last executing test programs: 2m42.699653496s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x95fa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000185a000009000000000000000000f8ffffffffff697005342c81db6f270b4df8dbdb352808d77a4a4208000000000000002027dcc107569c90489a2c89fdc6e7f2225a4000000000"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x68, &(0x7f0000000380)=""/104, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x3}, 0x1e, 0x0, 0x0, 0x6, &(0x7f0000000540)=[r2], &(0x7f0000000580)=[{0x1, 0x1, 0x0, 0xc}, {0x4, 0x5, 0xd, 0xc}, {0x8, 0x2, 0x6, 0xb}, {0x2, 0x3, 0xa, 0x7}, {0x2, 0x5, 0x7, 0x3}, {0x5, 0x2, 0xb, 0x2}], 0x10, 0x1}, 0x94) r3 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x40049409, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d020000000000000000000002020000000000c0daa3408f3859bd"], &(0x7f00000000c0)=""/189, 0x32, 0xbd, 0x1}, 0x28) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000840)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fd05142603600e12080005007a010401a80016002000034004000000035c0461c902006f940071342e875fab7cb6cec6cf6efb8000a0277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b020193c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca0100350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d83452a92954b43370ed8862ffd5ab1a8f095", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m27.56433587s ago: executing program 32 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x95fa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000185a000009000000000000000000f8ffffffffff697005342c81db6f270b4df8dbdb352808d77a4a4208000000000000002027dcc107569c90489a2c89fdc6e7f2225a4000000000"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x68, &(0x7f0000000380)=""/104, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x3}, 0x1e, 0x0, 0x0, 0x6, &(0x7f0000000540)=[r2], &(0x7f0000000580)=[{0x1, 0x1, 0x0, 0xc}, {0x4, 0x5, 0xd, 0xc}, {0x8, 0x2, 0x6, 0xb}, {0x2, 0x3, 0xa, 0x7}, {0x2, 0x5, 0x7, 0x3}, {0x5, 0x2, 0xb, 0x2}], 0x10, 0x1}, 0x94) r3 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x40049409, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d020000000000000000000002020000000000c0daa3408f3859bd"], &(0x7f00000000c0)=""/189, 0x32, 0xbd, 0x1}, 0x28) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000840)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fd05142603600e12080005007a010401a80016002000034004000000035c0461c902006f940071342e875fab7cb6cec6cf6efb8000a0277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b020193c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca0100350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d83452a92954b43370ed8862ffd5ab1a8f095", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.575599663s ago: executing program 0 (id=1300): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xf, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000003c0)=""/51, 0x29, 0x33, 0x1, 0x7, 0x10000, @value=r1}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x10}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r4}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xbb}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3, r4, 0xffffffffffffffff, r5], &(0x7f0000000580), 0x10, 0x1}, 0x94) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}, 0x10}, 0x94) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x24000840) close(r8) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) 19.004776185s ago: executing program 0 (id=1308): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x20000811) socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_type(r2, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_clone(0x31020680, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 18.444683787s ago: executing program 0 (id=1317): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc64000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0xf4240, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="62042700ffff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x4008000) sendmsg$kcm(r0, &(0x7f0000000e80)={&(0x7f0000000440)=@nl, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000840)="34c16e360c", 0x5}], 0x1, &(0x7f0000001140)=ANY=[@ANYBLOB="b80000000000000007010000ffffff7f325b7ce78f8e5d13bccefa4d1b1dca1084d333f3a30c2666fec80ba29054e37766d005f32bbf466cbedf26a64d3b23b71e87dcacb20a41304b0f1bb27dd1d179c1a44d2b66163cdf9cba1854d95b76510bd7707cb28e5041243dac1bda871bcb0a6b5961a02eb02df4731b898e371c05cb480b9c4f2a16e5536ee527ed3faa47fe78d856b1189bb05ddd4373b373367bb2bd7ff40c17b9ee3102f94db77c447ade6574ea05000000b8000000"], 0x170}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0)) 18.149052678s ago: executing program 0 (id=1319): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="91102e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)='.\x00\x00', 0x3}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)='.\x00\x00', 0x3}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x71}, 0x38) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000006cb10208f20eaa0000000400000001000000000000009baa7111203a25f0777046f76521ec3f2323fbd5fa2f6419693b77f0dd3a974f3c6bbecc948a6e5e11486ff1afba9e8a9475c521b4382afc5f9d30151c895ba45b5e948498e438d5dba9a3f82e78a7712b0800000069031a9cf352015e387ec304a91a1b5bf958024c2f826e8afcb765b3a09fecab8d35f3f4d43850954a658cc9d6062523e370528846a12332811416f0b33b3a350cd3bf533c2f090c197490bb9285270a909f16031ace0a50693cc8385af5df3c94dc59107f3bcb5e8f8105363cb13619cef7f5a27e9b3f1b7e337de6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="17002165f581e1e390edcf8f0000000000090400", @ANYRESDEC], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='qdisc_reset\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_pressure(r0, &(0x7f00000003c0)='memory.pressure\x00', 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x1, 0x44, 0x0, 0x1, 0x0, 0xffffbffe}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000040)) 17.150310602s ago: executing program 0 (id=1328): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, {0xa, 0x4e24, 0x2, @private1, 0x7}}}, 0x80, 0x0}, 0x2000f761) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0xc, [@var={0xc, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x7}, @var={0xa, 0x0, 0x0, 0xe, 0x2, 0x1}, @fwd={0x5}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0xa}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x4}, {0xb, 0x5}, {0xa, 0x3}]}]}, {0x0, [0x30, 0x5f, 0x2e, 0x5f, 0x0, 0x5f, 0x5f, 0x30, 0x51, 0x2e]}}, &(0x7f0000000440)=""/6, 0x94, 0x6, 0x0, 0x5}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b36, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', r2, r3, 0x3, 0x3}, 0x50) 16.956112593s ago: executing program 5 (id=1329): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xa}, 0x8000840) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000dc0)='>', 0x1}], 0x1}, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/4096, 0x1000}, 0x40000000) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/199, 0xc7}], 0x1}, 0x102) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x9, 0x4, 0xa, 0x1, 0x0, 0x9, 0xc000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000140), 0xf}, 0x6200, 0x8c7, 0x1, 0x1, 0x9, 0x6262, 0x7f, 0x0, 0x7a, 0x0, 0x100000000}, 0x0, 0xb, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9040a1d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8000900070002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x5, @local, 0xa}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0xa}, 0x8000854) recvmsg$kcm(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a00)=[{0x0, 0x300}, {&(0x7f0000001600)=""/175, 0xaf}], 0x2}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xc3, 0x1, 0x0, 0x0, 0x100000081, 0xbaf5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8, 0x0, 0xffffffffffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) 16.645877174s ago: executing program 0 (id=1331): r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081) (async) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000300)=r0, 0xfffffe6e) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000300)=r0, 0xfffffe6e) r4 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6099, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18f6c09e6a30070301714689e900000000000000aa7300000000009500000000000000331abb108e3abe7c316c4712472f9c65e5525af713aa9b86840b7fda"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r6}, 0x10) openat$cgroup_int(r3, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 15.753594008s ago: executing program 5 (id=1335): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790018000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x80082407, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf42, 0x200}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400, 0x0, 0x128c, 0x0, 0x5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_type(r7, 0x0, 0xfffffd37) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x30a) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x80000001, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r8}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000140)=r1) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'veth1_macvtap\x00', @local}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18b7f9f4e6000000000900000080000011d22a9d33e991dbe416e7331719b991241f349302000000000000003747b13c5a3081554c254600", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000b7020000000000007b9af8ff00000000b6090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.749620218s ago: executing program 1 (id=1336): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) socket$kcm(0x10, 0x5, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffffffff, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xffffffffffffff82, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x15006, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) socket$kcm(0x29, 0x7, 0x0) r3 = bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x32, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2102) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r3}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 15.492800409s ago: executing program 1 (id=1338): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffae}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xa4040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000900), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e"], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000290081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 15.024520121s ago: executing program 1 (id=1340): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000700000000000000a6bb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000580)=r8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r9}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x14}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r11}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='svcrdma_decode_short_err\x00', r10}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r12, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000000000008000000daeefa406f13e2862db822f6392f7cd9e096", @ANYRES32=0x0, @ANYBLOB="6401010100000000000000004400000000000000100100000d0000004434ef01ac14144100000006ac1e0101000000afe000000100010001ffffffff00002a62ac14141d000000097f0000010000000600000000"], 0x68}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18600000000000000000000000000000185700000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x80) 1.657382433s ago: executing program 33 (id=1331): r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081) (async) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000300)=r0, 0xfffffe6e) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000300)=r0, 0xfffffe6e) r4 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6099, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18f6c09e6a30070301714689e900000000000000aa7300000000009500000000000000331abb108e3abe7c316c4712472f9c65e5525af713aa9b86840b7fda"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r6}, 0x10) openat$cgroup_int(r3, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 1.639450453s ago: executing program 5 (id=1342): socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b408000021000000000000000000000a9500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000940), 0x4) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x1207400, &(0x7f00000006c0)="b3be0ac592e7af0bf2e2b40faef90635a93b7d86d51800c8ffa2a2b5b7c06479fcf43187cafa8627da5dcf68d941cf4a744ec653603530c0562489a7ad825d76c9", 0x41, &(0x7f00000005c0), &(0x7f0000000740), &(0x7f0000000780)) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x3, 0x1, 0x0, 0x0, 0x9, 0x0, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x2}, 0x100012, 0xd0a, 0x10001, 0x4, 0x7, 0x1, 0x4, 0x0, 0xfffff390, 0x0, 0x4}, r2, 0xe, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f00000009c0)="9d7fcf3efc6300b3b2377876021d7131b838059f96bd206d4776b444405422368ed2a92432e5af71000000000000000000000000000000008a596976dd10f3928b006bb2c2760977caf15455525ae6227e246681dcba160dde12ddcee430eacdfb6d9ec7a60ffdef417b662007c1f9ffa86530ba7ff75622b154afd53c6b4931f4be2d90ca60b1fbe6dc02aa051c9a9c05557a7fd376f174908fd1a6dc0aad663e010a10117c304eb7e40d629aa8ecd0f847fc0efe9ddab4545505105ba291410c1cb0e4d50bd63e8fa06fc4", 0xcc}], 0x1, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x58}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$cgroup_int(r1, &(0x7f0000000340)=0x3, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 1.638545823s ago: executing program 1 (id=1343): r0 = socket$kcm(0xa, 0x2, 0x88) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x84) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0xa, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x37978000, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000b0000000100000000020000", @ANYRES32=r3, @ANYBLOB="0200000000000000000000ff0000000000000000", @ANYRES32=0x0, @ANYRES32=r4], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, r4, 0x1, '\x00', r6, r4, 0x5, 0x4, 0x3}, 0xfffffffffffffe13) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x3f00}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x50, 0x3, 0xf, 0x5, 0x907a}], &(0x7f0000000380)='GPL\x00', 0x8, 0x5d, &(0x7f00000004c0)=""/93, 0x40f00, 0x20, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x9, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r1, r2, r7, r2, r1, r0, r1, r1, r2], 0x0, 0x10, 0xe1}, 0x94) r8 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="72181e5f1d421f30610d9cca7b3cfc649ae13c7e134ea2a1acef2206c3eab4fdea37793272cdc73d46df1e8502f7b787771cef81b888aba01a3b12d2a9f60b0fd72d461875a8aaede4ad6de93ce05284c9ba7493826ab6d8d558411c120ae4cbc6368788", 0x64}, {&(0x7f0000000280)="c48d3026fca2097dbea87a20ad35aaf4a2807597d45152d8834be2642f2f7874e8894dc9327254874d4c33578d53282293299205d05ff7e501342395890f703ddb523cb4fb1880dfba1c24928a41c002f186a5739bf2158908f870f4657689084e19a8a0c7959b00ff043770e12b6593a3b69331b981b63b78e1f51cb6229ac590e822cbc0ca0c7b87d01df4ab1f4742d09bdb145487784cb6ccd213fba42fe51bd3112e554e25db3c7730c6c1d79702feae533f266df8fee63266aa0bc832380b282554d79c78f0e1acfd9a9b101a201ffc50c5428bc3f06e4c3c2249f705c13e9c8134088143e13b4229ee910973215e8f1729", 0xf4}], 0x2, &(0x7f0000001ac0)=[{0xd8, 0x8e, 0x1c, "76885af3fbed7f61a0d6447061e7dbb6a014c9f26a23f2d07ef50c87e8c7cb45e84cd33083c2b07a8346bd2fbf3f46d3a69c25584e12c3cbc789d63efbd9f3752371136843f610abd9d06948613053be019f3612c673ac4b965007c27b5680a251faac95b30ce53836bb48f29d3f8b3031cf3d3a8e6cf85c69f5c51550fc19569a05830f4b358c47910a1b92d7d69848f4e14bd193afdac640b6de76ece237b8fec8c3d34ec36495c97867f82420a17f50df509c9af958b57b86a91d5ec699a42b8d87b8ac39"}, {0x20, 0x110, 0x5, "9cd0647c1f96293cc1bfa5737a"}, {0x38, 0x104, 0x3, "a3836b2ce1a57cea6f7cf95743de2932f964ff4e18e0913176b68c49f6d5055e151085edf1061d82"}, {0xf8, 0x11, 0x9c, "161a58f2ea8dce5ae26813cde0b52c62f6c4c919500ea2c166b3ee788950db87da42c9231299dd24aed8f3068758f7afd3e10456b21e9d92c09dedeab22c4e683d99b309d70ae40466413fe894d5e4193934d0ddcdef845239e8db2f7961c8c0195295258c645465c649fea9d4afa6aac12dd0dbd473be980e500b377ecd367db785ed60a04164d6b0471db829dfe856a50b88e337bc3639a5feb457074b5da9217ada5b196145fc06be34bfe99d9d516ae86a412175488232d8f37b40f4a9d4ca89deed4bda6ee35f214e7c450fd3eefbc2a0522e1f851b215fa3d62752d6ab524e9d7bd1a1e2a4"}, {0x98, 0x109, 0x10000, "1223b427e406ef267d11614b2f7dc90ef1387ab4c2d3b045d7bcfc10f1985d3a2e2db6bdecebdb342b70cc56a3e3cfaa316ad46e9cf60aa588b562f72e57bc9578e25d405c45b0bdac57c4fbd59e46cbcd3a79908dae1d4f8a8870bfc925746aa9ebd4d76e89330f678ae16c02000015c61ac2b5d5fc9956b2bf1ff780589969cb"}, {0x1010, 0x110, 0x8000, "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"}, {0x1010, 0x107, 0xe033, "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"}, {0xa0, 0x10a, 0xf, "565143e9ad9eacc63999b55db15414bc8293d46831f61a8aaa91fe1ae52d2e840d9fbd95a4b69798e5872b722a3c8dbefd2931db631648ffbc6dd6bf81e1130dee57046894b6dccbd7aa13c1a0a50f5d3cd9d6d5a4a2cb0df2d4de8e262ffc2bf4b1d2c0da5c89dbcd45e36e6ca17337b2b6a2a22690d4bcf02648babd880821bb02d222f9c7c87886698f"}, {0x50, 0x84, 0x0, "2928a11ef7f3357c3cb4c94d45203647e85e825f6357a26ab7cadc19424b88cdf11ca1416021481f45d6bc8a91af53c61e7d76c98920c5d32e60e086f38a0f2c"}], 0x23d0}, 0x8004) 1.462439214s ago: executing program 4 (id=1345): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="dfeb010018000000000000000c0000000c00000008000000040000000000000700000000000000002e60"], 0x0, 0x2c, 0x0, 0x1}, 0x28) 1.462112123s ago: executing program 2 (id=1346): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802fb2767050000000000000000de0100200000", @ANYRES32, @ANYBLOB="000000000000000085000000250000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffed0}, 0x34) 1.391519574s ago: executing program 4 (id=1347): r0 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1ccf33533565ff7c2700000008020000", @ANYRES16=r1, @ANYRES8=r1], 0xfffffffffffffefe}, 0x240048d4) (async) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1ccf33533565ff7c2700000008020000", @ANYRES16=r1, @ANYRES8=r1], 0xfffffffffffffefe}, 0x240048d4) 1.294232985s ago: executing program 2 (id=1348): r0 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) 1.126219735s ago: executing program 4 (id=1349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) (async) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="d364a36f3704c6cef4029f38d94956670100", 