last executing test programs: 1m38.759813567s ago: executing program 0 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r2, 0x37, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x7ffffffe, 0x4, 0x2, 0x80, 0x1, 0x0, 0x4, 0x0, 0x6e9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r8 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) sendmsg$inet(r8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, 0x0) r9 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r9, 0x0, 0xfe33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3}, &(0x7f0000001840), &(0x7f0000001880)='%ps \x00'}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 1m21.715629636s ago: executing program 0 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r2, 0x37, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x7ffffffe, 0x4, 0x2, 0x80, 0x1, 0x0, 0x4, 0x0, 0x6e9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r8 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) sendmsg$inet(r8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, 0x0) r9 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r9, 0x0, 0xfe33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3}, &(0x7f0000001840), &(0x7f0000001880)='%ps \x00'}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 1m4.967309253s ago: executing program 0 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r2, 0x37, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x7ffffffe, 0x4, 0x2, 0x80, 0x1, 0x0, 0x4, 0x0, 0x6e9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r8 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) sendmsg$inet(r8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, 0x0) r9 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r9, 0x0, 0xfe33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3}, &(0x7f0000001840), &(0x7f0000001880)='%ps \x00'}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 46.578613338s ago: executing program 0 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r2, 0x37, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x7ffffffe, 0x4, 0x2, 0x80, 0x1, 0x0, 0x4, 0x0, 0x6e9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r8 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) sendmsg$inet(r8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, 0x0) r9 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r9, 0x0, 0xfe33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3}, &(0x7f0000001840), &(0x7f0000001880)='%ps \x00'}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 30.189528178s ago: executing program 0 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r2, 0x37, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x7ffffffe, 0x4, 0x2, 0x80, 0x1, 0x0, 0x4, 0x0, 0x6e9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r8 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) sendmsg$inet(r8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, 0x0) r9 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r9, 0x0, 0xfe33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3}, &(0x7f0000001840), &(0x7f0000001880)='%ps \x00'}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 14.534784866s ago: executing program 0 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r2, 0x37, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x7ffffffe, 0x4, 0x2, 0x80, 0x1, 0x0, 0x4, 0x0, 0x6e9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r8 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) sendmsg$inet(r8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, 0x0) r9 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r9, 0x0, 0xfe33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3}, &(0x7f0000001840), &(0x7f0000001880)='%ps \x00'}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 4.271651231s ago: executing program 3 (id=1704): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x40, 0x80, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffffe, 0x5, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x10082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{&(0x7f00000007c0)="f4000900062b3325fe80000000000000dc8b850f23848f7e5c74a57f32cd8caf80bc8e7a2f3ce32a", 0x28}], 0x1}, 0x800) 4.115456813s ago: executing program 3 (id=1707): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r2}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000015c0)={r1, r3, 0x0, 0xc, &(0x7f00000002c0)='\xfdP\f\x05:\xd0\xca\xf9\"\x18\x87\x00'}, 0x30) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x100390, 0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000080000000c"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r8, &(0x7f0000000000)="0f9a45", &(0x7f0000000180)=""/87}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b35f8ffff13000000000524ff0f", 0x14}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xff07, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.058126883s ago: executing program 1 (id=1708): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x9, 0xff, 0x0, 0x0, 0x7fef, 0x8a499, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x1, 0x4, 0x7, 0x3, 0x0, 0x8000, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x6, 0x40, 0x0, 0x0, 0x0, 0x5d2d, 0x8040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x805}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x10000005, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x80, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xe512e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x4, @perf_config_ext={0x3, 0x98f8}, 0x320, 0x9, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x8, 0x0, 0x0, 0x0, 0x8, 0xd1, &(0x7f0000000200)=""/209, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000007, 0x20000000be}, 0x0, 0x8000000000000000, 0x4082c5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x20, 0x0, 0x0, 0x4, 0x0, 0x7, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1000000000000001}, 0x0, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x0, 0xfff}, 0x0, 0xf, 0xffffffffffffffff, 0x4) r5 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977"], 0xa) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000011c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x6, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r4], 0x18}, 0x404fc44) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="8000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b336218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a509e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}, {&(0x7f0000000680)="b59845fb9673bf88e1b7344bec6fab134254e105e1237badabc6b3a20bb8fb6a527158a47680d86e5d3220022aa961da27a9ea084251aa7edb971403864ab5cd9283fc0d225bce68a837e934763225ca372770a81fdb8f", 0x57}], 0x2, 0x0, 0x0, 0x7400}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) openat$cgroup_type(r1, &(0x7f0000000380), 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000300), 0x0}, 0x20) 3.862536026s ago: executing program 4 (id=1710): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) r1 = getpid() perf_event_open(0x0, r1, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xd5e}, 0x202, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x2, 0x2, 0x88, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8901, &(0x7f0000000040)) 3.83448968s ago: executing program 3 (id=1711): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4c0e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000002880)={&(0x7f00000013c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}, 0x4000810) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x400454d8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x27, 0x0, 0x0, 0xfffffffffffffe23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.714057421s ago: executing program 1 (id=1712): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x17, &(0x7f0000000340)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x8000}, @ldst={0x3, 0x0, 0x4, 0x2, 0x3, 0x50, 0xfffffffffffffff0}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}], &(0x7f0000000180)='GPL\x00', 0x8, 0x98, &(0x7f0000000540)=""/152, 0x41100, 0x70, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x9, 0x3, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='svcrdma_decode_rseg\x00', r1, 0x0, 0x1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) sendmsg$kcm(r3, &(0x7f0000000300)={&(0x7f0000000480)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=')', 0x1}], 0x1}, 0x1bd6188c5048bd48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x11589, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x19, &(0x7f0000000000)=r6, 0x8) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x8, @mcast1, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x8001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffff801) 3.64500712s ago: executing program 4 (id=1714): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x5, 0x20, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) recvmsg$kcm(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=""/235, 0xeb}, 0x10020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4c0e0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func={0x3, 0x0, 0x0, 0xc, 0x4}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x73, 0x9}]}, {0x0, [0x0, 0x5f, 0x1e, 0x2e, 0x0]}}, &(0x7f0000000500)=""/201, 0x3b, 0xc9, 0x1, 0xe51, 0x10000}, 0x28) close(0x3) socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00599c6d0e000091d028ef80"], 0xfe33) 3.501262487s ago: executing program 3 (id=1715): r0 = socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x1, 0x1c10a1, 0x0, 0x6c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x0, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xeb81}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000000000000004"], 0x28}, 0x24040080) socket$kcm(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x1, 0x1c10a1, 0x0, 0x6c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) setsockopt$sock_attach_bpf(r0, 0x0, 0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xeb81}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) (async) socket$kcm(0x2, 0x2, 0x73) (async) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000000000000004"], 0x28}, 0x24040080) (async) 3.346007189s ago: executing program 3 (id=1717): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000031000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f90000714138977f0933f45d88ed634c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9957c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be2027fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc9062ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e788320949b76f7d32aca1bfea2aa62621b78dded30fc07171866bf1565f03aed8457f0c5387cac1b7de8bb28dc5c3508b1df61fcc1dfcba19240c4f23206eb91374bd1bbd022a764b043808d13f5fd7ca488cba788a4726e4627da4d42a6b6ccb1b0295a7488ef94c32dd2ec7c9194b7d0df29c6777fe5405f94348d60021ec6beb370c5f77e5f9a478a9329cff80de0305dbe3ab2bd601eb49b9e35050e4179f54211d5a3870d83ec6ce20de458b6558d4dd7d1f23391cfc7a3948cef78b229562140046a26e88bbbbe1ccdbb6bda419fadae724de84776ce7dac2581a6ebd0a050f1dc066d99adbcea7000ef2306f496561ec2ccf8b6426d6327194d46153624023bf2a16a62c733"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x40, 0x80, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffffe, 0x5, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x10082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{&(0x7f00000007c0)="f4000900062b3325fe80000000000000dc8b850f23848f7e5c74a57f32cd8caf80bc8e7a2f3ce32a", 0x28}], 0x1}, 0x800) 2.621739568s ago: executing program 3 (id=1720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x6, 0xe2}, 0x114905, 0x2e, 0x2, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x33}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.113366847s ago: executing program 1 (id=1721): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.112292062s ago: executing program 2 (id=1722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4e500, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='\x00') gettid() r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @jmp={0x5, 0x0, 0x1, 0xf, 0x2, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0xc253, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x1, 0xafef495, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[{0x0, 0x5, 0x9, 0x6}, {0x4, 0x4, 0xf, 0x3}, {0x2, 0x2, 0xd, 0xc}, {0x0, 0x2, 0x8, 0x4}, {0x3, 0x4, 0x6, 0x79f582623628674b}, {0x0, 0x4, 0x9, 0x2}], 0x10, 0x7}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x80000001}, 0x8) r3 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.time\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000004c0)=r3, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f0000000500)="ee320ea023e67e8ed1dffe5b3a6413e9f582eee2412e3229fc03b798477dbcc7a5f8eba4d1401593a722c784640d690cc67cc4f23bc6421b07805246cf90f3b69c36849f705912e24cf3cfb128eac347fe34a09213de31d7d5d77829c5e2fcc576f320df60287925d23e2764a85a96d26306893979bde0091711735f3199d9dd43665b4a69ead6c78e2fc9d8ca31dbf93b4a9e9f7b8137736c65f90cfaaae4bde8c1f439362fbfacb0bc7b12c2b4f4aa54710a36d6a2fea74f5b3417ee3ce3580230ea4d98270dc71752180ddab636635819ce22c2", &(0x7f0000000600)=""/61}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x243}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x91}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000700)='syzkaller\x00', 0x4, 0x42, &(0x7f0000000740)=""/66, 0x40f00, 0x2e, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000007c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xa, 0x9, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r2, r3, r2, r2], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000940)={'ipvlan1\x00', 0x200}) socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x4, &(0x7f0000000980)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xb, 0xb, 0x7, 0x0, 0xfffffffffffffffc}], &(0x7f00000009c0)='GPL\x00', 0x9, 0x83, &(0x7f0000000a00)=""/131, 0x41000, 0x20, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000ac0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x7, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b40)=[r3], &(0x7f0000000b80)=[{0x5, 0x2, 0xf, 0xc}, {0x2, 0x1, 0xf, 0x2}, {0x4, 0x2, 0x0, 0x1}, {0x1, 0x4, 0x3, 0x5}, {0x3, 0x4, 0x6, 0x8}, {0x5, 0x1, 0x3, 0x7}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r6, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40), 0x0, 0x39, &(0x7f0000000d80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x2, 0x4}, {0x6}, {0x10, 0x4}, {0x4, 0x2}]}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000001040)=""/216, 0x4b, 0xd8, 0x0, 0x4, 0x10000, @value=r2}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={r7, 0x20, &(0x7f00000012c0)={&(0x7f0000001180)=""/9, 0x9, 0x0, &(0x7f00000011c0)=""/252, 0xfc}}, 0x10) r8 = perf_event_open$cgroup(&(0x7f0000001340)={0x3, 0x80, 0x72, 0x1, 0x0, 0x4, 0x0, 0xa, 0x1c1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x200, 0x1}, 0x4000, 0x80, 0xffffffff, 0x7, 0x7, 0x2, 0x2, 0x0, 0x8ec0, 0x0, 0x6}, r3, 0xe, r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000013c0)='@\x00') r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001400), 0x4) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001440)={r9}, 0x8) write$cgroup_subtree(r10, &(0x7f0000001480)={[{0x2b, 'cpuset'}]}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000014c0)={r4}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000001500)=r5, 0x4) r12 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0x4, [@datasec={0x5, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x9, 0x2}], "5602"}, @volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @float={0x5, 0x0, 0x0, 0x10, 0xc}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x1}, @typedef={0xf}, @const={0x6, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001600)=""/200, 0x8c, 0xc8, 0x0, 0x2, 0x10000, @value=r3}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000001740)={r2}) 2.101424718s ago: executing program 4 (id=1723): r0 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x5, 0x400, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000400fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (fail_nth: 8) 1.514699247s ago: executing program 2 (id=1724): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000002100000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) 1.478328559s ago: executing program 1 (id=1725): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) r1 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x9463, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, r1, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xd5e}, 0x202, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x2, 0x2, 0x88, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8901, &(0x7f0000000040)) 1.456148485s ago: executing program 2 (id=1726): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x44850) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x804) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x33fe0}, {0x0}], 0x2}, 0x400c010) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.301066159s ago: executing program 4 (id=1727): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4c0e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000002880)={&(0x7f00000013c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}, 0x4000810) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x400454d8, &(0x7f0000001700)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.299984141s ago: executing program 2 (id=1728): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x14000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000011000000150000000000000045000000e01eea5e95000100000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, 0x0, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r5}, &(0x7f0000000740), &(0x7f0000000c40)=r3}, 0x20) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x10000000}, 0x48) 1.179282935s ago: executing program 1 (id=1729): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'memory'}, {0x2b, 'cpuset'}, {0x2b, 'io'}]}, 0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@struct={0x6, 0x7, 0x0, 0x4, 0x1, 0x6, [{0x0, 0x1, 0x1}, {0xf, 0x5, 0x4}, {0x6, 0x5, 0xfffffffa}, {0x7, 0x0, 0xb9}, {0x5, 0x4, 0x2}, {0xe, 0x2, 0x2}, {0xb, 0x3, 0x400}]}, @struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x5, [{0x3, 0x5, 0x7}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000140)=""/107, 0x9f, 0x6b, 0x1, 0x7}, 0x28) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) socketpair(0x8, 0x4, 0x400, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7ff, 0x0, 0xd8e1, 0x12, r4, 0x6, '\x00', r5, r1, 0x5, 0x1, 0x1, 0xa}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8e7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x6, 