1258.175205][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1258.175221][ C0] ? mas_next_entry+0xe27/0xed0 [ 1258.175251][ C0] exit_mmap+0x20d/0x960 [ 1258.175268][ C0] ? vm_brk+0x20/0x20 [ 1258.175283][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1258.175305][ C0] ? exit_mm+0x1ee/0x2d0 [ 1258.175373][ C0] ? uprobe_clear_state+0x274/0x290 [ 1258.175391][ C0] ? mm_update_next_owner+0x525/0x650 [ 1258.175415][ C0] __mmput+0x118/0x3c0 [ 1258.175430][ C0] exit_mm+0x1fe/0x2d0 [ 1258.175448][ C0] ? do_exit+0x2480/0x2480 [ 1258.175465][ C0] ? taskstats_exit+0x35a/0x9d0 [ 1258.175512][ C0] do_exit+0x905/0x2480 [ 1258.175530][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1258.175550][ C0] ? put_task_struct+0x80/0x80 [ 1258.175567][ C0] ? ct_nmi_exit+0x145/0x1c0 [ 1258.175582][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1258.175600][ C0] ? lock_chain_count+0x20/0x20 [ 1258.175618][ C0] do_group_exit+0x217/0x2d0 [ 1258.175636][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1258.175650][ C0] get_signal+0x1272/0x1350 [ 1258.175699][ C0] arch_do_signal_or_restart+0xc4/0x1350 [ 1258.175739][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1258.175757][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1258.175776][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1258.175795][ C0] ? get_sigframe_size+0x10/0x10 [ 1258.175811][ C0] ? ct_nmi_exit+0x145/0x1c0 [ 1258.175824][ C0] ? ct_irq_exit_irqson+0x113/0x170 [ 1258.175841][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1258.175873][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1258.175915][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1258.175934][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1258.175952][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1258.175967][ C0] ret_from_fork+0x15/0x30 [ 1258.175990][ C0] RIP: 0033:0x7f4f0719d589 [ 1258.176002][ C0] Code: Unable to access opcode bytes at 0x7f4f0719d55f. [ 1258.176009][ C0] RSP: 002b:00007f4f080c91c0 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1258.176023][ C0] RAX: 0000000000000000 RBX: 00007f4f07158b20 RCX: 00007f4f0719d589 [ 1258.176033][ C0] RDX: 00007f4f07158b20 RSI: 0000000000000058 RDI: 00007ffd1e4d8320 [ 1258.176043][ C0] RBP: 00007f4f080c96c0 R08: 00007f4f080c96c0 R09: 00007ffd1e4d8407 [ 1258.176054][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1258.176064][ C0] R13: 000000000000006e R14: 00007ffd1e4d8320 R15: 00007ffd1e4d8408 [ 1258.176079][ C0] [ 1258.869854][T15178] Bluetooth: hci8: command 0x0419 tx timeout