last executing test programs: 3.076412607s ago: executing program 0 (id=1189): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="f9ffffffffffffffdcd5632e5f"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20601, 0x0) 2.965408978s ago: executing program 0 (id=1191): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000e1ffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000210095000000000000005e77eb3ecde6d889151a82c747d94c192f20d686333bc2180b1e1ad07fa24a24aa95e4c4c9fbfb7e0a093f482abd36ea6557d32ae2ef9b5318658e5137cc74bd47c1ba07359cc96ce1b24b205237ca919a7d4cacef39d01e2f880f2937913c23f5e872c502aed31dc9dfdf53d554c19dc296251b"], &(0x7f0000000000)='GPL\x00'}, 0x1a) 2.784233006s ago: executing program 3 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200005400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) 2.780380276s ago: executing program 0 (id=1195): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @empty, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4d3f", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) syz_clone(0x8400, &(0x7f0000000000)="6d0a71fd84d2bd3781fa675e60a552160791c51478c43a9331848027769f0bd74c4abc9626b1c490d8fc0f14d1f3c419fd9f5149a56efcd8d2bf7e726972f8a51483197e706da01e0603b529ac928707872303d497087eb2464ecccb0fb52e6120", 0x61, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)="33b59d243b71842776c08539076c1e33c759a9bd5eee73ab1acf15590bee0c01bbf3b03a934964d26d9c603f2c61f3e405a6437ec63f703f68d1777164abd86e796ee6df59a81ebde20c4c26a865d614189e6e78e9a66cca449828b03bd270560a7e666411858e5df47d8fcd84dd3294dcf64413061e9f1a5ebd59c4e43b0da9ada0a47de51b4baff09732311f0fe50191923bca9aa91521b8ab2ed7495796") 2.673259687s ago: executing program 3 (id=1198): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0380, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0xc, 0x7, 0x1, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5927e9ced8fc062be4e4ecf924373d9ed57789ebf5d1035a2bf37a66ac0655e058689b3c098e5d05aa358b7f1631cdea94a246c72e87a47e4412c7acb6aa7fcb6b72722a24908251"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4091, 0xffb}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x131000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x2040000007, 0xfffffffc, 0x5, 0x0, 0x100, 0x4, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0xa) 2.416987742s ago: executing program 0 (id=1202): socket$kcm(0x2, 0x922000000001, 0x106) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000001200"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={0x0, 0x3c, 0x0, &(0x7f00000000c0)=""/171, 0xab}}, 0x10) socket$kcm(0x2, 0x1, 0x84) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) syz_open_procfs$namespace(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) 2.209632173s ago: executing program 3 (id=1205): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000200081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) r3 = syz_clone(0x80, &(0x7f00000002c0)="e0e4158689bd2d675828a8e0f58cc9303884a54ffa6b7f5897d9ce278f4052102bff1bf7dcca38523e9e734a44a6d43ca7ef6a4ce5bd4aa027cfc81b4f95a798ec0188110331166c74346eb6284cfc05b9a40511890d420ce8d21be33d7bc5c5dbfa634beaf91546b042dd2c8fff2f9db5a304ee40e2055f520c481cb451ceb42bfa35d526fb8e309fb632decc89115f01d9f0bc966b83b3d8a12117747249c2abf0", 0xa2, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000c00)="3f4dd9b70eb079546482b6161e9c0be71e152c99b96811a852f19b57504721e04ef8488ea0e181f49bc1ca81cc00a9e61ec300406ed3e028371f28d15362dae01ca25762f06939c2a8087a5cc8529e36ad228ecd13425f5f448d68bb5029c4c2570335f4f0d894c8fe3f53684676e83b83001fc39d6bb6a75e6cd100f056a54192b1ba712ba958afb9445aaca56ef8b13158fddaae010c1d3d3bec0d5bc8f0ae8ddfda264015617ffccbc68067629687b02d827cf278d48a7d60aea9eec71a9a139d79368ef9573e54ce52500a524607300b82b0304e8d37e13633c05548961ad50146a82b600043d6c836ce01d6ef6f4e00e69978a0") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000d00)={r3, r4, 0x0, 0x4, &(0x7f0000000480)='GPL\x00'}, 0x30) r5 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00008d8d00"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x10, &(0x7f0000000000)=r10, 0xc) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000000700)=@raw=[@alu={0x7, 0x0, 0x0, 0x0, 0xa, 0xfffffffffffffff0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000800)='syzkaller\x00', 0x3, 0x38, &(0x7f0000000840)=""/56, 0x41100, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0xa, 0x1, 0xfffff001}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000900)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000940)=[{0x3, 0x1, 0xd, 0x1}, {0x3, 0x5, 0xb, 0xa}, {0x5, 0x3, 0xe, 0x4}, {0x0, 0xa9cd, 0x7, 0xc}, {0x1, 0x2, 0xb, 0x8}, {0x3, 0x3, 0x2, 0x1}, {0x1, 0x2, 0xb, 0x5}, {0x3, 0x1, 0x0, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x16, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x6ff, 0x49, &(0x7f0000000580)=""/73, 0x41000, 0x0, '\x00', r6, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x4, 0xf, 0x0, 0xd823}, 0x10, 0x2aa0f, r11, 0x9, 0x0, &(0x7f0000000a80)=[{0x2, 0x4, 0xf, 0xc}, {0x1, 0x2, 0x2, 0x5}, {0x0, 0x2, 0x6, 0xc}, {0x4, 0x2, 0xb}, {0x1, 0x2, 0x1, 0xa}, {0x2, 0x2, 0x2, 0x5}, {0x1, 0x1, 0xf, 0xb}, {0x3, 0x4, 0x8, 0x8}, {0x0, 0x5, 0x4, 0xe}], 0x10, 0xc5}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611050000000000073010f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.113977602s ago: executing program 4 (id=1207): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2}}, 0x80, 0x0}, 0x0) (async) r0 = socket$kcm(0x10, 0xb0c9d85ce8efda73, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) 2.047039469s ago: executing program 4 (id=1208): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b37, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x8000}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96, 0x0, 0x0, 0xfffffffd}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8902, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)='J', 0x1}], 0x1}, 0x1001) 1.898491163s ago: executing program 0 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000980)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006000000080000000880000040002000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/12], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) close(r7) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001c40)={0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="074cfd0000000000000000020823", @ANYRES32=0x0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x33, 0x33, 0x6, [@float={0x4, 0x0, 0x0, 0x10, 0x4}, @datasec={0x7, 0x2, 0x0, 0xf, 0x3, [{0x0, 0xfffffffb, 0x7}, {0x4, 0x6, 0x9}], "f364ef"}]}, {0x0, [0x30, 0x30, 0x61, 0x0]}}, &(0x7f0000000540)=""/55, 0x52, 0x37, 0x1, 0x3}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x1f, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x7, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @alu={0x7, 0x1, 0x0, 0x5, 0x2, 0x2, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x4, 0x5, 0x4, 0x20, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x45, &(0x7f0000000380)=""/69, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, r13, 0x8, &(0x7f00000005c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0x1d6, 0x10001}, 0x10, r15, r2, 0xa, &(0x7f0000000b00)=[r1, r0, r16, r0, r1], &(0x7f0000000c00)=[{0x0, 0x1, 0x8, 0xb}, {0x5, 0xffffff81, 0xe, 0x3}, {0x1, 0x1, 0x1, 0xc}, {0x5, 0x4, 0xf, 0x2}, {0x2, 0x5, 0x2, 0xa}, {0x0, 0x3, 0x0, 0x2}, {0x1, 0x3, 0x10, 0x5}, {0x4, 0x4, 0x2}, {0x2, 0x5, 0xf, 0xc}, {0x0, 0x5, 0x3, 0x1}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0xb, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff2f10}, [@exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2dba}, @generic={0x7, 0x4, 0x2, 0x4, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b3955f5}]}, &(0x7f0000000d80)='GPL\x00', 0x7fffffff, 0xed, &(0x7f0000000ec0)=""/237, 0x41000, 0x20, '\x00', r14, 0x25, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000dc0)=[r10, r10, r0, r0, r11, r16, r9], &(0x7f0000000e00)=[{0x2, 0x2, 0xc, 0x8}, {0x2, 0x4, 0x1, 0xa}, {0x3, 0x1, 0xc, 0x2}], 0x10, 0x401}, 0x94) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504000a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r12, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x2000) 1.73481276s ago: executing program 2 (id=1211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rpcb_setport\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.711084501s ago: executing program 4 (id=1212): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="2201", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.565388666s ago: executing program 2 (id=1214): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0xc0045878, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r2], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/178, 0xb2}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000004c00)=""/4047, 0xfcf}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f00000000c0)=""/119, 0x77}, {&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f0000000140)=""/109, 0x6d}], 0x9}, 0x0) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x25, 0x5, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3070}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000001500)={'c', ' *:* ', 'w\x00'}, 0x8) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xffffffffffffff53, 0x9b, &(0x7f0000000180)="56d4671e42f6741207158913494229dea6540e34f07aa79602b6e5de3a8875a53cbccc7a92d5f5da068c50d4c818b048495bc40e7d3bbc4619d717e54438d3", &(0x7f00000001c0)=""/155, 0xce27, 0x0, 0x60, 0x36, &(0x7f0000000280)="dccd8bfb64fea068f84203b258cfcc4c2c17d3eb9d3ca27c58cc4b39c222fd54e11b500a77149a3b8bd932ea358469b0f3c98d95ff674e2676d9836d862198f9ab3f0c0c592dd19c24b27e355dada17a716f384e61d0a33fd0a1a4b470aa6bb7", &(0x7f0000000300)="8440185668a3ec3faaf7e0f7b72d299efeb8b6a4cf198c266a2a76339115cfbdaa875b54175523ee0321a6d5eb5605a96ce1fab1a127", 0x0, 0x0, 0x3}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) close(0x3) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.535422338s ago: executing program 4 (id=1215): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0xbb2dea90a5c8ebc1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x6, 0x3, 0x7, 0x820, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x4}, 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x24a4, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x36, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bc7}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x91b49771}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x4c28, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x9, 0x400, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000540)=[r4, r5], &(0x7f0000000580)=[{0x5, 0x3, 0x5, 0x5}], 0x10, 0x2}, 0x94) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) r7 = perf_event_open$cgroup(&(0x7f0000000780)={0x3, 0x80, 0x2, 0x0, 0x5, 0x0, 0x0, 0x7, 0xc1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf9d, 0x2, @perf_config_ext={0x3, 0xeeb}, 0x4240, 0x100000000, 0x8, 0x9, 0x6, 0x8, 0x3, 0x0, 0x8, 0x0, 0xe8db}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x5) perf_event_open$cgroup(&(0x7f00000006c0)={0x3, 0x80, 0x1a, 0x4, 0x10, 0x4, 0x0, 0x4, 0x400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000680), 0xe}, 0x1040, 0x0, 0x2, 0x8, 0x1, 0x0, 0x3, 0x0, 0x8, 0x0, 0x5}, r6, 0x5, r7, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000800)='GPL\x00') r8 = openat$cgroup(r6, &(0x7f0000000840)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000880)='syz0\x00', 0x1ff) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0)={r6}, 0x8) write$cgroup_pressure(r9, &(0x7f0000000900)={'some', 0x20, 0xe1, 0x20, 0x80}, 0x2f) r10 = syz_clone(0x2c008000, &(0x7f00000009c0)="cae3f9ab2a6f7fddf2244ff6d52120856273785c6e8637c22e6a465e23fbbda8d586a6dc", 0x24, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="d68f2a0869668c847b8b7eed7b6f960aa72c6b3dbc28a72a0a462f616f9b7fd1381be39b3949f008b4fa12daaa38630bfb6705bda1cf85e1a5ee66fb14ed3b6e347c29202b03a08d4ec73649d0509c791a36b426266580f3e2e7d2e707a506c0ae4f582053d34c629bc9d2fdf7d46000f48dfc8015e915cad29bafd07c850af0b1f39d869a2006dcfa224f38a05de6f6671a7353e365ac2d8e0613f233787cee80c51f9ffce674f8feb15b407730052dcbf0d170fbb11b65e455e23e74805f01fef2357fe44b63624af8aeb1ed51e7edb7ef958126f4339f9940482a674c70b89f2ddabf578fa08216d9") perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x1, 0x7, 0xff, 0x3, 0x0, 0x3, 0x200, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x1b400000, 0x8}, 0x12304, 0x81, 0x8, 0x7, 0x5500, 0xc7, 0x4, 0x0, 0x7, 0x0, 0x5}, r10, 0xf, r7, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r9, 0xc008240a, &(0x7f0000000b80)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='host1x_channel_submit_complete\x00', r6, 0x0, 0x10001}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r9, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000c80)=[0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f0000000d00)=[{}], 0x8, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@bloom_filter={0x1e, 0x8001, 0xc, 0x10, 0x4000, r4, 0xe, '\x00', r11, r9, 0x1, 0x0, 0x0, 0xb}, 0x50) openat$cgroup_ro(r8, &(0x7f0000000fc0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) mkdir(&(0x7f0000001000)='./file0\x00', 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001080)={0x5, 0x80, 0xf0, 0x3, 0x3, 0x2, 0x0, 0x4, 0x880c4, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x10f2}, 0x4, 0x400, 0xfffffff9, 0x7, 0x0, 0x9, 0x1, 0x0, 0x5, 0x0, 0x401}, r12, 0x6, 0xffffffffffffffff, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001240)={r9, &(0x7f0000001140)="d4e9db2db8f15756b8b5e35791fff677ccf6adb4ee524a7ab570753a72d779549bc99266297ae5815c96c6ecca805785d88a27eee4de150196a5c40e3b01b20df57114359bbba3c413869d7493764366b24414883e17433f632f10f9755ccd8a49f7d23dc562f7714c83c3cb4d94a22035fd6b9792fb75e59b2ce7db07cacda382721663b263c622af33ab9c92f5", &(0x7f0000001200)=""/23}, 0x20) write$cgroup_type(r9, &(0x7f0000001280), 0x9) recvmsg$unix(r6, &(0x7f0000001540)={&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001340)=""/177, 0xb1}, {&(0x7f0000001400)=""/98, 0x62}], 0x2, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2100) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_tracing={0x1a, 0x10, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001600)='GPL\x00', 0x5, 0xd8, &(0x7f0000001640)=""/216, 0x41000, 0x4c, '\x00', r11, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x4, 0x8, 0x8}, 0x10, 0x2263b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.345816697s ago: executing program 1 (id=1216): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.336530198s ago: executing program 4 (id=1217): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4, 0x7, 0x94, 0x7, 0x0, 0x2, 0xc000, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x1e084, 0x8, 0x1, 0x3, 0x53, 0x3, 0x5, 0x0, 0x400, 0x0, 0x1}, r1, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r5 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x114, 0x7, 0x0, 0xa0) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xb, r2, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)}, 0x20000081) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000180)={r5}) 1.22073564s ago: executing program 3 (id=1218): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000e1ffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000002100000095000000000000005e77eb3ecde6d889151a82c747d94c192f20d686333bc2180b1e1ad07fa24a24aa95e4c4c9fbfb7e0a093f482abd36ea6557d32ae2ef9b5318658e5137cc74bd47c1ba07359cc96ce1b24b205237ca919a7d4cacef39d01e2f880f2937913c23f5e872c502aed31dc9dfdf53d554c19dc296251b"], &(0x7f0000000000)='GPL\x00'}, 0x1a) 1.084373143s ago: executing program 1 (id=1219): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="b60a0000ffffffff6111a4000000000018000033e1a80fcb35521e9d47edcbdfc50000000000000000000017000095000000000000003025fc666843759925fecfbb1ab0f81adcc96ec1da481b153a748ae15b41cf68e18543eb1b068ea96d27418b12a329d15a9d1b451e5b9d07dd05267144f141d0d85c823d64f1d53ad67191df8b8eb55f6b6d4f67012491c1a2324d6fb9081f77c4b278e190ed203f8e94df9fb7c5f43b07b498da10269ef5e8010c8f0207c36d80df854d0fa257a40beaec9aa68b4665a372b5c79b4966d6c7fa877c6cc41463c0bed906efdfa50ea35b2e25a34614613992b2a1dcf12f80234f1042af0105c6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x161f, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0xc8, 0x0, 0x6, 0xbe20}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc200b2c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa2f200007"], 0xfdef) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x26, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0xa, &(0x7f0000000340)=@raw=[@ldst={0x1, 0x0, 0x0, 0x2, 0x0, 0x6, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x569}], &(0x7f00000001c0)='GPL\x00', 0x5, 0x35, &(0x7f00000003c0)=""/53, 0x41100, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x5, 0xffffffff}, 0x10, 0x2d6c1, r0, 0x8, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x1, 0xd, 0x7}, {0x7, 0x5, 0x6, 0xa}, {0x5, 0x5, 0xc, 0x4}, {0x1, 0x2, 0x5, 0x3}, {0x3, 0x5, 0xf, 0x5}, {0x4, 0x5, 0x3, 0x8}, {0x3, 0x5, 0x6, 0x5}, {0x0, 0x4, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000a40)={0x0, 0x80, 0x3, 0xff, 0x6, 0x5, 0x0, 0x6, 0x8, 0xb, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xb9ce, 0x4, @perf_bp={&(0x7f0000000300), 0x4}, 0x4000, 0x8000000000000001, 0x400, 0x7, 0x101, 0x401, 0xfffd, 0x0, 0x3b, 0x0, 0x4}, r7, 0xc, r6, 0x2) 1.083648133s ago: executing program 2 (id=1220): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async) socket$kcm(0xa, 