0x9, 0x4, 0xffffffffffffffff}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x79}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x23, &(0x7f0000000700)=""/35, 0x41000, 0xa, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f0000000740)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x8, 0xa, 0x3}, 0x10, 0x189da, r3, 0xa, &(0x7f00000007c0)=[r4, r6, r6, r4], &(0x7f0000000800)=[{0x3, 0x4, 0x3, 0x2}, {0x2, 0x2, 0xd, 0x3}, {0x2, 0x2, 0x2, 0x5}, {0x0, 0x3, 0x5}, {0x0, 0x1, 0x6, 0x4}, {0x3, 0x4, 0x1, 0x1}, {0x3, 0x5, 0xd, 0x9}, {0x0, 0x5, 0x3, 0x5}, {0x4, 0x5, 0x8, 0x7}, {0x0, 0x4, 0x0, 0x3}]}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x1f, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x5, 0x1, 0x0, r4}, @generic={0x9, 0x5, 0x5, 0xfff9, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ldst={0x2, 0x3, 0x3, 0xb, 0x2, 0xffffffffffffffc0, 0xfffffffffffffff0}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x10, 0x0, 0x0, 0x40f00, 0x21, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000b00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0x2, 0x6885, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r6], 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000980)='spmi_read_end\x00', r9, 0x0, 0x9}, 0x18) r10 = gettid() syz_open_procfs$namespace(r10, &(0x7f0000000cc0)='ns/mnt\x00') r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x6, 0x0, r8, 0x6, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) close(r11) write$cgroup_int(r2, &(0x7f0000000d80), 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={r1, 0x20, &(0x7f00000010c0)={&(0x7f0000000f40)=""/213, 0xd5, 0x0, &(0x7f0000001040)=""/106, 0x6a}}, 0x10) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)=@o_path={&(0x7f0000001140)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xd, 0x11, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x868, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='GPL\x00', 0x7, 0x40, &(0x7f0000000ec0)=""/64, 0x40f00, 0x10, '\x00', r5, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f00)={0x2, 0x5, 0x2, 0x7}, 0x10, r12, r13, 0x3, 0x0, &(0x7f00000011c0)=[{0x0, 0x1, 0x9, 0x9}, {0x1, 0x5, 0xa, 0xc}, {0x1, 0x4, 0xb, 0x8}], 0x10, 0x9}, 0x94) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000012c0)=r12, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r14, 0x20, &(0x7f0000001440)={&(0x7f0000001300)=""/46, 0x2e, 0x0, &(0x7f0000001340)=""/202, 0xca}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r8, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002840)={&(0x7f0000001800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x30, 0x0, 0x39fd51dc68b3e358, 0x0, 0x5f, 0x2e]}}, &(0x7f0000001840)=""/4096, 0x2c, 0x1000, 0x0, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0x1b, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xb8d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @cb_func={0x18, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001600)='syzkaller\x00', 0x200, 0xfa, &(0x7f0000001640)=""/250, 0x41000, 0x0, '\x00', r16, 0x0, r17, 0x8, &(0x7f0000002880)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000028c0)={0x5, 0x9, 0x0, 0x162}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000002900)=[{0x0, 0x1, 0xf, 0x2}, {0x1, 0x4, 0xd, 0x6}, {0x5, 0x2, 0x6, 0x5}, {0x5, 0x4, 0x6, 0xb}, {0x3, 0x2, 0x3, 0xc}, {0x2, 0x2, 0x8, 0x1}, {0x5, 0x4, 0x7, 0xa}], 0x10, 0x5}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002a40)={r15, 0x4}, 0xc) r18 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002a80), 0x2, 0x0) write$cgroup_type(r18, &(0x7f0000002ac0), 0x9) 1.08120481s ago: executing program 1 (id=1730): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x45b5, 0x0, 0xffffffffffffffff, 0x8c5a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000000440)=""/183}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/189, 0xbd}, {&(0x7f0000000640)=""/257, 0x101}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f0000000880)=""/190, 0xbe}, {&(0x7f0000000180)=""/308, 0x134}, {&(0x7f0000002500)=""/4158, 0x103e}], 0x6}, 0x2000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.079816164s ago: executing program 4 (id=1731): r0 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x5, 0x400, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000380)=""/168, 0xa8}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000001180)=ANY=[@ANYBLOB="1808000000000000000000000000000018200002000000000000000000000000f2a5ec2224089ed8ffc02935def6c6619d7a05d0996791be69625d7ba4a56ede5cb77cc7f52ca593f756b3e9b676dbd1bc55bb0fbd2070c9d4ea371d722ccf8ca18c6b33e4dce01bf0507ad68a45f7d205c641e26ea178ce74ee0382e82c004f38d61098b9f66107000000000000008aa5c118d3485b799d5edad2319ce36f59c3f980d02a514dbc2d058ff89e68a39b66156e187ec1c28c6354030f5b5a91b67019b838"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000014c0)="b907ef23766a56f05c13e5f0888e", 0x0, 0xfff, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000400fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 1.028511921s ago: executing program 2 (id=1732): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xc, 0x6, 0x4, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0xc4, 0x1, 0x6, 0x8, 0x0, 0x80000001, 0x20, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x12111, 0x3, 0x5, 0x0, 0x3, 0x4, 0x7, 0x0, 0x5, 0x0, 0x5d}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r4, 0xc) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x9c, 0xea, &(0x7f0000000200)="df18bcd943f718ee198463063cbfb9933d0a1943a5d789629e3bd03b4e042c4bdd464f58854e1f21eaf35706399cbe86a785695e4837dadde65ad2b111b1858dabc786b151cdd2d319b881e1e688485a8d3b6b77cf08027124a5d887213069a64c2f2b4880ed9f5f55c593cbf86239dd3bf4cb676252bbd4fecca1f55ac52bb8eac565a27f0ba258985d54d9a0e87ce3b340effabe2a216c66e92567", &(0x7f00000002c0)=""/234, 0x1, 0x0, 0xa9, 0xb0, &(0x7f0000000440)="ad6caeddb4da326081add565a6db6edeb163b59b91267aa39df498c38367acd3ebdcfb75eadc4d87ada0b2c101d034d100aeb3a038f6580470d429bc41bfb31a38177e43aa32182b41eb608b1db5b3f0f29f21ad0125f9ed027a013ce8ffda259614faef4c3c3093a867256e07e3bc09939d7c7d0ca445b1bbec91e71a100da373a86e75139ef30ce7fa41f3da6c6549bf0c115a7c99a9742ba3e7cb010d1d55854590ad79680b0084", &(0x7f0000000540)="0c9ddb5009d51c3fbc67a08a9801112375b3c0f4e2761583a07f4dd7669454d6865fce30b535980a6770af17b46f35caf57b1d6a773fdacfa5e5a16fd67583057d8dfc0fbace821e66d34fbf529224904cca10a8858e0c3645090d62ab3b8ab3fd0f7905b6eca502ec76b376f4295a4eaecf30a3afc4e2f689517e4f2fa2263e7a04ca1946077deb252471343b6e0bed5bbd847059c8a6c96a29fc72b4d870a7280aae45f4ba443739dc5e84547edb79", 0xc, 0x0, 0x6}, 0x50) 830.102709ms ago: executing program 4 (id=1733): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x5, 0x20, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) recvmsg$kcm(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=""/235, 0xeb}, 0x10020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4c0e0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c796", 0xc}], 0x2, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func={0x3, 0x0, 0x0, 0xc, 0x4}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x73, 0x9}]}, {0x0, [0x0, 0x5f, 0x1e, 0x2e, 0x0]}}, &(0x7f0000000500)=""/201, 0x3b, 0xc9, 0x1, 0xe51, 0x10000}, 0x28) close(0x3) socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00599c6d0e000091d028ef80"], 0xfe33) 0s ago: executing program 2 (id=1734): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x17, &(0x7f0000000340)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x8000}, @ldst={0x3, 0x0, 0x4, 0x2, 0x3, 0x50, 0xfffffffffffffff0}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}], &(0x7f0000000180)='GPL\x00', 0x8, 0x98, &(0x7f0000000540)=""/152, 0x41100, 0x70, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x9, 0x3, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='svcrdma_decode_rseg\x00', r1, 0x0, 0x1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) sendmsg$kcm(r4, &(0x7f0000000300)={&(0x7f0000000480)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=')', 0x1}], 0x1}, 0x1bd6188c5048bd48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x11589, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x19, &(0x7f0000000000)=r7, 0x8) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x8, @mcast1, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x8001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffff801) kernel console output (not intermixed with test programs): ibutes in process `syz.2.585'. [ 215.122650][ T8032] syzkaller0: entered promiscuous mode [ 215.130485][ T8032] syzkaller0: entered allmulticast mode [ 215.423876][ T8041] netlink: 'syz.4.597': attribute type 21 has an invalid length. [ 215.448019][ T8041] netlink: 156 bytes leftover after parsing attributes in process `syz.4.597'. [ 215.656530][ T8044] netlink: 'syz.2.598': attribute type 3 has an invalid length. [ 215.692716][ T8049] netlink: 'syz.2.598': attribute type 3 has an invalid length. [ 216.442801][ T1161] wlan1: Trigger new scan to find an IBSS to join [ 216.955215][ T8072] netlink: 'syz.4.605': attribute type 4 has an invalid length. [ 216.999735][ T8072] netlink: 152 bytes leftover after parsing attributes in process `syz.4.605'. [ 217.102464][ T8072] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 217.240839][ T8079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.280094][ T8079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.324703][ T8079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.356653][ T8079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.431901][ T8087] netlink: 'syz.4.610': attribute type 5 has an invalid length. [ 217.490855][ T3540] wlan1: Creating new IBSS network, BSSID 56:3b:01:dd:44:6f [ 217.563632][ T8096] netlink: 96168 bytes leftover after parsing attributes in process `syz.4.610'. [ 217.574540][ T8095] netlink: 'syz.3.612': attribute type 10 has an invalid length. [ 217.596152][ T8079] team0: Port device batadv0 removed [ 218.205692][ T8095] team0: Port device geneve1 added [ 218.365650][ T8100] lo: left promiscuous mode [ 218.382570][ T8100] lo: entered allmulticast mode [ 218.646254][ T8105] netlink: 830 bytes leftover after parsing attributes in process `syz.0.614'. [ 218.668307][ T8113] netlink: 'syz.4.615': attribute type 29 has an invalid length. [ 218.934662][ T8116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.970963][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.982312][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.994159][ T8123] netlink: 'syz.2.619': attribute type 21 has an invalid length. [ 219.014692][ T8121] bridge0: entered allmulticast mode [ 219.122238][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.130594][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.140781][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.149097][ T8116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.194904][ T8116] bridge0: entered promiscuous mode [ 219.409167][ T8133] netlink: 'syz.4.622': attribute type 10 has an invalid length. [ 219.460978][ T8127] pim6reg1: entered promiscuous mode [ 219.467770][ T8127] pim6reg1: entered allmulticast mode [ 220.615112][ T8144] Dead loop on virtual device ip6_vti0, fix it urgently! [ 220.689776][ T8148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.140385][ T8163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.633'. [ 221.429369][ T8176] netlink: 'syz.3.638': attribute type 6 has an invalid length. [ 221.439838][ T8176] netlink: 164 bytes leftover after parsing attributes in process `syz.3.638'. [ 222.220383][ T8203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.410724][ T8222] netlink: 44 bytes leftover after parsing attributes in process `syz.1.649'. [ 222.424386][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.434258][ T8222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.620776][ T8223] netlink: 'syz.4.653': attribute type 25 has an invalid length. [ 222.685733][ T8223] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 222.700140][ T8223] bridge0: port 1(bridge_slave_0) entered learning state [ 222.765215][ T8227] syzkaller0: entered promiscuous mode [ 222.772247][ T8227] syzkaller0: entered allmulticast mode [ 223.753860][ T8254] netlink: 'syz.2.660': attribute type 2 has an invalid length. [ 223.793681][ T8254] netlink: 'syz.2.660': attribute type 8 has an invalid length. [ 223.861332][ T8254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.660'. [ 224.268255][ T8261] netlink: 'syz.3.664': attribute type 39 has an invalid length. [ 226.333946][ T8274] netlink: 'syz.4.668': attribute type 13 has an invalid length. [ 226.343160][ T8274] macvtap0: entered promiscuous mode [ 226.350906][ T8275] netlink: 'syz.0.667': attribute type 21 has an invalid length. [ 226.415132][ T8274] macvtap0: refused to change device tx_queue_len [ 226.434091][ T8275] netlink: 132 bytes leftover after parsing attributes in process `syz.0.667'. [ 226.760919][ T8292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.673'. [ 229.723835][ T8306] Dead loop on virtual device ip6_vti0, fix it urgently! [ 230.000684][ T8310] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.680'. [ 231.482762][ T8317] wg2: entered allmulticast mode [ 231.663933][ T8307] wg2: entered promiscuous mode [ 231.889032][ T8329] IPv6: Can't replace route, no match found [ 231.908933][ T8329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.682'. [ 232.807135][ T8353] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 232.883007][ T8353] batman_adv: batadv0: Adding interface: netdevsim0 [ 232.927061][ T8355] Dead loop on virtual device ip6_vti0, fix it urgently! [ 232.987737][ T8353] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.038955][ T8353] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 233.091868][ T8357] netlink: 10 bytes leftover after parsing attributes in process `syz.0.689'. [ 233.223039][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 233.232274][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 233.242962][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 233.252205][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 233.261650][ T8357] : renamed from gre0 (while UP) [ 233.544362][ T8358] netlink: 'syz.4.692': attribute type 10 has an invalid length. [ 233.647072][ T8358] netlink: 55 bytes leftover after parsing attributes in process `syz.4.692'. [ 234.833242][ T8395] delete_channel: no stack [ 234.948350][ T8401] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 234.989379][ T8401] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.705'. [ 235.904235][ T8438] Dead loop on virtual device ip6_vti0, fix it urgently! [ 236.122759][ T8444] delete_channel: no stack [ 236.128574][ T8444] delete_channel: no stack [ 236.489756][ T8458] syzkaller0: entered promiscuous mode [ 236.497949][ T8458] syzkaller0: entered allmulticast mode [ 236.510028][ T8468] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 236.712851][ T8478] netlink: 201660 bytes leftover after parsing attributes in process `syz.2.729'. [ 238.423101][ T8490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.732'. [ 238.614007][ T8494] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.734'. [ 238.817423][ T8505] netlink: 152 bytes leftover after parsing attributes in process `syz.0.737'. [ 238.844932][ T8505] netlink: 6 bytes leftover after parsing attributes in process `syz.0.737'. [ 239.350033][ T8533] netlink: 'syz.0.746': attribute type 21 has an invalid length. [ 239.504207][ T8546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.232898][ T8593] netlink: 'syz.3.765': attribute type 10 has an invalid length. [ 241.272789][ T8594] netlink: 'syz.3.765': attribute type 10 has an invalid length. [ 241.294943][ T8594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.765'. [ 241.414742][ T8600] Dead loop on virtual device ip6_vti0, fix it urgently! [ 241.885482][ T8612] tap0: tun_chr_ioctl cmd 1074025677 [ 241.904361][ T8615] netlink: 'syz.1.773': attribute type 1 has an invalid length. [ 241.963919][ T8615] netlink: 176 bytes leftover after parsing attributes in process `syz.1.773'. [ 241.980906][ T8612] tap0: linktype set to 773 [ 242.260109][ T8624] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.773'. [ 242.715606][ T8637] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.775'. [ 242.748196][ T8637] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 242.921903][ T8643] netlink: 'syz.1.780': attribute type 9 has an invalid length. [ 242.992620][ T8643] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.780'. [ 243.334614][ T8656] Dead loop on virtual device ip6_vti0, fix it urgently! [ 243.365207][ T8655] netlink: 'syz.0.783': attribute type 21 has an invalid length. [ 243.377051][ T8655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.783'. [ 243.675666][ T8662] netlink: 763 bytes leftover after parsing attributes in process `syz.0.786'. [ 243.868292][ T8669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.788'. [ 243.917477][ T8672] delete_channel: no stack [ 244.059716][ T8672] delete_channel: no stack [ 244.643848][ T8686] netlink: 'syz.2.793': attribute type 28 has an invalid length. [ 244.724345][ T8686] netlink: 'syz.2.793': attribute type 3 has an invalid length. [ 244.793388][ T8686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.793'. [ 245.503977][ T8700] syzkaller0: entered promiscuous mode [ 245.517409][ T8700] syzkaller0: entered allmulticast mode [ 245.719251][ T8709] Dead loop on virtual device ip6_vti0, fix it urgently! [ 245.795592][ T8711] sctp: [Deprecated]: syz.4.798 (pid 8711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.795592][ T8711] Use struct sctp_sack_info instead [ 248.984773][ T8738] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.806'. [ 248.996630][ T8743] netlink: 'syz.4.808': attribute type 37 has an invalid length. [ 249.962110][ T8784] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.821'. [ 250.517488][ T8801] netlink: 'syz.0.824': attribute type 39 has an invalid length. [ 251.805085][ T5843] Bluetooth: hci0: ISO packet for unknown connection handle 2083 [ 252.522070][ T8834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.837'. [ 253.068448][ T8846] Dead loop on virtual device ip6_vti0, fix it urgently! [ 254.011253][ T8871] netlink: 'syz.2.849': attribute type 10 has an invalid length. [ 254.040835][ T8871] netlink: 55 bytes leftover after parsing attributes in process `syz.2.849'. [ 256.610509][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.851'. [ 256.810726][ T8891] Dead loop on virtual device ip6_vti0, fix it urgently! [ 257.116172][ T8908] netlink: 'syz.2.864': attribute type 21 has an invalid length. [ 257.328190][ T8917] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 257.438932][ T8917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.448001][ T8920] netlink: 'syz.3.866': attribute type 3 has an invalid length. [ 257.467079][ T8920] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.866'. [ 257.487420][ T8917] team0: Port device bond0 added [ 257.493884][ T8916] tun0: tun_chr_ioctl cmd 1074025675 [ 257.507053][ T8916] tun0: persist enabled [ 257.516306][ T8908] tun0: tun_chr_ioctl cmd 1074025675 [ 257.537341][ T8908] tun0: persist disabled [ 257.996377][ T8941] Dead loop on virtual device ip6_vti0, fix it urgently! [ 258.261064][ T8953] sctp: [Deprecated]: syz.1.875 (pid 8953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.261064][ T8953] Use struct sctp_sack_info instead [ 259.025390][ T8977] netlink: 'syz.3.885': attribute type 3 has an invalid length. [ 259.064947][ T8977] netlink: 'syz.3.885': attribute type 3 has an invalid length. [ 259.122463][ T8977] netlink: 130500 bytes leftover after parsing attributes in process `syz.3.885'. [ 260.643905][ T9003] netlink: 'syz.4.894': attribute type 25 has an invalid length. [ 260.659580][ T9003] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.894'. [ 261.376899][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.384312][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.355032][ T9022] netlink: 'syz.2.896': attribute type 3 has an invalid length. [ 262.420478][ T9022] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.896'. [ 262.483768][ T9024] Dead loop on virtual device ip6_vti0, fix it urgently! [ 264.123748][ T9077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 264.250955][ T9086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.915'. [ 264.279278][ T9078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.915'. [ 265.032349][ T9112] netlink: 'syz.4.928': attribute type 10 has an invalid length. [ 265.100214][ T9112] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 265.413546][ T9124] raw_sendmsg: syz.2.931 forgot to set AF_INET. Fix it! [ 266.286212][ T9134] netlink: 'syz.1.933': attribute type 11 has an invalid length. [ 266.300124][ T9134] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.933'. [ 267.114805][ T9133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.155696][ T9140] netlink: 188 bytes leftover after parsing attributes in process `syz.4.935'. [ 271.712500][ T3516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.807628][ T3516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.883132][ T3516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.301516][ T3516] batman_adv: batadv0: Removing interface: netdevsim0 [ 272.428506][ T3516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.207834][ T9201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.954'. [ 273.288811][ T9200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.954'. [ 273.351430][ T3516] bridge_slave_1: left allmulticast mode [ 273.390532][ T3516] bridge_slave_1: left promiscuous mode [ 273.436296][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.475895][ T3516] bridge_slave_0: left allmulticast mode [ 273.485390][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.496425][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.506026][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.526630][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.538139][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.580620][ T3516] bridge_slave_0: left promiscuous mode [ 273.598619][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.170304][ T9218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.958'. [ 274.272152][ T3516] team0: Port device bridge0 removed [ 274.424606][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.439173][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.452651][ T3516] bond0 (unregistering): Released all slaves [ 274.471877][ T9202] netlink: 60 bytes leftover after parsing attributes in process `syz.3.954'. [ 274.726613][ T9224] lo: left promiscuous mode [ 274.736305][ T9224] lo: entered allmulticast mode [ 274.781058][ T9228] lo: entered promiscuous mode [ 274.837617][ T9228] lo: left allmulticast mode [ 275.109781][ T9241] netlink: 121836 bytes leftover after parsing attributes in process `syz.4.962'. [ 275.597687][ T5858] Bluetooth: hci2: command tx timeout [ 276.418279][ T9250] netlink: 'syz.3.964': attribute type 3 has an invalid length. [ 276.563462][ T9250] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.964'. [ 277.689462][ T5858] Bluetooth: hci2: command tx timeout [ 278.543685][ T3516] hsr_slave_0: left promiscuous mode [ 278.551130][ T3516] hsr_slave_1: left promiscuous mode [ 278.559826][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.570297][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.581578][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.591474][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.609460][ T3516] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 278.618036][ T3516] batman_adv: batadv0: Removing interface: veth0_vlan [ 278.792902][ T3516] veth0_macvtap: left promiscuous mode [ 278.800941][ T3516] veth1_vlan: left promiscuous mode [ 278.810772][ T3516] veth0_vlan: left promiscuous mode [ 279.444947][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 279.486045][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 279.766989][ T5858] Bluetooth: hci2: command tx timeout [ 279.915172][ T9271] netlink: 703 bytes leftover after parsing attributes in process `syz.4.971'. [ 280.161290][ T9206] chnl_net:caif_netlink_parms(): no params data found [ 280.374405][ T9298] Dead loop on virtual device ip6_vti0, fix it urgently! [ 280.577120][ T9206] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.592796][ T9206] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.601009][ T9206] bridge_slave_0: entered allmulticast mode [ 280.612185][ T9206] bridge_slave_0: entered promiscuous mode [ 280.633503][ T9206] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.646035][ T9206] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.659563][ T9206] bridge_slave_1: entered allmulticast mode [ 280.670263][ T9206] bridge_slave_1: entered promiscuous mode [ 280.859534][ T9312] netlink: 'syz.2.979': attribute type 7 has an invalid length. [ 280.930046][ T9206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.025009][ T9308] netlink: 'syz.3.978': attribute type 3 has an invalid length. [ 281.060829][ T9206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.073764][ T9308] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.978'. [ 281.634030][ T9206] team0: Port device team_slave_0 added [ 281.669340][ T9206] team0: Port device team_slave_1 added [ 281.741514][ T9329] Dead loop on virtual device ip6_vti0, fix it urgently! [ 281.764160][ T9206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.773707][ T9206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.806451][ T9206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.822825][ T9206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.833913][ T9206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.863550][ T5843] Bluetooth: hci2: command tx timeout [ 281.870123][ T9206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.995179][ T9206] hsr_slave_0: entered promiscuous mode [ 282.017886][ T9206] hsr_slave_1: entered promiscuous mode [ 282.036600][ T9206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.059116][ T9206] Cannot create hsr debugfs directory [ 282.297015][ T5858] Bluetooth: hci4: ISO packet for unknown connection handle 2083 [ 282.621255][ T9351] netlink: 'syz.2.990': attribute type 29 has an invalid length. [ 283.523008][ T9368] syzkaller0: entered promiscuous mode [ 283.564498][ T9368] syzkaller0: entered allmulticast mode [ 284.302562][ T9397] netlink: 'syz.3.1002': attribute type 10 has an invalid length. [ 284.352686][ T9397] batman_adv: batadv0: Adding interface: netdevsim0 [ 284.362621][ T9397] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.398191][ T9397] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 284.422266][ T9206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.435794][ T9401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1003'. [ 284.461706][ T9206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.549826][ T9401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1003'. [ 284.572895][ T9206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.596580][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1003'. [ 284.608266][ T9206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.712680][ T9418] netlink: 'syz.2.1006': attribute type 29 has an invalid length. [ 284.726696][ T9418] netlink: 'syz.2.1006': attribute type 29 has an invalid length. [ 284.742777][ T9418] netlink: 'syz.2.1006': attribute type 29 has an invalid length. [ 284.762302][ T9418] netlink: 'syz.2.1006': attribute type 29 has an invalid length. [ 284.872604][ T9206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.921150][ T9206] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.947893][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.956217][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.985407][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.993247][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.126244][ T9419] delete_channel: no stack [ 286.230568][ T9437] netlink: 'syz.3.1014': attribute type 10 has an invalid length. [ 286.242596][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1014'. [ 289.038843][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 292.414999][ T9206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.608223][ T9206] veth0_vlan: entered promiscuous mode [ 292.636360][ T9206] veth1_vlan: entered promiscuous mode [ 292.898410][ T9206] veth0_macvtap: entered promiscuous mode [ 292.944608][ T9206] veth1_macvtap: entered promiscuous mode [ 293.068664][ T9206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.130786][ T9206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.208012][ T9206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.253058][ T9206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.290311][ T9206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.332700][ T9206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.723748][ T9496] syzkaller0: entered promiscuous mode [ 293.752104][ T9496] syzkaller0: entered allmulticast mode [ 293.883506][ T9496] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1029'. [ 294.010928][ T9496] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1029'. [ 294.030878][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.179739][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.217906][ T9496] hsr_slave_0: left promiscuous mode [ 294.233785][ T9496] hsr_slave_1: left promiscuous mode [ 294.481357][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.509375][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.369508][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.499724][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.591032][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.723580][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.111214][ T50] bridge_slave_1: left allmulticast mode [ 296.176926][ T50] bridge_slave_1: left promiscuous mode [ 296.185325][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.310752][ T50] bridge_slave_0: left allmulticast mode [ 296.361343][ T50] bridge_slave_0: left promiscuous mode [ 296.387008][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.653176][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.668615][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.682900][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.694168][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.705551][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.878766][ T9585] netlink: 'syz.2.1053': attribute type 10 has an invalid length. [ 296.891103][ T9585] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1053'. [ 296.922954][ T9584] Dead loop on virtual device ip6_vti0, fix it urgently! [ 297.366206][ T9593] netlink: 'syz.4.1058': attribute type 39 has an invalid length. [ 297.622775][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.658883][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.709614][ T50] bond0 (unregistering): Released all slaves [ 298.247709][ T9606] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1063'. [ 298.508040][ T50] hsr_slave_0: left promiscuous mode [ 298.546906][ T50] hsr_slave_1: left promiscuous mode [ 298.553846][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.596811][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.628536][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.638338][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.678062][ T9618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 298.811426][ T50] veth1_macvtap: left promiscuous mode [ 298.811993][ T5843] Bluetooth: hci2: command tx timeout [ 298.867234][ T50] veth0_macvtap: left promiscuous mode [ 299.271212][ T50] veth1_vlan: left promiscuous mode [ 299.283579][ T50] veth0_vlan: left promiscuous mode [ 300.790932][ T50] team0 (unregistering): Port device team_slave_1 removed [ 300.845603][ T50] team0 (unregistering): Port device team_slave_0 removed [ 300.878849][ T5843] Bluetooth: hci2: command tx timeout [ 301.354703][ T9618] netlink: 'syz.1.1067': attribute type 29 has an invalid length. [ 301.391649][ T9625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.681652][ T9574] chnl_net:caif_netlink_parms(): no params data found [ 301.843377][ T9643] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1072'. [ 302.040014][ T9659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1076'. [ 302.091584][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.103704][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.121760][ T9574] bridge_slave_0: entered allmulticast mode [ 302.123156][ T9668] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1079'. [ 302.141541][ T9574] bridge_slave_0: entered promiscuous mode [ 302.154205][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.163498][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.173272][ T9574] bridge_slave_1: entered allmulticast mode [ 302.187553][ T9574] bridge_slave_1: entered promiscuous mode [ 302.221335][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 302.233213][ T9659] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1076'. [ 302.255194][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 302.269507][ T9659] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1076'. [ 302.423497][ T9574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.451293][ T9574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.752275][ T9574] team0: Port device team_slave_0 added [ 302.781161][ T9574] team0: Port device team_slave_1 added [ 302.795455][ T9676] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.1082'. [ 302.971197][ T5843] Bluetooth: hci2: command tx timeout [ 303.085886][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.094674][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.133317][ T9574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.154201][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.164728][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.203199][ T9574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.434181][ T9574] hsr_slave_0: entered promiscuous mode [ 303.486680][ T9694] netlink: 'syz.1.1085': attribute type 3 has an invalid length. [ 303.502380][ T9574] hsr_slave_1: entered promiscuous mode [ 303.506940][ T9694] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1085'. [ 303.538697][ T9574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.570994][ T9574] Cannot create hsr debugfs directory [ 303.690156][ T9706] netlink: 'syz.2.1089': attribute type 3 has an invalid length. [ 303.713601][ T9706] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1089'. [ 304.184189][ T9721] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 304.222145][ T9721] vcan0: entered promiscuous mode [ 304.252465][ T9721] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 304.856427][ T9744] netlink: 'syz.4.1100': attribute type 6 has an invalid length. [ 305.037091][ T5843] Bluetooth: hci2: command tx timeout [ 307.427657][ T9754] __nla_validate_parse: 2 callbacks suppressed [ 307.427680][ T9754] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1103'. [ 307.596390][ T9762] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1105'. [ 307.801111][ T9757] netlink: 14566 bytes leftover after parsing attributes in process `syz.3.1105'. [ 307.858613][ T9757] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1105'. [ 308.538258][ T9771] netlink: 'syz.2.1104': attribute type 3 has an invalid length. [ 308.677692][ T9771] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1104'. [ 309.060117][ T9574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.106231][ T9574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.160176][ T9780] netlink: 'syz.2.1110': attribute type 21 has an invalid length. [ 309.173773][ T9780] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1110'. [ 309.182334][ T9574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.232997][ T9574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.562645][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.660015][ T9574] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.720253][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.729740][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.782870][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.790927][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.844585][ T9801] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1115'. [ 309.857632][ T9805] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1116'. [ 310.215951][ T9816] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1120'. [ 310.250025][ T9816] hsr0: entered promiscuous mode [ 310.272204][ T9816] hsr0: entered allmulticast mode [ 310.283984][ T9816] hsr_slave_0: entered allmulticast mode [ 310.323261][ T9816] hsr_slave_1: entered allmulticast mode [ 310.538778][ T9574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.660199][ T9574] veth0_vlan: entered promiscuous mode [ 310.729513][ T9574] veth1_vlan: entered promiscuous mode [ 310.845422][ T9574] veth0_macvtap: entered promiscuous mode [ 310.882983][ T9574] veth1_macvtap: entered promiscuous mode [ 310.891282][ T9831] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1124'. [ 310.980358][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.235651][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.351224][ T9574] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.526867][ T9574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.538523][ T9574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.548926][ T9574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.664472][ T9851] netlink: 'syz.3.1130': attribute type 10 has an invalid length. [ 311.804874][ T9851] bond0: (slave bond_slave_0): Releasing backup interface [ 311.941647][ T9847] netlink: 'syz.1.1127': attribute type 3 has an invalid length. [ 312.113297][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.189841][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.429894][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.462515][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.226523][ T9880] Dead loop on virtual device ip6_vti0, fix it urgently! [ 314.608172][ T9895] __nla_validate_parse: 3 callbacks suppressed [ 314.608193][ T9895] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1141'. [ 315.012137][ T9902] netlink: 'syz.4.1144': attribute type 3 has an invalid length. [ 315.042196][ T9902] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1144'. [ 315.123779][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.149762][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.167913][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.184079][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.195438][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.210821][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.514039][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.540940][ T9910] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1145'. [ 315.972190][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.082504][ T9922] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1148'. [ 316.469708][ T9916] netlink: 'syz.3.1146': attribute type 3 has an invalid length. [ 316.558433][ T9916] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1146'. [ 317.003672][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.132733][ T9933] netlink: 'syz.1.1149': attribute type 28 has an invalid length. [ 317.158092][ T9933] netlink: 'syz.1.1149': attribute type 3 has an invalid length. [ 317.186150][ T9929] netlink: 'syz.1.1149': attribute type 8 has an invalid length. [ 317.186205][ T9933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1149'. [ 317.209937][ T9929] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 317.276939][ T5858] Bluetooth: hci2: command tx timeout [ 317.365026][ T9940] Dead loop on virtual device ip6_vti0, fix it urgently! [ 317.569934][ T50] bridge_slave_1: left allmulticast mode [ 317.590967][ T50] bridge_slave_1: left promiscuous mode [ 317.612272][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.674631][ T50] bridge_slave_0: left allmulticast mode [ 317.698294][ T50] bridge_slave_0: left promiscuous mode [ 317.704668][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.553988][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.568969][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.580574][ T50] bond0 (unregistering): Released all slaves [ 318.632898][ T9953] netlink: 'syz.4.1152': attribute type 29 has an invalid length. [ 318.663132][ T9904] chnl_net:caif_netlink_parms(): no params data found [ 319.025356][ T9989] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 319.357025][ T5858] Bluetooth: hci2: command tx timeout [ 319.928566][T10009] netlink: 'syz.4.1169': attribute type 3 has an invalid length. [ 320.085509][T10009] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1169'. [ 321.033347][ T9904] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.052394][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.060868][ T9904] bridge_slave_0: entered allmulticast mode [ 321.071843][ T9904] bridge_slave_0: entered promiscuous mode [ 321.091365][ T9904] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.101218][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.110769][ T9904] bridge_slave_1: entered allmulticast mode [ 321.123474][ T9904] bridge_slave_1: entered promiscuous mode [ 321.137908][T10008] netlink: 'syz.1.1171': attribute type 29 has an invalid length. [ 321.216807][T10017] Dead loop on virtual device ip6_vti0, fix it urgently! [ 321.290674][T10021] netlink: 'syz.4.1176': attribute type 13 has an invalid length. [ 321.331275][T10021] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1176'. [ 321.396996][ T50] hsr_slave_0: left promiscuous mode [ 321.416549][ T50] hsr_slave_1: left promiscuous mode [ 321.429581][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.442501][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.443124][ T5858] Bluetooth: hci2: command tx timeout [ 321.462221][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.480209][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.514531][ T50] veth1_macvtap: left promiscuous mode [ 321.522865][ T50] veth0_macvtap: left promiscuous mode [ 321.530651][ T50] veth1_vlan: left promiscuous mode [ 321.538547][ T50] veth0_vlan: left promiscuous mode [ 322.328005][T10043] netlink: 'syz.2.1185': attribute type 2 has an invalid length. [ 322.338169][T10043] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1185'. [ 322.407362][ T50] team0 (unregistering): Port device team_slave_1 removed [ 322.530686][ T50] team0 (unregistering): Port device team_slave_0 removed [ 322.549031][T10049] Dead loop on virtual device ip6_vti0, fix it urgently! [ 322.818603][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.828043][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.208377][T10050] netlink: 'syz.1.1187': attribute type 3 has an invalid length. [ 323.261548][T10050] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1187'. [ 323.522627][ T5858] Bluetooth: hci2: command tx timeout [ 323.651741][ T9904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.664827][T10021] syz_tun: refused to change device tx_queue_len [ 323.713234][ T9904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.890282][ T9904] team0: Port device team_slave_0 added [ 323.925140][ T9904] team0: Port device team_slave_1 added [ 324.183601][ T9904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.211461][ T9904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.246325][ T9904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.344149][ T9904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.353809][ T9904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.400815][ T9904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.591851][ T9904] hsr_slave_0: entered promiscuous mode [ 324.611235][ T9904] hsr_slave_1: entered promiscuous mode [ 324.690612][ T9904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.749227][ T9904] Cannot create hsr debugfs directory [ 325.041949][T10087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.076075][T10087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.120338][T10087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.131501][T10087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.189723][T10087] batman_adv: batadv0: Removing interface: netdevsim0 [ 326.028770][T10105] netlink: 'syz.1.1206': attribute type 3 has an invalid length. [ 326.109879][T10105] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1206'. [ 326.225232][T10119] netlink: 'syz.2.1212': attribute type 33 has an invalid length. [ 326.244792][T10119] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1212'. [ 326.311078][T10119] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 326.705938][ T9904] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.731131][T10126] Dead loop on virtual device ip6_vti0, fix it urgently! [ 326.752901][ T9904] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.793912][ T9904] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.837585][ T9904] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.216502][T10143] netlink: 'syz.4.1220': attribute type 6 has an invalid length. [ 327.220426][ T9904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.228850][T10143] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1220'. [ 327.285254][ T9904] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.312118][T10148] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1220'. [ 327.335689][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.345442][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.370136][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.378056][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.629606][ T9904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.635254][T10176] Dead loop on virtual device ip6_vti0, fix it urgently! [ 328.809342][ T9904] veth0_vlan: entered promiscuous mode [ 328.843133][ T9904] veth1_vlan: entered promiscuous mode [ 328.968573][ T9904] veth0_macvtap: entered promiscuous mode [ 328.995430][T10184] netlink: 'syz.1.1227': attribute type 3 has an invalid length. [ 329.046621][T10184] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1227'. [ 329.057551][T10186] netlink: 64847 bytes leftover after parsing attributes in process `syz.2.1232'. [ 329.073024][ T9904] veth1_macvtap: entered promiscuous mode [ 329.098229][T10187] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 329.391112][ T9904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.430641][ T9904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.491555][ T9904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.522441][ T9904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.542786][ T9904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.560111][ T9904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.892677][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.943015][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.064020][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.087684][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.192074][T10212] Dead loop on virtual device ip6_vti0, fix it urgently! [ 330.622047][T10219] Dead loop on virtual device ip6_vti0, fix it urgently! [ 330.772447][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.126052][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.263693][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.360446][ T50] wlan1: Trigger new scan to find an IBSS to join [ 331.495959][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.593568][ T13] bridge_slave_1: left allmulticast mode [ 331.602030][ T13] bridge_slave_1: left promiscuous mode [ 331.609441][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.622352][ T13] bridge_slave_0: left allmulticast mode [ 331.629535][ T13] bridge_slave_0: left promiscuous mode [ 331.637445][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.512042][T10246] netlink: 'syz.1.1255': attribute type 13 has an invalid length. [ 332.546936][T10246] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1255'. [ 332.560820][T10235] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 332.605831][T10235] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1250'. [ 332.714717][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.740835][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.752252][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.771480][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.799281][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.072877][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.089085][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.102202][ T13] bond0 (unregistering): Released all slaves [ 333.147634][T10246] erspan0: refused to change device tx_queue_len [ 333.156135][T10246] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 333.948832][T10268] Dead loop on virtual device ip6_vti0, fix it urgently! [ 334.261102][ T13] hsr_slave_0: left promiscuous mode [ 334.277585][ T13] hsr_slave_1: left promiscuous mode [ 334.295074][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.307441][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.316159][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.325662][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.429526][ T13] veth1_macvtap: left promiscuous mode [ 334.446966][ T13] veth0_macvtap: left promiscuous mode [ 334.452975][ T13] veth1_vlan: left promiscuous mode [ 334.476376][ T13] veth0_vlan: left promiscuous mode [ 334.912880][ T5843] Bluetooth: hci2: command tx timeout [ 335.165366][T10300] Dead loop on virtual device ip6_vti0, fix it urgently! [ 335.406611][T10304] netlink: 'syz.1.1271': attribute type 3 has an invalid length. [ 335.453383][T10304] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1271'. [ 336.022533][ T13] team0 (unregistering): Port device team_slave_1 removed [ 336.082764][ T13] team0 (unregistering): Port device team_slave_0 removed [ 336.396927][ T3516] wlan1: Trigger new scan to find an IBSS to join [ 336.775404][T10331] Dead loop on virtual device ip6_vti0, fix it urgently! [ 336.813571][T10292] netlink: 103 bytes leftover after parsing attributes in process `syz.3.1272'. [ 336.959274][ T5843] Bluetooth: hci2: command tx timeout [ 337.090928][T10250] chnl_net:caif_netlink_parms(): no params data found [ 337.314164][ T36] wlan1: Creating new IBSS network, BSSID 56:af:30:e2:3d:cf [ 337.517070][T10250] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.535558][T10250] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.553469][T10250] bridge_slave_0: entered allmulticast mode [ 337.597046][T10250] bridge_slave_0: entered promiscuous mode [ 337.627371][T10250] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.647633][T10250] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.656459][T10250] bridge_slave_1: entered allmulticast mode [ 337.718992][T10250] bridge_slave_1: entered promiscuous mode [ 338.198942][T10250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.233814][T10250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.430710][T10250] team0: Port device team_slave_0 added [ 338.473466][T10250] team0: Port device team_slave_1 added [ 338.828919][T10250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.838121][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.929469][T10250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.973653][T10250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.023519][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.065979][ T5843] Bluetooth: hci2: command tx timeout [ 339.079968][T10250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.169465][T10402] Dead loop on virtual device ip6_vti0, fix it urgently! [ 339.204696][T10382] netlink: 'syz.2.1302': attribute type 3 has an invalid length. [ 339.233324][T10382] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1302'. [ 339.267866][T10250] hsr_slave_0: entered promiscuous mode [ 339.277064][T10250] hsr_slave_1: entered promiscuous mode [ 339.284636][T10250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.294639][T10250] Cannot create hsr debugfs directory [ 340.437299][T10250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.472960][T10250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.513651][T10250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 340.556516][T10250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 340.629646][T10441] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1325'. [ 340.666529][T10437] Dead loop on virtual device ip6_vti0, fix it urgently! [ 341.117175][ T5843] Bluetooth: hci2: command tx timeout [ 341.349165][T10250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.778329][T10250] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.808241][T10454] netlink: 'syz.1.1326': attribute type 3 has an invalid length. [ 341.858982][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.868104][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.901779][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.910769][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.926876][T10454] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1326'. [ 342.699676][T10490] Dead loop on virtual device ip6_vti0, fix it urgently! [ 342.755194][T10250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.851331][T10250] veth0_vlan: entered promiscuous mode [ 342.922071][T10250] veth1_vlan: entered promiscuous mode [ 343.016285][T10250] veth0_macvtap: entered promiscuous mode [ 343.042945][T10250] veth1_macvtap: entered promiscuous mode [ 343.082963][T10250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.098200][T10496] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1342'. [ 344.032255][T10250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.103775][T10250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.133458][T10250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.151339][T10250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.163650][T10250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.510134][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.530327][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.477548][T10526] wg2: entered allmulticast mode [ 345.629721][T10531] netlink: 'syz.4.1351': attribute type 3 has an invalid length. [ 345.747276][T10531] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1351'. [ 345.895466][T10508] wg2: entered promiscuous mode [ 346.051671][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.173608][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.792375][T10539] Dead loop on virtual device ip6_vti0, fix it urgently! [ 347.441763][ T3516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.569574][ T3516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.692529][ T3516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.811077][ T3516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.940504][ T3516] bridge_slave_1: left allmulticast mode [ 347.948703][ T3516] bridge_slave_1: left promiscuous mode [ 347.961649][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.974125][ T3516] bridge_slave_0: left allmulticast mode [ 347.983791][ T3516] bridge_slave_0: left promiscuous mode [ 347.995802][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.360820][T10557] Dead loop on virtual device ip6_vti0, fix it urgently! [ 348.817245][T10576] netlink: 'syz.1.1367': attribute type 10 has an invalid length. [ 348.887873][T10576] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1367'. [ 349.218342][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.229845][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.243386][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.272543][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.288835][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.307072][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.377589][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.686029][ T3516] bond0 (unregistering): Released all slaves [ 350.062788][T10585] netlink: 'syz.3.1370': attribute type 3 has an invalid length. [ 350.110618][T10592] Dead loop on virtual device ip6_vti0, fix it urgently! [ 350.147263][T10585] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1370'. [ 350.571198][T10599] netlink: 'syz.4.1374': attribute type 21 has an invalid length. [ 350.619216][T10599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1374'. [ 350.756381][ T3516] hsr_slave_0: left promiscuous mode [ 350.767074][ T3516] hsr_slave_1: left promiscuous mode [ 350.783139][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.806089][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.827994][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.845444][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.926729][ T3516] veth1_macvtap: left promiscuous mode [ 350.937672][ T3516] veth0_macvtap: left promiscuous mode [ 350.949258][ T3516] veth1_vlan: left promiscuous mode [ 350.961613][ T3516] veth0_vlan: left promiscuous mode [ 351.357959][ T5858] Bluetooth: hci2: command tx timeout [ 351.450714][T10622] netlink: 'syz.4.1383': attribute type 21 has an invalid length. [ 352.566624][T10638] netlink: 'syz.3.1388': attribute type 3 has an invalid length. [ 352.594188][T10638] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1388'. [ 352.855201][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 352.944533][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 353.437865][ T5858] Bluetooth: hci2: command tx timeout [ 353.815179][T10581] chnl_net:caif_netlink_parms(): no params data found [ 353.956461][T10656] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1394'. [ 354.014416][T10658] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1394'. [ 354.181636][T10666] Dead loop on virtual device ip6_vti0, fix it urgently! [ 355.527217][ T5858] Bluetooth: hci2: command tx timeout [ 355.772067][T10688] netlink: 'syz.2.1403': attribute type 3 has an invalid length. [ 355.827965][T10688] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1403'. [ 357.060200][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.068546][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.077608][T10581] bridge_slave_0: entered allmulticast mode [ 357.089838][T10581] bridge_slave_0: entered promiscuous mode [ 357.101811][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.114261][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.136988][T10581] bridge_slave_1: entered allmulticast mode [ 357.147473][T10581] bridge_slave_1: entered promiscuous mode [ 357.330046][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.385427][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.511766][T10581] team0: Port device team_slave_0 added [ 357.524594][T10581] team0: Port device team_slave_1 added [ 357.597410][ T5858] Bluetooth: hci2: command tx timeout [ 357.612565][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.625753][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.663737][T10709] Dead loop on virtual device ip6_vti0, fix it urgently! [ 357.665087][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.731742][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.742679][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.809536][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.973956][T10581] hsr_slave_0: entered promiscuous mode [ 357.993425][T10581] hsr_slave_1: entered promiscuous mode [ 358.016313][T10581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.037436][T10719] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1415'. [ 358.050585][T10581] Cannot create hsr debugfs directory [ 359.002270][T10735] netlink: 'syz.3.1417': attribute type 3 has an invalid length. [ 359.013620][T10735] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1417'. [ 359.106659][T10737] FAULT_INJECTION: forcing a failure. [ 359.106659][T10737] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 359.167818][T10737] CPU: 0 UID: 0 PID: 10737 Comm: syz.1.1420 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 359.167851][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.167873][T10737] Call Trace: [ 359.167886][T10737] [ 359.167896][T10737] dump_stack_lvl+0x189/0x250 [ 359.167965][T10737] ? __pfx____ratelimit+0x10/0x10 [ 359.167999][T10737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.168033][T10737] ? __pfx__printk+0x10/0x10 [ 359.168067][T10737] ? __might_fault+0xb0/0x130 [ 359.168103][T10737] should_fail_ex+0x414/0x560 [ 359.168138][T10737] _copy_from_user+0x2d/0xb0 [ 359.168163][T10737] ___sys_sendmsg+0x158/0x2a0 [ 359.168197][T10737] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.168267][T10737] ? __fget_files+0x2a/0x420 [ 359.168291][T10737] ? __fget_files+0x3a0/0x420 [ 359.168328][T10737] __x64_sys_sendmsg+0x19b/0x260 [ 359.168361][T10737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.168401][T10737] ? __pfx_ksys_write+0x10/0x10 [ 359.168419][T10737] ? rcu_is_watching+0x15/0xb0 [ 359.168459][T10737] ? do_syscall_64+0xbe/0x3b0 [ 359.168483][T10737] do_syscall_64+0xfa/0x3b0 [ 359.168502][T10737] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.168533][T10737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.168555][T10737] ? clear_bhb_loop+0x60/0xb0 [ 359.168592][T10737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.168614][T10737] RIP: 0033:0x7f2e2e98e929 [ 359.168638][T10737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.168657][T10737] RSP: 002b:00007f2e2f892038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.168684][T10737] RAX: ffffffffffffffda RBX: 00007f2e2ebb5fa0 RCX: 00007f2e2e98e929 [ 359.168700][T10737] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 359.168713][T10737] RBP: 00007f2e2f892090 R08: 0000000000000000 R09: 0000000000000000 [ 359.168726][T10737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.168739][T10737] R13: 0000000000000000 R14: 00007f2e2ebb5fa0 R15: 00007ffcbe359158 [ 359.168773][T10737] [ 360.462233][T10581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.545494][T10581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 360.877496][T10581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.954467][T10581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.374353][T10767] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.1429'. [ 361.396403][T10773] netlink: 'syz.1.1430': attribute type 10 has an invalid length. [ 361.543627][T10778] netlink: 'syz.4.1432': attribute type 10 has an invalid length. [ 361.797967][T10778] batman_adv: batadv0: Adding interface: netdevsim0 [ 361.820966][T10778] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.857674][T10778] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 361.907353][T10781] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1432'. [ 361.934174][T10783] : renamed from gre0 (while UP) [ 362.043559][T10581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.076254][T10581] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.101869][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.110249][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.159787][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.169042][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.308071][T10806] Dead loop on virtual device ip6_vti0, fix it urgently! [ 363.519892][T10581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.775739][T10816] netlink: 'syz.4.1443': attribute type 29 has an invalid length. [ 363.853205][T10813] netlink: 'syz.3.1440': attribute type 3 has an invalid length. [ 363.894156][T10581] veth0_vlan: entered promiscuous mode [ 363.961481][T10581] veth1_vlan: entered promiscuous mode [ 363.968710][T10813] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1440'. [ 364.122924][T10581] veth0_macvtap: entered promiscuous mode [ 364.177904][T10581] veth1_macvtap: entered promiscuous mode [ 364.319237][T10581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.363783][T10581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.419752][T10581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.448754][T10827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1447'. [ 364.489175][T10581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.500376][T10581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.513674][T10581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.564047][T10827] netlink: 'syz.1.1447': attribute type 29 has an invalid length. [ 364.585115][T10831] netlink: 'syz.1.1447': attribute type 29 has an invalid length. [ 364.661235][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.673186][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.790998][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.804290][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.952997][T10841] Dead loop on virtual device ip6_vti0, fix it urgently! [ 365.883667][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.953982][T10860] netlink: 'syz.2.1461': attribute type 4 has an invalid length. [ 365.984863][T10860] netlink: 'syz.2.1461': attribute type 16 has an invalid length. [ 366.005087][T10860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1461'. [ 366.078761][T10865] FAULT_INJECTION: forcing a failure. [ 366.078761][T10865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.097107][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.154119][T10865] CPU: 0 UID: 0 PID: 10865 Comm: syz.4.1462 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 366.154152][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.154166][T10865] Call Trace: [ 366.154174][T10865] [ 366.154183][T10865] dump_stack_lvl+0x189/0x250 [ 366.154222][T10865] ? __pfx____ratelimit+0x10/0x10 [ 366.154261][T10865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.154295][T10865] ? __pfx__printk+0x10/0x10 [ 366.154318][T10865] ? __might_fault+0xb0/0x130 [ 366.154352][T10865] should_fail_ex+0x414/0x560 [ 366.154385][T10865] _copy_from_user+0x2d/0xb0 [ 366.154408][T10865] ___sys_sendmsg+0x158/0x2a0 [ 366.154440][T10865] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.154517][T10865] ? __fget_files+0x2a/0x420 [ 366.154541][T10865] ? __fget_files+0x3a0/0x420 [ 366.154575][T10865] __x64_sys_sendmsg+0x19b/0x260 [ 366.154607][T10865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.154647][T10865] ? __pfx_ksys_write+0x10/0x10 [ 366.154665][T10865] ? rcu_is_watching+0x15/0xb0 [ 366.154705][T10865] ? do_syscall_64+0xbe/0x3b0 [ 366.154730][T10865] do_syscall_64+0xfa/0x3b0 [ 366.154749][T10865] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.154780][T10865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.154802][T10865] ? clear_bhb_loop+0x60/0xb0 [ 366.154829][T10865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.154850][T10865] RIP: 0033:0x7fdc21d8e929 [ 366.154869][T10865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.154888][T10865] RSP: 002b:00007fdc22b76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.154912][T10865] RAX: ffffffffffffffda RBX: 00007fdc21fb6080 RCX: 00007fdc21d8e929 [ 366.154928][T10865] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 366.154943][T10865] RBP: 00007fdc22b76090 R08: 0000000000000000 R09: 0000000000000000 [ 366.154956][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.154970][T10865] R13: 0000000000000000 R14: 00007fdc21fb6080 R15: 00007ffc82be5e98 [ 366.155004][T10865] [ 366.725009][T10861] netlink: 'syz.1.1460': attribute type 3 has an invalid length. [ 366.743479][T10861] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1460'. [ 366.784740][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.100130][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.299731][ T36] bridge_slave_1: left allmulticast mode [ 367.306643][ T36] bridge_slave_1: left promiscuous mode [ 367.335120][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.372667][ T36] bridge_slave_0: left allmulticast mode [ 367.441902][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 367.462186][ T36] bridge_slave_0: left promiscuous mode [ 367.468627][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.599286][T10878] netlink: 'syz.1.1467': attribute type 4 has an invalid length. [ 367.626964][T10878] netlink: 'syz.1.1467': attribute type 16 has an invalid length. [ 367.634967][T10878] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1467'. [ 367.946283][T10887] Dead loop on virtual device ip6_vti0, fix it urgently! [ 368.044399][T10893] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1474'. [ 368.069969][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.084305][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.123868][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.225615][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.240875][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.981075][T10905] FAULT_INJECTION: forcing a failure. [ 368.981075][T10905] name failslab, interval 1, probability 0, space 0, times 1 [ 368.994547][T10905] CPU: 1 UID: 0 PID: 10905 Comm: syz.4.1476 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 368.994579][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.994593][T10905] Call Trace: [ 368.994607][T10905] [ 368.994621][T10905] dump_stack_lvl+0x189/0x250 [ 368.994669][T10905] ? __pfx____ratelimit+0x10/0x10 [ 368.994717][T10905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.994765][T10905] ? __pfx__printk+0x10/0x10 [ 368.994840][T10905] ? __pfx___might_resched+0x10/0x10 [ 368.994933][T10905] should_fail_ex+0x414/0x560 [ 368.995007][T10905] should_failslab+0xa8/0x100 [ 368.995053][T10905] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 368.995087][T10905] ? __alloc_skb+0x112/0x2d0 [ 368.995157][T10905] __alloc_skb+0x112/0x2d0 [ 368.995222][T10905] netlink_sendmsg+0x5c6/0xb30 [ 368.995320][T10905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.995369][T10905] ? perf_trace_run_bpf_submit+0x100/0x170 [ 368.995400][T10905] ? aa_sock_msg_perm+0x94/0x160 [ 368.995452][T10905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.995484][T10905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.995528][T10905] __sock_sendmsg+0x21c/0x270 [ 368.995601][T10905] ____sys_sendmsg+0x505/0x830 [ 368.995679][T10905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.995778][T10905] ? import_iovec+0x74/0xa0 [ 368.995837][T10905] ___sys_sendmsg+0x21f/0x2a0 [ 368.995896][T10905] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.996070][T10905] ? __fget_files+0x2a/0x420 [ 368.996186][T10905] ? __fget_files+0x2a/0x420 [ 368.996213][T10905] ? __fget_files+0x3a0/0x420 [ 368.996322][T10905] __x64_sys_sendmsg+0x19b/0x260 [ 368.996381][T10905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.996480][T10905] ? __pfx_ksys_write+0x10/0x10 [ 368.996496][T10905] ? rcu_is_watching+0x15/0xb0 [ 368.996571][T10905] ? do_syscall_64+0xbe/0x3b0 [ 368.996620][T10905] do_syscall_64+0xfa/0x3b0 [ 368.996641][T10905] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.996681][T10905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.996708][T10905] ? clear_bhb_loop+0x60/0xb0 [ 368.996758][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.996783][T10905] RIP: 0033:0x7fdc21d8e929 [ 368.996816][T10905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.996836][T10905] RSP: 002b:00007fdc22b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.996860][T10905] RAX: ffffffffffffffda RBX: 00007fdc21fb5fa0 RCX: 00007fdc21d8e929 [ 368.996876][T10905] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 368.996889][T10905] RBP: 00007fdc22b97090 R08: 0000000000000000 R09: 0000000000000000 [ 368.996903][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.996916][T10905] R13: 0000000000000000 R14: 00007fdc21fb5fa0 R15: 00007ffc82be5e98 [ 368.997028][T10905] [ 369.627408][T10899] netlink: 'syz.3.1473': attribute type 3 has an invalid length. [ 369.639929][T10899] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1473'. [ 369.728477][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.746493][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.768301][ T36] bond0 (unregistering): Released all slaves [ 369.902397][T10911] netlink: 'syz.4.1477': attribute type 29 has an invalid length. [ 369.968880][T10909] netlink: 'syz.4.1477': attribute type 29 has an invalid length. [ 370.406989][ T5858] Bluetooth: hci2: command tx timeout [ 370.630046][T10934] Dead loop on virtual device ip6_vti0, fix it urgently! [ 370.682965][ T36] hsr_slave_0: left promiscuous mode [ 370.713825][ T36] hsr_slave_1: left promiscuous mode [ 370.739211][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.761498][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.832412][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.863687][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.001446][ T36] veth1_macvtap: left promiscuous mode [ 371.020746][ T36] veth0_macvtap: left promiscuous mode [ 371.068649][ T36] veth1_vlan: left promiscuous mode [ 371.082076][ T36] veth0_vlan: left promiscuous mode [ 371.680859][T10949] netlink: 'syz.4.1490': attribute type 3 has an invalid length. [ 371.743359][T10949] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1490'. [ 371.887808][T10953] netlink: 'syz.3.1493': attribute type 4 has an invalid length. [ 371.902006][T10953] netlink: 'syz.3.1493': attribute type 16 has an invalid length. [ 371.911762][T10953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1493'. [ 372.434509][T10962] FAULT_INJECTION: forcing a failure. [ 372.434509][T10962] name failslab, interval 1, probability 0, space 0, times 0 [ 372.451754][ T36] team0 (unregistering): Port device team_slave_1 removed [ 372.452401][T10962] CPU: 1 UID: 0 PID: 10962 Comm: syz.4.1497 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 372.452440][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 372.452455][T10962] Call Trace: [ 372.452465][T10962] [ 372.452477][T10962] dump_stack_lvl+0x189/0x250 [ 372.452522][T10962] ? __pfx____ratelimit+0x10/0x10 [ 372.452560][T10962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.452599][T10962] ? __pfx__printk+0x10/0x10 [ 372.452635][T10962] ? __pfx___might_resched+0x10/0x10 [ 372.452681][T10962] should_fail_ex+0x414/0x560 [ 372.452720][T10962] should_failslab+0xa8/0x100 [ 372.452751][T10962] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 372.452775][T10962] ? __alloc_skb+0x112/0x2d0 [ 372.452810][T10962] __alloc_skb+0x112/0x2d0 [ 372.452845][T10962] netlink_sendmsg+0x5c6/0xb30 [ 372.452903][T10962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.452939][T10962] ? aa_sock_msg_perm+0x94/0x160 [ 372.452975][T10962] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.453006][T10962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.453038][T10962] __sock_sendmsg+0x21c/0x270 [ 372.453082][T10962] ____sys_sendmsg+0x505/0x830 [ 372.453122][T10962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.453167][T10962] ? import_iovec+0x74/0xa0 [ 372.453197][T10962] ___sys_sendmsg+0x21f/0x2a0 [ 372.453233][T10962] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.453297][T10962] ? __fget_files+0x2a/0x420 [ 372.453345][T10962] ? __fget_files+0x2a/0x420 [ 372.453370][T10962] ? __fget_files+0x3a0/0x420 [ 372.453413][T10962] __x64_sys_sendmsg+0x19b/0x260 [ 372.453450][T10962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.453496][T10962] ? __pfx_ksys_write+0x10/0x10 [ 372.453511][T10962] ? rcu_is_watching+0x15/0xb0 [ 372.453555][T10962] ? do_syscall_64+0xbe/0x3b0 [ 372.453584][T10962] do_syscall_64+0xfa/0x3b0 [ 372.453604][T10962] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.453640][T10962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.453665][T10962] ? clear_bhb_loop+0x60/0xb0 [ 372.453695][T10962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.453718][T10962] RIP: 0033:0x7fdc21d8e929 [ 372.453742][T10962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.453762][T10962] RSP: 002b:00007fdc22b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.453789][T10962] RAX: ffffffffffffffda RBX: 00007fdc21fb5fa0 RCX: 00007fdc21d8e929 [ 372.453807][T10962] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 372.453823][T10962] RBP: 00007fdc22b97090 R08: 0000000000000000 R09: 0000000000000000 [ 372.453837][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.453852][T10962] R13: 0000000000000000 R14: 00007fdc21fb5fa0 R15: 00007ffc82be5e98 [ 372.453901][T10962] [ 372.477142][ T5858] Bluetooth: hci2: command tx timeout [ 372.836541][ T36] team0 (unregistering): Port device team_slave_0 removed [ 373.427858][T10971] Dead loop on virtual device ip6_vti0, fix it urgently! [ 373.451811][T10960] netlink: 'syz.3.1496': attribute type 29 has an invalid length. [ 373.593358][T10894] chnl_net:caif_netlink_parms(): no params data found [ 373.740814][T10981] netlink: 'syz.4.1505': attribute type 4 has an invalid length. [ 373.758473][T10981] netlink: 'syz.4.1505': attribute type 16 has an invalid length. [ 373.768488][T10981] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1505'. [ 373.936493][T10894] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.992629][T10894] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.048876][T10894] bridge_slave_0: entered allmulticast mode [ 374.096114][T10894] bridge_slave_0: entered promiscuous mode [ 374.145786][T10894] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.185051][T10894] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.215536][T10894] bridge_slave_1: entered allmulticast mode [ 374.229090][T10894] bridge_slave_1: entered promiscuous mode [ 374.328514][T10894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.352285][T10894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.535405][T10997] netlink: 'syz.3.1508': attribute type 3 has an invalid length. [ 374.544177][T10997] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1508'. [ 374.644663][T10894] team0: Port device team_slave_0 added [ 374.706650][T10894] team0: Port device team_slave_1 added [ 374.879753][ T5858] Bluetooth: hci2: command tx timeout [ 374.950156][T11015] netlink: 'syz.2.1515': attribute type 29 has an invalid length. [ 374.966287][T10894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.998220][T10894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.054583][T10894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.072284][T10894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.083502][T10894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.119932][T10894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.173463][T11019] Dead loop on virtual device ip6_vti0, fix it urgently! [ 375.255932][T10894] hsr_slave_0: entered promiscuous mode [ 375.288340][T10894] hsr_slave_1: entered promiscuous mode [ 375.295831][T10894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.308958][T10894] Cannot create hsr debugfs directory [ 375.315974][T11024] netlink: 'syz.2.1518': attribute type 29 has an invalid length. [ 375.326988][T11023] netlink: 'syz.2.1518': attribute type 29 has an invalid length. [ 375.408926][T11023] wg2: left promiscuous mode [ 375.493364][T11024] wg2: entered promiscuous mode [ 376.290262][T11052] netlink: 'syz.1.1529': attribute type 4 has an invalid length. [ 376.320100][T10894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.355312][T11056] Dead loop on virtual device ip6_vti0, fix it urgently! [ 376.359140][T10894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.386806][T11052] netlink: 'syz.1.1529': attribute type 16 has an invalid length. [ 376.395940][T11052] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1529'. [ 376.543963][T11061] netlink: 'syz.2.1527': attribute type 3 has an invalid length. [ 376.558137][T10894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.622281][T11061] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1527'. [ 376.683881][T10894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.957178][ T5858] Bluetooth: hci2: command tx timeout [ 377.143041][T10894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.339291][T10894] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.452998][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.462749][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.604508][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.613263][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.681689][T11084] netlink: 'syz.4.1539': attribute type 4 has an invalid length. [ 377.737041][T11084] netlink: 'syz.4.1539': attribute type 16 has an invalid length. [ 377.774712][T11084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1539'. [ 378.046282][T11095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.078509][T11095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.088020][T11102] FAULT_INJECTION: forcing a failure. [ 378.088020][T11102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.117690][T11095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.126281][T11095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.146592][T11102] CPU: 1 UID: 0 PID: 11102 Comm: syz.3.1544 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 378.146625][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.146640][T11102] Call Trace: [ 378.146648][T11102] [ 378.146671][T11102] dump_stack_lvl+0x189/0x250 [ 378.146709][T11102] ? __pfx____ratelimit+0x10/0x10 [ 378.146741][T11102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.146775][T11102] ? __pfx__printk+0x10/0x10 [ 378.146799][T11102] ? __might_fault+0xb0/0x130 [ 378.146831][T11102] should_fail_ex+0x414/0x560 [ 378.146862][T11102] _copy_from_iter+0x1db/0x16f0 [ 378.146899][T11102] ? rcu_is_watching+0x15/0xb0 [ 378.146934][T11102] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 378.146958][T11102] ? __pfx__copy_from_iter+0x10/0x10 [ 378.146993][T11102] ? __build_skb_around+0x257/0x3e0 [ 378.147023][T11102] ? netlink_sendmsg+0x642/0xb30 [ 378.147048][T11102] ? skb_put+0x11b/0x210 [ 378.147078][T11102] netlink_sendmsg+0x6b2/0xb30 [ 378.147116][T11102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.147146][T11102] ? aa_sock_msg_perm+0x94/0x160 [ 378.147177][T11102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 378.147205][T11102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.147232][T11102] __sock_sendmsg+0x21c/0x270 [ 378.147270][T11102] ____sys_sendmsg+0x505/0x830 [ 378.147306][T11102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.147345][T11102] ? import_iovec+0x74/0xa0 [ 378.147372][T11102] ___sys_sendmsg+0x21f/0x2a0 [ 378.147402][T11102] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.147471][T11102] ? __fget_files+0x2a/0x420 [ 378.147496][T11102] ? __fget_files+0x3a0/0x420 [ 378.147532][T11102] __x64_sys_sendmsg+0x19b/0x260 [ 378.147564][T11102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.147604][T11102] ? __pfx_ksys_write+0x10/0x10 [ 378.147622][T11102] ? rcu_is_watching+0x15/0xb0 [ 378.147667][T11102] ? do_syscall_64+0xbe/0x3b0 [ 378.147694][T11102] do_syscall_64+0xfa/0x3b0 [ 378.147713][T11102] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.147746][T11102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.147768][T11102] ? clear_bhb_loop+0x60/0xb0 [ 378.147795][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.147817][T11102] RIP: 0033:0x7f562998e929 [ 378.147837][T11102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.147857][T11102] RSP: 002b:00007f562a834038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.147881][T11102] RAX: ffffffffffffffda RBX: 00007f5629bb6080 RCX: 00007f562998e929 [ 378.147896][T11102] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 378.147910][T11102] RBP: 00007f562a834090 R08: 0000000000000000 R09: 0000000000000000 [ 378.147922][T11102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.147934][T11102] R13: 0000000000000000 R14: 00007f5629bb6080 R15: 00007ffe23aee5b8 [ 378.147968][T11102] [ 378.503394][T11095] batman_adv: batadv0: Removing interface: netdevsim0 [ 378.665685][T11112] Dead loop on virtual device ip6_vti0, fix it urgently! [ 378.780077][T11105] netlink: 'syz.1.1546': attribute type 29 has an invalid length. [ 378.849749][T10894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.904165][T10894] veth0_vlan: entered promiscuous mode [ 378.951207][T10894] veth1_vlan: entered promiscuous mode [ 379.103464][T10894] veth0_macvtap: entered promiscuous mode [ 379.161935][T10894] veth1_macvtap: entered promiscuous mode [ 379.494695][T10894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.618743][T10894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.772196][T11122] netlink: 'syz.4.1552': attribute type 29 has an invalid length. [ 379.960822][T10894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.067229][T10894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.172133][T10894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.193521][T10894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.611502][T11132] netlink: 'syz.2.1551': attribute type 3 has an invalid length. [ 380.696318][T11132] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1551'. [ 380.855763][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.926112][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.935328][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.970011][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.305409][T11156] FAULT_INJECTION: forcing a failure. [ 381.305409][T11156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.331080][T11156] CPU: 1 UID: 0 PID: 11156 Comm: syz.1.1562 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 381.331112][T11156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.331126][T11156] Call Trace: [ 381.331134][T11156] [ 381.331144][T11156] dump_stack_lvl+0x189/0x250 [ 381.331181][T11156] ? __pfx____ratelimit+0x10/0x10 [ 381.331215][T11156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.331260][T11156] ? __pfx__printk+0x10/0x10 [ 381.331285][T11156] ? __might_fault+0xb0/0x130 [ 381.331311][T11156] ? __might_fault+0xb0/0x130 [ 381.331339][T11156] should_fail_ex+0x414/0x560 [ 381.331376][T11156] _copy_from_iter+0x1db/0x16f0 [ 381.331415][T11156] ? rcu_is_watching+0x15/0xb0 [ 381.331453][T11156] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 381.331478][T11156] ? __pfx__copy_from_iter+0x10/0x10 [ 381.331514][T11156] ? __build_skb_around+0x257/0x3e0 [ 381.331544][T11156] ? netlink_sendmsg+0x642/0xb30 [ 381.331570][T11156] ? skb_put+0x11b/0x210 [ 381.331601][T11156] netlink_sendmsg+0x6b2/0xb30 [ 381.331642][T11156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.331675][T11156] ? aa_sock_msg_perm+0x94/0x160 [ 381.331706][T11156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.331735][T11156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.331764][T11156] __sock_sendmsg+0x21c/0x270 [ 381.331803][T11156] ____sys_sendmsg+0x505/0x830 [ 381.331842][T11156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.331884][T11156] ? import_iovec+0x74/0xa0 [ 381.331912][T11156] ___sys_sendmsg+0x21f/0x2a0 [ 381.331945][T11156] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.332004][T11156] ? __fget_files+0x2a/0x420 [ 381.332047][T11156] ? __fget_files+0x2a/0x420 [ 381.332070][T11156] ? __fget_files+0x3a0/0x420 [ 381.332105][T11156] __x64_sys_sendmsg+0x19b/0x260 [ 381.332137][T11156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.332164][T11156] ? perf_trace_preemptirq_template+0xa3/0x340 [ 381.332207][T11156] ? __pfx_ksys_write+0x10/0x10 [ 381.332225][T11156] ? rcu_is_watching+0x15/0xb0 [ 381.332276][T11156] ? do_syscall_64+0xbe/0x3b0 [ 381.332302][T11156] do_syscall_64+0xfa/0x3b0 [ 381.332320][T11156] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.332360][T11156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.332388][T11156] ? clear_bhb_loop+0x60/0xb0 [ 381.332417][T11156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.332438][T11156] RIP: 0033:0x7f2e2e98e929 [ 381.332458][T11156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.332478][T11156] RSP: 002b:00007f2e2f892038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.332500][T11156] RAX: ffffffffffffffda RBX: 00007f2e2ebb5fa0 RCX: 00007f2e2e98e929 [ 381.332517][T11156] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 381.332531][T11156] RBP: 00007f2e2f892090 R08: 0000000000000000 R09: 0000000000000000 [ 381.332544][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.332557][T11156] R13: 0000000000000000 R14: 00007f2e2ebb5fa0 R15: 00007ffcbe359158 [ 381.332593][T11156] [ 381.762665][T11161] tap0: tun_chr_ioctl cmd 1074025677 [ 381.778984][T11161] tap0: linktype set to 773 [ 381.949922][T11167] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 381.960196][T11167] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1566'. [ 382.101059][T11167] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1566'. [ 382.287819][ T3516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.604555][ T3516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.684909][ T3516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.743235][ T3516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.872273][ T3516] bridge_slave_1: left allmulticast mode [ 382.878647][ T3516] bridge_slave_1: left promiscuous mode [ 382.886142][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.901053][ T3516] bridge_slave_0: left allmulticast mode [ 382.909517][ T3516] bridge_slave_0: left promiscuous mode [ 382.919111][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.005949][T11184] Dead loop on virtual device ip6_vti0, fix it urgently! [ 384.214068][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.248691][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.255893][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.297855][T11189] netlink: 'syz.3.1571': attribute type 3 has an invalid length. [ 384.359996][T11189] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1571'. [ 384.380386][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.409429][ T3516] bond0 (unregistering): Released all slaves [ 384.457637][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 384.493255][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 384.502827][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 384.547561][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 384.564636][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.114625][T11210] netlink: 'syz.2.1581': attribute type 4 has an invalid length. [ 385.137612][T11210] netlink: 'syz.2.1581': attribute type 16 has an invalid length. [ 385.184694][T11210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1581'. [ 385.265282][ T3516] hsr_slave_0: left promiscuous mode [ 385.284356][ T3516] hsr_slave_1: left promiscuous mode [ 385.305680][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.337794][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.354803][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.365223][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.393304][ T3516] veth1_macvtap: left promiscuous mode [ 385.412238][T11216] FAULT_INJECTION: forcing a failure. [ 385.412238][T11216] name failslab, interval 1, probability 0, space 0, times 0 [ 385.412260][ T3516] veth0_macvtap: left promiscuous mode [ 385.437597][T11216] CPU: 1 UID: 0 PID: 11216 Comm: syz.1.1584 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 385.437629][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.437642][T11216] Call Trace: [ 385.437651][T11216] [ 385.437661][T11216] dump_stack_lvl+0x189/0x250 [ 385.437701][T11216] ? __pfx____ratelimit+0x10/0x10 [ 385.437736][T11216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.437770][T11216] ? __pfx__printk+0x10/0x10 [ 385.437802][T11216] ? ref_tracker_alloc+0x318/0x460 [ 385.437836][T11216] should_fail_ex+0x414/0x560 [ 385.437871][T11216] should_failslab+0xa8/0x100 [ 385.437911][T11216] kmem_cache_alloc_noprof+0x73/0x3c0 [ 385.437947][T11216] ? skb_clone+0x212/0x3a0 [ 385.437982][T11216] skb_clone+0x212/0x3a0 [ 385.438017][T11216] __netlink_deliver_tap+0x404/0x850 [ 385.438058][T11216] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.438088][T11216] netlink_deliver_tap+0x19c/0x1b0 [ 385.438115][T11216] netlink_unicast+0x72f/0x8d0 [ 385.438149][T11216] netlink_sendmsg+0x805/0xb30 [ 385.438186][T11216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.438217][T11216] ? aa_sock_msg_perm+0x94/0x160 [ 385.438247][T11216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.438273][T11216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.438302][T11216] __sock_sendmsg+0x21c/0x270 [ 385.438339][T11216] ____sys_sendmsg+0x505/0x830 [ 385.438374][T11216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.438422][T11216] ? import_iovec+0x74/0xa0 [ 385.438453][T11216] ___sys_sendmsg+0x21f/0x2a0 [ 385.438484][T11216] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.438555][T11216] ? __fget_files+0x2a/0x420 [ 385.438584][T11216] ? __fget_files+0x3a0/0x420 [ 385.438621][T11216] __x64_sys_sendmsg+0x19b/0x260 [ 385.438653][T11216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.438694][T11216] ? __pfx_ksys_write+0x10/0x10 [ 385.438712][T11216] ? rcu_is_watching+0x15/0xb0 [ 385.438752][T11216] ? do_syscall_64+0xbe/0x3b0 [ 385.438777][T11216] do_syscall_64+0xfa/0x3b0 [ 385.438796][T11216] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.438829][T11216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.438851][T11216] ? clear_bhb_loop+0x60/0xb0 [ 385.438878][T11216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.438907][T11216] RIP: 