0x12}, {&(0x7f0000000180)="10fa0ec3bf75f2af27963bf33a019ff8732c5b3685a13b2d173fca1b90a6d6c40e9dd4a70274d630465c00000000000000028198201de3cee21dcf394d65fa58585dcfa7274047afa8951d34ecdad8a0c7ee1d6e507e6e90fee86b19f070e7540d2a5f6c75f9d64549c3b170aebc931f8f8280349c397b76b8d06a9b396daef61b4977d65b8d7ff3d43796fc498ff3939e3ea45a56be2a672baf115cca14582ebaa72a43d90c5723fe3d96a09b5ab2e97ed83aaea865abed88e6f0a65d59571b1b6fd4aad8be3eb561c1e63ebcd31b488fe6f36fade3089041fc9a0489b0280cae5dd57c475d0c1542d1b23b521e336207d6da36077e00a7", 0xf8}, {&(0x7f0000000040)}, {&(0x7f0000000300)="4b415de8f40ba062e11a828518fdaffb12822d560884ac048a3b518c86484bde0081f4cc3154256f6f6965a2b0ee6591561d13b0a5ba439f0acce470e4b62565311d03937fd80bc464b5abbd3b9fb525105fda775065ba26ad5bd9af3fb7aa0a66856a51c44240bd898c32e556950a1b2fad8ef86523cb807e2002458c795b2690aa4f497bb99ea5353e656849776129451e8b81013db535e6bbdd31c0088d16c15e1e80f7fbd9374ad0166914903d353a1d752a4c7643671c08f200cf2eeb5cecd96b57", 0xc4}, {&(0x7f0000000640)="eab94d15b7c1f301f496fb9276b95874755c3eaa943671205d6bd91fc1159a82d192b80b2bac668a11948942fd04980d35513c1f52bfd01334a5e7efc883ed4bb8d7fc81796cc2f5c225bdda1efc3dff01243cf1c91e2059e93b0fdbadd5d4f14e306c14a379b84a03d9b1c6884ae37beaa1ccfd01e63ce0e03e4a639f6797a1b1c47c4196f568625e51e1d0e19bd68174175c34a197dd5c819e7b5b29297efde48e51fb65ad0066b6884c3cee487947c748b882830401248a4848d496c17019ad65cca4707dea7f7b7b5cec8c22fac960721e8053fb60b0eab144094d15e6f469307641917f0114f00a18c41b6c58ad39be", 0xfffffffffffffcc9}, {&(0x7f0000000040)="c860bb59a9819b18c87d3a66c2b2012787bead5b68a17ea1fde6591bc2ccae762158e82d8a97e10be9beccfc4d9864bc5f437f", 0x33}], 0x1000000000000008, 0x0, 0x0, 0xc00e}, 0x0) 1.125798985s ago: executing program 2 (id=1350): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000000002050000000300000005000093010000000a000030a8ff00000600000002000000ff0f0000050000000400000040000000030000000a0000000300000081000000100000007304000001000000060000000000000e0400000000000000000000000000000d"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) socketpair(0x27, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 1.109117855s ago: executing program 5 (id=1351): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000380), 0x3}, 0x100e64, 0xc7b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000600)='GPL\x00', 0xffff0000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280e40, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0xfffffffffffeffff, 0x12) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x57, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x12}, 0x94) 1.058357145s ago: executing program 4 (id=1352): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@jmp={0x5, 0x1, 0x3, 0xa, 0x9, 0xffffffffffffffff, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xc, 0x5, 0x9, 0x10, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x40, &(0x7f0000000300)=""/64, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xd, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x3, 0x1, 0xc, 0x6}, {0x0, 0x1, 0xc, 0x3}], 0x10, 0xcfb}, 0x94) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sys_enter\x00', r3, 0x0, 0x2}, 0x18) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x325) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r7, 0x0, 0x4000804) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000200)=0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000300000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r10, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x80, 0x0}, 0x0) 847.833486ms ago: executing program 5 (id=1353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000084850000000400000095", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60}, 0x50) r2 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0x3, 0x7, 0x4, 0x10, 0x0, 0xfffffffffffffffd, 0x7130a, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x1, 0x9}, 0x2008, 0x7, 0x3, 0x5, 0x5f212a98, 0x7, 0x5, 0x0, 0x6, 0x0, 0x3690720000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @remote}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001940)="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", 0x17c}], 0x2, &(0x7f0000001c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}}}, @ip_tos_u8={{0x11, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}], 0x58}, 0x11) r3 = socket$kcm(0x11, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000001300)={&(0x7f0000001340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x4, 0x2, {0xa, 0x4624, 0x48d8, @mcast2, 0x7}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001100)="26233cd54bc8d1217b447b90516e4f2756ff504f230c93eaeb2cf8401633d050269b", 0x22}, {&(0x7f0000001580)="4485", 0x2}, {&(0x7f00000015c0)="1b007d259f678d55de04dd95e79492cd0f29ccfcbe9ba1224c17ed1ecdf65ccb636305bf5f565cbf4f163d85a8fab829030eb1c198e30247237e9568074a2fbed3ef16d820ff29fe9d603a51339c6976e4b380ba2762db93d6f2454c1e7031c5f6cb6f1ad31a46a76b9eb5d8ca47cf12aef9032e96a237aade2274e1979fcb6c09f2b34fb6791f494089807674949e60d165d331104a0f880680c09b3ab3f64a52df7c6e4e13eb3239eb09c2b48ea05ce5f4942d3a9e3d59d8d97e9efebd4b3075a5d67401c9d343", 0xc8}], 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000001840)={0x2, &(0x7f0000000040)=[{0x29, 0x8, 0x0, 0xfffff00c}, {0x6, 0x11, 0x3}]}) r4 = socket$kcm(0xf, 0x3, 0x2) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x10001}, 0x40, 0x0, 0xfffffffd, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x1ff) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000640), 0x4) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000011c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)={0xffffffffffffffff, r5, 0x0, 0x4, &(0x7f0000001200)='&\\*\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001140)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='.\x00\x00\x000\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=r8, @ANYRES64=0x0], 0x20) recvmsg$kcm(r4, &(0x7f0000001780)={0x0, 0xb0, &(0x7f0000001640), 0xb0}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x13, &(0x7f00000013c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186600000700000000000000020000001800000003000000000000000d000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000010c0)='GPL\x00', 0x1, 0xea, &(0x7f0000001480)=""/234, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xf, 0x0, 0xfffffffb}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[{0x2, 0x4, 0x10, 0xc}, {0x0, 0x5, 0xa, 0xa}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) r10 = socket$kcm(0x2, 0x5, 0x106) sendmsg$inet(r10, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc5060000ffffff970386780df56e5be707", 0x20}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETDEBUG(r11, 0x400454c9, &(0x7f0000000100)=0x1) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 788.224507ms ago: executing program 2 (id=1354): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc", 0x13}], 0x1}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x61, 0x0, 0x30, 0x2e]}}, 0x0, 0x2a}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000001c0)="b9ff03076003008cb89e08f586dd", 0x0, 0x402f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33) 652.802367ms ago: executing program 2 (id=1355): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x18, 0x7, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20004000) syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/user\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000001000)) 567.123977ms ago: executing program 1 (id=1356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 564.377247ms ago: executing program 4 (id=1357): r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000990500000a00000000000000a06260caa3d73ed807b9137045cf8595dbd841414d4c5d926e647240113479397767e90d86bf491335e4a6f8fb865283a900f66c4d3f0709000000a9d507ae9eab4983cda5ca36797a54b5940530efffb0f38f8aeccbcee5ff0a5f4e79f6d20709ea5da15b38ffff000000dbbf29c27dcc0b2c978812f2cfae1b82d04587d39b33b85686e5c48b0b0023c14ff8c3e009257be35795a5539ee03ff1d8370000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000013006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (rerun: 32) 318.358968ms ago: executing program 4 (id=1358): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x11, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xcf, &(0x7f0000000140)=""/207, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) 140.857819ms ago: executing program 1 (id=1359): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x29, 0x32}], 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 32) close(r3) (async) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) (rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 136.102949ms ago: executing program 5 (id=1360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x3, [@empty, @multicast, @remote]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d800000019007b", 0x7}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x77, &(0x7f0000000380), 0x98) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x202, 0x1, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800001b0100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6d84}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x34) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socket$kcm(0x25, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) 0s ago: executing program 2 (id=1361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637288a8"], 0x16) kernel console output (not intermixed with test programs): r this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.272188][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.305676][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.313015][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.323506][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 48.339649][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.358261][ T4189] device hsr_slave_0 entered promiscuous mode [ 48.365738][ T4189] device hsr_slave_1 entered promiscuous mode [ 48.372375][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.379957][ T4189] Cannot create hsr debugfs directory [ 48.392661][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 48.473003][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 48.479063][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 48.482643][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 48.516652][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.530237][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.541837][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.558635][ T4188] device hsr_slave_0 entered promiscuous mode [ 48.565334][ T4188] device hsr_slave_1 entered promiscuous mode [ 48.571732][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.579723][ T4188] Cannot create hsr debugfs directory [ 48.601075][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.742015][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.764361][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.773032][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.794154][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.844932][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.864565][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.871368][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.881147][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.890381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.900459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.920597][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.929460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.939906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.949229][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.956431][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.982522][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.000075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.008510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.017519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.026425][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.033517][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.042903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.053032][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.065800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.075385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.084662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.108029][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.117409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.151225][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.162759][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.174200][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.191422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.200352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.209962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.219038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.228865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.237324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.248608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.263732][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.279544][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.298280][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.324982][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.339163][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.351491][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.407018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.419892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.433471][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.469437][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.477235][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.486294][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.495058][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.504138][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.511167][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.518884][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.529641][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.538657][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.545806][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.553620][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.576984][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.591907][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.609905][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.624489][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.634543][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.644475][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.654059][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.669898][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.684796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.693764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.714980][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.724427][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.756477][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.773856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.784693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.793113][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.800272][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.808711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.817388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.826159][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.833256][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.841407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.849916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.858357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.867511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.876093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.884870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.894803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.910039][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.919995][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.946222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.954849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.967856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.980646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.991252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.004266][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.028032][ T4182] device veth0_vlan entered promiscuous mode [ 50.039412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.048639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.057734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.066375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.075960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.084640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.095753][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.102852][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.111275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.119908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.128517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.136801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.148676][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.169921][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.181665][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.204331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.219896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.243387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.258085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.267138][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.274265][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.282275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.290725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.299030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.311293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.324300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.334979][ T4182] device veth1_vlan entered promiscuous mode [ 50.350519][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.370606][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.381622][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.391821][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.400571][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.402856][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 