0x6, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)=' \x00\x00\x00 ', 0x5}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000005f81000000000040000000000000"], 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) 936.699108ms ago: executing program 3 (id=1221): socket$kcm(0x21, 0x2, 0x2) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) mkdir(0x0, 0x12) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7ab077fe34232aa8b31851466d0998a61d7da0c86d70000001210000000000000000000"], 0x10b8}, 0x4007f84) (async) close(r1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f00000002c0)=0x1, 0x12) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) (async) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001800)="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", 0xffe}, {&(0x7f0000000240)="c02a6c", 0x3}, {0x0}], 0x3, &(0x7f00000008c0)}, 0x0) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) 892.084582ms ago: executing program 1 (id=1222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)={@ifindex, r10, 0x11, 0x0, 0x0, @void, @value=r9}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r11}, 0x10) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)={@ifindex, r14, 0x11, 0x0, 0x0, @void, @value=r13}, 0x20) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 749.710796ms ago: executing program 2 (id=1223): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10261, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0xfffffffe, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x75, &(0x7f0000000000), 0x8) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000240)=r7) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)='|', 0x1}], 0x1}, 0x8c0) 647.876126ms ago: executing program 1 (id=1224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200011400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) 569.740444ms ago: executing program 3 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff01000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000025b50725932117037b8f9f3a5c57aeeb843ed63d45ea3a0b7e8442774d35e47c31b12c1703549128cc7c6da3969f6ea49a95bf58fc2b912db5b7ff6b02cbca1ddacbcee8a6923f1398abc6f24bc964ccaf876b8fa03e1ee20ba4719f0e8736ed19ab000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @random}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB="000000e047acb1d0886e"], 0x48) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) 409.891439ms ago: executing program 1 (id=1226): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x0, 0x27, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="58cf291c1ca5c55f8abe079d314445385ab345981f732a115c8872b4f852513b54411cac4c6eb3c269cd351d48968c3514866fbdf25994417ab7366d26f987149af848f33034bd3d3885fc6326c6335aca4bba894f19606b89d65063407e52d5bc3bd992f0aae00aa7d4a574", 0x6c}, {&(0x7f0000000080)="8ea030b6e905ff8d576a4332cd4b5aba00729dda0b816910b0f38b13dd36c47dbcdb76536ff7df165e601ae61fec26130dda9d3bececf79fe1f08dedabf56dda173b470651a05ad678d94a316382213f343e490851d8444d480133158da74763b7782482bc49628ba087bb571427e06235888e9d8a2d233d2fed4cb33ab94ea9bf0501d7c2e84661520b12a0e4c48feb88c6", 0x92}], 0x2}, 0x4008041) 409.32467ms ago: executing program 2 (id=1227): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x3, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0x400ffff, 0x1, 0x1, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={r1}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3c, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x5, 0x6, 0x1, 0x410, 0x1, 0x3, '\x00', r2, r5, 0x3, 0x4, 0x3, 0xb}, 0x50) 349.049055ms ago: executing program 4 (id=1228): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2c51, 0x0, 0x0, 0x3, 0xff, 0x0, 0xf3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async, rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x6380, 0x30}, 0xc) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@func={0x10, 0x0, 0x0, 0xc, 0x4}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x30, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000440)=""/148, 0x43, 0x94, 0x0, 0x7, 0x10000}, 0x28) (async, rerun: 64) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async, rerun: 64) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000180)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfc99}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], &(0x7f0000000280)='GPL\x00', 0xe627, 0x76, &(0x7f00000002c0)=""/118, 0x41100, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000540)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x10, 0x3}, 0x10, 0x45a2, r6, 0x1, &(0x7f00000006c0)=[r0, r0, r7, r0], &(0x7f0000000700)=[{0x0, 0x3}], 0x10, 0x2}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 344.657326ms ago: executing program 1 (id=1229): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="bda5ed81a571b5e10b7e32d3c211fa4301d24fc50811ff8a15960d9a31d28b33460422f941a340bc326b1558b18c9dc3", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x1b, &(0x7f0000000240), 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 714.99µs ago: executing program 2 (id=1230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x99d23d6ca0a5d84, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1}) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x4c, 0x87, 0x78, 0x0, 0xc7c, 0x4, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0xa102, 0x3, 0x6, 0x6, 0x5, 0x305, 0x5, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xd) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x82, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0xfc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0xfffffffffffffffe) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x99d23d6ca0a5d84, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1}) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x4c, 0x87, 0x78, 0x0, 0xc7c, 0x4, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0xa102, 0x3, 0x6, 0x6, 0x5, 0x305, 0x5, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xd) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x82, 0x0, 0x0) (async) sendmsg$inet(r2, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0xfc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) (async) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x5, 0x10) (async) sendmsg$kcm(r3, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0xfffffffffffffffe) (async) 0s ago: executing program 0 (id=1231): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000e1ffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000005000095000000000000005e77eb3ecde6d889151a82c747d94c192f20d686333bc2180b1e1ad07fa24a24aa95e4c4c9fbfb7e0a093f482abd36ea6557d32ae2ef9b5318658e5137cc74bd47c1ba07359cc96ce1b24b205237ca919a7d4cacef39d01e2f880f2937913c23f5e872c502aed31dc9dfdf53d554c19dc296251b"], &(0x7f0000000000)='GPL\x00'}, 0x1a) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 39.481865][ T3853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.494547][ T3853] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.213' (ED25519) to the list of known hosts. syzkaller login: [ 56.685226][ T4170] cgroup: Unknown subsys name 'net' [ 56.808671][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.341808][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.793475][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 59.880755][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 59.909375][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 59.922574][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 59.965615][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.972872][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.981013][ T4187] device bridge_slave_0 entered promiscuous mode [ 59.992774][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.999855][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.008275][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.089835][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.130830][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.140288][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.187197][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.194549][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.203210][ T4193] device bridge_slave_0 entered promiscuous mode [ 60.210789][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.218220][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.226315][ T4191] device bridge_slave_0 entered promiscuous mode [ 60.234343][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.242051][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.249988][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.274131][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.281216][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.289683][ T4193] device bridge_slave_1 entered promiscuous mode [ 60.296771][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.304061][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.312324][ T4191] device bridge_slave_1 entered promiscuous mode [ 60.319288][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.326525][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.334839][ T4182] device bridge_slave_1 entered promiscuous mode [ 60.344042][ T4187] team0: Port device team_slave_0 added [ 60.379133][ T4187] team0: Port device team_slave_1 added [ 60.419712][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.432013][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.446477][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.458454][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.470024][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.505245][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.521828][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.528795][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.554932][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.597379][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.604679][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.631126][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.645188][ T4182] team0: Port device team_slave_0 added [ 60.657123][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.664494][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.672874][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.691924][ T4191] team0: Port device team_slave_0 added [ 60.700370][ T4193] team0: Port device team_slave_0 added [ 60.707960][ T4182] team0: Port device team_slave_1 added [ 60.725619][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.732829][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.740711][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.754907][ T4191] team0: Port device team_slave_1 added [ 60.762479][ T4193] team0: Port device team_slave_1 added [ 60.812871][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.819855][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.846264][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.880923][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.888463][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.915249][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.927391][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.934544][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.960901][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.973916][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.983639][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.990594][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.017290][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.030177][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.037241][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.063422][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.078526][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.085397][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.093121][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.100084][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.126170][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.142378][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.210974][ T4186] team0: Port device team_slave_0 added [ 61.240900][ T4193] device hsr_slave_0 entered promiscuous mode [ 61.248222][ T4193] device hsr_slave_1 entered promiscuous mode [ 61.254991][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.263140][ T4193] Cannot create hsr debugfs directory [ 61.269832][ T4186] team0: Port device team_slave_1 added [ 61.293311][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.300282][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.307108][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.315080][ T4182] Cannot create hsr debugfs directory [ 61.340990][ T4191] device hsr_slave_0 entered promiscuous mode [ 61.347996][ T4191] device hsr_slave_1 entered promiscuous mode [ 61.355032][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.362835][ T4191] Cannot create hsr debugfs directory [ 61.391171][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.392595][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 61.398608][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.430967][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.469216][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.476364][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 61.482757][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.508890][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.509496][ T4173] Bluetooth: hci3: command 0x0409 tx timeout [ 61.526013][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 61.532455][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 61.691306][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.698307][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.705641][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.713399][ T4186] Cannot create hsr debugfs directory [ 61.838516][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.858163][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.878946][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.895850][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.947456][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.959413][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.983915][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.997510][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.045430][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.055935][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.066225][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.076778][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.132684][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.167037][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.182013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.191033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.215385][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.227675][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.237780][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.247735][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.255103][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.264486][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.277824][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.299350][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.308270][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.316852][ T3059] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.324208][ T3059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.365963][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.375370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.388695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.408860][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.416395][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.436548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.446086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.456330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.465160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.474006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.483097][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.497927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.509966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.523009][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.530506][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.553804][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.568912][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.580559][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.588926][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.597721][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.612968][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.633781][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.640760][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.654374][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.667140][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.677931][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.694404][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.731679][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.740993][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.751150][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.758556][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.768557][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.779227][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.790030][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.797265][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.805596][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.815870][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.824447][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.831576][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.839433][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.849626][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.858805][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.867928][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.876523][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.883632][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.892044][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.900005][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.924593][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.935568][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.945321][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.955201][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.964225][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.973340][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.982260][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.990443][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.000086][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.016525][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.040541][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.062241][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.079233][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.089691][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.105376][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.135543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.149905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.158931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.177542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.215302][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.229840][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.245051][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.258826][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.266709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.274977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.282740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.291047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.299754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.307542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.332780][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.371213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.395223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.419989][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.446853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.457115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.468209][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.472225][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 63.490383][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.522568][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.534750][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.543383][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.552099][ T4222] Bluetooth: hci2: command 0x041b tx timeout [ 63.558249][ T4222] Bluetooth: hci1: command 0x041b tx timeout [ 63.563432][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.581957][ T4222] Bluetooth: hci3: command 0x041b tx timeout [ 63.591726][ T4222] Bluetooth: hci4: command 0x041b tx timeout [ 63.599255][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.613345][ T4187] device veth0_vlan entered promiscuous mode [ 63.628334][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.638328][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.651100][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.667129][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.674288][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.687827][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.696843][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.705599][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.712734][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.720514][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.755828][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.765782][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.774497][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.784238][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.793791][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.802756][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.809820][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.818524][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.827911][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.836637][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.843745][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.851355][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.860424][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.869635][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.878751][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.888455][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.896709][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.907413][ T4187] device veth1_vlan entered promiscuous mode [ 63.919105][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.933057][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.942037][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.950615][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.971734][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.980566][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.989701][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.999414][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.008127][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.039636][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.048599][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.057403][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.069326][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.077880][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.086413][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.095741][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.130546][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.139318][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.148779][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.158698][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.167820][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.176835][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.192054][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.202189][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.216529][ T4187] device veth0_macvtap entered promiscuous mode [ 64.230234][ T4187] device veth1_macvtap entered promiscuous mode [ 64.242867][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.252652][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.262781][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.271077][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.307171][ T4193] device veth0_vlan entered promiscuous mode [ 64.346551][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.355649][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.364985][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.373778][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.397889][ T4182] device veth0_vlan entered promiscuous mode [ 64.411865][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.420311][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.433760][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.447585][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.459371][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.474121][ T4193] device veth1_vlan entered promiscuous mode [ 64.484094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.503418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.514709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.544050][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.569765][ T4182] device veth1_vlan entered promiscuous mode [ 64.584328][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.594159][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.604576][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.613599][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.625295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.634124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.642824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.651537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.660218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.668591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.680098][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.725363][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.746562][ T4193] device veth0_macvtap entered promiscuous mode [ 64.754161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.763508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.773120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.781857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.789332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.797236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.816512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.825350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.839169][ T4193] device veth1_macvtap entered promiscuous mode [ 64.868090][ T4182] device veth0_macvtap entered promiscuous mode [ 64.885598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.894053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.904835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.915665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.946004][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.958713][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.967987][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.978618][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.987265][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.996755][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.018484][ T4182] device veth1_macvtap entered promiscuous mode [ 65.042755][ T4191] device veth0_vlan entered promiscuous mode [ 65.050565][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.060451][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.080091][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.091036][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.102829][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.113844][ T4186] device veth0_vlan entered promiscuous mode [ 65.126823][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.137659][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.148125][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.159133][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.172846][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.180223][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.188477][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.196573][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.206805][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.215732][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.224748][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.242073][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.250084][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.258932][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.269606][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.283717][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.296968][ T4191] device veth1_vlan entered promiscuous mode [ 65.313662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.324103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.333094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.347197][ T4186] device veth1_vlan entered promiscuous mode [ 65.356443][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.365638][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.375651][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.384642][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.398392][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.410988][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.421045][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.431657][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.444550][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.459790][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.469015][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.478921][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.487742][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.504056][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.512600][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.520518][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.529254][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.550494][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.559278][ T4245] Bluetooth: hci0: command 0x040f tx timeout [ 65.566624][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.597116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.634780][ T4222] Bluetooth: hci4: command 0x040f tx timeout [ 65.650646][ T4191] device veth0_macvtap entered promiscuous mode [ 65.658543][ T4222] Bluetooth: hci3: command 0x040f tx timeout [ 65.677479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.684678][ T4222] Bluetooth: hci1: command 0x040f tx timeout [ 65.692626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.696097][ T4222] Bluetooth: hci2: command 0x040f tx timeout [ 65.713113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.743378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.753965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.765855][ T4191] device veth1_macvtap entered promiscuous mode [ 65.826322][ T4186] device veth0_macvtap entered promiscuous mode [ 65.846621][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.858812][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.861410][ C1] hrtimer: interrupt took 54329 ns [ 65.869773][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.886028][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.896765][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.907814][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.920712][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.954498][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.966651][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.977716][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.987145][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.001351][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.001765][ T4186] device veth1_macvtap entered promiscuous mode [ 66.016970][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.018051][ T4289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.031846][ T4289] IPv6: NLM_F_CREATE should be set when creating new route [ 66.039090][ T4289] IPv6: NLM_F_CREATE should be set when creating new route [ 66.046375][ T4289] IPv6: NLM_F_CREATE should be set when creating new route [ 66.075282][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.091371][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.102935][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.114853][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.125581][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.136342][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.147778][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.156016][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.165316][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.174507][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.190666][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.202765][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.212969][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.223512][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.233848][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.244594][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.254611][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.265855][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.278277][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.303477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.307899][ T4288] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.312920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.333912][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.342066][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.353364][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.362697][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.376812][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.391647][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.404712][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.425370][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.437114][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.447997][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.458045][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.468530][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.478982][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.491085][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.505743][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.517110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.527077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.536312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.574966][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.577366][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.592575][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.607314][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.616975][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.627393][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.650864][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.660441][ T4293] netlink: 'syz.0.7': attribute type 12 has an invalid length. [ 66.668292][ T4293] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7'. [ 66.702728][ T3059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.718245][ T3059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.746131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.879225][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.906416][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.928681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.058971][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.071339][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.086796][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.091882][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.141863][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.195525][ T3059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.231200][ T3059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.334180][ T4300] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2'. [ 67.384004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.406179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.632355][ T4173] Bluetooth: hci0: command 0x0419 tx timeout [ 67.642426][ T4313] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 67.726370][ T4173] Bluetooth: hci2: command 0x0419 tx timeout [ 67.761549][ T4173] Bluetooth: hci1: command 0x0419 tx timeout [ 67.769201][ T4173] Bluetooth: hci3: command 0x0419 tx timeout [ 67.775912][ T4173] Bluetooth: hci4: command 0x0419 tx timeout [ 67.801858][ T4315] netlink: 'syz.1.10': attribute type 12 has an invalid length. [ 67.824734][ T4315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10'. [ 67.868128][ T4317] netlink: 'syz.0.11': attribute type 12 has an invalid length. [ 67.881084][ T4317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11'. [ 67.968757][ T4327] netlink: 'syz.2.3': attribute type 12 has an invalid length. [ 67.978895][ T4327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'. [ 68.015802][ T4333] netlink: 'syz.1.15': attribute type 12 has an invalid length. [ 68.051686][ T4333] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15'. [ 68.185191][ T4342] netlink: 196 bytes leftover after parsing attributes in process `syz.2.19'. [ 68.201118][ T4341] netlink: 'syz.0.18': attribute type 12 has an invalid length. [ 68.211693][ T4341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18'. [ 68.586575][ T4349] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.27'. [ 69.005601][ T4360] netlink: 'syz.0.23': attribute type 21 has an invalid length. [ 69.223451][ T4370] netlink: 'syz.3.26': attribute type 3 has an invalid length. [ 69.436928][ T4383] netlink: 'syz.0.31': attribute type 12 has an invalid length. [ 69.455774][ T4382] netlink: 'syz.3.30': attribute type 12 has an invalid length. [ 69.621360][ T4388] device wlan1 entered promiscuous mode [ 70.733778][ T4415] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 70.808756][ T4415] openvswitch: netlink: Message has 4 unknown bytes. [ 70.887347][ T4426] delete_channel: no stack [ 71.015761][ T4435] sctp: [Deprecated]: syz.1.43 (pid 4435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.015761][ T4435] Use struct sctp_sack_info instead [ 71.321158][ T4459] __nla_validate_parse: 8 callbacks suppressed [ 71.321177][ T4459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.52'. [ 71.341835][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.348411][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.700584][ T4470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.55'. [ 71.713291][ T4475] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.55'. [ 71.723638][ T4475] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 71.751866][ T4463] Zero length message leads to an empty skb [ 71.783175][ T4468] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.56'. [ 71.999201][ T4485] validate_nla: 5 callbacks suppressed [ 71.999217][ T4485] netlink: 'syz.0.58': attribute type 46 has an invalid length. [ 72.838129][ T4490] device syzkaller0 entered promiscuous mode [ 72.873628][ T4498] netlink: 'syz.2.63': attribute type 12 has an invalid length. [ 72.892049][ T4498] netlink: 132 bytes leftover after parsing attributes in process `syz.2.63'. [ 73.504372][ T4518] tap0: tun_chr_ioctl cmd 1074025694 [ 73.583071][ T4518] netlink: 152 bytes leftover after parsing attributes in process `syz.2.67'. [ 74.398672][ T4550] netlink: 'syz.0.76': attribute type 12 has an invalid length. [ 74.445778][ T4550] netlink: 132 bytes leftover after parsing attributes in process `syz.0.76'. [ 74.472566][ T4552] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.75'. [ 74.506477][ T4552] netlink: 'syz.3.75': attribute type 9 has an invalid length. [ 74.523144][ T4552] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.75'. [ 75.014893][ T4572] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.80'. [ 75.309215][ T4582] netlink: 'syz.4.84': attribute type 10 has an invalid length. [ 75.343963][ T4582] device batadv0 entered promiscuous mode [ 75.352584][ T4582] bridge0: port 3(batadv0) entered blocking state [ 75.378261][ T4582] bridge0: port 3(batadv0) entered disabled state [ 75.421161][ T4582] bridge0: port 3(batadv0) entered blocking state [ 75.427980][ T4582] bridge0: port 3(batadv0) entered forwarding state [ 75.483077][ T4595] netlink: 'syz.3.89': attribute type 28 has an invalid length. [ 75.491015][ T4595] netlink: 'syz.3.89': attribute type 29 has an invalid length. [ 75.515778][ T4592] netlink: 'syz.0.88': attribute type 12 has an invalid length. [ 75.610892][ T4204] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 75.620582][ T4204] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 75.685179][ T4593] netlink: 'syz.2.87': attribute type 10 has an invalid length. [ 75.808240][ T4593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.848551][ T4593] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 75.920481][ T4590] device bond0 entered promiscuous mode [ 75.934846][ T4590] device bond_slave_0 entered promiscuous mode [ 75.952036][ T4590] device bond_slave_1 entered promiscuous mode [ 75.958620][ T4590] device batadv0 entered promiscuous mode [ 76.012489][ T4603] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 76.033555][ T4608] delete_channel: no stack [ 76.216065][ T4590] syz.2.87 (4590) used greatest stack depth: 20384 bytes left [ 76.231656][ T4593] syz.2.87 (4593) used greatest stack depth: 20256 bytes left [ 76.557226][ T4627] delete_channel: no stack [ 76.609822][ T4632] netlink: 'syz.0.100': attribute type 12 has an invalid length. [ 76.630848][ T4632] __nla_validate_parse: 5 callbacks suppressed [ 76.630865][ T4632] netlink: 132 bytes leftover after parsing attributes in process `syz.0.100'. [ 76.859094][ T4639] netlink: 152 bytes leftover after parsing attributes in process `syz.1.102'. [ 77.292582][ T4649] netlink: 'syz.0.105': attribute type 2 has an invalid length. [ 77.973310][ T4678] netlink: 'syz.1.114': attribute type 12 has an invalid length. [ 78.002691][ T4678] netlink: 132 bytes leftover after parsing attributes in process `syz.1.114'. [ 78.014880][ T4680] netlink: set zone limit has 8 unknown bytes [ 78.230935][ T4693] netlink: 68 bytes leftover after parsing attributes in process `syz.4.121'. [ 78.250276][ T4686] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.119'. [ 78.340977][ T4706] netlink: 68 bytes leftover after parsing attributes in process `syz.2.123'. [ 78.549405][ T4714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.127'. [ 78.735067][ T4721] netlink: 'syz.3.138': attribute type 4 has an invalid length. [ 78.743891][ T4721] netlink: 152 bytes leftover after parsing attributes in process `syz.3.138'. [ 78.848573][ T4731] raw_sendmsg: syz.0.130 forgot to set AF_INET. Fix it! [ 78.920655][ T4732] netlink: set zone limit has 8 unknown bytes [ 79.358827][ T4721] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 79.390192][ T4728] netlink: 'syz.2.129': attribute type 12 has an invalid length. [ 79.449140][ T4728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.129'. [ 79.535069][ T4721] syz.3.138 (4721) used greatest stack depth: 20096 bytes left [ 79.881097][ T4754] netlink: 'syz.3.139': attribute type 9 has an invalid length. [ 80.062023][ T4754] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.139'. [ 80.198751][ T4756] netlink: 'syz.4.137': attribute type 5 has an invalid length. [ 80.242906][ T4762] netlink: 'syz.4.137': attribute type 10 has an invalid length. [ 80.279262][ T4762] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 80.475648][ T4771] netlink: 'syz.3.144': attribute type 12 has an invalid length. [ 80.918421][ T4785] netlink: set zone limit has 8 unknown bytes [ 81.750563][ T4810] netlink: 'syz.1.156': attribute type 12 has an invalid length. [ 81.758443][ T4810] __nla_validate_parse: 4 callbacks suppressed [ 81.758466][ T4810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.156'. [ 82.583066][ T4820] netlink: 'syz.3.158': attribute type 12 has an invalid length. [ 82.611474][ T4820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.158'. [ 83.566860][ T4840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'. [ 83.595667][ T4840] netlink: 3 bytes leftover after parsing attributes in process `syz.1.162'. [ 83.664969][ T4840] netlink: 3 bytes leftover after parsing attributes in process `syz.1.162'. [ 83.719002][ T4840] netlink: 3 bytes leftover after parsing attributes in process `syz.1.162'. [ 83.779222][ T4843] netlink: set zone limit has 8 unknown bytes [ 83.789348][ T4839] netlink: 830 bytes leftover after parsing attributes in process `syz.4.165'. [ 83.809926][ T4837] netlink: 'syz.0.163': attribute type 4 has an invalid length. [ 83.821203][ T4837] netlink: 152 bytes leftover after parsing attributes in process `syz.0.163'. [ 84.175768][ T4837] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 84.194209][ T4842] netlink: 'syz.4.165': attribute type 10 has an invalid length. [ 84.204521][ T4842] bridge0: port 4(macsec0) entered blocking state [ 84.211293][ T4842] bridge0: port 4(macsec0) entered disabled state [ 84.222735][ T4842] device macsec0 entered promiscuous mode [ 84.231787][ T4842] bridge0: port 4(macsec0) entered blocking state [ 84.238359][ T4842] bridge0: port 4(macsec0) entered forwarding state [ 84.246592][ T4834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.260996][ T4834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.301796][ T4834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.313351][ T4856] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 84.320167][ T4856] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 84.328996][ T4834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.339960][ T4857] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 84.346483][ T4857] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 84.414610][ T4834] bond0: (slave batadv0): Releasing backup interface [ 84.436820][ T4834] device batadv0 left promiscuous mode [ 84.580059][ T4870] netlink: 'syz.4.169': attribute type 12 has an invalid length. [ 84.605263][ T4870] netlink: 132 bytes leftover after parsing attributes in process `syz.4.169'. [ 84.690902][ T4875] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.171'. [ 84.792325][ T4883] IPv6: Can't replace route, no match found [ 84.834363][ T4883] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 85.295464][ T4918] netlink: 'syz.4.185': attribute type 12 has an invalid length. [ 85.403626][ T4920] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 85.428583][ T4920] device team0 entered promiscuous mode [ 85.445595][ T4920] device team_slave_0 entered promiscuous mode [ 85.452580][ T4920] device team_slave_1 entered promiscuous mode [ 85.459585][ T4920] bridge0: port 3(team0) entered blocking state [ 85.491632][ T4920] bridge0: port 3(team0) entered disabled state [ 85.515745][ T4920] bridge0: port 3(team0) entered blocking state [ 85.522289][ T4920] bridge0: port 3(team0) entered forwarding state [ 85.703295][ T4919] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 86.452305][ T4951] netlink: 'syz.0.196': attribute type 12 has an invalid length. [ 86.715800][ T7] cfg80211: failed to load regulatory.db [ 86.812460][ T4956] netlink: 'syz.0.197': attribute type 21 has an invalid length. [ 86.832667][ T4956] netlink: 'syz.0.197': attribute type 1 has an invalid length. [ 86.868403][ T4956] __nla_validate_parse: 7 callbacks suppressed [ 86.868420][ T4956] netlink: 144 bytes leftover after parsing attributes in process `syz.0.197'. [ 86.910689][ T4954] netlink: 144 bytes leftover after parsing attributes in process `syz.0.197'. [ 87.184095][ T4967] netlink: 56 bytes leftover after parsing attributes in process `syz.0.200'. [ 87.224397][ T4967] netlink: 56 bytes leftover after parsing attributes in process `syz.0.200'. [ 87.250385][ T4975] netlink: 56 bytes leftover after parsing attributes in process `syz.0.200'. [ 87.470449][ T4990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.208'. [ 87.838465][ T5010] netlink: 180 bytes leftover after parsing attributes in process `syz.4.214'. [ 88.210368][ T5032] netlink: 1 bytes leftover after parsing attributes in process `syz.2.219'. [ 88.662997][ T5044] validate_nla: 3 callbacks suppressed [ 88.663015][ T5044] netlink: 'syz.0.222': attribute type 12 has an invalid length. [ 88.709904][ T5044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.222'. [ 89.314921][ T5051] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.224'. [ 89.475562][ T5051] netlink: zone id is out of range [ 89.491256][ T5051] netlink: zone id is out of range [ 89.569536][ T5068] netlink: 'syz.4.225': attribute type 2 has an invalid length. [ 89.591521][ T5068] netlink: 'syz.4.225': attribute type 4 has an invalid length. [ 89.599227][ T5068] netlink: 'syz.4.225': attribute type 8 has an invalid length. [ 89.633999][ T5051] netlink: zone id is out of range [ 89.680846][ T5068] netlink: 'syz.4.225': attribute type 9 has an invalid length. [ 89.714093][ T5051] netlink: zone id is out of range [ 89.752580][ T5068] netlink: 'syz.4.225': attribute type 10 has an invalid length. [ 89.765347][ T5051] netlink: zone id is out of range [ 89.770865][ T5051] netlink: zone id is out of range [ 89.776331][ T5051] netlink: zone id is out of range [ 89.781899][ T5051] netlink: zone id is out of range [ 89.787277][ T5051] netlink: zone id is out of range [ 89.792812][ T5051] netlink: zone id is out of range [ 89.943669][ T5095] netlink: 'syz.0.233': attribute type 12 has an invalid length. [ 90.184343][ T5105] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 90.229534][ T5105] netlink: 'syz.1.238': attribute type 4 has an invalid length. [ 90.323203][ T5107] netlink: 'syz.2.239': attribute type 21 has an invalid length. [ 91.559858][ T5134] device syzkaller0 entered promiscuous mode [ 92.116773][ T5160] __nla_validate_parse: 6 callbacks suppressed [ 92.116856][ T5160] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.255'. [ 93.440140][ T5213] netlink: 132 bytes leftover after parsing attributes in process `syz.3.267'. [ 94.066768][ T5235] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.275'. [ 94.286159][ T5244] device syzkaller0 entered promiscuous mode [ 94.399756][ T5247] validate_nla: 6 callbacks suppressed [ 94.399775][ T5247] netlink: 'syz.0.277': attribute type 6 has an invalid length. [ 94.441590][ T5247] netlink: 164 bytes leftover after parsing attributes in process `syz.0.277'. [ 94.808695][ T5260] netlink: 'syz.2.282': attribute type 4 has an invalid length. [ 94.882992][ T5260] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.282'. [ 96.570929][ T5282] netlink: 'syz.0.289': attribute type 3 has an invalid length. [ 96.608361][ T5292] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.650612][ T5282] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.289'. [ 96.767572][ T5301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.774992][ T5301] IPv6: NLM_F_CREATE should be set when creating new route [ 96.782985][ T5301] IPv6: NLM_F_CREATE should be set when creating new route [ 96.790594][ T5301] IPv6: NLM_F_CREATE should be set when creating new route [ 96.870283][ T5308] netlink: 'syz.1.295': attribute type 12 has an invalid length. [ 96.919820][ T5308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.295'. [ 96.956058][ T5310] netlink: 'syz.4.296': attribute type 39 has an invalid length. [ 97.393950][ T5322] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.301'. [ 97.451657][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 97.669754][ T5335] netlink: 