0033:0x7f2e2e98e929 [ 385.438927][T11216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.438947][T11216] RSP: 002b:00007f2e2f892038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.438970][T11216] RAX: ffffffffffffffda RBX: 00007f2e2ebb5fa0 RCX: 00007f2e2e98e929 [ 385.438986][T11216] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 385.439000][T11216] RBP: 00007f2e2f892090 R08: 0000000000000000 R09: 0000000000000000 [ 385.439014][T11216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.439027][T11216] R13: 0000000000000000 R14: 00007f2e2ebb5fa0 R15: 00007ffcbe359158 [ 385.439062][T11216] [ 385.440093][ T3516] veth1_vlan: left promiscuous mode [ 385.888271][T11224] Dead loop on virtual device ip6_vti0, fix it urgently! [ 385.988602][ T3516] veth0_vlan: left promiscuous mode [ 386.637228][ T5843] Bluetooth: hci2: command tx timeout [ 387.320298][T11238] netlink: 'syz.3.1589': attribute type 3 has an invalid length. [ 387.329737][T11238] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1589'. [ 387.889597][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 387.953584][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 388.373920][T11216] netlink: 'syz.1.1584': attribute type 29 has an invalid length. [ 388.719397][ T5843] Bluetooth: hci2: command tx timeout [ 388.737915][T11193] chnl_net:caif_netlink_parms(): no params data found [ 388.968038][T11258] netlink: 'syz.2.1595': attribute type 29 has an invalid length. [ 389.004733][T11193] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.013193][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.021556][T11193] bridge_slave_0: entered allmulticast mode [ 389.030942][T11193] bridge_slave_0: entered promiscuous mode [ 389.059210][T11193] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.067367][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.074636][T11193] bridge_slave_1: entered allmulticast mode [ 389.082866][T11193] bridge_slave_1: entered promiscuous mode [ 389.167933][T11267] Dead loop on virtual device ip6_vti0, fix it urgently! [ 389.242926][T11193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.355452][T11193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.862202][T11193] team0: Port device team_slave_0 added [ 390.044010][T11193] team0: Port device team_slave_1 added [ 390.379805][T11291] netlink: 'syz.4.1602': attribute type 3 has an invalid length. [ 390.391571][T11291] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1602'. [ 390.704799][T11193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.713376][T11193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.794409][T11193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.810993][ T5843] Bluetooth: hci2: command tx timeout [ 390.832109][T11193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.840613][T11193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.879867][T11193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.908575][T11296] netlink: 'syz.1.1605': attribute type 29 has an invalid length. [ 390.938849][T11295] netlink: 'syz.1.1605': attribute type 29 has an invalid length. [ 391.219954][T11193] hsr_slave_0: entered promiscuous mode [ 391.238686][T11193] hsr_slave_1: entered promiscuous mode [ 391.248435][T11193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.259734][T11193] Cannot create hsr debugfs directory [ 391.585532][T11316] Dead loop on virtual device ip6_vti0, fix it urgently! [ 391.621534][T11320] FAULT_INJECTION: forcing a failure. [ 391.621534][T11320] name failslab, interval 1, probability 0, space 0, times 0 [ 391.639142][T11320] CPU: 0 UID: 0 PID: 11320 Comm: syz.2.1613 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 391.639174][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.639188][T11320] Call Trace: [ 391.639199][T11320] [ 391.639210][T11320] dump_stack_lvl+0x189/0x250 [ 391.639255][T11320] ? __pfx____ratelimit+0x10/0x10 [ 391.639293][T11320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.639332][T11320] ? __pfx__printk+0x10/0x10 [ 391.639396][T11320] ? ref_tracker_alloc+0x318/0x460 [ 391.639440][T11320] should_fail_ex+0x414/0x560 [ 391.639497][T11320] should_failslab+0xa8/0x100 [ 391.639531][T11320] kmem_cache_alloc_noprof+0x73/0x3c0 [ 391.639568][T11320] ? skb_clone+0x212/0x3a0 [ 391.639617][T11320] skb_clone+0x212/0x3a0 [ 391.639664][T11320] __netlink_deliver_tap+0x404/0x850 [ 391.639735][T11320] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.639776][T11320] netlink_deliver_tap+0x19c/0x1b0 [ 391.639812][T11320] netlink_unicast+0x72f/0x8d0 [ 391.639883][T11320] netlink_sendmsg+0x805/0xb30 [ 391.639940][T11320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.639983][T11320] ? aa_sock_msg_perm+0x94/0x160 [ 391.640022][T11320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.640051][T11320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.640085][T11320] __sock_sendmsg+0x21c/0x270 [ 391.640136][T11320] ____sys_sendmsg+0x505/0x830 [ 391.640187][T11320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.640252][T11320] ? import_iovec+0x74/0xa0 [ 391.640292][T11320] ___sys_sendmsg+0x21f/0x2a0 [ 391.640335][T11320] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.640606][T11320] ? __fget_files+0x2a/0x420 [ 391.640688][T11320] ? __fget_files+0x2a/0x420 [ 391.640718][T11320] ? __fget_files+0x3a0/0x420 [ 391.640791][T11320] __x64_sys_sendmsg+0x19b/0x260 [ 391.640841][T11320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.640915][T11320] ? __pfx_ksys_write+0x10/0x10 [ 391.640965][T11320] ? do_syscall_64+0xbe/0x3b0 [ 391.641008][T11320] do_syscall_64+0xfa/0x3b0 [ 391.641030][T11320] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.641071][T11320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.641097][T11320] ? clear_bhb_loop+0x60/0xb0 [ 391.641138][T11320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.641163][T11320] RIP: 0033:0x7f547298e929 [ 391.641189][T11320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.641211][T11320] RSP: 002b:00007f54737a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.641236][T11320] RAX: ffffffffffffffda RBX: 00007f5472bb5fa0 RCX: 00007f547298e929 [ 391.641254][T11320] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 391.641270][T11320] RBP: 00007f54737a4090 R08: 0000000000000000 R09: 0000000000000000 [ 391.641285][T11320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.641300][T11320] R13: 0000000000000000 R14: 00007f5472bb5fa0 R15: 00007ffe96314548 [ 391.641385][T11320] [ 391.641548][T11320] netlink: 'syz.2.1613': attribute type 4 has an invalid length. [ 392.011564][T11320] netlink: 'syz.2.1613': attribute type 16 has an invalid length. [ 392.049897][T11320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1613'. [ 392.881931][ T5843] Bluetooth: hci2: command tx timeout [ 392.984796][T11336] netlink: 'syz.4.1619': attribute type 10 has an invalid length. [ 393.011443][T11336] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1619'. [ 393.510500][T11334] netlink: 'syz.3.1618': attribute type 3 has an invalid length. [ 393.578690][T11334] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1618'. [ 393.869194][T11193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.909342][T11193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.943791][T11193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.980189][T11193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.997414][T11357] netlink: 'syz.1.1623': attribute type 4 has an invalid length. [ 394.019354][T11357] netlink: 'syz.1.1623': attribute type 16 has an invalid length. [ 394.029055][T11357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1623'. [ 394.272601][T11371] Dead loop on virtual device ip6_vti0, fix it urgently! [ 394.312890][T11193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.410385][T11193] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.442351][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.451069][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.497842][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.507305][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.682570][T11378] netlink: 'syz.1.1630': attribute type 4 has an invalid length. [ 394.781167][T11378] netlink: 'syz.1.1630': attribute type 16 has an invalid length. [ 394.864569][T11378] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1630'. [ 395.385297][T11387] netlink: 'syz.2.1633': attribute type 10 has an invalid length. [ 395.494353][T11387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.518937][T11387] team0: Port device bond0 added [ 395.944488][T11193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.126017][T11406] netlink: 'syz.1.1636': attribute type 3 has an invalid length. [ 396.199497][T11193] veth0_vlan: entered promiscuous mode [ 396.247280][T11406] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1636'. [ 396.283709][T11193] veth1_vlan: entered promiscuous mode [ 396.485216][T11193] veth0_macvtap: entered promiscuous mode [ 396.511825][T11193] veth1_macvtap: entered promiscuous mode [ 396.539388][T11193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.558292][T11193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.590879][T11193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.611556][T11193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.634736][T11193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.648619][T11193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.744774][T11424] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.773613][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.796771][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.882148][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.898057][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.320423][T11437] netlink: 'syz.3.1650': attribute type 29 has an invalid length. [ 398.035623][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.129855][T11447] netlink: 'syz.4.1655': attribute type 4 has an invalid length. [ 398.146870][T11447] netlink: 'syz.4.1655': attribute type 16 has an invalid length. [ 398.158031][T11447] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1655'. [ 398.171903][T11447] FAULT_INJECTION: forcing a failure. [ 398.171903][T11447] name failslab, interval 1, probability 0, space 0, times 0 [ 398.189784][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.204002][T11447] CPU: 1 UID: 0 PID: 11447 Comm: syz.4.1655 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 398.204036][T11447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.204050][T11447] Call Trace: [ 398.204058][T11447] [ 398.204067][T11447] dump_stack_lvl+0x189/0x250 [ 398.204105][T11447] ? __pfx____ratelimit+0x10/0x10 [ 398.204141][T11447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.204242][T11447] ? __pfx__printk+0x10/0x10 [ 398.204279][T11447] ? __pfx___might_resched+0x10/0x10 [ 398.204329][T11447] should_fail_ex+0x414/0x560 [ 398.204368][T11447] should_failslab+0xa8/0x100 [ 398.204398][T11447] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 398.204425][T11447] ? __alloc_skb+0x112/0x2d0 [ 398.204459][T11447] __alloc_skb+0x112/0x2d0 [ 398.204494][T11447] netlink_ack+0x146/0xa50 [ 398.204519][T11447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 398.204542][T11447] ? ref_tracker_free+0x63a/0x7d0 [ 398.204581][T11447] ? perf_trace_run_bpf_submit+0xee/0x170 [ 398.204628][T11447] netlink_rcv_skb+0x28c/0x470 [ 398.204660][T11447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 398.204688][T11447] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.204736][T11447] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.204764][T11447] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.204801][T11447] netlink_unicast+0x758/0x8d0 [ 398.204858][T11447] netlink_sendmsg+0x805/0xb30 [ 398.204902][T11447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.204943][T11447] ? aa_sock_msg_perm+0x94/0x160 [ 398.204978][T11447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.205009][T11447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.205040][T11447] __sock_sendmsg+0x21c/0x270 [ 398.205085][T11447] ____sys_sendmsg+0x505/0x830 [ 398.205124][T11447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.205337][T11447] ? import_iovec+0x74/0xa0 [ 398.205381][T11447] ___sys_sendmsg+0x21f/0x2a0 [ 398.205419][T11447] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.205483][T11447] ? __fget_files+0x2a/0x420 [ 398.205530][T11447] ? __fget_files+0x2a/0x420 [ 398.205554][T11447] ? __fget_files+0x3a0/0x420 [ 398.205597][T11447] __x64_sys_sendmsg+0x19b/0x260 [ 398.205634][T11447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.205685][T11447] ? rcu_is_watching+0x15/0xb0 [ 398.205725][T11447] ? trace_sys_enter+0x25/0x120 [ 398.205770][T11447] do_syscall_64+0xfa/0x3b0 [ 398.205793][T11447] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.205832][T11447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.205855][T11447] ? clear_bhb_loop+0x60/0xb0 [ 398.205885][T11447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.205909][T11447] RIP: 0033:0x7fdc21d8e929 [ 398.205933][T11447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.205955][T11447] RSP: 002b:00007fdc22b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.205976][T11447] RAX: ffffffffffffffda RBX: 00007fdc21fb5fa0 RCX: 00007fdc21d8e929 [ 398.205989][T11447] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 398.206001][T11447] RBP: 00007fdc22b97090 R08: 0000000000000000 R09: 0000000000000000 [ 398.206043][T11447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.206057][T11447] R13: 0000000000000000 R14: 00007fdc21fb5fa0 R15: 00007ffc82be5e98 [ 398.206099][T11447] [ 398.513307][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 399.221814][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.518349][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.672311][T11457] Dead loop on virtual device ip6_vti0, fix it urgently! [ 399.848441][T11465] netlink: 'syz.2.1657': attribute type 3 has an invalid length. [ 399.968389][T11465] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1657'. [ 400.005706][T11464] netlink: 'syz.3.1661': attribute type 29 has an invalid length. [ 400.112514][ T146] bridge_slave_1: left allmulticast mode [ 400.182641][ T146] bridge_slave_1: left promiscuous mode [ 400.225323][T11473] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1664'. [ 400.238754][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.356448][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.368310][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.380338][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.393179][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.402208][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.511916][ T146] bridge_slave_0: left allmulticast mode [ 400.531725][ T146] bridge_slave_0: left promiscuous mode [ 400.562817][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.706372][T11490] netlink: 'syz.2.1669': attribute type 4 has an invalid length. [ 400.715789][T11490] netlink: 'syz.2.1669': attribute type 16 has an invalid length. [ 400.726068][T11490] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1669'. [ 401.051707][T11503] Dead loop on virtual device ip6_vti0, fix it urgently! [ 401.709498][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.764902][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.779185][ T146] bond0 (unregistering): Released all slaves [ 401.866038][T11519] netlink: 'syz.2.1680': attribute type 3 has an invalid length. [ 401.902319][T11519] netlink: 'syz.2.1680': attribute type 1 has an invalid length. [ 401.965169][T11519] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1680'. [ 402.139272][T11526] netlink: 'syz.3.1682': attribute type 8 has an invalid length. [ 402.150285][T11526] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1682'. [ 402.529685][ T5843] Bluetooth: hci2: command tx timeout [ 402.749309][T11520] netlink: 'syz.4.1679': attribute type 3 has an invalid length. [ 402.851920][T11520] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1679'. [ 403.279065][T11477] chnl_net:caif_netlink_parms(): no params data found [ 403.348132][T11548] Dead loop on virtual device ip6_vti0, fix it urgently! [ 403.489600][ T146] hsr_slave_0: left promiscuous mode [ 403.534035][ T146] hsr_slave_1: left promiscuous mode [ 403.556334][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.654079][T11535] netlink: 'syz.1.1684': attribute type 3 has an invalid length. [ 403.663193][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.002718][T11535] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1684'. [ 404.224751][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.280247][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.369207][ T146] veth1_macvtap: left promiscuous mode [ 404.375039][ T146] veth0_macvtap: left promiscuous mode [ 404.383913][ T146] veth1_vlan: left promiscuous mode [ 404.389873][ T146] veth0_vlan: left promiscuous mode [ 404.566889][ T5843] Bluetooth: hci2: command tx timeout [ 404.919140][T11568] netlink: 'syz.1.1695': attribute type 1 has an invalid length. [ 404.952972][T11568] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1695'. [ 405.891331][T11573] netlink: 'syz.2.1696': attribute type 4 has an invalid length. [ 405.947427][T11573] netlink: 'syz.2.1696': attribute type 16 has an invalid length. [ 405.993251][T11573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1696'. [ 406.638526][ T5843] Bluetooth: hci2: command tx timeout [ 406.714513][ T146] team0 (unregistering): Port device team_slave_1 removed [ 406.833549][ T146] team0 (unregistering): Port device team_slave_0 removed [ 407.355826][T11581] netlink: 'syz.2.1699': attribute type 3 has an invalid length. [ 407.368479][T11581] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1699'. [ 407.893962][T11551] netlink: 'syz.4.1688': attribute type 29 has an invalid length. [ 408.003259][T11595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 408.160811][T11477] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.171286][T11477] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.222672][T11477] bridge_slave_0: entered allmulticast mode [ 408.233114][T11477] bridge_slave_0: entered promiscuous mode [ 408.260847][T11477] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.270999][T11477] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.281932][T11477] bridge_slave_1: entered allmulticast mode [ 408.293406][T11477] bridge_slave_1: entered promiscuous mode [ 408.311570][T11604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1708'. [ 408.431335][T11477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.513914][T11477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.689369][T11477] team0: Port device team_slave_0 added [ 408.717411][ T5843] Bluetooth: hci2: command tx timeout [ 408.738688][T11477] team0: Port device team_slave_1 added [ 408.944600][T11477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.964762][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.998574][T11477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.150607][T11477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.172084][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.214956][T11477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.277862][T11631] netlink: 'syz.1.1712': attribute type 3 has an invalid length. [ 409.345671][T11631] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1712'. [ 409.551573][T11477] hsr_slave_0: entered promiscuous mode [ 409.607592][T11477] hsr_slave_1: entered promiscuous mode [ 409.634838][T11477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.688537][T11477] Cannot create hsr debugfs directory [ 409.946395][ T1161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.036605][ T1161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.129005][ T1161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.173602][T11642] netlink: 'syz.4.1723': attribute type 4 has an invalid length. [ 410.184705][T11642] netlink: 'syz.4.1723': attribute type 16 has an invalid length. [ 410.220201][T11642] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1723'. [ 410.238649][T11642] FAULT_INJECTION: forcing a failure. [ 410.238649][T11642] name failslab, interval 1, probability 0, space 0, times 0 [ 410.258267][T11642] CPU: 0 UID: 0 PID: 11642 Comm: syz.4.1723 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 410.258320][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.258333][T11642] Call Trace: [ 410.258343][T11642] [ 410.258354][T11642] dump_stack_lvl+0x189/0x250 [ 410.258394][T11642] ? __pfx____ratelimit+0x10/0x10 [ 410.258434][T11642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.258470][T11642] ? __pfx__printk+0x10/0x10 [ 410.258541][T11642] should_fail_ex+0x414/0x560 [ 410.258586][T11642] should_failslab+0xa8/0x100 [ 410.258616][T11642] kmem_cache_alloc_noprof+0x73/0x3c0 [ 410.258650][T11642] ? skb_clone+0x212/0x3a0 [ 410.258694][T11642] skb_clone+0x212/0x3a0 [ 410.258734][T11642] __netlink_deliver_tap+0x404/0x850 [ 410.258798][T11642] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.258835][T11642] netlink_deliver_tap+0x19c/0x1b0 [ 410.258868][T11642] netlink_sendskb+0x68/0x140 [ 410.258900][T11642] netlink_rcv_skb+0x28c/0x470 [ 410.258938][T11642] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.258964][T11642] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.259023][T11642] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.259046][T11642] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.259085][T11642] netlink_unicast+0x758/0x8d0 [ 410.259135][T11642] netlink_sendmsg+0x805/0xb30 [ 410.259186][T11642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.259219][T11642] ? aa_sock_msg_perm+0x94/0x160 [ 410.259250][T11642] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.259277][T11642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.259512][T11642] __sock_sendmsg+0x21c/0x270 [ 410.259561][T11642] ____sys_sendmsg+0x505/0x830 [ 410.259603][T11642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.259653][T11642] ? import_iovec+0x74/0xa0 [ 410.259690][T11642] ___sys_sendmsg+0x21f/0x2a0 [ 410.259723][T11642] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.259806][T11642] ? __fget_files+0x2a/0x420 [ 410.259860][T11642] ? __fget_files+0x2a/0x420 [ 410.259881][T11642] ? __fget_files+0x3a0/0x420 [ 410.259940][T11642] __x64_sys_sendmsg+0x19b/0x260 [ 410.260238][T11642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.260313][T11642] ? __pfx_ksys_write+0x10/0x10 [ 410.260331][T11642] ? rcu_is_watching+0x15/0xb0 [ 410.260487][T11642] ? do_syscall_64+0xbe/0x3b0 [ 410.260530][T11642] do_syscall_64+0xfa/0x3b0 [ 410.260558][T11642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.260580][T11642] ? asm_sysvec_call_function_single+0x1a/0x20 [ 410.260602][T11642] ? clear_bhb_loop+0x60/0xb0 [ 410.260639][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.260661][T11642] RIP: 0033:0x7fdc21d8e929 [ 410.260686][T11642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.260705][T11642] RSP: 002b:00007fdc22b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.260728][T11642] RAX: ffffffffffffffda RBX: 00007fdc21fb5fa0 RCX: 00007fdc21d8e929 [ 410.260744][T11642] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 410.260758][T11642] RBP: 00007fdc22b97090 R08: 0000000000000000 R09: 0000000000000000 [ 410.260772][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.260785][T11642] R13: 0000000000000000 R14: 00007fdc21fb5fa0 R15: 00007ffc82be5e98 [ 410.260862][T11642] [ 410.661189][ T1161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.692287][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.766398][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.778456][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.793071][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.805953][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.075625][ T1161] bridge_slave_1: left allmulticast mode [ 411.114337][ T1161] bridge_slave_1: left promiscuous mode [ 411.139308][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.182367][ T1161] bridge_slave_0: left allmulticast mode [ 411.189884][ T1161] bridge_slave_0: left promiscuous mode [ 411.199840][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.245631][T11663] netlink: 'syz.4.1731': attribute type 4 has an invalid length. [ 411.257556][T11663] netlink: 'syz.4.1731': attribute type 16 has an invalid length. [ 411.279636][T11663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1731'. [ 411.771835][ T1161] team0: Port device geneve1 removed [ 412.147124][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.181186][ T1161] bond0 (unregistering): Released all slaves [ 412.269585][T11664] netlink: 'syz.1.1730': attribute type 29 has an invalid length. [ 412.357666][ T1161] [ 412.360072][ T1161] ====================================================== [ 412.367119][ T1161] WARNING: possible circular locking dependency detected [ 412.374174][ T1161] 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 Not tainted [ 412.380977][ T1161] ------------------------------------------------------ [ 412.388098][ T1161] kworker/u8:6/1161 is trying to acquire lock: [ 412.394256][ T1161] ffff888024d0ce00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 412.403877][ T1161] [ 412.403877][ T1161] but task is already holding lock: [ 412.413003][ T1161] ffff888051890768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 412.425700][ T1161] [ 412.425700][ T1161] which lock already depends on the new lock. [ 412.425700][ T1161] [ 412.436406][ T1161] [ 412.436406][ T1161] the existing dependency chain (in reverse order) is: [ 412.446580][ T1161] [ 412.446580][ T1161] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 412.454691][ T1161] lock_acquire+0x120/0x360 [ 412.460726][ T1161] __mutex_lock+0x182/0xe80 [ 412.466667][ T1161] ieee80211_open+0xed/0x1f0 [ 412.472751][ T1161] __dev_open+0x46d/0x880 [ 412.478686][ T1161] netif_open+0xaa/0x170 [ 412.484028][ T1161] dev_open+0x125/0x260 [ 412.488825][ T1161] team_add_slave+0xb36/0x2840 [ 412.494498][ T1161] do_set_master+0x533/0x6d0 [ 412.500989][ T1161] do_setlink+0xcf0/0x41c0 [ 412.506477][ T1161] rtnl_newlink+0x160b/0x1c70 [ 412.511718][ T1161] rtnetlink_rcv_msg+0x7cf/0xb70 [ 412.517316][ T1161] netlink_rcv_skb+0x205/0x470 [ 412.523402][ T1161] netlink_unicast+0x758/0x8d0 [ 412.530452][ T1161] netlink_sendmsg+0x805/0xb30 [ 412.536085][ T1161] __sock_sendmsg+0x21c/0x270 [ 412.542435][ T1161] ____sys_sendmsg+0x505/0x830 [ 412.549031][ T1161] ___sys_sendmsg+0x21f/0x2a0 [ 412.555659][ T1161] __x64_sys_sendmsg+0x19b/0x260 [ 412.562047][ T1161] do_syscall_64+0xfa/0x3b0 [ 412.567098][ T1161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.575466][ T1161] [ 412.575466][ T1161] -> #0 (team->team_lock_key#6){+.+.}-{4:4}: [ 412.587068][ T1161] validate_chain+0xb9b/0x2140 [ 412.593629][ T1161] __lock_acquire+0xab9/0xd20 [ 412.600987][ T1161] lock_acquire+0x120/0x360 [ 412.606871][ T1161] __mutex_lock+0x182/0xe80 [ 412.612851][ T1161] team_del_slave+0x32/0x1c0 [ 412.620174][ T1161] team_device_event+0x285/0xa20 [ 412.627365][ T1161] notifier_call_chain+0x1b3/0x3e0 [ 412.633951][ T1161] unregister_netdevice_many_notify+0x15d8/0x2320 [ 412.641045][ T1161] unregister_netdevice_queue+0x33c/0x380 [ 412.648463][ T1161] _cfg80211_unregister_wdev+0x165/0x590 [ 412.655977][ T1161] ieee80211_remove_interfaces+0x49a/0x6d0 [ 412.664110][ T1161] ieee80211_unregister_hw+0x5d/0x2c0 [ 412.672418][ T1161] mac80211_hwsim_del_radio+0x275/0x460 [ 412.679665][ T1161] hwsim_exit_net+0x584/0x640 [ 412.685340][ T1161] ops_undo_list+0x49a/0x990 [ 412.691191][ T1161] cleanup_net+0x4c5/0x800 [ 412.696334][ T1161] process_scheduled_works+0xae1/0x17b0 [ 412.702514][ T1161] worker_thread+0x8a0/0xda0 [ 412.708617][ T1161] kthread+0x70e/0x8a0 [ 412.713231][ T1161] ret_from_fork+0x3f9/0x770 [ 412.718541][ T1161] ret_from_fork_asm+0x1a/0x30 [ 412.724136][ T1161] [ 412.724136][ T1161] other info that might help us debug this: [ 412.724136][ T1161] [ 412.739199][ T1161] Possible unsafe locking scenario: [ 412.739199][ T1161] [ 412.748607][ T1161] CPU0 CPU1 [ 412.754397][ T1161] ---- ---- [ 412.760580][ T1161] lock(&rdev->wiphy.mtx); [ 412.766595][ T1161] lock(team->team_lock_key#6); [ 412.774744][ T1161] lock(&rdev->wiphy.mtx); [ 412.783111][ T1161] lock(team->team_lock_key#6); [ 412.790482][ T1161] [ 412.790482][ T1161] *** DEADLOCK *** [ 412.790482][ T1161] [ 412.803755][ T1161] 5 locks held by kworker/u8:6/1161: [ 412.810130][ T1161] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.821425][ T1161] #1: ffffc90004047bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.833016][ T1161] #2: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 412.844756][ T1161] #3: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 412.855618][ T1161] #4: ffff888051890768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 412.866727][ T1161] [ 412.866727][ T1161] stack backtrace: [ 412.872900][ T1161] CPU: 0 UID: 0 PID: 1161 Comm: kworker/u8:6 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 412.872936][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.872948][ T1161] Workqueue: netns cleanup_net [ 412.872972][ T1161] Call Trace: [ 412.872981][ T1161] [ 412.872990][ T1161] dump_stack_lvl+0x189/0x250 [ 412.873021][ T1161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.873048][ T1161] ? __pfx__printk+0x10/0x10 [ 412.873067][ T1161] ? print_lock_name+0xde/0x100 [ 412.873086][ T1161] print_circular_bug+0x2ee/0x310 [ 412.873104][ T1161] check_noncircular+0x134/0x160 [ 412.873125][ T1161] validate_chain+0xb9b/0x2140 [ 412.873144][ T1161] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.873176][ T1161] __lock_acquire+0xab9/0xd20 [ 412.873204][ T1161] ? team_del_slave+0x32/0x1c0 [ 412.873219][ T1161] lock_acquire+0x120/0x360 [ 412.873241][ T1161] ? team_del_slave+0x32/0x1c0 [ 412.873259][ T1161] ? __mutex_trylock_common+0x153/0x260 [ 412.873279][ T1161] __mutex_lock+0x182/0xe80 [ 412.873293][ T1161] ? team_del_slave+0x32/0x1c0 [ 412.873308][ T1161] ? rcu_is_watching+0x15/0xb0 [ 412.873338][ T1161] ? team_del_slave+0x32/0x1c0 [ 412.873354][ T1161] ? __pfx___mutex_lock+0x10/0x10 [ 412.873370][ T1161] ? bond_netdev_event+0xd9/0xe80 [ 412.873388][ T1161] ? __pfx___mutex_lock+0x10/0x10 [ 412.873404][ T1161] ? __pfx_bond_netdev_event+0x10/0x10 [ 412.873425][ T1161] team_del_slave+0x32/0x1c0 [ 412.873442][ T1161] team_device_event+0x285/0xa20 [ 412.873464][ T1161] notifier_call_chain+0x1b3/0x3e0 [ 412.873495][ T1161] unregister_netdevice_many_notify+0x15d8/0x2320 [ 412.873529][ T1161] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 412.873555][ T1161] ? call_rcu+0x6dd/0x990 [ 412.873569][ T1161] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.873606][ T1161] unregister_netdevice_queue+0x33c/0x380 [ 412.873632][ T1161] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 412.873661][ T1161] _cfg80211_unregister_wdev+0x165/0x590 [ 412.873683][ T1161] ieee80211_remove_interfaces+0x49a/0x6d0 [ 412.873700][ T1161] ? __pfx_synchronize_rcu+0x10/0x10 [ 412.873718][ T1161] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 412.873734][ T1161] ? rcu_is_watching+0x15/0xb0 [ 412.873764][ T1161] ieee80211_unregister_hw+0x5d/0x2c0 [ 412.873790][ T1161] mac80211_hwsim_del_radio+0x275/0x460 [ 412.873810][ T1161] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 412.873833][ T1161] hwsim_exit_net+0x584/0x640 [ 412.873860][ T1161] ? __pfx_hwsim_exit_net+0x10/0x10 [ 412.873888][ T1161] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 412.873910][ T1161] ops_undo_list+0x49a/0x990 [ 412.873938][ T1161] ? __pfx_ops_undo_list+0x10/0x10 [ 412.873962][ T1161] cleanup_net+0x4c5/0x800 [ 412.873983][ T1161] ? __pfx_cleanup_net+0x10/0x10 [ 412.874002][ T1161] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.874025][ T1161] ? process_scheduled_works+0x9ef/0x17b0 [ 412.874051][ T1161] ? process_scheduled_works+0x9ef/0x17b0 [ 412.874076][ T1161] process_scheduled_works+0xae1/0x17b0 [ 412.874115][ T1161] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.874149][ T1161] worker_thread+0x8a0/0xda0 [ 412.874165][ T1161] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 412.874194][ T1161] ? __kthread_parkme+0x7b/0x200 [ 412.874214][ T1161] kthread+0x70e/0x8a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 412.874233][ T1161] ? __pfx_worker_thread+0x10/0x10 [ 412.874259][ T1161] ? __pfx_kthread+0x10/0x10 [ 412.874278][ T1161] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.874300][ T1161] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.874324][ T1161] ? __pfx_kthread+0x10/0x10 [ 412.874342][ T1161] ret_from_fork+0x3f9/0x770 [ 412.874368][ T1161] ? __pfx_ret_from_fork+0x10/0x10 [ 412.874393][ T1161] ? __switch_to_asm+0x39/0x70 [ 412.874410][ T1161] ? __switch_to_asm+0x33/0x70 [ 412.874426][ T1161] ? __pfx_kthread+0x10/0x10 [ 412.874445][ T1161] ret_from_fork_asm+0x1a/0x30 [ 412.874470][ T1161] [ 412.969549][ T5858] Bluetooth: hci4: command tx timeout [ 413.286793][T11680] netlink: 'syz.2.1734': attribute type 3 has an invalid length. [ 413.296457][T11680] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1734'. [ 413.307313][ T1161] team0: Port device wlan1 removed [ 413.959200][ T1161] hsr_slave_0: left promiscuous mode [ 413.977563][ T1161] hsr_slave_1: left promiscuous mode [ 414.017766][ T1161] veth1_macvtap: left promiscuous mode [ 414.024117][ T1161] veth0_macvtap: left promiscuous mode [ 414.044746][ T1161] veth1_vlan: left promiscuous mode [ 414.053365][ T1161] veth0_vlan: left promiscuous mode [ 414.238984][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 414.270504][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 414.745138][ T1161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.805697][ T1161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.861257][ T1161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.916508][ T1161] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 414.926537][ T1161] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 414.937735][ T1161] bridge0: port 3(netdevsim0) entered disabled state [ 414.948043][ T1161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.041210][ T1161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.082477][ T1161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.141549][ T1161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.185491][ T1161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.288707][ T1161] bridge_slave_1: left allmulticast mode [ 415.295319][ T1161] bridge_slave_1: left promiscuous mode [ 415.301923][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.314127][ T1161] bridge_slave_0: left promiscuous mode [ 415.320313][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.332321][ T1161] bridge_slave_1: left allmulticast mode [ 415.339808][ T1161] bridge_slave_1: left promiscuous mode [ 415.347356][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.358598][ T1161] bridge_slave_0: left allmulticast mode [ 415.368252][ T1161] bridge_slave_0: left promiscuous mode [ 415.374518][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.385492][ T1161] bridge_slave_1: left allmulticast mode [ 415.392437][ T1161] bridge_slave_1: left promiscuous mode [ 415.399572][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.410357][ T1161] bridge_slave_0: left promiscuous mode [ 415.418129][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.675241][ T1161] team0: Port device bond0 removed [ 415.682862][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.697211][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.708980][ T1161] bond0 (unregistering): Released all slaves [ 415.790032][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.801146][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.813313][ T1161] bond0 (unregistering): Released all slaves [ 415.991927][ T1161] team0: Port device bond0 removed [ 416.004601][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.016287][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.028161][ T1161] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 416.040571][ T1161] bond0 (unregistering): Released all slaves [ 416.343444][ T1161] team0: Port device wlan1 removed [ 416.831147][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.845266][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.856453][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.866056][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.884016][ T1161] hsr_slave_0: left promiscuous mode [ 416.893928][ T1161] hsr_slave_1: left promiscuous mode [ 416.901097][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.909363][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.921350][ T1161] hsr_slave_0: left promiscuous mode [ 416.928267][ T1161] hsr_slave_1: left promiscuous mode [ 416.940974][ T1161] veth1_macvtap: left promiscuous mode [ 416.948336][ T1161] veth0_macvtap: left promiscuous mode [ 417.099139][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 417.123248][ T1161] team0 (unregistering): Port device C removed [ 417.335617][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 417.360172][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 417.549133][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 417.577590][ T1161] team0 (unregistering): Port device C removed