50.411597][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.427445][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.437034][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.447769][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.456514][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.481374][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.492312][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 50.498686][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.524010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.534135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.542924][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.549973][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.558215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.563135][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 50.567143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.577859][ T4240] Bluetooth: hci2: command 0x041b tx timeout [ 50.581072][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.587052][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 50.594113][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.599997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.616302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.624842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.632250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.640062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.652044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.660805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.669628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.679163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.688512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.697334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.705551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.713538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.723521][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.750647][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.787990][ T4182] device veth0_macvtap entered promiscuous mode [ 50.808443][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.816812][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.825143][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.834714][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.845021][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.854074][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.862610][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.871687][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.881424][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.896993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.905961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.933219][ T4182] device veth1_macvtap entered promiscuous mode [ 50.941223][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.949983][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.958396][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.968315][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.977085][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.986651][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.007052][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.029033][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.069767][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.088261][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.100223][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.109173][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.127604][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.146493][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.160238][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.179390][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.208885][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.218810][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.227838][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.238231][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.246277][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.254391][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.262036][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.271141][ T4190] device veth0_vlan entered promiscuous mode [ 51.284409][ T4186] device veth0_vlan entered promiscuous mode [ 51.293639][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.303516][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.312360][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.321055][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.338896][ T4190] device veth1_vlan entered promiscuous mode [ 51.351002][ T4186] device veth1_vlan entered promiscuous mode [ 51.422614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.430767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.441212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.449937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.459788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.468984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.493310][ T4186] device veth0_macvtap entered promiscuous mode [ 51.502098][ T4190] device veth0_macvtap entered promiscuous mode [ 51.515938][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.523574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.531668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.539656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.548862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.557639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.571756][ T4186] device veth1_macvtap entered promiscuous mode [ 51.589195][ T4190] device veth1_macvtap entered promiscuous mode [ 51.608541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.617264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.627118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.643144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.653089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.668815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.677871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.697430][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.708801][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.720253][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.733665][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.748184][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.758995][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.769466][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.780207][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.788987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.797828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.808356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.817806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.857068][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.867858][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.879501][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.891590][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.903260][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.913863][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.924852][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.936593][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.948703][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.957811][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.966829][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.975825][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.987512][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.997560][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.006806][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.015816][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.024916][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.034256][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.046064][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.055316][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.064149][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.073863][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.089567][ T4189] device veth0_vlan entered promiscuous mode [ 52.103255][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.113611][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.121475][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.130717][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.162118][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.174528][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.184207][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.215738][ T4188] device veth0_vlan entered promiscuous mode [ 52.238231][ T4189] device veth1_vlan entered promiscuous mode [ 52.251271][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.260055][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.268410][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.281068][ T310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.298792][ T4188] device veth1_vlan entered promiscuous mode [ 52.311139][ T310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.354042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.361993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.370206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.393505][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.402933][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.429963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.437739][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.446634][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.466596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.475195][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 52.483651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.491546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.501911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.510839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.521208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.531621][ T4188] device veth0_macvtap entered promiscuous mode [ 52.553486][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 52.573680][ T4189] device veth0_macvtap entered promiscuous mode [ 52.584885][ T4188] device veth1_macvtap entered promiscuous mode [ 52.625656][ T4189] device veth1_macvtap entered promiscuous mode [ 52.632922][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 52.633442][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.640382][ T310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.667973][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 52.668396][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.678562][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.699763][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 52.706085][ T310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.715273][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.726341][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.736939][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.747064][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.757774][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.774341][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.789742][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.807744][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.812326][ C0] hrtimer: interrupt took 46217 ns [ 52.823382][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.837103][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.847127][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.857865][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.867993][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.878690][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.891683][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.902912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.911787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.920040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.930114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.938387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.946675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.955882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.966740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.975744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.984773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.004755][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.016375][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.028928][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.039735][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.050873][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.061342][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.073818][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.089955][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.102638][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.142907][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.151634][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.151942][ T4291] netlink: 21 bytes leftover after parsing attributes in process `syz.1.6'. [ 53.167464][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.185058][ T4291] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 53.186068][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.215384][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.226764][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.236971][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.247660][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.257682][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.268141][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.280428][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.308611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.318801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.335252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.344654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.357862][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.368892][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.377818][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.386776][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.672092][ T4299] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 53.706401][ T4299] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3'. [ 53.741471][ T4298] syz.0.1 (4298) used greatest stack depth: 19200 bytes left [ 53.749559][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.768058][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.781553][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.821445][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.837333][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.846878][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.858725][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.870570][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.891305][ T4302] netlink: 'syz.0.7': attribute type 21 has an invalid length. [ 53.902172][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 53.922692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.936614][ T3076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.012382][ T3076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.190119][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.571764][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 54.633414][ T4293] Bluetooth: hci1: command 0x0419 tx timeout [ 54.722033][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 54.761554][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 54.829609][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 54.901417][ T4315] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 54.953327][ T4315] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.896685][ T4336] IPv6: Can't replace route, no match found [ 58.316658][ T4343] Zero length message leads to an empty skb [ 58.625299][ T4351] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.18'. [ 59.251850][ T4354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30'. [ 59.304636][ T4357] netlink: 21 bytes leftover after parsing attributes in process `syz.0.21'. [ 59.322860][ T4357] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 60.580021][ T4387] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET) [ 60.664706][ T4387] netlink: 'syz.4.29': attribute type 3 has an invalid length. [ 60.701260][ T4387] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 60.736881][ T4387] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.29'. [ 60.880635][ T4398] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.33'. [ 61.215911][ T1324] cfg80211: failed to load regulatory.db [ 61.815883][ T4410] IPv6: Can't replace route, no match found [ 65.362062][ T4429] netlink: 'syz.2.44': attribute type 3 has an invalid length. [ 65.411766][ T4429] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 65.426994][ T4433] netlink: 'syz.4.45': attribute type 21 has an invalid length. [ 65.448882][ T4429] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.44'. [ 65.455870][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 65.646945][ T4438] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.46'. [ 66.285557][ T4439] syz.0.47 (4439) used greatest stack depth: 16968 bytes left [ 66.476129][ T4446] IPv6: Can't replace route, no match found [ 70.051557][ T4477] netlink: 21 bytes leftover after parsing attributes in process `syz.4.60'. [ 70.060877][ T4477] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 70.153765][ T4481] netlink: 'syz.1.59': attribute type 3 has an invalid length. [ 70.181473][ T4481] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 70.242571][ T4481] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.59'. [ 70.296382][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.340250][ T4483] netlink: 'syz.0.71': attribute type 3 has an invalid length. [ 70.366962][ T4485] netlink: 