'syz.2.307': attribute type 3 has an invalid length. [ 97.692929][ T5337] netlink: 'syz.1.308': attribute type 12 has an invalid length. [ 97.701546][ T5335] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.307'. [ 97.731777][ T5337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.308'. [ 97.937106][ T5328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.959923][ T5328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.981005][ T5328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.010647][ T5328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.443570][ T5356] netlink: 'syz.0.311': attribute type 10 has an invalid length. [ 98.470000][ T5356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.311'. [ 98.505752][ T5356] device ipvlan1 entered promiscuous mode [ 98.528802][ T5356] bridge0: port 3(ipvlan1) entered blocking state [ 98.580526][ T5356] bridge0: port 3(ipvlan1) entered disabled state [ 98.686330][ T5356] net_ratelimit: 217 callbacks suppressed [ 98.686350][ T5356] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 98.768821][ T5366] netlink: 'syz.4.315': attribute type 21 has an invalid length. [ 98.792886][ T5366] netlink: 160 bytes leftover after parsing attributes in process `syz.4.315'. [ 98.959065][ T5380] netlink: 'syz.0.319': attribute type 12 has an invalid length. [ 98.980912][ T5380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.319'. [ 99.013835][ T5382] netlink: 1 bytes leftover after parsing attributes in process `syz.4.320'. [ 99.067283][ T5390] syz.0.322[5390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.067383][ T5390] syz.0.322[5390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.081927][ T5388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.320'. [ 99.132443][ T5388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.282106][ T5399] device wlan0 entered promiscuous mode [ 99.316404][ T5392] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.323'. [ 99.389035][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.410136][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.456722][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.492339][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.542137][ T5400] bridge0: port 3(batadv0) entered disabled state [ 99.589839][ T5400] bridge0: port 3(batadv0) entered disabled state [ 100.004390][ T5428] validate_nla: 2 callbacks suppressed [ 100.004407][ T5428] netlink: 'syz.0.333': attribute type 12 has an invalid length. [ 100.163192][ T5436] netlink: 'syz.2.335': attribute type 27 has an invalid length. [ 102.026187][ T5496] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 102.280733][ T5496] tap0: tun_chr_ioctl cmd 1074025673 [ 102.293619][ T5494] netlink: 'syz.0.353': attribute type 27 has an invalid length. [ 102.394219][ T5494] netlink: 'syz.0.353': attribute type 4 has an invalid length. [ 102.492646][ T5494] __nla_validate_parse: 3 callbacks suppressed [ 102.492666][ T5494] netlink: 152 bytes leftover after parsing attributes in process `syz.0.353'. [ 102.629808][ T5499] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.354'. [ 102.851782][ T5505] netlink: 144 bytes leftover after parsing attributes in process `syz.4.355'. [ 103.782612][ T5542] device wlan0 entered promiscuous mode [ 103.803892][ T5541] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 103.813253][ T5542] netlink: 'syz.0.364': attribute type 9 has an invalid length. [ 103.844281][ T5542] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.364'. [ 104.003084][ T5541] device veth0_vlan left promiscuous mode [ 104.027282][ T5541] device veth0_vlan entered promiscuous mode [ 104.065339][ T5541] team0: Device veth0_vlan failed to register rx_handler [ 104.425349][ T5570] netlink: 'syz.4.374': attribute type 2 has an invalid length. [ 104.492338][ T5570] netlink: 'syz.4.374': attribute type 4 has an invalid length. [ 104.509981][ T5570] netlink: 132 bytes leftover after parsing attributes in process `syz.4.374'. [ 104.524593][ T5565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.371'. [ 104.563845][ T5571] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.372'. [ 104.869938][ T5598] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.381'. [ 104.962731][ T5598] netlink: 'syz.2.381': attribute type 2 has an invalid length. [ 105.200403][ T5616] netlink: 'syz.2.386': attribute type 39 has an invalid length. [ 105.361042][ T5615] netlink: 'syz.2.386': attribute type 39 has an invalid length. [ 105.382296][ T5619] device syzkaller0 entered promiscuous mode [ 105.398416][ T5619] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 105.680293][ T5640] netlink: 'syz.1.392': attribute type 19 has an invalid length. [ 105.839768][ T5649] netlink: 'syz.2.395': attribute type 10 has an invalid length. [ 105.939196][ T5649] netlink: 'syz.2.395': attribute type 10 has an invalid length. [ 106.120554][ T5666] netlink: 'syz.2.400': attribute type 2 has an invalid length. [ 106.158095][ T5666] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 106.492758][ T5682] netlink: 132 bytes leftover after parsing attributes in process `syz.4.406'. [ 106.641691][ T5689] netlink: 60 bytes leftover after parsing attributes in process `syz.1.409'. [ 106.690286][ T5694] netlink: 'syz.0.411': attribute type 7 has an invalid length. [ 106.710272][ T5694] netlink: 'syz.0.411': attribute type 6 has an invalid length. [ 106.784927][ T5689] netlink: zone id is out of range [ 106.797136][ T5689] netlink: zone id is out of range [ 106.817925][ T5689] netlink: zone id is out of range [ 106.858348][ T5689] netlink: zone id is out of range [ 106.881584][ T5689] netlink: zone id is out of range [ 106.902440][ T5689] netlink: zone id is out of range [ 106.936933][ T5689] netlink: zone id is out of range [ 106.964650][ T5689] netlink: zone id is out of range [ 106.983964][ T5699] IPv6: pim6reg1: Disabled Multicast RS [ 107.001173][ T5689] netlink: zone id is out of range [ 107.023578][ T5689] netlink: zone id is out of range [ 107.590921][ T5724] netlink: 'syz.0.419': attribute type 10 has an invalid length. [ 107.631600][ T5724] __nla_validate_parse: 4 callbacks suppressed [ 107.631617][ T5724] netlink: 168 bytes leftover after parsing attributes in process `syz.0.419'. [ 107.775797][ T5731] delete_channel: no stack [ 109.185048][ T5800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.443'. [ 109.226666][ T5806] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.445'. [ 109.302390][ T5804] netlink: 40 bytes leftover after parsing attributes in process `syz.3.444'. [ 109.384450][ T5804] device caif0 entered promiscuous mode [ 109.590560][ T5825] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.450'. [ 109.978293][ T5854] syz.0.458[5854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.979579][ T5854] syz.0.458[5854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.310458][ T5875] device syzkaller0 entered promiscuous mode [ 110.358051][ T5875] syzkaller0: create flow: hash 1092076887 index 0 [ 110.471874][ T5875] syzkaller0 (unregistered): delete flow: hash 1092076887 index 0 [ 111.121692][ T5912] validate_nla: 3 callbacks suppressed [ 111.121708][ T5912] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 111.190864][ T5912] netlink: 199572 bytes leftover after parsing attributes in process `syz.0.476'. [ 111.497344][ T5933] netlink: 'syz.2.484': attribute type 3 has an invalid length. [ 111.530910][ T5933] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.484'. [ 111.940069][ T5945] Â: renamed from pim6reg1 [ 112.491772][ T5961] net_ratelimit: 52 callbacks suppressed [ 112.491794][ T5961] netlink: set zone limit has 8 unknown bytes [ 113.884711][ T5953] netlink: 180 bytes leftover after parsing attributes in process `syz.4.488'. [ 114.064179][ T5969] netlink: 'syz.4.492': attribute type 2 has an invalid length. [ 114.143867][ T5969] netlink: 'syz.4.492': attribute type 3 has an invalid length. [ 114.237931][ T5969] netlink: 132 bytes leftover after parsing attributes in process `syz.4.492'. [ 114.983629][ T6027] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.508'. [ 115.133603][ T6026] device wlan0 entered promiscuous mode [ 115.286730][ T6033] netlink: 'syz.1.512': attribute type 46 has an invalid length. [ 115.583206][ T6058] netlink: 'syz.4.521': attribute type 153 has an invalid length. [ 115.612931][ T6058] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.521'. [ 115.815257][ T6074] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.525'. [ 115.957976][ T6081] netlink: 'syz.4.526': attribute type 3 has an invalid length. [ 116.030239][ T6081] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.526'. [ 116.149345][ T6090] device pimreg0 entered promiscuous mode [ 116.235134][ T6095] netlink: 'syz.0.533': attribute type 3 has an invalid length. [ 116.246359][ T6095] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.533'. [ 116.520622][ T6110] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.537'. [ 117.488845][ T6161] netlink: 'syz.1.553': attribute type 7 has an invalid length. [ 117.507081][ T6161] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.553'. [ 117.777013][ T6164] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.863611][ T6171] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.224982][ T6190] netlink: 'syz.3.563': attribute type 4 has an invalid length. [ 118.262801][ T6190] netlink: 152 bytes leftover after parsing attributes in process `syz.3.563'. [ 118.310921][ T6190] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 118.944440][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.737811][ T6260] delete_channel: no stack [ 119.793744][ T6260] delete_channel: no stack [ 120.045252][ T6275] sctp: [Deprecated]: syz.0.587 (pid 6275) Use of int in max_burst socket option deprecated. [ 120.045252][ T6275] Use struct sctp_assoc_value instead [ 120.084403][ T6272] __nla_validate_parse: 3 callbacks suppressed [ 120.084422][ T6272] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.589'. [ 120.144785][ T6272] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.589'. [ 120.432848][ T6286] bridge0: port 3(team0) entered blocking state [ 120.442749][ T6286] bridge0: port 3(team0) entered disabled state [ 120.504280][ T6286] device team0 entered promiscuous mode [ 120.513047][ T6286] device team_slave_0 entered promiscuous mode [ 120.534939][ T6286] device team_slave_1 entered promiscuous mode [ 120.558894][ T6286] bridge0: port 3(team0) entered blocking state [ 120.565957][ T6286] bridge0: port 3(team0) entered forwarding state [ 120.810741][ T6298] netlink: 60 bytes leftover after parsing attributes in process `syz.4.595'. [ 120.911327][ T6302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.182490][ T6320] netlink: 40191 bytes leftover after parsing attributes in process `syz.4.602'. [ 121.777526][ T6349] netlink: 'syz.4.612': attribute type 3 has an invalid length. [ 121.790981][ T6349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.612'. [ 122.112104][ T6351] netlink: 'syz.0.614': attribute type 16 has an invalid length. [ 122.121313][ T6351] netlink: 'syz.0.614': attribute type 3 has an invalid length. [ 122.194685][ T6351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.614'. [ 122.371245][ T6369] ref_ctr_offset mismatch. inode: 0x266 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 122.489298][ T6372] netlink: 'syz.0.623': attribute type 4 has an invalid length. [ 122.501680][ T6372] netlink: 152 bytes leftover after parsing attributes in process `syz.0.623'. [ 122.531153][ T6372] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 122.608834][ T6378] netlink: 132 bytes leftover after parsing attributes in process `syz.1.624'. [ 122.876225][ T6384] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 122.905865][ T6384] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.626'. [ 123.063003][ T6384] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.626'. [ 123.320365][ T6396] netlink: 'syz.1.632': attribute type 21 has an invalid length. [ 123.382177][ T6396] netlink: 'syz.1.632': attribute type 12 has an invalid length. [ 123.389995][ T6396] netlink: 'syz.1.632': attribute type 13 has an invalid length. [ 123.391131][ T6402] netlink: 'syz.1.632': attribute type 3 has an invalid length. [ 123.479961][ T6396] netlink: 'syz.1.632': attribute type 14 has an invalid length. [ 125.404787][ T6497] __nla_validate_parse: 3 callbacks suppressed [ 125.404822][ T6497] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.664'. [ 125.551897][ T6501] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.666'. [ 125.712130][ T6510] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.667'. [ 126.137734][ T6522] device syzkaller0 entered promiscuous mode [ 126.317689][ T6530] À: port 1(vlan0) entered blocking state [ 126.329463][ T6530] À: port 1(vlan0) entered disabled state [ 126.377725][ T6530] device vlan0 entered promiscuous mode [ 126.778091][ T6559] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.682'. [ 127.110090][ T6571] validate_nla: 7 callbacks suppressed [ 127.110102][ T6571] netlink: 'syz.2.686': attribute type 10 has an invalid length. [ 127.125840][ T6571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.686'. [ 127.135205][ T6571] device team0 entered promiscuous mode [ 127.140886][ T6571] device team_slave_0 entered promiscuous mode [ 127.148212][ T6571] device team_slave_1 entered promiscuous mode [ 127.155455][ T6571] bridge0: port 3(team0) entered blocking state [ 127.162799][ T6571] bridge0: port 3(team0) entered disabled state [ 127.178693][ T6571] bridge0: port 3(team0) entered blocking state [ 127.185115][ T6571] bridge0: port 3(team0) entered forwarding state [ 127.597002][ T6589] wlan1: mtu greater than device maximum [ 128.466282][ T6627] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.701'. [ 128.683937][ T6632] netlink: 'syz.2.704': attribute type 29 has an invalid length. [ 128.719775][ T6623] syz.1.700 (6623) used greatest stack depth: 18376 bytes left [ 129.325391][ T6644] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.709'. [ 129.583622][ T6649] netlink: 'syz.4.711': attribute type 28 has an invalid length. [ 129.594151][ T6649] netlink: 2 bytes leftover after parsing attributes in process `syz.4.711'. [ 129.614623][ T6651] netlink: 'syz.2.712': attribute type 10 has an invalid length. [ 129.623685][ T6651] netlink: 55 bytes leftover after parsing attributes in process `syz.2.712'. [ 129.817425][ T6654] netlink: 132 bytes leftover after parsing attributes in process `syz.4.711'. [ 129.838180][ T6656] IPv6: pim6reg1: Disabled Multicast RS [ 129.845797][ T6649] netlink: 'syz.4.711': attribute type 39 has an invalid length. [ 129.856917][ T6662] netlink: 'syz.1.715': attribute type 10 has an invalid length. [ 129.968447][ T6662] device wlan1 entered promiscuous mode [ 129.990573][ T6662] team0: Port device wlan1 added [ 130.084036][ T6661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.165413][ T6674] netlink: 'syz.0.718': attribute type 12 has an invalid length. [ 130.278764][ T6680] netlink: 'syz.0.723': attribute type 3 has an invalid length. [ 130.300168][ T6682] netlink: 'syz.4.722': attribute type 12 has an invalid length. [ 130.347670][ T6680] device syzkaller0 entered promiscuous mode [ 130.394296][ T6681] FAULT_INJECTION: forcing a failure. [ 130.394296][ T6681] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.434148][ T6681] CPU: 0 PID: 6681 Comm: syz.1.721 Not tainted syzkaller #0 [ 130.441504][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.451603][ T6681] Call Trace: [ 130.454894][ T6681] [ 130.457827][ T6681] dump_stack_lvl+0x168/0x230 [ 130.462549][ T6681] ? show_regs_print_info+0x20/0x20 [ 130.467755][ T6681] ? load_image+0x3b0/0x3b0 [ 130.472266][ T6681] ? __lock_acquire+0x7c60/0x7c60 [ 130.477325][ T6681] should_fail+0x38c/0x4c0 [ 130.481755][ T6681] _copy_from_user+0x2e/0x170 [ 130.486444][ T6681] __copy_msghdr_from_user+0xaf/0x5e0 [ 130.491911][ T6681] ? verify_lock_unused+0x140/0x140 [ 130.497124][ T6681] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 130.502433][ T6681] ___sys_sendmsg+0x156/0x260 [ 130.507145][ T6681] ? __sys_sendmsg+0x250/0x250 [ 130.511951][ T6681] ? vfs_write+0x84d/0xd00 [ 130.516388][ T6681] ? __fdget+0x18b/0x210 [ 130.520636][ T6681] __se_sys_sendmsg+0x190/0x250 [ 130.525517][ T6681] ? __x64_sys_sendmsg+0x80/0x80 [ 130.530455][ T6681] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 130.536453][ T6681] ? lockdep_hardirqs_on+0x94/0x140 [ 130.541658][ T6681] do_syscall_64+0x4c/0xa0 [ 130.546073][ T6681] ? clear_bhb_loop+0x30/0x80 [ 130.550750][ T6681] ? clear_bhb_loop+0x30/0x80 [ 130.555428][ T6681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.561527][ T6681] RIP: 0033:0x7fa3b9155ec9 [ 130.565964][ T6681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.585581][ T6681] RSP: 002b:00007fa3b73bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.594097][ T6681] RAX: ffffffffffffffda RBX: 00007fa3b93acfa0 RCX: 00007fa3b9155ec9 [ 130.602098][ T6681] RDX: 0000000000000700 RSI: 0000200000000940 RDI: 0000000000000006 [ 130.610069][ T6681] RBP: 00007fa3b73bd090 R08: 0000000000000000 R09: 0000000000000000 [ 130.618042][ T6681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.626017][ T6681] R13: 00007fa3b93ad038 R14: 00007fa3b93acfa0 R15: 00007fffab46b3b8 [ 130.634052][ T6681] [ 130.793373][ T6690] netlink: 'syz.2.724': attribute type 10 has an invalid length. [ 130.812784][ T6690] __nla_validate_parse: 4 callbacks suppressed [ 130.812822][ T6690] netlink: 55 bytes leftover after parsing attributes in process `syz.2.724'. [ 131.063445][ T6690] device vlan0 left promiscuous mode [ 131.069092][ T6690] À: port 1(vlan0) entered disabled state [ 131.414777][ T6699] bridge0: port 3(team0) entered disabled state [ 131.421316][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.429801][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.609126][ T6711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.734'. [ 131.742540][ T6720] FAULT_INJECTION: forcing a failure. [ 131.742540][ T6720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.811505][ T6720] CPU: 1 PID: 6720 Comm: syz.3.737 Not tainted syzkaller #0 [ 131.818941][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.829631][ T6720] Call Trace: [ 131.832941][ T6720] [ 131.835943][ T6720] dump_stack_lvl+0x168/0x230 [ 131.840674][ T6720] ? show_regs_print_info+0x20/0x20 [ 131.846030][ T6720] ? load_image+0x3b0/0x3b0 [ 131.850586][ T6720] ? __lock_acquire+0x7c60/0x7c60 [ 131.855643][ T6720] should_fail+0x38c/0x4c0 [ 131.860094][ T6720] _copy_from_user+0x2e/0x170 [ 131.864790][ T6720] iovec_from_user+0x142/0x370 [ 131.869576][ T6720] __import_iovec+0x70/0x490 [ 131.874211][ T6720] import_iovec+0x6f/0xa0 [ 131.878558][ T6720] ___sys_sendmsg+0x1b9/0x260 [ 131.883251][ T6720] ? __sys_sendmsg+0x250/0x250 [ 131.888030][ T6720] ? vfs_write+0x84d/0xd00 [ 131.892460][ T6720] ? __fdget+0x18b/0x210 [ 131.896748][ T6720] __se_sys_sendmsg+0x190/0x250 [ 131.901606][ T6720] ? __x64_sys_sendmsg+0x80/0x80 [ 131.906549][ T6720] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 131.912645][ T6720] ? lockdep_hardirqs_on+0x94/0x140 [ 131.917854][ T6720] do_syscall_64+0x4c/0xa0 [ 131.922297][ T6720] ? clear_bhb_loop+0x30/0x80 [ 131.926978][ T6720] ? clear_bhb_loop+0x30/0x80 [ 131.931656][ T6720] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.937552][ T6720] RIP: 0033:0x7efdd2945ec9 [ 131.941972][ T6720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.961582][ T6720] RSP: 002b:00007efdd0bad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.969997][ T6720] RAX: ffffffffffffffda RBX: 00007efdd2b9cfa0 RCX: 00007efdd2945ec9 [ 131.977969][ T6720] RDX: 0000000000000700 RSI: 0000200000000940 RDI: 0000000000000006 [ 131.987364][ T6720] RBP: 00007efdd0bad090 R08: 0000000000000000 R09: 0000000000000000 [ 131.995342][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.003313][ T6720] R13: 00007efdd2b9d038 R14: 00007efdd2b9cfa0 R15: 00007ffcbb84bd78 [ 132.011298][ T6720] [ 132.322527][ T6730] validate_nla: 2 callbacks suppressed [ 132.322560][ T6730] netlink: 'syz.0.740': attribute type 12 has an invalid length. [ 132.409988][ T6730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.740'. [ 132.756087][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762469][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.783113][ T6763] netlink: 60 bytes leftover after parsing attributes in process `syz.4.751'. [ 132.806365][ T6763] netlink: 60 bytes leftover after parsing attributes in process `syz.4.751'. [ 132.836644][ T6763] netlink: 'syz.4.751': attribute type 29 has an invalid length. [ 132.857459][ T6763] netlink: 'syz.4.751': attribute type 29 has an invalid length. [ 132.882502][ T6763] netlink: 'syz.4.751': attribute type 29 has an invalid length. [ 132.914792][ T6763] netlink: 60 bytes leftover after parsing attributes in process `syz.4.751'. [ 133.134045][ T6747] netlink: 'syz.3.748': attribute type 12 has an invalid length. [ 133.166195][ T6747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.748'. [ 133.287070][ T6773] device syzkaller0 entered promiscuous mode [ 133.315929][ T6776] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.756'. [ 133.709762][ T6784] FAULT_INJECTION: forcing a failure. [ 133.709762][ T6784] name failslab, interval 1, probability 0, space 0, times 1 [ 133.743764][ T6784] CPU: 0 PID: 6784 Comm: syz.2.754 Not tainted syzkaller #0 [ 133.751103][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.761177][ T6784] Call Trace: [ 133.764479][ T6784] [ 133.767431][ T6784] dump_stack_lvl+0x168/0x230 [ 133.772240][ T6784] ? show_regs_print_info+0x20/0x20 [ 133.777467][ T6784] ? load_image+0x3b0/0x3b0 [ 133.781999][ T6784] ? __might_sleep+0xf0/0xf0 [ 133.786625][ T6784] ? __lock_acquire+0x7c60/0x7c60 [ 133.791770][ T6784] ? netlink_insert+0xe7c/0x11d0 [ 133.796749][ T6784] should_fail+0x38c/0x4c0 [ 133.801181][ T6784] should_failslab+0x5/0x20 [ 133.805698][ T6784] slab_pre_alloc_hook+0x51/0xc0 [ 133.810639][ T6784] kmem_cache_alloc_node+0x47/0x2d0 [ 133.815868][ T6784] ? __alloc_skb+0xf4/0x750 [ 133.820410][ T6784] __alloc_skb+0xf4/0x750 [ 133.824773][ T6784] netlink_sendmsg+0x645/0xbc0 [ 133.829543][ T6784] ? netlink_getsockopt+0x560/0x560 [ 133.834867][ T6784] ? aa_sock_msg_perm+0x94/0x150 [ 133.839821][ T6784] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 133.845408][ T6784] ? security_socket_sendmsg+0x7c/0xa0 [ 133.850885][ T6784] ? netlink_getsockopt+0x560/0x560 [ 133.856180][ T6784] ____sys_sendmsg+0x5a2/0x8c0 [ 133.860966][ T6784] ? memset+0x1e/0x40 [ 133.864959][ T6784] ? __sys_sendmsg_sock+0x30/0x30 [ 133.870009][ T6784] ? import_iovec+0x6f/0xa0 [ 133.874540][ T6784] ___sys_sendmsg+0x1f0/0x260 [ 133.879260][ T6784] ? __sys_sendmsg+0x250/0x250 [ 133.884144][ T6784] ? vfs_write+0x84d/0xd00 [ 133.888598][ T6784] ? __fdget+0x18b/0x210 [ 133.892859][ T6784] __se_sys_sendmsg+0x190/0x250 [ 133.897716][ T6784] ? __x64_sys_sendmsg+0x80/0x80 [ 133.902688][ T6784] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 133.908719][ T6784] ? lockdep_hardirqs_on+0x94/0x140 [ 133.913926][ T6784] do_syscall_64+0x4c/0xa0 [ 133.918352][ T6784] ? clear_bhb_loop+0x30/0x80 [ 133.923035][ T6784] ? clear_bhb_loop+0x30/0x80 [ 133.927715][ T6784] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.933614][ T6784] RIP: 0033:0x7f00c7e37ec9 [ 133.938041][ T6784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.957672][ T6784] RSP: 002b:00007f00c607e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.966092][ T6784] RAX: ffffffffffffffda RBX: 00007f00c808f090 RCX: 00007f00c7e37ec9 [ 133.974064][ T6784] RDX: 0000000000000700 RSI: 0000200000000940 RDI: 0000000000000006 [ 133.982042][ T6784] RBP: 00007f00c607e090 R08: 0000000000000000 R09: 0000000000000000 [ 133.990022][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.998002][ T6784] R13: 00007f00c808f128 R14: 00007f00c808f090 R15: 00007fff0fd3fd78 [ 134.006008][ T6784] [ 134.888983][ T6782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.757'. [ 135.762418][ T6823] netlink: 'syz.4.770': attribute type 12 has an invalid length. [ 135.770522][ T6823] netlink: 132 bytes leftover after parsing attributes in process `syz.4.770'. [ 135.919436][ T6825] netlink: 182 bytes leftover after parsing attributes in process `syz.4.771'. [ 136.027576][ T6830] netlink: 'syz.2.773': attribute type 17 has an invalid length. [ 136.048385][ T6830] netlink: 160 bytes leftover after parsing attributes in process `syz.2.773'. [ 136.068519][ T6830] netlink: 'syz.2.773': attribute type 12 has an invalid length. [ 136.101694][ T6830] netlink: 132 bytes leftover after parsing attributes in process `syz.2.773'. [ 136.244289][ T6839] netlink: 'syz.2.778': attribute type 10 has an invalid length. [ 136.423074][ T6839] netlink: 'syz.2.778': attribute type 10 has an invalid length. [ 136.442684][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.778'. [ 136.550922][ T6857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.782'. [ 136.743542][ T6862] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.784'. [ 137.089897][ T6876] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.788'. [ 137.144411][ T6873] delete_channel: no stack [ 137.329148][ T6878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.789'. [ 137.470846][ T6882] validate_nla: 3 callbacks suppressed [ 137.470865][ T6882] netlink: 'syz.1.791': attribute type 4 has an invalid length. [ 137.559128][ T6882] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.791'. [ 137.654072][ T6895] netlink: 'syz.4.795': attribute type 12 has an invalid length. [ 137.721509][ T6895] netlink: 132 bytes leftover after parsing attributes in process `syz.4.795'. [ 137.810686][ T6905] netlink: 'syz.0.798': attribute type 12 has an invalid length. [ 137.902943][ T6911] FAULT_INJECTION: forcing a failure. [ 137.902943][ T6911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.941155][ T6911] CPU: 0 PID: 6911 Comm: syz.2.799 Not tainted syzkaller #0 [ 137.948518][ T6911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.958610][ T6911] Call Trace: [ 137.961921][ T6911] [ 137.964883][ T6911] dump_stack_lvl+0x168/0x230 [ 137.969632][ T6911] ? show_regs_print_info+0x20/0x20 [ 137.974889][ T6911] ? load_image+0x3b0/0x3b0 [ 137.979436][ T6911] ? __lock_acquire+0x7c60/0x7c60 [ 137.984502][ T6911] should_fail+0x38c/0x4c0 [ 137.988962][ T6911] _copy_from_user+0x2e/0x170 [ 137.993681][ T6911] __copy_msghdr_from_user+0xaf/0x5e0 [ 137.999092][ T6911] ? verify_lock_unused+0x140/0x140 [ 138.004352][ T6911] ? perf_tp_event+0xa3b/0xb50 [ 138.009152][ T6911] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 138.014518][ T6911] ? trace_event_raw_event_lock+0x250/0x250 [ 138.020479][ T6911] ___sys_sendmsg+0x156/0x260 [ 138.025198][ T6911] ? __sys_sendmsg+0x250/0x250 [ 138.030006][ T6911] ? trace_event_raw_event_lock+0x250/0x250 [ 138.035973][ T6911] ? __fdget+0x18b/0x210 [ 138.040256][ T6911] __se_sys_sendmsg+0x190/0x250 [ 138.045179][ T6911] ? __x64_sys_sendmsg+0x80/0x80 [ 138.050170][ T6911] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 138.056211][ T6911] ? lockdep_hardirqs_on+0x94/0x140 [ 138.061632][ T6911] do_syscall_64+0x4c/0xa0 [ 138.066075][ T6911] ? clear_bhb_loop+0x30/0x80 [ 138.070763][ T6911] ? clear_bhb_loop+0x30/0x80 [ 138.075558][ T6911] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.081477][ T6911] RIP: 0033:0x7f00c7e37ec9 [ 138.085910][ T6911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.105527][ T6911] RSP: 002b:00007f00c609f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.113957][ T6911] RAX: ffffffffffffffda RBX: 00007f00c808efa0 RCX: 00007f00c7e37ec9 [ 138.121931][ T6911] RDX: 0000000000000700 RSI: 0000200000000940 RDI: 0000000000000004 [ 138.129902][ T6911] RBP: 00007f00c609f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.137879][ T6911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.145854][ T6911] R13: 00007f00c808f038 R14: 00007f00c808efa0 R15: 00007fff0fd3fd78 [ 138.153841][ T6911] [ 138.336883][ T6916] netlink: 'syz.0.801': attribute type 12 has an invalid length. [ 138.525084][ T6928] netlink: 'syz.1.804': attribute type 12 has an invalid length. [ 138.757865][ T6929] device syzkaller0 entered promiscuous mode [ 138.929784][ T6947] netlink: 'syz.1.810': attribute type 12 has an invalid length. [ 139.024366][ T6953] FAULT_INJECTION: forcing a failure. [ 139.024366][ T6953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.039480][ T6951] netlink: 'syz.3.811': attribute type 12 has an invalid length. [ 139.081882][ T6953] CPU: 1 PID: 6953 Comm: syz.4.813 Not tainted syzkaller #0 [ 139.089226][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.099402][ T6953] Call Trace: [ 139.102706][ T6953] [ 139.105672][ T6953] dump_stack_lvl+0x168/0x230 [ 139.110387][ T6953] ? show_regs_print_info+0x20/0x20 [ 139.115616][ T6953] ? load_image+0x3b0/0x3b0 [ 139.120155][ T6953] ? __lock_acquire+0x7c60/0x7c60 [ 139.125209][ T6953] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 139.130800][ T6953] should_fail+0x38c/0x4c0 [ 139.135259][ T6953] _copy_from_user+0x2e/0x170 [ 139.139976][ T6953] iovec_from_user+0x142/0x370 [ 139.144779][ T6953] __import_iovec+0x70/0x490 [ 139.149394][ T6953] import_iovec+0x6f/0xa0 [ 139.153743][ T6953] ___sys_sendmsg+0x1b9/0x260 [ 139.158437][ T6953] ? __sys_sendmsg+0x250/0x250 [ 139.163221][ T6953] ? vfs_write+0x84d/0xd00 [ 139.167710][ T6953] ? __fdget+0x18b/0x210 [ 139.171963][ T6953] __se_sys_sendmsg+0x190/0x250 [ 139.176824][ T6953] ? __x64_sys_sendmsg+0x80/0x80 [ 139.181769][ T6953] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 139.187767][ T6953] ? lockdep_hardirqs_on+0x94/0x140 [ 139.192998][ T6953] do_syscall_64+0x4c/0xa0 [ 139.197422][ T6953] ? clear_bhb_loop+0x30/0x80 [ 139.202104][ T6953] ? clear_bhb_loop+0x30/0x80 [ 139.206884][ T6953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.212799][ T6953] RIP: 0033:0x7f672c1c6ec9 [ 139.217216][ T6953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.236845][ T6953] RSP: 002b:00007f672a42e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.245261][ T6953] RAX: ffffffffffffffda RBX: 00007f672c41dfa0 RCX: 00007f672c1c6ec9 [ 139.253233][ T6953] RDX: 0000000000000700 RSI: 0000200000000940 RDI: 0000000000000004 [ 139.261203][ T6953] RBP: 00007f672a42e090 R08: 0000000000000000 R09: 0000000000000000 [ 139.269175][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.277146][ T6953] R13: 00007f672c41e038 R14: 00007f672c41dfa0 R15: 00007ffeec556ad8 [ 139.285129][ T6953] [ 139.455770][ T6967] netlink: 'syz.3.817': attribute type 2 has an invalid length. [ 139.580006][ T6975] netlink: 'syz.2.820': attribute type 12 has an invalid length. [ 140.029533][ T6998] netlink: 'syz.1.828': attribute type 12 has an invalid length. [ 140.140402][ T7007] FAULT_INJECTION: forcing a failure. [ 140.140402][ T7007] name failslab, interval 1, probability 0, space 0, times 0 [ 140.170114][ T7007] CPU: 0 PID: 7007 Comm: syz.1.831 Not tainted syzkaller #0 [ 140.177457][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.187631][ T7007] Call Trace: [ 140.190943][ T7007] [ 140.193902][ T7007] dump_stack_lvl+0x168/0x230 [ 140.198617][ T7007] ? show_regs_print_info+0x20/0x20 [ 140.203948][ T7007] ? load_image+0x3b0/0x3b0 [ 140.208475][ T7007] ? __might_sleep+0xf0/0xf0 [ 140.213092][ T7007] ? __lock_acquire+0x7c60/0x7c60 [ 140.218130][ T7007] ? netlink_insert+0xe7c/0x11d0 [ 140.223084][ T7007] should_fail+0x38c/0x4c0 [ 140.227554][ T7007] should_failslab+0x5/0x20 [ 140.232062][ T7007] slab_pre_alloc_hook+0x51/0xc0 [ 140.237012][ T7007] kmem_cache_alloc_node+0x47/0x2d0 [ 140.242214][ T7007] ? __alloc_skb+0xf4/0x750 [ 140.246728][ T7007] __alloc_skb+0xf4/0x750 [ 140.251067][ T7007] netlink_sendmsg+0x645/0xbc0 [ 140.255841][ T7007] ? netlink_getsockopt+0x560/0x560 [ 140.261042][ T7007] ? aa_sock_msg_perm+0x94/0x150 [ 140.267305][ T7007] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 140.272624][ T7007] ? security_socket_sendmsg+0x7c/0xa0 [ 140.278102][ T7007] ? netlink_getsockopt+0x560/0x560 [ 140.283341][ T7007] ____sys_sendmsg+0x5a2/0x8c0 [ 140.288113][ T7007] ? memset+0x1e/0x40 [ 140.292097][ T7007] ? __sys_sendmsg_sock+0x30/0x30 [ 140.297154][ T7007] ? import_iovec+0x6f/0xa0 [ 140.301765][ T7007] ___sys_sendmsg+0x1f0/0x260 [ 140.306457][ T7007] ? __sys_sendmsg+0x250/0x250 [ 140.311254][ T7007] ? vfs_write+0x84d/0xd00 [ 140.315685][ T7007] ? __fdget+0x18b/0x210 [ 140.319930][ T7007] __se_sys_sendmsg+0x190/0x250 [ 140.324785][ T7007] ? __x64_sys_sendmsg+0x80/0x80 [ 140.329723][ T7007] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 140.335718][ T7007] ? lockdep_hardirqs_on+0x94/0x140 [ 140.340922][ T7007] do_syscall_64+0x4c/0xa0 [ 140.345378][ T7007] ? clear_bhb_loop+0x30/0x80 [ 140.350068][ T7007] ? clear_bhb_loop+0x30/0x80 [ 140.354749][ T7007] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.360646][ T7007] RIP: 0033:0x7fa3b9155ec9 [ 140.365067][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.384692][ T7007] RSP: 002b:00007fa3b73bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.393131][ T7007] RAX: ffffffffffffffda RBX: 00007fa3b93acfa0 RCX: 00007fa3b9155ec9 [ 140.401103][ T7007] RDX: 0000000000000700 RSI: 0000200000000940 RDI: 0000000000000004 [ 140.409073][ T7007] RBP: 00007fa3b73bd090 R08: 0000000000000000 R09: 0000000000000000 [ 140.417046][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.425044][ T7007] R13: 00007fa3b93ad038 R14: 00007fa3b93acfa0 R15: 00007fffab46b3b8 [ 140.433026][ T7007] [ 141.093335][ T7052] FAULT_INJECTION: forcing a failure. [ 141.093335][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 141.121540][ T7052] CPU: 1 PID: 7052 Comm: syz.4.847 Not tainted syzkaller #0 [ 141.129027][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.139119][ T7052] Call Trace: [ 141.142426][ T7052] [ 141.145380][ T7052] dump_stack_lvl+0x168/0x230 [ 141.150084][ T7052] ? show_regs_print_info+0x20/0x20 [ 141.155400][ T7052] ? load_image+0x3b0/0x3b0 [ 141.159924][ T7052] ? __might_sleep+0xf0/0xf0 [ 141.164519][ T7052] ? __lock_acquire+0x7c60/0x7c60 [ 141.169550][ T7052] should_fail+0x38c/0x4c0 [ 141.173976][ T7052] should_failslab+0x5/0x20 [ 141.178484][ T7052] slab_pre_alloc_hook+0x51/0xc0 [ 141.183424][ T7052] __kmalloc_node_track_caller+0x68/0x3a0 [ 141.189143][ T7052] ? netlink_sendmsg+0x645/0xbc0 [ 141.194084][ T7052] ? kmem_cache_alloc_node+0x162/0x2d0 [ 141.199545][ T7052] ? __alloc_skb+0xf4/0x750 [ 141.204052][ T7052] ? netlink_sendmsg+0x645/0xbc0 [ 141.209083][ T7052] __alloc_skb+0x22c/0x750 [ 141.213513][ T7052] netlink_sendmsg+0x645/0xbc0 [ 141.218281][ T7052] ? netlink_getsockopt+0x560/0x560 [ 141.223483][ T7052] ? aa_sock_msg_perm+0x94/0x150 [ 141.228433][ T7052] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 141.233722][ T7052] ? security_socket_sendmsg+0x7c/0xa0 [ 141.239185][ T7052] ? netlink_getsockopt+0x560/0x560 [ 141.244385][ T7052] ____sys_sendmsg+0x5a2/0x8c0 [ 141.249158][ T7052] ? memset+0x1e/0x40 [ 141.253157][ T7052] ? __sys_sendmsg_sock+0x30/0x30 [ 141.258216][ T7052] ? import_iovec+0x6f/0xa0 [ 141.262723][ T7052] ___sys_sendmsg+0x1f0/0x260 [ 141.267493][ T7052] ? __sys_sendmsg+0x250/0x250 [ 141.272286][ T7052] ? vfs_write+0x84d/0xd00 [ 141.276808][ T7052] ? __fdget+0x18b/0x210 [ 141.281119][ T7052] __se_sys_sendmsg+0x190/0x250 [ 141.285976][ T7052] ? __x64_sys_sendmsg+0x80/0x80 [ 141.290919][ T7052] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 141.296919][ T7052] ? lockdep_hardirqs_on+0x94/0x140 [ 141.302156][ T7052] do_syscall_64+0x4c/0xa0 [ 141.306645][ T7052] ? clear_bhb_loop+0x30/0x80 [ 141.311323][ T7052] ? clear_bhb_loop+0x30/0x80 [ 141.316012][ T7052] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.321906][ T7052] RIP: 0033:0x7f672c1c6ec9 [ 141.326506][ T7052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.346121][ T7052] RSP: 002b:00007f672a42e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.354554][ T7052] RAX: ffffffffffffffda RBX: 00007f672c41dfa0 RCX: 00007f672c1c6ec9 [ 141.362528][ T7052] RDX: 0000000000000700 RSI: 0000200000000940 RDI: 0000000000000004 [ 141.370498][ T7052] RBP: 00007f672a42e090 R08: 0000000000000000 R09: 0000000000000000 [ 141.378468][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.386440][ T7052] R13: 00007f672c41e038 R14: 00007f672c41dfa0 R15: 00007ffeec556ad8 [ 141.394428][ T7052] [ 141.516815][ T7062] __nla_validate_parse: 16 callbacks suppressed [ 141.516835][ T7062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.851'. [ 141.906046][ T7084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.858'. [ 142.038440][ T7093] FAULT_INJECTION: forcing a failure. [ 142.038440][ T7093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.087834][ T7093] CPU: 1 PID: 7093 Comm: syz.2.862 Not tainted syzkaller #0 [ 142.095191][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.105368][ T7093] Call Trace: [ 142.108666][ T7093] [ 142.111613][ T7093] dump_stack_lvl+0x168/0x230 [ 142.116320][ T7093] ? show_regs_print_info+0x20/0x20 [ 142.121547][ T7093] ? load_image+0x3b0/0x3b0 [ 142.126085][ T7093] ? __lock_acquire+0x7c60/0x7c60 [ 142.131238][ T7093] should_fail+0x38c/0x4c0 [ 142.135692][ T7093] _copy_from_iter+0x22a/0x1150 [ 142.140576][ T7093] ? __lock_acquire+0x7c60/0x7c60 [ 142.145646][ T7093] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 142.151060][ T7093] ? __virt_addr_valid+0x3c6/0x470 [ 142.156208][ T7093] ? __phys_addr+0xb6/0x170 [ 142.160742][ T7093] ? __phys_addr_symbol+0x2b/0x70 [ 142.165792][ T7093] ? __check_object_size+0x30c/0x410 [ 142.171127][ T7093] netlink_sendmsg+0x749/0xbc0 [ 142.175931][ T7093] ? netlink_getsockopt+0x560/0x560 [ 142.181167][ T7093] ? aa_sock_msg_perm+0x94/0x150 [ 142.186138][ T7093] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 142.191458][ T7093] ? security_socket_sendmsg+0x7c/0xa0 [ 142.196953][ T7093] ? netlink_getsockopt+0x560/0x560 [ 142.202198][ T7093] ____sys_sendmsg+0x5a2/0x8c0 [ 142.207018][ T7093] ? memset+0x1e/0x40 [ 142.211031][ T7093] ? __sys_sendmsg_sock+0x30/0x30 [ 142.216092][ T7093] ? import_iovec+0x6f/0xa0 [ 142.220628][ T7093] ___sys_sendmsg+0x1f0/0x260 [ 142.225339][ T7093] ? __sys_sendmsg+0x250/0x250 [ 142.230138][ T7093] ? vfs_write+0x84d/0xd00 [ 142.234683][ T7093] ? __fdget+0x18b/0x210 [ 142.238958][ T7093] __se_sys_sendmsg+0x190/0x250 [ 142.243865][ T7093] ? __x64_sys_sendmsg+0x80/0x80 [ 142.248939][ T7093] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 142.255011][ T7093] ? lockdep_hardirqs_on+0x94/0x140 [ 142.260249][ T7093] do_syscall_64+0x4c/0xa0 [ 142.264705][ T7093] ? clear_bhb_loop+0x30/0x80 [ 142.269406][ T7093] ? clear_bhb_loop+0x30/0x80 [ 142.274109][ T7093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.280031][ T7093] RIP: 0033:0x7f00c7e37ec9 [ 142.284472][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.304104][ T7093] RSP: 002b:00007f00c609f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.312558][ T7093] RAX: ffffffffffffffda RBX: 00007f00c808efa0 RCX: 00007f00c7e37ec9 [ 142.320557][ T7093] RDX: 0000000000000700 RSI: 0000200000000940 RDI: 0000000000000004 [ 142.328541][ T7093] RBP: 00007f00c609f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.336531][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.344509][ T7093] R13: 00007f00c808f038 R14: 00007f00c808efa0 R15: 00007fff0fd3fd78 [ 142.352498][ T7093] [ 142.452525][ T7106] netlink: 164 bytes leftover after parsing attributes in process `syz.2.867'. [ 142.617687][ T7122] validate_nla: 3 callbacks suppressed [ 142.617768][ T7122] netlink: 'syz.4.870': attribute type 2 has an invalid length. [ 142.644205][ T7122] netlink: 'syz.4.870': attribute type 3 has an invalid length. [ 142.656022][ T7122] netlink: 132 bytes leftover after parsing attributes in process `syz.4.870'. [ 142.678259][ T7124] netlink: 'syz.4.870': attribute type 10 has an invalid length. [ 142.724856][ T7120] netlink: 26 bytes leftover after parsing attributes in process `syz.3.871'. [ 142.743677][ T7124] team0: Device ipvlan1 failed to register rx_handler [ 142.942891][ T7134] netlink: 'syz.1.873': attribute type 12 has an invalid length. [ 142.950684][ T7134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.873'. [ 143.308548][ T7151] netlink: 'syz.4.876': attribute type 12 has an invalid length. [ 143.341527][ T7151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.876'. [ 143.381693][ T7154] FAULT_INJECTION: forcing a failure. [ 143.381693][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 143.435390][ T7156] netlink: 'syz.2.881': attribute type 3 has an invalid length. [ 143.441660][ T7154] CPU: 0 PID: 7154 Comm: syz.1.879 Not tainted syzkaller #0 [ 143.450385][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.460472][ T7154] Call Trace: [ 143.463781][ T7154] [ 143.466741][ T7154] dump_stack_lvl+0x168/0x230 [ 143.471452][ T7154] ? show_regs_print_info+0x20/0x20 [ 143.476792][ T7154] ? load_image+0x3b0/0x3b0 [ 143.481355][ T7154] should_fail+0x38c/0x4c0 [ 143.485807][ T7154] should_failslab+0x5/0x20 [ 143.490333][ T7154] slab_pre_alloc_hook+0x51/0xc0 [ 143.494545][ T7156] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.881'. [ 143.495289][ T7154] ? skb_clone+0x1bd/0x350 [ 143.495318][ T7154] kmem_cache_alloc+0x3d/0x290 [ 143.513807][ T7154] skb_clone+0x1bd/0x350 [ 143.518094][ T7154] __netlink_deliver_tap+0x3cd/0x7c0 [ 143.523443][ T7154] netlink_deliver_tap+0x16c/0x180 [ 143.528589][ T7154] netlink_unicast+0x74f/0x920 [ 143.533407][ T7154] netlink_sendmsg+0x8ab/0xbc0 [ 143.538206][ T7154] ? netlink_getsockopt+0x560/0x560 [ 143.543434][ T7154] ? aa_sock_msg_perm+0x94/0x150 [ 143.548407][ T7154] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 143.553723][ T7154] ? security_socket_sendmsg+0x7c/0xa0 [ 143.559226][ T7154] ? netlink_getsockopt+0x560/0x560 [ 143.564465][ T7154] ____sys_sendmsg+0x5a2/0x8c0 [ 143.569267][ T7154] ? memset+0x1e/0x40 [ 143.573280][ T7154] ? __sys_sendmsg_sock+0x30/0x30 [ 143.578335][ T7154] ? import_iovec+0x6f/0xa0 [ 143.582869][ T7154] ___sys_sendmsg+0x1f0/0x260 [ 143.587800][ T7154] ? __sys_sendmsg+0x250/0x250 [ 143.592631][ T7154] ? __fdget+0x18b/0x210 [ 143.596899][ T7154] __se_sys_sendmsg+0x190/0x250 [ 143.601778][ T7154] ? __x64_sys_sendmsg+0x80/0x80 [ 143.606739][ T7154] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 143.612759][ T7154] ? lockdep_hardirqs_on+0x94/0x140 [ 143.617971][ T7154] do_syscall_64+0x4c/0xa0 [ 143.622518][ T7154] ? clear_bhb_loop+0x30/0x80 [ 143.627207][ T7154] ? clear_bhb_loop+0x30/0x80 [ 143.631894][ T7154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.637794][ T7154] RIP: 0033:0x7fa3b9155ec9 [ 143.642234][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.661859][ T7154] RSP: 002b:00007fa3b73bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.670270][ T7154] RAX: ffffffffffffffda RBX: 00007fa3b93acfa0 RCX: 00007fa3b9155ec9 [ 143.678264][ T7154] RDX: 0000000000000700 RSI: 0000200000000940 RDI: 0000000000000004 [ 143.686236][ T7154] RBP: 00007fa3b73bd090 R08: 0000000000000000 R09: 0000000000000000 [ 143.694213][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.702198][ T7154] R13: 00007fa3b93ad038 R14: 00007fa3b93acfa0 R15: 00007fffab46b3b8 [ 143.710186][ T7154] [ 143.752310][ T7161] netlink: 'syz.4.882': attribute type 10 has an invalid length. [ 144.121322][ T7174] delete_channel: no stack [ 144.233433][ T7161] team0: Port device geneve1 added [ 144.245614][ T7169] netlink: 'syz.0.880': attribute type 12 has an invalid length. [ 144.254417][ T7169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.880'. [ 144.263799][ T7154] netlink: 'syz.1.879': attribute type 12 has an invalid length. [ 144.281721][ T7154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.879'. [ 144.690813][ T7208] netlink: 'syz.4.894': attribute type 12 has an invalid length. [ 144.715902][ T7198] delete_channel: no stack [ 144.756295][ T7198] delete_channel: no stack [ 145.613574][ T7224] device wlan1 left promiscuous mode [ 145.650746][ T7224] team0: Port device wlan1 added [ 145.721919][ T7222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.770773][ T7229] tun0: tun_chr_ioctl cmd 1074025681 [ 147.515529][ T7261] __nla_validate_parse: 7 callbacks suppressed [ 147.515551][ T7261] netlink: 132 bytes leftover after parsing attributes in process `syz.4.911'. [ 148.134975][ T7263] validate_nla: 4 callbacks suppressed [ 148.135016][ T7263] netlink: 'syz.1.912': attribute type 3 has an invalid length. [ 148.244065][ T7263] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.912'. [ 148.300024][ T7263] netlink: 'syz.1.912': attribute type 12 has an invalid length. [ 148.330733][ T7263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.912'. [ 148.374916][ T7271] netlink: 'syz.0.914': attribute type 12 has an invalid length. [ 148.455183][ T7271] netlink: 172 bytes leftover after parsing attributes in process `syz.0.914'. [ 148.720093][ T7280] netlink: 'syz.0.918': attribute type 12 has an invalid length. [ 148.786468][ T7280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.918'. [ 149.085762][ T7287] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.919'. [ 149.413628][ T7289] device syzkaller0 entered promiscuous mode [ 150.560888][ T7309] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.925'. [ 150.781594][ T7309] netlink: 'syz.0.925': attribute type 12 has an invalid length. [ 150.810874][ T7309] netlink: 164 bytes leftover after parsing attributes in process `syz.0.925'. [ 151.282459][ T7328] netlink: 'syz.0.930': attribute type 12 has an invalid length. [ 151.313061][ T7328] netlink: 132 bytes leftover after parsing attributes in process `syz.0.930'. [ 151.444259][ T7336] netlink: 'syz.4.932': attribute type 21 has an invalid length. [ 151.503084][ T7336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.932'. [ 151.736788][ T7345] netlink: 'syz.0.936': attribute type 4 has an invalid length. [ 151.768021][ T7345] netlink: 'syz.0.936': attribute type 1 has an invalid length. [ 152.399381][ T7361] netlink: 'syz.4.941': attribute type 39 has an invalid length. [ 153.358180][ T7372] __nla_validate_parse: 2 callbacks suppressed [ 153.358230][ T7372] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.944'. [ 153.735359][ T7372] netlink: 'syz.0.944': attribute type 5 has an invalid length. [ 154.263642][ T7387] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 154.317434][ T7387] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 154.783940][ T7399] netlink: 180 bytes leftover after parsing attributes in process `syz.2.951'. [ 154.976098][ T7407] netlink: 'syz.0.953': attribute type 2 has an invalid length. [ 155.181095][ T7410] netlink: 'syz.4.955': attribute type 12 has an invalid length. [ 155.214207][ T7410] netlink: 132 bytes leftover after parsing attributes in process `syz.4.955'. [ 155.511103][ T7423] netlink: 'syz.0.958': attribute type 3 has an invalid length. [ 155.580871][ T7423] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.958'. [ 155.823627][ T7428] netlink: 'syz.2.960': attribute type 12 has an invalid length. [ 155.871026][ T7428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.960'. [ 156.078915][ T7440] netlink: 180 bytes leftover after parsing attributes in process `syz.2.964'. [ 156.082049][ T7439] delete_channel: no stack [ 156.156694][ T7439] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.963'. [ 156.190441][ T7439] netlink: zone id is out of range [ 156.215895][ T7439] netlink: zone id is out of range [ 156.238692][ T7439] netlink: del zone limit has 8 unknown bytes [ 156.465363][ T7444] netlink: 'syz.4.966': attribute type 22 has an invalid length. [ 156.495998][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 156.560907][ T7444] netlink: 'syz.4.966': attribute type 41 has an invalid length. [ 156.578849][ T7444] netlink: 40 bytes leftover after parsing attributes in process `syz.4.966'. [ 156.747579][ T7453] netlink: 'syz.4.969': attribute type 29 has an invalid length. [ 156.802452][ T7453] netlink: 'syz.4.969': attribute type 29 has an invalid length. [ 156.884370][ T7453] netlink: 132 bytes leftover after parsing attributes in process `syz.4.969'. [ 157.396041][ T7469] IPv6: Can't replace route, no match found [ 157.428326][ T7469] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 158.601916][ T7506] __nla_validate_parse: 3 callbacks suppressed [ 158.601932][ T7506] netlink: 132 bytes leftover after parsing attributes in process `syz.4.987'. [ 158.642020][ T7508] netlink: 44 bytes leftover after parsing attributes in process `syz.2.988'. [ 158.918774][ T7526] delete_channel: no stack [ 159.002344][ T7526] delete_channel: no stack [ 159.253922][ T7532] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.996'. [ 159.268048][ T7534] validate_nla: 7 callbacks suppressed [ 159.268068][ T7534] netlink: 'syz.4.997': attribute type 12 has an invalid length. [ 159.292225][ T7534] netlink: 132 bytes leftover after parsing attributes in process `syz.4.997'. [ 159.301822][ T7532] openvswitch: netlink: Tunnel attr 0 has unexpected len 380 expected 8 [ 159.350668][ T7531] netlink: 830 bytes leftover after parsing attributes in process `syz.2.995'. [ 159.798734][ T7532] netlink: 'syz.3.996': attribute type 12 has an invalid length. [ 159.808974][ T7532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.996'. [ 160.172863][ T7550] netlink: 'syz.3.1002': attribute type 12 has an invalid length. [ 160.191070][ T7550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1002'. [ 160.952790][ T7575] netlink: 'syz.4.1008': attribute type 12 has an invalid length. [ 161.012150][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1008'. [ 161.420219][ T7589] netlink: set zone limit has 8 unknown bytes [ 161.632634][ T7593] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 162.029534][ T7600] netlink: 'syz.3.1017': attribute type 12 has an invalid length. [ 162.090233][ T7600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1017'. [ 162.295764][ T7610] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1021'. [ 162.382918][ T7611] netlink: 'syz.1.1020': attribute type 27 has an invalid length. [ 162.871250][ T7623] netlink: 'syz.1.1026': attribute type 12 has an invalid length. [ 163.662858][ T7637] netlink: 'syz.3.1032': attribute type 12 has an invalid length. [ 163.670830][ T7637] __nla_validate_parse: 4 callbacks suppressed [ 163.670846][ T7637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1032'. [ 163.801721][ T144] wlan1: Trigger new scan to find an IBSS to join [ 163.833552][ T7641] netlink: 'syz.4.1033': attribute type 10 has an invalid length. [ 163.893795][ T7641] bridge0: port 4(macsec0) entered disabled state [ 163.900568][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.908064][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.136370][ T7641] bridge0: port 4(macsec0) entered blocking state [ 164.143226][ T7641] bridge0: port 4(macsec0) entered forwarding state [ 164.151499][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.158628][ T7641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.166105][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.173396][ T7641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.346026][ T7641] team0: Port device bridge0 added [ 164.764998][ T7649] device pim6reg1 entered promiscuous mode [ 165.994114][ T7659] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1038'. [ 166.074099][ T7662] netlink: 'syz.3.1038': attribute type 12 has an invalid length. [ 166.125278][ T7662] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1038'. [ 166.833030][ T144] wlan1: Trigger new scan to find an IBSS to join [ 167.077214][ T7674] netlink: 'syz.4.1041': attribute type 10 has an invalid length. [ 167.245230][ T7676] netlink: 'syz.4.1041': attribute type 12 has an invalid length. [ 167.298039][ T7674] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.1041'. [ 167.341850][ T7676] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1041'. [ 167.798950][ T7685] netlink: 'syz.4.1045': attribute type 12 has an invalid length. [ 167.843023][ T7685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1045'. [ 168.093415][ T7692] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1047'. [ 168.401596][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 169.405961][ T7708] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1051'. [ 169.456183][ T7708] netlink: 'syz.2.1051': attribute type 3 has an invalid length. [ 169.688611][ T7716] netlink: 'syz.3.1053': attribute type 39 has an invalid length. [ 169.792539][ T144] wlan1: Creating new IBSS network, BSSID 0a:cc:aa:e5:32:d8 [ 170.052683][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.086661][ T7729] netlink: 'syz.2.1056': attribute type 12 has an invalid length. [ 170.125519][ T7729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1056'. [ 170.502815][ T7735] netlink: 'syz.4.1059': attribute type 12 has an invalid length. [ 170.510693][ T7735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1059'. [ 170.803898][ T7744] netlink: 'syz.3.1062': attribute type 12 has an invalid length. [ 170.841663][ T7744] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1062'. [ 171.394782][ T7757] netlink: 'syz.3.1068': attribute type 12 has an invalid length. [ 171.413089][ T7757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1068'. [ 171.701072][ T7765] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1070'. [ 172.146668][ T7773] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1073'. [ 172.288813][ T7776] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1075'. [ 172.350417][ T7778] netlink: 'syz.4.1074': attribute type 12 has an invalid length. [ 172.421220][ T7778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1074'. [ 172.490854][ T7776] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 172.544015][ T7779] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1075'. [ 172.724424][ T7786] netlink: 'syz.2.1077': attribute type 12 has an invalid length. [ 172.748120][ T7785] netlink: 'syz.3.1078': attribute type 39 has an invalid length. [ 173.175853][ T7793] netlink: 'syz.0.1080': attribute type 33 has an invalid length. [ 173.250893][ T7793] netlink: 'syz.0.1080': attribute type 12 has an invalid length. [ 173.696274][ T7818] netlink: 'syz.0.1087': attribute type 13 has an invalid length. [ 173.768834][ T7818] erspan0: refused to change device tx_queue_len [ 173.791796][ T7818] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 173.845100][ T7817] netlink: 'syz.2.1089': attribute type 12 has an invalid length. [ 174.446899][ T7835] netlink: 'syz.2.1093': attribute type 12 has an invalid length. [ 174.476760][ T7835] __nla_validate_parse: 5 callbacks suppressed [ 174.476777][ T7835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1093'. [ 174.674033][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1092'. [ 174.813204][ T7885] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1104'. [ 175.817465][ T7934] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1113'. [ 176.032347][ T7949] team0: Device ipvlan1 failed to register rx_handler [ 176.138113][ T7958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1119'. [ 176.263310][ T7961] can: request_module (can-proto-4) failed. [ 176.336866][ T7967] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.1121'. [ 176.479032][ T7973] device syzkaller0 entered promiscuous mode [ 176.883907][ T7991] validate_nla: 10 callbacks suppressed [ 176.883921][ T7991] netlink: 'syz.4.1128': attribute type 12 has an invalid length. [ 176.923443][ T7991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1128'. [ 176.970937][ T7998] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.001470][ T7998] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1129'. [ 177.012002][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 177.069035][ T8008] netlink: 'syz.3.1131': attribute type 12 has an invalid length. [ 177.121205][ T8008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1131'. [ 177.535497][ T8044] device syzkaller0 entered promiscuous mode [ 178.121772][ T8060] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 178.159075][ T8060] netlink: 'syz.1.1141': attribute type 13 has an invalid length. [ 178.221731][ T8072] netlink: 'syz.0.1146': attribute type 12 has an invalid length. [ 178.494953][ T8077] syz.4.1148[8077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.495231][ T8077] syz.4.1148[8077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.536165][ T8078] syz.4.1148[8078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.578820][ T8078] syz.4.1148[8078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.728556][ T8082] netlink: 'syz.2.1149': attribute type 12 has an invalid length. [ 179.273940][ T8101] netlink: 'syz.4.1155': attribute type 6 has an invalid length. [ 179.580501][ T8112] netlink: 'syz.3.1158': attribute type 12 has an invalid length. [ 179.599984][ T8112] __nla_validate_parse: 7 callbacks suppressed [ 179.600001][ T8112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1158'. [ 179.621488][ T8119] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1160'. [ 179.772889][ T8123] netlink: 'syz.0.1162': attribute type 12 has an invalid length. [ 179.806050][ T8123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1162'. [ 179.840764][ T8131] netlink: 'syz.3.1163': attribute type 11 has an invalid length. [ 179.894927][ T8131] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1163'. [ 180.179041][ T8136] netlink: 'syz.1.1167': attribute type 21 has an invalid length. [ 180.193298][ T8136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1167'. [ 180.251676][ T8145] tap0: tun_chr_ioctl cmd 1074025692 [ 180.440386][ T8157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1173'. [ 180.702176][ T8173] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1178'. [ 180.754370][ T8175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1179'. [ 180.989135][ T8184] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1184'. [ 181.128534][ T8193] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1187'. [ 182.020426][ T8240] validate_nla: 10 callbacks suppressed [ 182.020585][ T8240] netlink: 'syz.0.1202': attribute type 10 has an invalid length. [ 182.056590][ T8240] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 182.243775][ T8260] netlink: 'syz.4.1208': attribute type 10 has an invalid length. [ 182.401541][ T8263] netlink: 'syz.1.1209': attribute type 12 has an invalid length. [ 182.410596][ T8263] netlink: 'syz.1.1209': attribute type 6 has an invalid length. [ 182.435027][ T8267] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 182.486143][ T8269] netlink: 'syz.4.1212': attribute type 10 has an invalid length. [ 182.503945][ T8267] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 182.568362][ T8269] netlink: 'syz.4.1212': attribute type 10 has an invalid length. [ 182.598658][ T8274] netlink: 'syz.1.1213': attribute type 10 has an invalid length. [ 182.658884][ T8274] device geneve0 entered promiscuous mode [ 182.686270][ T8274] team0: Port device geneve0 added [ 182.718686][ T8272] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 183.770356][ T8312] cgroup: fork rejected by pids controller in /syz3 [ 186.031619][ T5512] Bluetooth: hci0: command 0x0406 tx timeout [ 194.197990][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204442][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.134262][ T8344] chnl_net:caif_netlink_parms(): no params data found [ 201.195263][ T8349] chnl_net:caif_netlink_parms(): no params data found [ 202.271445][ T4326] Bluetooth: hci5: command 0x0409 tx timeout [ 202.431451][ T4326] Bluetooth: hci7: command 0x0409 tx timeout [ 202.591595][ T4326] Bluetooth: hci6: command 0x0409 tx timeout [ 202.911654][ T4326] Bluetooth: hci8: command 0x0409 tx timeout [ 203.152933][ T4237] Bluetooth: hci9: command 0x0409 tx timeout [ 204.351508][ T4237] Bluetooth: hci5: command 0x041b tx timeout [ 204.514919][ T4326] Bluetooth: hci7: command 0x041b tx timeout [ 204.681408][ T4326] Bluetooth: hci6: command 0x041b tx timeout [ 205.001396][ T4326] Bluetooth: hci8: command 0x041b tx timeout [ 205.231723][ T4326] Bluetooth: hci9: command 0x041b tx timeout [ 206.431481][ T4326] Bluetooth: hci5: command 0x040f tx timeout [ 206.591483][ T4326] Bluetooth: hci7: command 0x040f tx timeout [ 206.751711][ T4326] Bluetooth: hci6: command 0x040f tx timeout [ 207.071676][ T4326] Bluetooth: hci8: command 0x040f tx timeout [ 207.311614][ T4326] Bluetooth: hci9: command 0x040f tx timeout [ 208.511553][ T4326] Bluetooth: hci5: command 0x0419 tx timeout [ 208.671668][ T4326] Bluetooth: hci7: command 0x0419 tx timeout [ 208.831991][ T4237] Bluetooth: hci6: command 0x0419 tx timeout [ 209.151708][ T4237] Bluetooth: hci8: command 0x0419 tx timeout [ 209.391627][ T4237] Bluetooth: hci9: command 0x0419 tx timeout [ 214.032462][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.635115][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.641746][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.231641][ T4237] Bluetooth: hci12: command 0x0409 tx timeout [ 263.239203][ T4237] Bluetooth: hci14: command 0x0409 tx timeout [ 263.249701][ T4237] Bluetooth: hci13: command 0x0409 tx timeout [ 263.256170][ T4237] Bluetooth: hci11: command 0x0409 tx timeout [ 263.311625][ T4237] Bluetooth: hci10: command 0x0409 tx timeout [ 265.311584][ T4237] Bluetooth: hci11: command 0x041b tx timeout [ 265.319219][ T4237] Bluetooth: hci13: command 0x041b tx timeout [ 265.329227][ T4237] Bluetooth: hci14: command 0x041b tx timeout [ 265.335748][ T4237] Bluetooth: hci12: command 0x041b tx timeout [ 265.391790][ T4237] Bluetooth: hci10: command 0x041b tx timeout [ 267.391598][ T4237] Bluetooth: hci12: command 0x040f tx timeout [ 267.397964][ T4237] Bluetooth: hci14: command 0x040f tx timeout [ 267.411418][ T4237] Bluetooth: hci13: command 0x040f tx timeout [ 267.417629][ T4237] Bluetooth: hci11: command 0x040f tx timeout [ 267.471708][ T4237] Bluetooth: hci10: command 0x040f tx timeout [ 269.471553][ T4237] Bluetooth: hci11: command 0x0419 tx timeout [ 269.477761][ T4237] Bluetooth: hci13: command 0x0419 tx timeout [ 269.491480][ T4237] Bluetooth: hci14: command 0x0419 tx timeout [ 269.497675][ T4237] Bluetooth: hci12: command 0x0419 tx timeout [ 269.551983][ T4237] Bluetooth: hci10: command 0x0419 tx timeout [ 289.061331][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 289.068338][ C1] rcu: 0-....: (1 GPs behind) idle=daf/1/0x4000000000000002 softirq=18664/18666 fqs=5247 [ 289.079317][ C1] (detected by 1, t=10502 jiffies, g=24477, q=2039) [ 289.086028][ C1] Sending NMI from CPU 1 to CPUs 0: [ 289.091273][ C0] NMI backtrace for cpu 0 [ 289.091288][ C0] CPU: 0 PID: 4183 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 289.091323][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.091337][ C0] Workqueue: hci2 hci_cmd_work [ 289.091360][ C0] RIP: 0010:rcu_is_watching+0x40/0xa0 [ 289.091379][ C0] Code: 73 5c 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 20 28 bc 8b 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 b0 82 58 00 <48> c7 c3 08 b3 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 [ 289.091393][ C0] RSP: 0018:ffffc90000007208 EFLAGS: 00000046 [ 289.091406][ C0] RAX: 1ffffffff1778504 RBX: 0000000000000000 RCX: 68124d71f4c43c00 [ 289.091418][ C0] RDX: 0000000000000100 RSI: ffffffff8a59a4a0 RDI: ffffffff8a59a460 [ 289.091430][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffc900000073a0 [ 289.091442][ C0] R10: fffff52000000e7b R11: 1ffff92000000e74 R12: dffffc0000000000 [ 289.091454][ C0] R13: ffffc90000007406 R14: ffffffff8bbc2820 R15: dffffc0000000000 [ 289.091467][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 289.091481][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.091493][ C0] CR2: 00007f672a40cf98 CR3: 000000000be8e000 CR4: 00000000003506f0 [ 289.091508][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.091517][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 289.091527][ C0] Call Trace: [ 289.091534][ C0] [ 289.091544][ C0] rcu_read_lock_held+0x11/0x40 [ 289.091562][ C0] perf_misc_flags+0x56/0x1b0 [ 289.091589][ C0] perf_prepare_sample+0x132/0x1cb0 [ 289.091609][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 289.091629][ C0] ? perf_callchain+0x190/0x190 [ 289.091643][ C0] ? rcu_lock_release+0x9/0x20 [ 289.091664][ C0] perf_event_output_forward+0x146/0x280 [ 289.091682][ C0] ? perf_get_page_size+0x420/0x420 [ 289.091699][ C0] ? mark_lock+0x94/0x320 [ 289.091718][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 289.091737][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 289.091755][ C0] __perf_event_overflow+0x364/0x530 [ 289.091774][ C0] perf_swevent_event+0x4ad/0x530 [ 289.091793][ C0] perf_tp_event+0x32c/0xb50 [ 289.091811][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 289.091830][ C0] ? perf_tp_event+0xa3b/0xb50 [ 289.091868][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 289.091899][ C0] perf_trace_preemptirq_template+0x2be/0x380 [ 289.091917][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 289.091935][ C0] ? trace_event_raw_event_preemptirq_template+0x270/0x270 [ 289.091953][ C0] ? __irq_exit_rcu+0x13b/0x220 [ 289.091968][ C0] ? irq_exit_rcu+0x20/0x20 [ 289.091983][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 289.091998][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 289.092015][ C0] trace_hardirqs_on+0x57/0x80 [ 289.092029][ C0] asm_sysvec_irq_work+0x16/0x20 [ 289.092044][ C0] RIP: 0010:rcu_read_unlock_special+0x84/0x480 [ 289.092060][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 ad 13 9e 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 289.092072][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00000206 [ 289.092084][ C0] RAX: 68124d71f4c43c00 RBX: 1ffff92000000f44 RCX: 68124d71f4c43c00 [ 289.092095][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1820 RDI: ffffffff8a59a4c0 [ 289.092107][ C0] RBP: ffffc90000007ae0 R08: dffffc0000000000 R09: fffffbfff1ff7a36 [ 289.092118][ C0] R10: fffffbfff1ff7a36 R11: 1ffffffff1ff7a35 R12: ffffffff8c120b00 [ 289.092130][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 289.092151][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 289.092165][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 289.092184][ C0] ? read_lock_is_recursive+0x10/0x10 [ 289.092202][ C0] ? lock_chain_count+0x20/0x20 [ 289.092223][ C0] __rcu_read_unlock+0x78/0xd0 [ 289.092239][ C0] process_backlog+0x3e3/0x780 [ 289.092265][ C0] ? rps_trigger_softirq+0x210/0x210 [ 289.092282][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 289.092301][ C0] ? lock_chain_count+0x20/0x20 [ 289.092321][ C0] __napi_poll+0xc0/0x430 [ 289.092337][ C0] ? net_rx_action+0x2db/0x9c0 [ 289.092355][ C0] net_rx_action+0x4a8/0x9c0 [ 289.092372][ C0] ? perf_trace_preemptirq_template+0x2be/0x380 [ 289.092393][ C0] ? net_tx_action+0x870/0x870 [ 289.092408][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 289.092426][ C0] ? detach_timer+0x2b0/0x2b0 [ 289.092443][ C0] ? lock_chain_count+0x20/0x20 [ 289.092466][ C0] handle_softirqs+0x328/0x820 [ 289.092482][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 289.092499][ C0] ? do_softirq+0x200/0x200 [ 289.092515][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 289.092534][ C0] __irq_exit_rcu+0x12f/0x220 [ 289.092548][ C0] ? irq_exit_rcu+0x20/0x20 [ 289.092568][ C0] irq_exit_rcu+0x5/0x20 [ 289.092586][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 289.092605][ C0] [ 289.092609][ C0] [ 289.092614][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 289.092629][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 289.092645][ C0] Code: 74 05 e8 ae 4b cb f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 36 d5 9e f7 65 8b 05 17 d3 4f 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 289.092656][ C0] RSP: 0018:ffffc90002effa20 EFLAGS: 00000206 [ 289.092668][ C0] RAX: 68124d71f4c43c00 RBX: 0000000000000a06 RCX: 68124d71f4c43c00 [ 289.092679][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1820 RDI: 0000000000000001 [ 289.092690][ C0] RBP: ffffc90002effaa8 R08: dffffc0000000000 R09: fffffbfff1ff7a36 [ 289.092701][ C0] R10: fffffbfff1ff7a36 R11: 1ffffffff1ff7a35 R12: dffffc0000000000 [ 289.092712][ C0] R13: ffff888022571500 R14: ffffffff963682a0 R15: 1ffff920005dff44 [ 289.092732][ C0] ? _raw_spin_unlock+0x40/0x40 [ 289.092749][ C0] debug_check_no_obj_freed+0x515/0x530 [ 289.092770][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 289.092787][ C0] slab_free_freelist_hook+0x8b/0x170 [ 289.092804][ C0] ? hci_cmd_work+0xb4/0x360 [ 289.092819][ C0] kmem_cache_free+0x8f/0x210 [ 289.092838][ C0] hci_cmd_work+0xb4/0x360 [ 289.092855][ C0] process_one_work+0x863/0x1000 [ 289.092878][ C0] ? worker_detach_from_pool+0x240/0x240 [ 289.092893][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 289.092911][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 289.092924][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 289.092939][ C0] ? wq_worker_running+0x97/0x170 [ 289.092955][ C0] worker_thread+0xaa8/0x12a0 [ 289.092984][ C0] kthread+0x436/0x520 [ 289.092998][ C0] ? rcu_lock_release+0x20/0x20 [ 289.093011][ C0] ? kthread_blkcg+0xd0/0xd0 [ 289.093026][ C0] ret_from_fork+0x1f/0x30 [ 289.093049][ C0] [ 291.472280][ T23] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10748 jiffies s: 13329 root: 0x1/. [ 291.493455][ T23] rcu: blocking rcu_node structures (internal RCU debug): [ 291.500630][ T23] Task dump for CPU 0: [ 291.504849][ T23] task:kworker/u5:1 state:R running task stack:24768 pid: 4183 ppid: 2 flags:0x00004008 [ 291.515770][ T23] Workqueue: hci2 hci_cmd_work [ 291.520572][ T23] Call Trace: [ 291.523894][ T23] [ 291.526841][ T23] ? kmem_cache_free+0x8f/0x210 [ 291.531832][ T23] ? hci_cmd_work+0xb4/0x360 [ 291.536447][ T23] ? process_one_work+0x863/0x1000 [ 291.541625][ T23] ? worker_detach_from_pool+0x240/0x240 [ 291.547280][ T23] ? lockdep_hardirqs_off+0x70/0x100 [ 291.552713][ T23] ? _raw_spin_lock_irq+0xab/0xe0 [ 291.557777][ T23] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 291.563327][ T23] ? wq_worker_running+0x97/0x170 [ 291.568399][ T23] ? worker_thread+0xaa8/0x12a0 [ 291.573364][ T23] ? kthread+0x436/0x520 [ 291.577639][ T23] ? rcu_lock_release+0x20/0x20 [ 291.582560][ T23] ? kthread_blkcg+0xd0/0xd0 [ 291.587202][ T23] ? ret_from_fork+0x1f/0x30 [ 291.591907][ T23]