'syz.1.61': attribute type 21 has an invalid length. [ 70.373916][ T4483] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 70.385479][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 70.389476][ T4483] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.71'. [ 70.492116][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.600339][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.712883][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.104346][ T4472] chnl_net:caif_netlink_parms(): no params data found [ 71.403909][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.410599][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.667765][ T4472] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.675641][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.685520][ T4472] device bridge_slave_0 entered promiscuous mode [ 71.699056][ T4501] netlink: 'syz.0.64': attribute type 21 has an invalid length. [ 71.708141][ T4501] netlink: 156 bytes leftover after parsing attributes in process `syz.0.64'. [ 71.723106][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.730384][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.740544][ T4472] device bridge_slave_1 entered promiscuous mode [ 71.853220][ T4472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.890443][ T4472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.038172][ T4510] netlink: 'syz.4.70': attribute type 10 has an invalid length. [ 72.082448][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 72.152035][ T4518] netlink: 'syz.2.73': attribute type 3 has an invalid length. [ 72.202599][ T4518] netlink: 'syz.2.73': attribute type 1 has an invalid length. [ 72.225361][ T4518] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.73'. [ 72.244868][ T4472] team0: Port device team_slave_0 added [ 72.291374][ T4472] team0: Port device team_slave_1 added [ 72.426892][ T4532] netlink: 'syz.0.84': attribute type 3 has an invalid length. [ 72.446967][ T4532] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.84'. [ 72.450373][ T4472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.474964][ T4536] netlink: 21 bytes leftover after parsing attributes in process `syz.2.75'. [ 72.475210][ T4472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.520038][ T4536] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 72.557317][ T4472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.653529][ T4472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.660507][ T4472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.698480][ T4472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.816353][ T4472] device hsr_slave_0 entered promiscuous mode [ 72.823635][ T4472] device hsr_slave_1 entered promiscuous mode [ 72.830414][ T4472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.840803][ T4472] Cannot create hsr debugfs directory [ 73.151818][ T4552] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.87'. [ 73.261949][ T4472] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.313620][ T4472] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.442765][ T4472] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.534150][ T4472] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.588102][ T154] device hsr_slave_0 left promiscuous mode [ 73.662381][ T154] device hsr_slave_1 left promiscuous mode [ 73.687156][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.691003][ T4572] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.92'. [ 73.729467][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.752770][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.761374][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.772011][ T154] device bridge_slave_1 left promiscuous mode [ 73.779659][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.827630][ T154] device bridge_slave_0 left promiscuous mode [ 73.843003][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.037439][ T154] device veth1_macvtap left promiscuous mode [ 74.047129][ T154] device veth0_macvtap left promiscuous mode [ 74.053415][ T154] device veth1_vlan left promiscuous mode [ 74.059387][ T154] device veth0_vlan left promiscuous mode [ 74.152684][ T4173] Bluetooth: hci3: command 0x041b tx timeout [ 74.295180][ T154] team0 (unregistering): Port device team_slave_1 removed [ 74.309820][ T154] team0 (unregistering): Port device team_slave_0 removed [ 74.326036][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.339568][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.401364][ T154] bond0 (unregistering): Released all slaves [ 74.464387][ T4574] netlink: 156 bytes leftover after parsing attributes in process `syz.4.81'. [ 74.729109][ T4472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.747048][ T4472] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.756807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.773804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.813047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.831868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.843357][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.850427][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.866163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.877856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.890898][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.898008][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.912143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.930475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.963138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.971945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.001183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.033774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.056429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.071633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.085576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.106376][ T4472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.130066][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.168786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.212199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.233447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.676045][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.703888][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.719448][ T4472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.132861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.160548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.198190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.229045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.237402][ T4238] Bluetooth: hci3: command 0x040f tx timeout [ 76.264749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.278559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.291909][ T4472] device veth0_vlan entered promiscuous mode [ 76.305647][ T4472] device veth1_vlan entered promiscuous mode [ 76.357997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.375711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.418973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.458802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.514552][ T4472] device veth0_macvtap entered promiscuous mode [ 76.556021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.593152][ T4472] device veth1_macvtap entered promiscuous mode [ 76.656195][ T4472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.692474][ T4472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.749253][ T4472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.792453][ T4472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.822420][ T4472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.878833][ T4472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.912464][ T4472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.942412][ T4472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.973901][ T4472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.982577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.003147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.014946][ T4472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.067533][ T4472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.112516][ T4472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.152409][ T4472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.162232][ T4472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.242538][ T4472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.302577][ T4472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.337472][ T4472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.383691][ T4472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.397917][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.418078][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.465815][ T4472] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.502403][ T4472] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.511121][ T4472] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.582440][ T4472] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.937107][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.969975][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.007622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.041485][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.070525][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.136219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.493822][ T4238] Bluetooth: hci3: command 0x0419 tx timeout [ 78.906682][ T4667] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.90'. [ 79.438985][ T4682] validate_nla: 71 callbacks suppressed [ 79.439002][ T4682] netlink: 'syz.1.96': attribute type 3 has an invalid length. [ 79.629988][ T4682] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 79.707462][ T4682] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.96'. [ 79.919179][ T4692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.102'. [ 79.987828][ T4692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.102'. [ 80.052052][ T4695] netlink: 60 bytes leftover after parsing attributes in process `syz.4.102'. [ 80.189439][ T4702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.102'. [ 80.340443][ T4700] netlink: 'syz.5.104': attribute type 2 has an invalid length. [ 80.361941][ T4706] netlink: 'syz.5.104': attribute type 21 has an invalid length. [ 80.453187][ T4700] netlink: 'syz.5.104': attribute type 1 has an invalid length. [ 80.513923][ T4706] netlink: 128 bytes leftover after parsing attributes in process `syz.5.104'. [ 80.647410][ T4700] netlink: 152488 bytes leftover after parsing attributes in process `syz.5.104'. [ 80.784391][ T4706] netlink: 3 bytes leftover after parsing attributes in process `syz.5.104'. [ 81.271000][ T4729] netlink: 'syz.2.108': attribute type 9 has an invalid length. [ 81.318026][ T4729] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.108'. [ 81.938555][ T4754] netlink: 'syz.5.113': attribute type 39 has an invalid length. [ 82.060025][ T4757] netlink: 'syz.2.114': attribute type 3 has an invalid length. [ 82.128708][ T4757] netlink: 'syz.2.114': attribute type 1 has an invalid length. [ 82.387842][ T4777] netlink: 'syz.4.118': attribute type 3 has an invalid length. [ 82.656673][ T4770] device syzkaller0 entered promiscuous mode [ 84.062224][ T4823] __nla_validate_parse: 7 callbacks suppressed [ 84.062242][ T4823] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.130'. [ 84.469533][ T4851] netlink: 132 bytes leftover after parsing attributes in process `syz.4.137'. [ 84.640027][ T4869] validate_nla: 2 callbacks suppressed [ 84.640044][ T4869] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 84.749220][ T4869] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.141'. [ 84.897556][ T4884] netlink: 'syz.4.145': attribute type 3 has an invalid length. [ 84.921129][ T4884] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 84.946086][ T4884] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.145'. [ 85.196654][ T4896] sock: sock_set_timeout: `syz.1.149' (pid 4896) tries to set negative timeout [ 85.741937][ T4922] tap0: tun_chr_ioctl cmd 35108 [ 86.011035][ T4932] tun0: tun_chr_ioctl cmd 2148553947 [ 86.308610][ T4944] netlink: 'syz.5.159': attribute type 3 has an invalid length. [ 86.392522][ T4944] netlink: 'syz.5.159': attribute type 1 has an invalid length. [ 86.400357][ T4944] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.159'. [ 87.146602][ T4970] netlink: 'syz.5.167': attribute type 21 has an invalid length. [ 87.214378][ T4970] netlink: 128 bytes leftover after parsing attributes in process `syz.5.167'. [ 87.241681][ T4970] netlink: 'syz.5.167': attribute type 4 has an invalid length. [ 87.250642][ T4970] netlink: 3 bytes leftover after parsing attributes in process `syz.5.167'. [ 87.329827][ T4978] tap0: tun_chr_ioctl cmd 2147767506 [ 87.581724][ T4989] netlink: 'syz.5.171': attribute type 3 has an invalid length. [ 87.611218][ T4989] netlink: 132 bytes leftover after parsing attributes in process `syz.5.171'. [ 87.801650][ T4994] netlink: 'syz.4.173': attribute type 3 has an invalid length. [ 87.850411][ T4994] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.173'. [ 87.948290][ T4997] IPv6: pim6reg1: Disabled Multicast RS [ 87.986709][ T4998] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 88.033904][ T4998] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.043640][ T4998] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.211435][ T4998] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.218831][ T4998] bridge0: port 2(bridge_slave_1) entered listening state [ 88.226939][ T4998] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.234363][ T4998] bridge0: port 1(bridge_slave_0) entered listening state [ 88.297511][ T4998] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 88.730526][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 88.806818][ T5021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.191862][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.288748][ T5045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.359888][ T5052] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.187'. [ 90.211722][ T5085] netlink: 76 bytes leftover after parsing attributes in process `syz.2.199'. [ 90.233105][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 90.262906][ T5085] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.199'. [ 90.312392][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 90.675768][ T5095] pim6reg: tun_chr_ioctl cmd 2147767507 [ 90.676122][ T5101] validate_nla: 1 callbacks suppressed [ 90.676135][ T5101] netlink: 'syz.5.202': attribute type 3 has an invalid length. [ 90.726187][ T5101] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.202'. [ 90.977818][ T5113] netlink: 'syz.4.207': attribute type 10 has an invalid length. [ 91.019216][ T5113] device hsr0 entered promiscuous mode [ 91.052014][ T5113] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.015218][ T5120] netlink: 'syz.0.209': attribute type 6 has an invalid length. [ 92.025865][ T5120] netlink: 168 bytes leftover after parsing attributes in process `syz.0.209'. [ 92.098332][ T5124] netlink: 'syz.0.209': attribute type 39 has an invalid length. [ 92.121295][ T5124] device veth0_macvtap left promiscuous mode [ 92.168666][ T5150] netlink: 'syz.2.213': attribute type 39 has an invalid length. [ 92.312422][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.319696][ C0] bridge0: topology change detected, propagating [ 92.321673][ T5147] netlink: set zone limit has 8 unknown bytes [ 92.402396][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.409652][ C0] bridge0: topology change detected, propagating [ 92.514768][ T5164] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 92.565936][ T5164] team0: Port device wlan1 added [ 92.769081][ T5171] netlink: 'syz.0.218': attribute type 3 has an invalid length. [ 92.791994][ T5171] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.218'. [ 93.839718][ T5188] netlink: 'syz.4.224': attribute type 9 has an invalid length. [ 93.849783][ T5188] netlink: 44 bytes leftover after parsing attributes in process `syz.4.224'. [ 94.093302][ T5197] netlink: 'syz.5.228': attribute type 27 has an invalid length. [ 94.135713][ T5201] netlink: 'syz.0.229': attribute type 21 has an invalid length. [ 94.150278][ T5197] netlink: 164 bytes leftover after parsing attributes in process `syz.5.228'. [ 94.170337][ T5201] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.229'. [ 94.389938][ T5208] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.230'. [ 94.726859][ T5228] netlink: 152 bytes leftover after parsing attributes in process `syz.5.235'. [ 95.073523][ T5237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.238'. [ 95.153250][ T5237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.238'. [ 95.247790][ T5238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.238'. [ 95.632665][ T5261] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.244'. [ 95.773556][ T5243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.877565][ T5265] netlink: 112 bytes leftover after parsing attributes in process `syz.4.245'. [ 96.111389][ T5282] validate_nla: 3 callbacks suppressed [ 96.111405][ T5282] netlink: 'syz.4.249': attribute type 21 has an invalid length. [ 96.226072][ T5282] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 96.358370][ T5294] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.250'. [ 96.439227][ T5294] netlink: get zone limit has 8 unknown bytes [ 96.639441][ T5302] netlink: 'syz.2.254': attribute type 10 has an invalid length. [ 96.760215][ T5302] device hsr_slave_0 left promiscuous mode [ 96.792053][ T5302] device hsr_slave_1 left promiscuous mode [ 96.929603][ T5306] netlink: 'syz.5.256': attribute type 4 has an invalid length. [ 96.940133][ T5306] netlink: 152 bytes leftover after parsing attributes in process `syz.5.256'. [ 96.995951][ T5306] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 97.885037][ T5337] netlink: 'syz.2.262': attribute type 3 has an invalid length. [ 98.003291][ T5337] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.262'. [ 98.079458][ T5346] syz.4.265[5346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.079552][ T5346] syz.4.265[5346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.188354][ T5346] netlink: 'syz.4.265': attribute type 17 has an invalid length. [ 98.282130][ T5346] netlink: 'syz.4.265': attribute type 16 has an invalid length. [ 98.367249][ T5346] device sit0 entered promiscuous mode [ 98.433435][ T5363] sctp: [Deprecated]: syz.2.269 (pid 5363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.433435][ T5363] Use struct sctp_sack_info instead [ 98.722026][ T5375] netlink: 'syz.5.272': attribute type 10 has an invalid length. [ 98.745349][ T5375] bridge0: port 3(ipvlan1) entered blocking state [ 98.783281][ T5375] bridge0: port 3(ipvlan1) entered disabled state [ 98.816217][ T5375] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 99.493095][ T5408] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 99.634456][ T5409] netlink: 'syz.0.279': attribute type 3 has an invalid length. [ 99.645337][ T5421] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.687740][ T5409] __nla_validate_parse: 2 callbacks suppressed [ 99.687756][ T5409] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.279'. [ 99.718283][ T5408] device syzkaller0 entered promiscuous mode [ 99.755551][ T5414] netlink: 'syz.5.282': attribute type 10 has an invalid length. [ 99.833749][ T5414] team0: Port device geneve1 added [ 99.865143][ T5416] netlink: 132 bytes leftover after parsing attributes in process `syz.4.281'. [ 100.164497][ T5433] netlink: 176 bytes leftover after parsing attributes in process `syz.4.285'. [ 100.308490][ T5436] netlink: 152 bytes leftover after parsing attributes in process `syz.0.286'. [ 100.672875][ T5440] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 101.062509][ T5456] netlink: 128 bytes leftover after parsing attributes in process `syz.4.291'. [ 101.853779][ T5478] validate_nla: 4 callbacks suppressed [ 101.853794][ T5478] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 101.992391][ T5478] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.293'. [ 102.660857][ T5506] netlink: 'syz.0.298': attribute type 29 has an invalid length. [ 102.766090][ T5514] FAULT_INJECTION: forcing a failure. [ 102.766090][ T5514] name failslab, interval 1, probability 0, space 0, times 1 [ 102.822392][ T5514] CPU: 0 PID: 5514 Comm: syz.1.303 Not tainted syzkaller #0 [ 102.829703][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.839777][ T5514] Call Trace: [ 102.843057][ T5514] [ 102.846006][ T5514] dump_stack_lvl+0x168/0x230 [ 102.850696][ T5514] ? show_regs_print_info+0x20/0x20 [ 102.855880][ T5514] ? load_image+0x3b0/0x3b0 [ 102.860367][ T5514] ? __might_sleep+0xf0/0xf0 [ 102.864941][ T5514] ? __lock_acquire+0x7c60/0x7c60 [ 102.869951][ T5514] ? mark_lock+0x94/0x320 [ 102.874267][ T5514] should_fail+0x38c/0x4c0 [ 102.878671][ T5514] should_failslab+0x5/0x20 [ 102.883152][ T5514] slab_pre_alloc_hook+0x51/0xc0 [ 102.888072][ T5514] __kmalloc+0x6b/0x330 [ 102.892207][ T5514] ? tomoyo_realpath_from_path+0x118/0x610 [ 102.898005][ T5514] tomoyo_realpath_from_path+0x118/0x610 [ 102.903631][ T5514] tomoyo_path_number_perm+0x1d5/0x5d0 [ 102.909070][ T5514] ? verify_lock_unused+0x140/0x140 [ 102.914258][ T5514] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 102.919701][ T5514] ? ksys_write+0x1c7/0x250 [ 102.924223][ T5514] security_file_ioctl+0x6c/0xa0 [ 102.929152][ T5514] __se_sys_ioctl+0x48/0x170 [ 102.933730][ T5514] do_syscall_64+0x4c/0xa0 [ 102.938128][ T5514] ? clear_bhb_loop+0x30/0x80 [ 102.942785][ T5514] ? clear_bhb_loop+0x30/0x80 [ 102.947444][ T5514] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.953335][ T5514] RIP: 0033:0x7f2cb46a36c9 [ 102.957746][ T5514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.977355][ T5514] RSP: 002b:00007f2cb290a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.985765][ T5514] RAX: ffffffffffffffda RBX: 00007f2cb48f9fa0 RCX: 00007f2cb46a36c9 [ 102.993726][ T5514] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000003 [ 103.001682][ T5514] RBP: 00007f2cb290a090 R08: 0000000000000000 R09: 0000000000000000 [ 103.009636][ T5514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.017596][ T5514] R13: 00007f2cb48fa038 R14: 00007f2cb48f9fa0 R15: 00007ffd94476f38 [ 103.025566][ T5514] [ 103.076980][ T5506] netlink: 'syz.0.298': attribute type 29 has an invalid length. [ 103.123489][ T5511] netlink: 'syz.0.298': attribute type 29 has an invalid length. [ 103.473727][ T5514] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.684713][ T5539] netlink: 'syz.1.309': attribute type 3 has an invalid length. [ 103.720923][ T5539] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.309'. [ 103.899829][ T5549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.312'. [ 104.351502][ T5578] FAULT_INJECTION: forcing a failure. [ 104.351502][ T5578] name failslab, interval 1, probability 0, space 0, times 0 [ 104.462467][ T5578] CPU: 1 PID: 5578 Comm: syz.4.319 Not tainted syzkaller #0 [ 104.469788][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.479847][ T5578] Call Trace: [ 104.483127][ T5578] [ 104.486059][ T5578] dump_stack_lvl+0x168/0x230 [ 104.490737][ T5578] ? show_regs_print_info+0x20/0x20 [ 104.495935][ T5578] ? load_image+0x3b0/0x3b0 [ 104.500430][ T5578] ? __might_sleep+0xf0/0xf0 [ 104.505002][ T5578] ? __lock_acquire+0x7c60/0x7c60 [ 104.510019][ T5578] should_fail+0x38c/0x4c0 [ 104.514431][ T5578] should_failslab+0x5/0x20 [ 104.518916][ T5578] slab_pre_alloc_hook+0x51/0xc0 [ 104.523849][ T5578] __kmalloc+0x6b/0x330 [ 104.527991][ T5578] ? tomoyo_encode+0x27e/0x540 [ 104.532749][ T5578] tomoyo_encode+0x27e/0x540 [ 104.537336][ T5578] tomoyo_realpath_from_path+0x5cd/0x610 [ 104.542977][ T5578] tomoyo_path_number_perm+0x1d5/0x5d0 [ 104.548423][ T5578] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 104.555000][ T5578] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 104.560483][ T5578] security_file_ioctl+0x6c/0xa0 [ 104.565410][ T5578] __se_sys_ioctl+0x48/0x170 [ 104.570019][ T5578] do_syscall_64+0x4c/0xa0 [ 104.574420][ T5578] ? clear_bhb_loop+0x30/0x80 [ 104.579078][ T5578] ? clear_bhb_loop+0x30/0x80 [ 104.583737][ T5578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.589614][ T5578] RIP: 0033:0x7fb77664d6c9 [ 104.594028][ T5578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.613628][ T5578] RSP: 002b:00007fb7748b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.622038][ T5578] RAX: ffffffffffffffda RBX: 00007fb7768a3fa0 RCX: 00007fb77664d6c9 [ 104.629993][ T5578] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000003 [ 104.637949][ T5578] RBP: 00007fb7748b4090 R08: 0000000000000000 R09: 0000000000000000 [ 104.645901][ T5578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.653856][ T5578] R13: 00007fb7768a4038 R14: 00007fb7768a3fa0 R15: 00007ffe3a49c578 [ 104.661822][ T5578] [ 104.818085][ T5579] delete_channel: no stack [ 105.102073][ T5602] delete_channel: no stack [ 105.298333][ T5610] netlink: 'syz.1.326': attribute type 3 has an invalid length. [ 105.342991][ T5610] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.326'. [ 105.592352][ T5578] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.890818][ T5636] netlink: 'syz.4.329': attribute type 7 has an invalid length. [ 105.922320][ T5636] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.329'. [ 106.050759][ T5626] device wlan0 entered promiscuous mode [ 106.122936][ T5645] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'. [ 106.143029][ T5645] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'. [ 106.214461][ T5644] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'. [ 106.257737][ T5645] netlink: 60 bytes leftover after parsing attributes in process `syz.1.332'. [ 106.559522][ T5654] netlink: 'syz.0.334': attribute type 10 has an invalid length. [ 106.814173][ T5658] netlink: 'syz.5.336': attribute type 9 has an invalid length. [ 106.850564][ T5658] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.336'. [ 106.963021][ T5663] netlink: 48 bytes leftover after parsing attributes in process `syz.1.338'. [ 106.988281][ T5665] netlink: 201628 bytes leftover after parsing attributes in process `syz.2.339'. [ 107.254941][ T5670] netlink: 'syz.5.340': attribute type 10 has an invalid length. [ 107.298101][ T5673] netlink: 'syz.2.342': attribute type 3 has an invalid length. [ 107.315558][ T5670] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.335307][ T5670] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.350467][ T5681] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 107.404383][ T5673] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.342'. [ 107.649206][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.657184][ T5670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.666399][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.677103][ T5670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.850910][ T5670] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 107.929313][ T5681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.408743][ T5721] netlink: 'syz.0.355': attribute type 3 has an invalid length. [ 108.550988][ T5706] device syzkaller0 entered promiscuous mode [ 108.602254][ T5733] delete_channel: no stack [ 108.610464][ T5733] delete_channel: no stack [ 109.456222][ T5724] device sit0 left promiscuous mode [ 109.572922][ T5738] netlink: 'syz.5.359': attribute type 2 has an invalid length. [ 109.628402][ T5722] device sit0 entered promiscuous mode [ 110.298086][ T5764] netlink: 'syz.2.367': attribute type 3 has an invalid length. [ 111.398281][ T5792] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 111.478654][ T5792] __nla_validate_parse: 6 callbacks suppressed [ 111.478672][ T5792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.377'. [ 111.568735][ T5792] device virt_wifi0 entered promiscuous mode [ 111.635987][ T5792] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 111.694603][ T5803] netlink: 'syz.2.381': attribute type 3 has an invalid length. [ 111.762730][ T5803] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.381'. [ 111.846927][ T5805] netlink: 48 bytes leftover after parsing attributes in process `syz.0.382'. [ 112.155173][ T5819] netlink: 'syz.0.387': attribute type 10 has an invalid length. [ 112.311867][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.318448][ T5821] netlink: 'syz.5.388': attribute type 1 has an invalid length. [ 112.355488][ T5819] team0: Port device bond0 added [ 112.446690][ T5821] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.388'. [ 112.634593][ T5831] netlink: 14 bytes leftover after parsing attributes in process `syz.5.391'. [ 112.654137][ T5829] netlink: 'syz.1.390': attribute type 29 has an invalid length. [ 112.774167][ T5831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.919539][ T5831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.078881][ T5841] can: request_module (can-proto-0) failed. [ 113.397222][ T5831] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 113.595968][ T5832] delete_channel: no stack [ 113.601063][ T5832] delete_channel: no stack [ 113.606331][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.613568][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.648090][ T5831] bond0 (unregistering): Released all slaves [ 113.696078][ T5829] netlink: 'syz.1.390': attribute type 29 has an invalid length. [ 113.710672][ T5834] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 113.838484][ T5845] netlink: 'syz.0.394': attribute type 3 has an invalid length. [ 113.872921][ T5845] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.394'. [ 114.377382][ T5874] netlink: 'syz.2.402': attribute type 4 has an invalid length. [ 114.401323][ T5874] netlink: 'syz.2.402': attribute type 8 has an invalid length. [ 114.410833][ T5874] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.402'. [ 114.768305][ T5889] netlink: 'syz.0.406': attribute type 3 has an invalid length. [ 114.799085][ T5889] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.406'. [ 114.956708][ T5898] netlink: 'syz.0.409': attribute type 10 has an invalid length. [ 115.005785][ T5898] netlink: 168 bytes leftover after parsing attributes in process `syz.0.409'. [ 115.243143][ T5903] netlink: 60 bytes leftover after parsing attributes in process `syz.5.411'. [ 115.630700][ T5929] netlink: 'syz.1.419': attribute type 3 has an invalid length. [ 115.708791][ T5935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.804210][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.829725][ T5976] bond0: (slave team0): Enslaving as an active interface with an up link [ 116.839335][ T5972] __nla_validate_parse: 4 callbacks suppressed [ 116.839364][ T5972] netlink: 132 bytes leftover after parsing attributes in process `syz.2.432'. [ 116.903627][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.915961][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.011641][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.019034][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.027330][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.035473][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.067178][ T5971] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.158028][ T5979] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.434'. [ 117.232691][ T5981] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 117.527319][ T5996] validate_nla: 6 callbacks suppressed [ 117.527336][ T5996] netlink: 'syz.1.441': attribute type 10 has an invalid length. [ 117.921805][ T6018] netlink: 'syz.4.447': attribute type 3 has an invalid length. [ 117.947458][ T6020] netlink: 'syz.0.448': attribute type 12 has an invalid length. [ 117.954873][ T6018] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.447'. [ 117.971418][ T6020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.448'. [ 118.008378][ T6015] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.448'. [ 118.069616][ T6015] openvswitch: netlink: Key type 260 is out of range max 29 [ 118.280983][ T6040] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.451'. [ 118.342197][ T6033] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.451'. [ 118.402067][ T6047] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.455'. [ 118.466619][ T6050] netlink: 'syz.5.456': attribute type 3 has an invalid length. [ 118.493270][ T6050] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.456'. [ 118.741601][ T6055] sctp: [Deprecated]: syz.1.459 (pid 6055) Use of int in maxseg socket option. [ 118.741601][ T6055] Use struct sctp_assoc_value instead [ 118.930415][ T6072] netlink: 'syz.2.464': attribute type 3 has an invalid length. [ 118.969725][ T6072] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.464'. [ 119.037611][ T6077] netlink: 'syz.4.466': attribute type 16 has an invalid length. [ 119.050218][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.090889][ T6075] netlink: 'syz.1.465': attribute type 3 has an invalid length. [ 119.412548][ T6091] netlink: 'syz.5.470': attribute type 17 has an invalid length. [ 119.745277][ T6111] netlink: 'syz.1.474': attribute type 29 has an invalid length. [ 119.878843][ T6120] netlink: 'syz.5.477': attribute type 3 has an invalid length. [ 120.614130][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.687047][ T6134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.837550][ T6147] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 121.991515][ T6211] __nla_validate_parse: 5 callbacks suppressed [ 121.991530][ T6211] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.502'. [ 122.000712][ T6216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.505'. [ 122.039747][ T6214] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.504'. [ 122.051426][ T6216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.505'. [ 122.084584][ T6220] netlink: 128 bytes leftover after parsing attributes in process `syz.0.503'. [ 122.095513][ T6219] netlink: 140 bytes leftover after parsing attributes in process `syz.5.506'. [ 122.324385][ T6220] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 122.379320][ T6220] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 122.493165][ T6220] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.556269][ T6237] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.510'. [ 122.833557][ T6246] validate_nla: 11 callbacks suppressed [ 122.833572][ T6246] netlink: 'syz.4.513': attribute type 39 has an invalid length. [ 123.070453][ T6257] device sit0 entered promiscuous mode [ 123.164308][ T6264] netlink: 'syz.1.518': attribute type 3 has an invalid length. [ 123.259165][ T6264] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.518'. [ 126.287306][ T6283] device sit0 left promiscuous mode [ 126.387056][ T6292] netlink: 'syz.1.524': attribute type 10 has an invalid length. [ 126.392955][ T6304] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 126.412717][ T6292] netlink: 156 bytes leftover after parsing attributes in process `syz.1.524'. [ 126.438286][ T6304] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.529'. [ 126.461785][ T6300] netlink: 'syz.4.527': attribute type 21 has an invalid length. [ 126.618583][ T6312] netlink: 'syz.5.531': attribute type 3 has an invalid length. [ 127.558206][ T6352] netlink: 'syz.2.546': attribute type 3 has an invalid length. [ 127.566981][ T6352] __nla_validate_parse: 4 callbacks suppressed [ 127.566996][ T6352] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.546'. [ 127.759287][ T6361] netlink: 'syz.0.548': attribute type 27 has an invalid length. [ 128.018867][ T6379] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.555'. [ 128.200566][ T6398] netlink: 'syz.1.559': attribute type 25 has an invalid length. [ 128.268125][ T6398] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.559'. [ 128.344056][ T6404] netlink: 'syz.0.561': attribute type 3 has an invalid length. [ 128.419023][ T6404] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.561'. [ 128.493926][ T6411] netlink: 'syz.4.562': attribute type 21 has an invalid length. [ 128.632059][ T6416] netlink: 'syz.0.564': attribute type 21 has an invalid length. [ 128.673671][ T6416] netlink: 128 bytes leftover after parsing attributes in process `syz.0.564'. [ 128.713073][ T6416] netlink: 'syz.0.564': attribute type 4 has an invalid length. [ 128.868280][ T6435] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.569'. [ 129.021383][ T6450] netlink: 'syz.5.574': attribute type 3 has an invalid length. [ 129.049939][ T6455] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.056728][ T6455] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.082578][ T6450] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.574'. [ 129.100885][ T6454] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.107609][ T6454] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.170795][ T6462] Â: renamed from pim6reg1 [ 129.472090][ T6479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.584'. [ 129.644797][ T6493] netlink: 209592 bytes leftover after parsing attributes in process `syz.5.589'. [ 129.755832][ T6495] netlink: 'syz.4.590': attribute type 29 has an invalid length. [ 129.779356][ T6495] netlink: 'syz.4.590': attribute type 29 has an invalid length. [ 129.791406][ T6495] netlink: 'syz.4.590': attribute type 29 has an invalid length. [ 129.816731][ T6495] netlink: 'syz.4.590': attribute type 27 has an invalid length. [ 129.826159][ T6495] netlink: 164 bytes leftover after parsing attributes in process `syz.4.590'. [ 131.218254][ T6575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 131.225625][ T6575] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 131.475771][ T6588] device veth0_macvtap left promiscuous mode [ 131.776065][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.918172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.939705][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.946872][ T9] bridge0: port 1(bridge_slave_0) entered listening state [ 132.264347][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.271617][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.580351][ T6639] __nla_validate_parse: 11 callbacks suppressed [ 132.580370][ T6639] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.630'. [ 132.647756][ T6641] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.631'. [ 132.720034][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.726518][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.047746][ T6671] netlink: 156 bytes leftover after parsing attributes in process `syz.4.640'. [ 133.117698][ T6673] netlink: 55 bytes leftover after parsing attributes in process `syz.1.638'. [ 133.977909][ T6697] validate_nla: 13 callbacks suppressed [ 133.977926][ T6697] netlink: 'syz.0.645': attribute type 3 has an invalid length. [ 133.993286][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 134.038167][ T6697] netlink: 'syz.0.645': attribute type 1 has an invalid length. [ 134.081101][ T6697] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.645'. [ 134.398437][ T6701] netlink: 'syz.2.647': attribute type 10 has an invalid length. [ 134.709672][ T6723] netlink: 10 bytes leftover after parsing attributes in process `syz.0.654'. [ 134.945736][ T6728] netlink: 1 bytes leftover after parsing attributes in process `syz.1.657'. [ 135.025297][ T6735] netlink: 'syz.4.659': attribute type 4 has an invalid length. [ 135.041817][ T6732] netlink: 'syz.2.658': attribute type 3 has an invalid length. [ 135.105022][ T6735] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.659'. [ 135.150323][ T6732] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 135.181084][ T6732] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.658'. [ 135.504838][ T6762] netlink: 128 bytes leftover after parsing attributes in process `syz.2.668'. [ 136.037043][ T6780] device syzkaller0 entered promiscuous mode [ 136.072410][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.079700][ C1] bridge0: topology change detected, propagating [ 136.350997][ T6806] netlink: 'syz.0.678': attribute type 9 has an invalid length. [ 136.465377][ T6811] netlink: 'syz.1.679': attribute type 3 has an invalid length. [ 136.483907][ T6811] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 136.682103][ T6820] netlink: 'syz.0.681': attribute type 10 has an invalid length. [ 136.740323][ T6820] team0: Device veth1_vlan failed to register rx_handler [ 137.230730][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.299843][ T6841] tap0: tun_chr_ioctl cmd 1074025677 [ 137.313313][ T6841] tap0: linktype set to 0 [ 137.318226][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.385055][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.412528][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.455216][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.460898][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.505708][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.532594][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.538010][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.699691][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.725186][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.767670][ T6842] tap0: tun_chr_ioctl cmd 2147767506 [ 137.998245][ T6859] device syzkaller0 entered promiscuous mode [ 138.726671][ T6882] tap0: tun_chr_ioctl cmd 2147767520 [ 138.751501][ T6882] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.853768][ T6887] sctp: [Deprecated]: syz.5.702 (pid 6887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.853768][ T6887] Use struct sctp_sack_info instead [ 138.964758][ T6889] __nla_validate_parse: 3 callbacks suppressed [ 138.964793][ T6889] netlink: 152 bytes leftover after parsing attributes in process `syz.4.704'. [ 139.247863][ T6897] validate_nla: 6 callbacks suppressed [ 139.247880][ T6897] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 139.300875][ T6889] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 139.338759][ T6890] netlink: 'syz.4.704': attribute type 4 has an invalid length. [ 139.341388][ T6897] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 139.363306][ T6890] netlink: 152 bytes leftover after parsing attributes in process `syz.4.704'. [ 139.372665][ T6897] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.706'. [ 139.392446][ T6890] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 139.729021][ T6907] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.708'. [ 140.113452][ T6914] netlink: 'syz.0.712': attribute type 2 has an invalid length. [ 140.155525][ T6914] netlink: 'syz.0.712': attribute type 8 has an invalid length. [ 140.198424][ T6914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.712'. [ 140.267227][ T6916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.712'. [ 140.346765][ T6916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.712'. [ 140.473403][ T6915] netlink: 60 bytes leftover after parsing attributes in process `syz.0.712'. [ 141.661384][ T6933] netlink: 'syz.1.717': attribute type 3 has an invalid length. [ 141.772493][ T6933] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 141.912741][ T6933] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.717'. [ 142.095315][ T6939] netlink: 'syz.0.719': attribute type 10 has an invalid length. [ 142.190445][ T6939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.719'. [ 142.311062][ T6939] device ipvlan1 entered promiscuous mode [ 142.386693][ T6939] bridge0: port 3(ipvlan1) entered blocking state [ 142.462662][ T6939] bridge0: port 3(ipvlan1) entered disabled state [ 142.527994][ T6939] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 143.883803][ T6982] netlink: 'syz.0.728': attribute type 39 has an invalid length. [ 144.200035][ T7001] netlink: 'syz.5.730': attribute type 3 has an invalid length. [ 144.247730][ T7001] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.730'. [ 144.419570][ T7004] netlink: 128 bytes leftover after parsing attributes in process `syz.5.732'. [ 144.520500][ T7009] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.731'. [ 145.944373][ T7038] validate_nla: 1 callbacks suppressed [ 145.944390][ T7038] netlink: 'syz.1.742': attribute type 3 has an invalid length. [ 145.970569][ T7037] netlink: 'syz.0.741': attribute type 10 has an invalid length. [ 145.988504][ T7038] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 146.015658][ T7038] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.742'. [ 146.803822][ T7064] netlink: 'syz.2.752': attribute type 10 has an invalid length. [ 146.850534][ T7064] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.752'. [ 146.976484][ T7073] netlink: 'syz.2.754': attribute type 3 has an invalid length. [ 146.992421][ T7073] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 147.010461][ T7073] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.754'. [ 147.319963][ T7083] netlink: 'syz.2.757': attribute type 25 has an invalid length. [ 147.369030][ T7083] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.757'. [ 147.480816][ T7093] device wg2 entered promiscuous mode [ 148.058231][ T7105] delete_channel: no stack [ 148.404584][ T7129] netlink: 'syz.2.770': attribute type 39 has an invalid length. [ 149.038021][ T7151] ref_ctr_offset mismatch. inode: 0x35a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 149.292585][ T7163] netlink: 'syz.5.780': attribute type 9 has an invalid length. [ 149.375034][ T7163] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.780'. [ 149.544974][ T7162] device wlan0 entered promiscuous mode [ 149.613961][ T7171] netlink: 132 bytes leftover after parsing attributes in process `syz.1.782'. [ 150.149175][ T7195] netlink: 'syz.2.792': attribute type 46 has an invalid length. [ 150.211665][ T7195] netlink: 55 bytes leftover after parsing attributes in process `syz.2.792'. [ 150.585867][ T7211] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.798'. [ 150.789145][ T7216] netlink: 152 bytes leftover after parsing attributes in process `syz.0.801'. [ 150.907906][ T7227] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.803'. [ 151.190206][ T7229] delete_channel: no stack [ 151.326723][ T7261] validate_nla: 5 callbacks suppressed [ 151.326787][ T7261] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 151.457589][ T7261] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.811'. [ 151.618649][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 151.650178][ T7252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.931994][ T7279] netlink: 72 bytes leftover after parsing attributes in process `syz.0.819'. [ 152.060866][ T7289] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.821'. [ 153.188190][ T7340] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.838'. [ 153.337731][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.346820][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.305330][ T7412] netlink: 'syz.0.860': attribute type 17 has an invalid length. [ 154.676766][ T7420] __nla_validate_parse: 6 callbacks suppressed [ 154.676786][ T7420] netlink: 44 bytes leftover after parsing attributes in process `syz.5.862'. [ 155.182995][ T7427] netlink: 'syz.0.864': attribute type 4 has an invalid length. [ 155.524046][ T7436] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.867'. [ 155.588710][ T7437] netlink: 'syz.1.867': attribute type 29 has an invalid length. [ 155.646372][ T7437] netlink: 'syz.1.867': attribute type 29 has an invalid length. [ 155.845314][ T7446] netlink: 'syz.0.872': attribute type 39 has an invalid length. [ 156.080019][ T7461] netlink: 'syz.1.877': attribute type 3 has an invalid length. [ 156.127547][ T7461] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.877'. [ 156.171690][ T7469] sctp: [Deprecated]: syz.2.876 (pid 7469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.171690][ T7469] Use struct sctp_sack_info instead [ 156.265584][ T7469] netlink: 'syz.2.876': attribute type 9 has an invalid length. [ 156.308384][ T7469] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.876'. [ 156.371049][ T7478] netlink: 'syz.1.880': attribute type 3 has an invalid length. [ 156.482906][ T7478] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.880'. [ 156.547019][ T7485] netlink: 'syz.4.883': attribute type 21 has an invalid length. [ 156.602986][ T7485] netlink: 'syz.4.883': attribute type 12 has an invalid length. [ 156.673583][ T7485] netlink: 'syz.4.883': attribute type 13 has an invalid length. [ 156.681349][ T7485] netlink: 'syz.4.883': attribute type 14 has an invalid length. [ 156.735655][ T7485] netlink: 'syz.4.883': attribute type 15 has an invalid length. [ 156.791812][ T7485] netlink: 'syz.4.883': attribute type 16 has an invalid length. [ 156.806980][ T7485] netlink: 12926 bytes leftover after parsing attributes in process `syz.4.883'. [ 159.516668][ T7503] netlink: 'syz.5.888': attribute type 10 has an invalid length. [ 159.524973][ T7514] netlink: 'syz.2.891': attribute type 10 has an invalid length. [ 159.638540][ T7514] team0: Port device geneve1 added [ 160.050754][ T7552] netlink: 10 bytes leftover after parsing attributes in process `syz.1.902'. [ 160.784503][ T7585] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.911'. [ 160.847754][ T7584] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.912'. [ 160.872441][ T7584] tc_dump_action: action bad kind [ 161.077163][ T7594] netlink: 'syz.1.917': attribute type 15 has an invalid length. [ 161.102201][ T7594] netlink: 144 bytes leftover after parsing attributes in process `syz.1.917'. [ 161.443897][ T7609] validate_nla: 1 callbacks suppressed [ 161.443918][ T7609] netlink: 'syz.4.918': attribute type 21 has an invalid length. [ 161.513935][ T7610] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.919'. [ 161.534368][ T7609] netlink: 'syz.4.918': attribute type 20 has an invalid length. [ 161.572594][ T7609] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.507676][ T7675] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.937'. [ 162.631732][ T7677] netlink: 'syz.2.938': attribute type 16 has an invalid length. [ 162.644375][ T7677] netlink: 156 bytes leftover after parsing attributes in process `syz.2.938'. [ 162.785611][ T7685] tc_dump_action: action bad kind [ 163.002123][ T7694] device pim6reg1 entered promiscuous mode [ 163.377567][ T7710] netlink: 'syz.4.948': attribute type 39 has an invalid length. [ 163.401133][ T7708] netlink: 197480 bytes leftover after parsing attributes in process `syz.2.947'. [ 166.693888][ T7747] netlink: 'syz.4.957': attribute type 41 has an invalid length. [ 166.726311][ T7747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.957'. [ 168.436394][ T7856] netlink: 'syz.1.987': attribute type 11 has an invalid length. [ 168.878195][ T7880] netlink: 'syz.4.993': attribute type 29 has an invalid length. [ 168.894221][ T7880] netlink: 'syz.4.993': attribute type 29 has an invalid length. [ 168.963106][ T7880] netlink: 'syz.4.993': attribute type 29 has an invalid length. [ 169.367695][ T7898] netlink: 'syz.2.998': attribute type 12 has an invalid length. [ 169.402457][ T7898] netlink: 132 bytes leftover after parsing attributes in process `syz.2.998'. [ 170.101454][ T7929] delete_channel: no stack [ 170.112942][ T7944] sctp: [Deprecated]: syz.1.1013 (pid 7944) Use of int in max_burst socket option deprecated. [ 170.112942][ T7944] Use struct sctp_assoc_value instead [ 170.543910][ T7959] netlink: 'syz.5.1015': attribute type 1 has an invalid length. [ 170.560227][ T7947] Â: renamed from pim6reg1 [ 170.586133][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 170.591615][ T7959] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.1015'. [ 170.632495][ T6992] Bluetooth: hci2: command 0x0406 tx timeout [ 170.638463][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 170.638785][ T6992] Bluetooth: hci4: command 0x0406 tx timeout [ 170.653082][ T7960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.674858][ T6992] Bluetooth: hci1: command 0x0406 tx timeout [ 170.721245][ T7966] netlink: 'syz.2.1018': attribute type 25 has an invalid length. [ 170.877461][ T7972] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1019'. [ 171.265968][ T7992] delete_channel: no stack [ 171.572685][ T8011] device wlan0 entered promiscuous mode [ 171.809614][ T8023] netlink: 'syz.2.1031': attribute type 10 has an invalid length. [ 171.877900][ T8023] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1031'. [ 171.926508][ T8027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1033'. [ 171.956361][ T8029] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.1033'. [ 172.140864][ T8035] netlink: 'syz.1.1035': attribute type 3 has an invalid length. [ 172.157992][ T8035] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.1035'. [ 172.507962][ T8050] device wg2 entered promiscuous mode [ 172.616413][ T8053] delete_channel: no stack [ 173.485879][ T8089] netlink: 'syz.4.1049': attribute type 10 has an invalid length. [ 173.512737][ T8089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1049'. [ 173.571760][ T8098] netlink: 'syz.1.1052': attribute type 21 has an invalid length. [ 173.631935][ T8097] netlink: 'syz.5.1051': attribute type 21 has an invalid length. [ 174.022532][ T8112] delete_channel: no stack [ 174.868252][ T8167] netlink: 'syz.1.1073': attribute type 15 has an invalid length. [ 174.902635][ T8167] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.1073'. [ 175.017415][ T8174] netlink: 'syz.5.1071': attribute type 10 has an invalid length. [ 175.103583][ T8174] netlink: 210880 bytes leftover after parsing attributes in process `syz.5.1071'. [ 175.120212][ T8188] netlink: 'syz.2.1078': attribute type 29 has an invalid length. [ 175.166796][ T8188] netlink: 'syz.2.1078': attribute type 29 has an invalid length. [ 175.198510][ T8189] netlink: 'syz.2.1078': attribute type 29 has an invalid length. [ 175.748869][ T8217] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1085'. [ 175.802366][ T8217] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.1085'. [ 175.811561][ T8217] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1085'. [ 176.433655][ T8250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.441165][ T8250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.490545][ T8250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.498399][ T8250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.843443][ T8272] validate_nla: 2 callbacks suppressed [ 176.843459][ T8272] netlink: 'syz.2.1099': attribute type 27 has an invalid length. [ 176.884375][ T8272] __nla_validate_parse: 2 callbacks suppressed [ 176.884392][ T8272] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1099'. [ 177.174600][ T8279] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1101'. [ 177.494710][ T8299] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1105'. [ 178.301458][ T8337] netlink: 'syz.2.1116': attribute type 4 has an invalid length. [ 178.318954][ T8337] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.1116'. [ 179.296525][ T8375] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 179.334127][ T8375] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1126'. [ 179.354682][ T8374] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 179.392475][ T8374] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1126'. [ 179.471240][ T8367] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1124'. [ 179.527522][ T8382] netlink: 'syz.1.1129': attribute type 3 has an invalid length. [ 179.535641][ T8383] netlink: 'syz.5.1128': attribute type 12 has an invalid length. [ 179.566276][ T8382] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1129'. [ 179.578897][ T8383] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1128'. [ 179.803879][ T8396] device syzkaller0 entered promiscuous mode [ 179.887716][ T8395] netlink: 'syz.1.1132': attribute type 16 has an invalid length. [ 179.919825][ T8395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1132'. [ 180.180373][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.626976][ T8429] netlink: 'syz.0.1138': attribute type 3 has an invalid length. [ 181.394891][ T8461] netlink: 'syz.1.1150': attribute type 3 has an invalid length. [ 181.447139][ T8461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.467805][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.494799][ T8461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.505339][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.750849][ T8475] netlink: 'syz.0.1153': attribute type 21 has an invalid length. [ 182.271291][ T8502] __nla_validate_parse: 6 callbacks suppressed [ 182.271313][ T8502] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1161'. [ 182.333303][ T8500] validate_nla: 1 callbacks suppressed [ 182.333409][ T8500] netlink: 'syz.1.1160': attribute type 2 has an invalid length. [ 182.392885][ T8500] netlink: 'syz.1.1160': attribute type 8 has an invalid length. [ 182.408829][ T8500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1160'. [ 182.443047][ T8502] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1161'. [ 182.552750][ T8514] netlink: 'syz.2.1164': attribute type 29 has an invalid length. [ 182.561050][ T8514] netlink: 'syz.2.1164': attribute type 29 has an invalid length. [ 182.580462][ T8514] netlink: 'syz.2.1164': attribute type 29 has an invalid length. [ 182.597593][ T8514] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1164'. [ 182.689500][ T8521] sctp: [Deprecated]: syz.4.1166 (pid 8521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.689500][ T8521] Use struct sctp_sack_info instead [ 182.747293][ T8525] netlink: 'syz.2.1168': attribute type 12 has an invalid length. [ 182.759167][ T8525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1168'. [ 182.843688][ T8528] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1169'. [ 182.998079][ T8536] netlink: 'syz.2.1171': attribute type 9 has an invalid length. [ 183.047206][ T8536] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1171'. [ 183.174156][ T8552] FAULT_INJECTION: forcing a failure. [ 183.174156][ T8552] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.290069][ T8552] CPU: 1 PID: 8552 Comm: syz.4.1177 Not tainted syzkaller #0 [ 183.297496][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.307580][ T8552] Call Trace: [ 183.310883][ T8552] [ 183.313840][ T8552] dump_stack_lvl+0x168/0x230 [ 183.318567][ T8552] ? show_regs_print_info+0x20/0x20 [ 183.323802][ T8552] ? load_image+0x3b0/0x3b0 [ 183.328346][ T8552] ? __lock_acquire+0x7c60/0x7c60 [ 183.333494][ T8552] should_fail+0x38c/0x4c0 [ 183.337948][ T8552] _copy_from_user+0x2e/0x170 [ 183.342645][ T8552] __copy_msghdr_from_user+0xaf/0x5e0 [ 183.348032][ T8552] ? verify_lock_unused+0x140/0x140 [ 183.353256][ T8552] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 183.358579][ T8552] ? trace_event_raw_event_lock+0x250/0x250 [ 183.364503][ T8552] ___sys_sendmsg+0x156/0x260 [ 183.369261][ T8552] ? __sys_sendmsg+0x250/0x250 [ 183.374076][ T8552] ? trace_event_raw_event_lock+0x250/0x250 [ 183.380036][ T8552] ? __fdget+0x18b/0x210 [ 183.384296][ T8552] __se_sys_sendmsg+0x190/0x250 [ 183.389167][ T8552] ? __x64_sys_sendmsg+0x80/0x80 [ 183.394112][ T8552] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 183.400131][ T8552] ? lockdep_hardirqs_on+0x94/0x140 [ 183.405353][ T8552] do_syscall_64+0x4c/0xa0 [ 183.409770][ T8552] ? clear_bhb_loop+0x30/0x80 [ 183.414450][ T8552] ? clear_bhb_loop+0x30/0x80 [ 183.419134][ T8552] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.425030][ T8552] RIP: 0033:0x7fb77664d6c9 [ 183.429453][ T8552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.449064][ T8552] RSP: 002b:00007fb7748b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.457494][ T8552] RAX: ffffffffffffffda RBX: 00007fb7768a3fa0 RCX: 00007fb77664d6c9 [ 183.465475][ T8552] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 183.473452][ T8552] RBP: 00007fb7748b4090 R08: 0000000000000000 R09: 0000000000000000 [ 183.481433][ T8552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.489406][ T8552] R13: 00007fb7768a4038 R14: 00007fb7768a3fa0 R15: 00007ffe3a49c578 [ 183.497422][ T8552] [ 183.504130][ T8558] netlink: 'syz.0.1176': attribute type 3 has an invalid length. [ 183.508219][ T8547] device syzkaller0 entered promiscuous mode [ 183.532025][ T8558] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 183.550874][ T8558] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1176'. [ 183.557198][ T8557] netlink: 'syz.2.1178': attribute type 14 has an invalid length. [ 183.595536][ T8557] netlink: 59143 bytes leftover after parsing attributes in process `syz.2.1178'. [ 184.200448][ T8586] sctp: [Deprecated]: syz.5.1186 (pid 8586) Use of int in maxseg socket option. [ 184.200448][ T8586] Use struct sctp_assoc_value instead [ 184.753061][ T8589] device sit0 entered promiscuous mode [ 185.071229][ T8599] FAULT_INJECTION: forcing a failure. [ 185.071229][ T8599] name failslab, interval 1, probability 0, space 0, times 0 [ 185.112389][ T8599] CPU: 0 PID: 8599 Comm: syz.1.1190 Not tainted syzkaller #0 [ 185.119818][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.129897][ T8599] Call Trace: [ 185.133206][ T8599] [ 185.136158][ T8599] dump_stack_lvl+0x168/0x230 [ 185.140869][ T8599] ? show_regs_print_info+0x20/0x20 [ 185.146103][ T8599] ? load_image+0x3b0/0x3b0 [ 185.150815][ T8599] ? __might_sleep+0xf0/0xf0 [ 185.155442][ T8599] ? __lock_acquire+0x7c60/0x7c60 [ 185.160509][ T8599] should_fail+0x38c/0x4c0 [ 185.164967][ T8599] should_failslab+0x5/0x20 [ 185.169491][ T8599] slab_pre_alloc_hook+0x51/0xc0 [ 185.174466][ T8599] __kmalloc+0x6b/0x330 [ 185.178634][ T8599] ? iovec_from_user+0x83/0x370 [ 185.183560][ T8599] ? _copy_from_user+0x111/0x170 [ 185.188517][ T8599] iovec_from_user+0x83/0x370 [ 185.193205][ T8599] ? verify_lock_unused+0x140/0x140 [ 185.198422][ T8599] __import_iovec+0x70/0x490 [ 185.203051][ T8599] import_iovec+0x6f/0xa0 [ 185.207405][ T8599] ___sys_sendmsg+0x1b9/0x260 [ 185.212123][ T8599] ? __sys_sendmsg+0x250/0x250 [ 185.216930][ T8599] ? trace_event_raw_event_lock+0x250/0x250 [ 185.222828][ T8599] ? vfs_write+0x84d/0xd00 [ 185.227297][ T8599] ? __fdget+0x18b/0x210 [ 185.231552][ T8599] __se_sys_sendmsg+0x190/0x250 [ 185.236424][ T8599] ? __x64_sys_sendmsg+0x80/0x80 [ 185.241377][ T8599] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 185.247391][ T8599] ? lockdep_hardirqs_on+0x94/0x140 [ 185.252607][ T8599] do_syscall_64+0x4c/0xa0 [ 185.257114][ T8599] ? clear_bhb_loop+0x30/0x80 [ 185.261794][ T8599] ? clear_bhb_loop+0x30/0x80 [ 185.266489][ T8599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.272387][ T8599] RIP: 0033:0x7f2cb46a36c9 [ 185.276810][ T8599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.296429][ T8599] RSP: 002b:00007f2cb290a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.304867][ T8599] RAX: ffffffffffffffda RBX: 00007f2cb48f9fa0 RCX: 00007f2cb46a36c9 [ 185.312840][ T8599] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 185.320807][ T8599] RBP: 00007f2cb290a090 R08: 0000000000000000 R09: 0000000000000000 [ 185.328778][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.336845][ T8599] R13: 00007f2cb48fa038 R14: 00007f2cb48f9fa0 R15: 00007ffd94476f38 [ 185.344856][ T8599] [ 185.654540][ T8617] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1195'. [ 185.858559][ T8624] team0: Device veth1_vlan failed to register rx_handler [ 186.722693][ T8652] FAULT_INJECTION: forcing a failure. [ 186.722693][ T8652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.769374][ T8652] CPU: 1 PID: 8652 Comm: syz.5.1207 Not tainted syzkaller #0 [ 186.776795][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.786870][ T8652] Call Trace: [ 186.790167][ T8652] [ 186.793116][ T8652] dump_stack_lvl+0x168/0x230 [ 186.797830][ T8652] ? show_regs_print_info+0x20/0x20 [ 186.803056][ T8652] ? load_image+0x3b0/0x3b0 [ 186.807606][ T8652] ? __lock_acquire+0x7c60/0x7c60 [ 186.812674][ T8652] should_fail+0x38c/0x4c0 [ 186.817126][ T8652] _copy_from_user+0x2e/0x170 [ 186.821828][ T8652] iovec_from_user+0x142/0x370 [ 186.826629][ T8652] __import_iovec+0x70/0x490 [ 186.831261][ T8652] import_iovec+0x6f/0xa0 [ 186.835625][ T8652] ___sys_sendmsg+0x1b9/0x260 [ 186.840338][ T8652] ? __sys_sendmsg+0x250/0x250 [ 186.845173][ T8652] ? __fdget+0x18b/0x210 [ 186.849425][ T8652] __se_sys_sendmsg+0x190/0x250 [ 186.854289][ T8652] ? __x64_sys_sendmsg+0x80/0x80 [ 186.859222][ T8652] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 186.865222][ T8652] ? lockdep_hardirqs_on+0x94/0x140 [ 186.870425][ T8652] do_syscall_64+0x4c/0xa0 [ 186.874831][ T8652] ? clear_bhb_loop+0x30/0x80 [ 186.879497][ T8652] ? clear_bhb_loop+0x30/0x80 [ 186.884163][ T8652] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.890044][ T8652] RIP: 0033:0x7f4c627976c9 [ 186.894454][ T8652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.914053][ T8652] RSP: 002b:00007f4c609fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.922457][ T8652] RAX: ffffffffffffffda RBX: 00007f4c629edfa0 RCX: 00007f4c627976c9 [ 186.930453][ T8652] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 186.938415][ T8652] RBP: 00007f4c609fe090 R08: 0000000000000000 R09: 0000000000000000 [ 186.946370][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.954330][ T8652] R13: 00007f4c629ee038 R14: 00007f4c629edfa0 R15: 00007ffde12b7438 [ 186.962318][ T8652] [ 187.441259][ T8690] __nla_validate_parse: 1 callbacks suppressed [ 187.441275][ T8690] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1218'. [ 187.793154][ T8704] validate_nla: 5 callbacks suppressed [ 187.793169][ T8704] netlink: 'syz.0.1222': attribute type 10 has an invalid length. [ 187.903343][ T8704] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1222'. [ 188.631159][ T8705] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1220'. [ 189.007277][ T8722] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1227'. [ 189.704048][ T8735] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 189.769913][ T8735] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1230'. [ 189.843872][ T8735] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 190.241720][ T8744] netlink: 'syz.0.1232': attribute type 3 has an invalid length. [ 190.280639][ T8744] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 190.321710][ T8744] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1232'. [ 190.567683][ T8754] netlink: 'syz.5.1236': attribute type 10 has an invalid length. [ 190.634961][ T8754] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.1236'. [ 190.663666][ T8764] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1238'. [ 190.768309][ T8757] netlink: 'syz.2.1235': attribute type 10 has an invalid length. [ 191.018218][ T8757] team0: Device veth1_vlan failed to register rx_handler [ 191.398053][ C1] Illegal XDP return value 16128, expect packet loss! [ 191.671088][ T8812] device wlan0 left promiscuous mode [ 192.716030][ T8837] netlink: 'syz.4.1261': attribute type 9 has an invalid length. [ 192.783181][ T8837] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1261'. [ 193.047058][ T8845] netlink: 'syz.5.1263': attribute type 27 has an invalid length. [ 193.070154][ T8845] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1263'. [ 193.748216][ T8852] netlink: 'syz.0.1266': attribute type 10 has an invalid length. [ 194.004757][ T8852] team0: Device hsr_slave_0 failed to register rx_handler [ 194.154715][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161052][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.324116][ T8863] netlink: 'syz.4.1270': attribute type 9 has an invalid length. [ 194.341937][ T8868] device wlan0 entered promiscuous mode [ 194.397120][ T8863] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1270'. [ 195.248437][ T8890] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1277'. [ 195.343122][ T8869] delete_channel: no stack [ 195.753518][ T8910] netlink: 'syz.0.1284': attribute type 21 has an invalid length. [ 196.242684][ T6990] Bluetooth: hci3: command 0x0406 tx timeout [ 196.419510][ T8928] can: request_module (can-proto-3) failed. [ 196.954343][ T8956] netlink: 'syz.5.1293': attribute type 41 has an invalid length. [ 198.102406][ T8987] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1304'. [ 198.122666][ T8990] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1304'. [ 198.327988][ T9005] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1308'. [ 198.449878][ T9015] netlink: 'syz.1.1313': attribute type 21 has an invalid length. [ 198.482500][ T9015] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1313'. [ 198.522993][ T9015] netlink: 'syz.1.1313': attribute type 5 has an invalid length. [ 198.558347][ T9015] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1313'. [ 198.618272][ T9015] netlink: 'syz.1.1313': attribute type 2 has an invalid length. [ 198.672615][ T9015] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1313'. [ 198.866118][ T9018] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 198.915305][ T9018] device syzkaller0 entered promiscuous mode [ 199.135766][ T9050] netlink: 'syz.4.1321': attribute type 5 has an invalid length. [ 199.195782][ T9051] netlink: 'syz.2.1320': attribute type 10 has an invalid length. [ 199.350274][ T9051] team0: Port device hsr_slave_0 added [ 199.441208][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.498128][ T9083] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.805450][ T9091] netlink: 'syz.4.1332': attribute type 30 has an invalid length. [ 200.836718][ T9086] netlink: 'syz.2.1330': attribute type 10 has an invalid length. [ 200.873706][ T9086] netlink: 'syz.2.1330': attribute type 19 has an invalid length. [ 200.913685][ T9086] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.1330'. [ 200.992454][ T9083] netlink: 'syz.5.1329': attribute type 21 has an invalid length. [ 201.029226][ T9092] netlink: 391 bytes leftover after parsing attributes in process `syz.5.1329'. [ 201.368141][ T9084] __sock_release: fasync list not empty! [ 201.681678][ T9114] netlink: 'syz.1.1338': attribute type 3 has an invalid length. [ 201.726574][ T9114] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1338'. [ 201.938182][ T9116] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1338'. [ 215.603383][ T9133] netlink: 'syz.5.1342': attribute type 10 has an invalid length. [ 215.730332][ T9133] device geneve0 entered promiscuous mode [ 216.089114][ T9162] netlink: 'syz.5.1351': attribute type 2 has an invalid length. [ 216.123992][ T9162] netlink: 'syz.5.1351': attribute type 2 has an invalid length. [ 216.195088][ T9164] netlink: 'syz.4.1352': attribute type 2 has an invalid length. [ 216.218718][ T9164] netlink: 'syz.4.1352': attribute type 8 has an invalid length. [ 216.255860][ T9164] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1352'. [ 216.576945][ T9151] chnl_net:caif_netlink_parms(): no params data found [ 216.994904][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.002043][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.013174][ T9151] device bridge_slave_0 entered promiscuous mode [ 217.043584][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.050714][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.059556][ T9151] device bridge_slave_1 entered promiscuous mode [ 217.109469][ T9151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.134720][ T9151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.164378][ T9151] team0: Port device team_slave_0 added [ 217.172120][ T9151] team0: Port device team_slave_1 added [ 217.189336][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.196389][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.222684][ T9151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.234570][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.241504][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.267797][ T9151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.301977][ T9151] device hsr_slave_0 entered promiscuous mode [ 217.308875][ T9151] device hsr_slave_1 entered promiscuous mode [ 217.315949][ T9151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.324863][ T9151] Cannot create hsr debugfs directory [ 217.460792][ T9151] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 217.469539][ T9151] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 217.478446][ T9151] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 217.490048][ T9151] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 217.543197][ T9151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.561238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.569603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.581055][ T9151] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.591136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.600343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.609187][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.616297][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.628341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.639035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.647690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.656298][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.663382][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.675798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.687451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.700911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.709670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.721488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.735858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.747575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.758041][ T9151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.833978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.841423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.854755][ T9151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.912522][ T6984] Bluetooth: hci5: command 0x0409 tx timeout [ 217.958521][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.978043][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.987676][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.995917][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.007093][ T9151] device veth0_vlan entered promiscuous mode [ 218.017344][ T9151] device veth1_vlan entered promiscuous mode [ 218.034623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.045351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.053465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.066943][ T9151] device veth0_macvtap entered promiscuous mode [ 218.077753][ T9151] device veth1_macvtap entered promiscuous mode [ 218.094165][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.104696][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.114706][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.125498][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.135404][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.145904][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.157411][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.165928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.175436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.186945][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.197701][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.207978][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.218656][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.228734][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.239400][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.250244][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.257798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.268312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.279146][ T9151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.288783][ T9151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.297875][ T9151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.306887][ T9151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.359407][ T6795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.367672][ T6795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.376001][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.398945][ T6795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.407404][ T6795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.418074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.993236][ T6987] Bluetooth: hci5: command 0x041b tx timeout [ 222.072672][ T6984] Bluetooth: hci5: command 0x040f tx timeout [ 224.162564][ T6984] Bluetooth: hci5: command 0x0419 tx timeout [ 240.389461][ T6795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.456380][ T6795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.518496][ T6795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.580020][ T6795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.329563][ T6795] team0: Port device wlan1 removed [ 241.456169][ T6795] device hsr_slave_0 left promiscuous mode [ 241.462819][ T6795] device hsr_slave_1 left promiscuous mode [ 241.469581][ T6795] device bridge_slave_1 left promiscuous mode [ 241.477837][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.486684][ T6795] device bridge_slave_0 left promiscuous mode [ 241.492922][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.617755][ T6795] team0 (unregistering): Port device team_slave_1 removed [ 241.632452][ T6795] team0 (unregistering): Port device team_slave_0 removed [ 241.645537][ T6795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.659224][ T6795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.701770][ T6795] team0 (unregistering): Port device bond0 removed [ 241.721713][ T6795] bond0 (unregistering): Released all slaves [ 255.594150][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.600471][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.035075][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.041377][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 339.592468][ T7625] Bluetooth: hci5: command 0x0406 tx timeout [ 371.432552][ T27] INFO: task syz-executor:9151 blocked for more than 143 seconds. [ 371.440389][ T27] Not tainted syzkaller #0 [ 371.445425][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.454216][ T27] task:syz-executor state:D stack:18504 pid: 9151 ppid: 9126 flags:0x00004000 [ 371.463558][ T27] Call Trace: [ 371.466846][ T27] [ 371.469786][ T27] __schedule+0x11bb/0x4390 [ 371.474546][ T27] ? release_firmware_map_entry+0x190/0x190 [ 371.480458][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 371.486506][ T27] ? lock_chain_count+0x20/0x20 [ 371.491708][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 371.498916][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 371.504427][ T27] schedule+0x11b/0x1e0 [ 371.508599][ T27] rwsem_down_write_slowpath+0xc46/0x11f0 [ 371.517593][ T27] ? rwsem_write_trylock+0x1b0/0x1b0 [ 371.523034][ T27] ? rwsem_write_trylock+0x12f/0x1b0 [ 371.528425][ T27] ? __rwlock_init+0x140/0x140 [ 371.534406][ T27] mpol_rebind_mm+0x33/0x2c0 [ 371.539009][ T27] ? _raw_spin_unlock+0x24/0x40 [ 371.543896][ T27] cpuset_attach+0x330/0x5f0 [ 371.548499][ T27] ? cpuset_cancel_attach+0x290/0x290 [ 371.553907][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 371.559112][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 371.564348][ T27] cgroup_migrate_execute+0x7eb/0x1010 [ 371.569817][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 371.575074][ T27] ? _raw_spin_unlock_irq+0x2a/0x40 [ 371.580282][ T27] cgroup_attach_task+0x562/0x7e0 [ 371.585337][ T27] ? cgroup_migrate_execute+0x1010/0x1010 [ 371.591262][ T27] ? get_task_cred+0x2b6/0x330 [ 371.596086][ T27] __cgroup1_procs_write+0x2e5/0x3f0 [ 371.601391][ T27] ? cgroup_pidlist_destroy_work_fn+0x210/0x210 [ 371.608938][ T27] ? cgroup_pidlist_stop+0xf0/0xf0 [ 371.614082][ T27] cgroup_file_write+0x2f7/0x630 [ 371.619020][ T27] ? read_lock_is_recursive+0x10/0x10 [ 371.624418][ T27] ? cgroup_seqfile_stop+0xd0/0xd0 [ 371.629541][ T27] ? cgroup_seqfile_stop+0xd0/0xd0 [ 371.634675][ T27] kernfs_fop_write_iter+0x379/0x4c0 [ 371.639968][ T27] vfs_write+0x712/0xd00 [ 371.644513][ T27] ? file_end_write+0x250/0x250 [ 371.649366][ T27] ? __context_tracking_exit+0x4c/0x80 [ 371.654861][ T27] ? __fdget_pos+0x2c6/0x370 [ 371.659454][ T27] ksys_write+0x14d/0x250 [ 371.663830][ T27] ? __ia32_sys_read+0x80/0x80 [ 371.668596][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 371.673846][ T27] do_syscall_64+0x4c/0xa0 [ 371.678261][ T27] ? clear_bhb_loop+0x30/0x80 [ 371.682966][ T27] ? clear_bhb_loop+0x30/0x80 [ 371.687644][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 371.693861][ T27] RIP: 0033:0x7fb4adee417f [ 371.698278][ T27] RSP: 002b:00007ffc62141130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 371.706716][ T27] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fb4adee417f [ 371.716998][ T27] RDX: 0000000000000001 RSI: 00007ffc62141180 RDI: 0000000000000003 [ 371.725024][ T27] RBP: 00007ffc621416f0 R08: 0000000000000000 R09: 00007ffc62140f87 [ 371.733043][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 371.741019][ T27] R13: 00007ffc62141180 R14: 00007ffc621416b0 R15: 00007ffc621416f0 [ 371.749035][ T27] [ 371.752077][ T27] [ 371.752077][ T27] Showing all locks held in the system: [ 371.760083][ T27] 1 lock held by khungtaskd/27: [ 371.765167][ T27] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 371.774603][ T27] 1 lock held by kworker/dying/146: [ 371.779981][ T27] #0: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 371.789921][ T27] 2 locks held by udevd/3560: [ 371.795057][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x21f/0x1380 [ 371.803890][ T27] #1: ffff88807d8bd528 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 371.812872][ T27] 2 locks held by dhcpcd/3853: [ 371.817633][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x21f/0x1380 [ 371.826892][ T27] #1: ffff88802b5d7128 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 371.839801][ T27] 2 locks held by getty/3951: [ 371.844651][ T27] #0: ffff88814ce2b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 371.854547][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 371.864815][ T27] 1 lock held by syz-executor/4178: [ 371.870010][ T27] #0: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 371.879859][ T27] 2 locks held by syz-executor/4182: [ 371.885186][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x21f/0x1380 [ 371.894946][ T27] #1: ffff8880795a8828 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 371.907754][ T27] 1 lock held by kworker/dying/4183: [ 371.913087][ T27] #0: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 371.922987][ T27] 2 locks held by syz-executor/4189: [ 371.928250][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x21f/0x1380 [ 371.937050][ T27] #1: ffff88807a3c7828 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 371.946070][ T27] 2 locks held by syz-executor/4190: [ 371.951350][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x21f/0x1380 [ 371.960167][ T27] #1: ffff88807a3c6a28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 371.969162][ T27] 1 lock held by napi/wg2-0/4245: [ 371.974209][ T27] #0: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 371.984088][ T27] 2 locks held by syz-executor/4472: [ 371.989346][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x21f/0x1380 [ 371.998144][ T27] #1: ffff88801e4f2428 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 372.008177][ T27] 4 locks held by kworker/u4:7/6795: [ 372.013491][ T27] #0: ffff8880169cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 372.023824][ T27] #1: ffffc9000333fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 372.033781][ T27] #2: ffffffff8d22cd10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 372.043236][ T27] #3: ffff88806222d3e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x112/0x300 [ 372.053298][ T27] 5 locks held by kworker/1:13/7638: [ 372.058575][ T27] #0: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 372.068519][ T27] #1: ffff8880b9127888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x495/0x810 [ 372.080064][ T27] #2: ffff8880b9127eb8 (krc.lock){..-.}-{2:2}, at: kfree_rcu_monitor+0x29/0x730 [ 372.089249][ T27] #3: ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 372.098574][ T27] #4: ffffffff96377fa8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x65/0x480 [ 372.108910][ T27] 7 locks held by syz-executor/9151: [ 372.115139][ T27] #0: ffff88807bd42460 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 372.127143][ T27] #1: ffff88805f38b488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e5/0x4c0 [ 372.137031][ T27] #2: ffffffff8c142008 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xee/0x230 [ 372.146861][ T27] #3: ffffffff8bfbaed0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x17c/0x580 [ 372.157492][ T27] #4: ffffffff8c1421f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x192/0x580 [ 372.170045][ T27] #5: ffffffff8c14fb48 (cpuset_mutex){+.+.}-{3:3}, at: cpuset_attach+0xac/0x5f0 [ 372.179200][ T27] #6: ffff88801e6dab28 (&mm->mmap_lock){++++}-{3:3}, at: mpol_rebind_mm+0x33/0x2c0 [ 372.188715][ T27] 1 lock held by dhcpcd/9185: [ 372.193418][ T27] #0: ffff88807b52b228 (&mm->mmap_lock){++++}-{3:3}, at: __vm_munmap+0xf3/0x230 [ 372.202610][ T27] [ 372.205206][ T27] ============================================= [ 372.205206][ T27] [ 372.213702][ T27] NMI backtrace for cpu 1 [ 372.218020][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 372.225219][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.235278][ T27] Call Trace: [ 372.238556][ T27] [ 372.241488][ T27] dump_stack_lvl+0x168/0x230 [ 372.246173][ T27] ? show_regs_print_info+0x20/0x20 [ 372.251376][ T27] ? load_image+0x3b0/0x3b0 [ 372.255882][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 372.261007][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 372.265956][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 372.272107][ T27] ? _printk+0xcc/0x110 [ 372.276263][ T27] ? load_image+0x3b0/0x3b0 [ 372.280768][ T27] ? load_image+0x3b0/0x3b0 [ 372.285271][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 372.291338][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 372.297318][ T27] watchdog+0xe0f/0xe50 [ 372.301460][ T27] kthread+0x436/0x520 [ 372.305500][ T27] ? hungtask_pm_notify+0x40/0x40 [ 372.310500][ T27] ? kthread_blkcg+0xd0/0xd0 [ 372.315065][ T27] ret_from_fork+0x1f/0x30 [ 372.319462][ T27] [ 372.322938][ T27] Sending NMI from CPU 1 to CPUs 0: [ 372.328155][ C0] NMI backtrace for cpu 0 [ 372.328166][ C0] CPU: 0 PID: 3549 Comm: klogd Not tainted syzkaller #0 [ 372.328181][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.328188][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 372.328209][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 372.328220][ C0] RSP: 0018:ffffc9000eaaf390 EFLAGS: 00000207 [ 372.328233][ C0] RAX: 00000000000010ff RBX: ffffea0000f30600 RCX: 0000000000000000 [ 372.328243][ C0] RDX: 0000000000001000 RSI: 00000000000000ff RDI: ffffed1007984000 [ 372.328252][ C0] RBP: 0000000000000003 R08: dffffc0000000000 R09: ffffed1007983000 [ 372.328262][ C0] R10: fffffbfff2c6da8a R11: 1ffffffff2c6da89 R12: 0000000000000008 [ 372.328272][ C0] R13: 0000000000008001 R14: 000000000003cc18 R15: 0000000000000003 [ 372.328281][ C0] FS: 00007f18819bac80(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 372.328293][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.328303][ C0] CR2: 00007f1f6da8f618 CR3: 000000002a54f000 CR4: 00000000003506f0 [ 372.328316][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.328324][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 372.328332][ C0] Call Trace: [ 372.328337][ C0] [ 372.328341][ C0] free_unref_page_prepare+0x267/0x6c0 [ 372.328360][ C0] free_unref_page+0x94/0x280 [ 372.328374][ C0] ? __free_slab+0x135/0x370 [ 372.328387][ C0] ? mark_free_pages+0x5c0/0x5c0 [ 372.328400][ C0] ? __free_slab+0x135/0x370 [ 372.328411][ C0] ? kfree+0x4a/0x2a0 [ 372.328422][ C0] ? _raw_spin_unlock+0x40/0x40 [ 372.328438][ C0] ? __free_pages+0x95/0x1a0 [ 372.328453][ C0] __unfreeze_partials+0x1a5/0x200 [ 372.328469][ C0] put_cpu_partial+0x12d/0x190 [ 372.328483][ C0] qlist_free_all+0x35/0x90 [ 372.328499][ C0] kasan_quarantine_reduce+0x150/0x160 [ 372.328515][ C0] __kasan_slab_alloc+0x2f/0xd0 [ 372.328528][ C0] ? finish_lock_switch+0x12f/0x280 [ 372.328543][ C0] ? verify_lock_unused+0x140/0x140 [ 372.328558][ C0] ? finish_task_switch+0x12f/0x640 [ 372.328574][ C0] ? __switch_to_asm+0x34/0x60 [ 372.328590][ C0] ? __schedule+0x11c3/0x4390 [ 372.328611][ C0] ? rcu_lock_acquire+0x30/0x30 [ 372.328626][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 372.328645][ C0] slab_post_alloc_hook+0x4c/0x380 [ 372.328657][ C0] ? get_obj_cgroup_from_current+0x2bf/0x2f0 [ 372.328675][ C0] kmem_cache_alloc_node+0x12d/0x2d0 [ 372.328687][ C0] ? __alloc_skb+0xf4/0x750 [ 372.328705][ C0] __alloc_skb+0xf4/0x750 [ 372.328720][ C0] alloc_skb_with_frags+0xa7/0x730 [ 372.328736][ C0] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 372.328751][ C0] sock_alloc_send_pskb+0x853/0x980 [ 372.328772][ C0] ? sock_kzfree_s+0x50/0x50 [ 372.328783][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 372.328797][ C0] ? __rwlock_init+0x140/0x140 [ 372.328811][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 372.328825][ C0] unix_dgram_sendmsg+0x5ef/0x1890 [ 372.328851][ C0] ? aa_sk_perm+0x7b4/0x8f0 [ 372.328869][ C0] ? unix_dgram_poll+0x660/0x660 [ 372.328882][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 372.328900][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 372.328914][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 372.328928][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 372.328942][ C0] __sys_sendto+0x423/0x580 [ 372.328963][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 372.328982][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 372.329002][ C0] ? lock_chain_count+0x20/0x20 [ 372.329016][ C0] ? vtime_user_exit+0x2dc/0x400 [ 372.329032][ C0] __x64_sys_sendto+0xda/0xf0 [ 372.329047][ C0] do_syscall_64+0x4c/0xa0 [ 372.329060][ C0] ? clear_bhb_loop+0x30/0x80 [ 372.329073][ C0] ? clear_bhb_loop+0x30/0x80 [ 372.329086][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 372.329100][ C0] RIP: 0033:0x7f1881b0a407 [ 372.329111][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 372.329122][ C0] RSP: 002b:00007ffd8ba4f100 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 372.329135][ C0] RAX: ffffffffffffffda RBX: 00007f18819bac80 RCX: 00007f1881b0a407 [ 372.329145][ C0] RDX: 0000000000000046 RSI: 00007ffd8ba4f240 RDI: 0000000000000003 [ 372.329154][ C0] RBP: 00007ffd8ba4f670 R08: 0000000000000000 R09: 0000000000000000 [ 372.329162][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd8ba4f688 [ 372.329171][ C0] R13: 00007ffd8ba4f240 R14: 000000000000002b R15: 00007ffd8ba4f240 [ 372.329187][ C0] [ 372.573486][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 372.795037][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 372.802211][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.812250][ T27] Call Trace: [ 372.815510][ T27] [ 372.818424][ T27] dump_stack_lvl+0x168/0x230 [ 372.823106][ T27] ? show_regs_print_info+0x20/0x20 [ 372.828281][ T27] ? load_image+0x3b0/0x3b0 [ 372.832761][ T27] panic+0x2c9/0x7f0 [ 372.836628][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 372.842238][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 372.846711][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 372.852237][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 372.858384][ T27] watchdog+0xe4e/0xe50 [ 372.862524][ T27] kthread+0x436/0x520 [ 372.866567][ T27] ? hungtask_pm_notify+0x40/0x40 [ 372.871569][ T27] ? kthread_blkcg+0xd0/0xd0 [ 372.876148][ T27] ret_from_fork+0x1f/0x30 [ 372.880545][ T27] [ 372.883792][ T27] Kernel Offset: disabled [ 372.888113][ T27] Rebooting in 86400 seconds..