last executing test programs: 2m3.571287344s ago: executing program 2 (id=3400): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m3.24628008s ago: executing program 2 (id=3405): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$kcm(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x6000, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000160081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x609a, 0x7fffffff, 0xbffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r7, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3e24e48aa31086b8703140000001f03000800010000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a61c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 2m2.901900685s ago: executing program 2 (id=3409): perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x89}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x101, 0x4000}, 0x80, 0x0}, 0x20000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) gettid() gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m2.656058419s ago: executing program 2 (id=3412): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x1, 0x700}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000040000007110"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 2m2.386475013s ago: executing program 2 (id=3414): r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x12019, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc44d}, r0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x18, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x60}}, {{0x5, 0x0, 0x6}, {0xa5}}, [], {{}, {0x5}}}, &(0x7f0000000040)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x2, &(0x7f0000000c00)=ANY=[@ANYRESOCT, @ANYBLOB="ff00000000"], &(0x7f0000000900)='GPL\x00', 0x2, 0xb3, &(0x7f0000000940)=""/179, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0xc}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x5, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x10, 0x811, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000bc0)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xb3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="0a00000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="000062230d255ab8cb473eb2e68ae60800"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa9}, {0x85, 0x0, 0x0, 0x6c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m1.637317576s ago: executing program 2 (id=3420): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f870000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008111e00212ba0d8105040a", 0x11}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff00000000000000008506b900"/40], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x99e, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x8, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x7}, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x4f004300, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(r1, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x22, &(0x7f0000000a40), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r3, r2, 0x1e, 0x24, 0x0, @void, @void, @void, @value=r5}, 0x20) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B'], 0xfe33) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x325) recvmsg(r11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40012022) 1m46.378448822s ago: executing program 32 (id=3420): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f870000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008111e00212ba0d8105040a", 0x11}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff00000000000000008506b900"/40], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x99e, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x8, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x7}, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x4f004300, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(r1, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x22, &(0x7f0000000a40), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r3, r2, 0x1e, 0x24, 0x0, @void, @void, @void, @value=r5}, 0x20) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B'], 0xfe33) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x325) recvmsg(r11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40012022) 40.019948814s ago: executing program 4 (id=4078): perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) 39.868809356s ago: executing program 4 (id=4082): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) close(r0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89ee, &(0x7f0000000000)={r2}) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0xff, 0x9, 0x7, 0x5, 0x0, 0xffffffff80000000, 0x20000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1d, 0x1, @perf_config_ext={0x8, 0x39}, 0x80a, 0x5, 0x27ab, 0xb, 0x6, 0xe, 0x8, 0x0, 0x2f7c, 0x0, 0x5}, r1, 0x0, 0xffffffffffffffff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff, 0x1, @perf_config_ext={0x102, 0x80}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x6, 0x8}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r5, r7}, 0xc) sendmsg$unix(r6, &(0x7f0000000540)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x6}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="ff8ed8019bdc74f311b32e49733cbe022f52c239c940c86e442a0591674cde57715966cbf165ce569c8394827702b996948b2ee33fe3ecb62f9c8a7a119d7fbb188a970e8ed9586a0aa75b8bf2cdc23f247e65c6dd4aad8e1ef1edd9ba7ae9cc22e648bfd1824a4f778ea86361b66418abc5f19ed560bfebdd9c79055f19a2d8452b3376c61d754b5439622274886e69889b963bf024f87bc7a318d8321b00852aff0350bf4c78aa8cdca79a4a1c48d4c0dc1c", 0xb3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="227591e5c8f121f72dd8c55871a5af5bd72b7080e6759290ae3c0681521cee25b3ad4c46da9df77a5437c9c2dce1acb508f81315b7a475371bedc4827dd7798896b7b6656c27543a9ad78e7360a8cf75b4ab2743d4a3aa613ee9fdff510300717d55ce"], 0x18, 0x40000}, 0x800) 39.463026103s ago: executing program 4 (id=4085): perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x89}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x101, 0x4000}, 0x80, 0x0}, 0x20000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.121368178s ago: executing program 4 (id=4091): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x10, 0x0}, 0x40000) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x2}, {0x10000001, 0x0, 0x0, 0x4}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, 0x0, 0x80d1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891d, &(0x7f0000000000)={'sit0\x00', @remote}) r7 = perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff7d) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000001400000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 36.220395645s ago: executing program 0 (id=4121): socket$kcm(0xa, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x47d8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10150, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r0, r0], &(0x7f0000000740), 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0xffff9d7e, 0x9d, &(0x7f0000000340)=""/157, 0x40f00, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x154ac, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1a, 0x5, &(0x7f0000000040)=@framed={{0xc6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 35.822758331s ago: executing program 0 (id=4125): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) close(r0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89ee, &(0x7f0000000000)={r2}) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0xff, 0x9, 0x7, 0x5, 0x0, 0xffffffff80000000, 0x20000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1d, 0x1, @perf_config_ext={0x8, 0x39}, 0x80a, 0x5, 0x27ab, 0xb, 0x6, 0xe, 0x8, 0x0, 0x2f7c, 0x0, 0x5}, r1, 0x0, 0xffffffffffffffff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff, 0x1, @perf_config_ext={0x102, 0x80}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x6, 0x8}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r5, r7}, 0xc) sendmsg$unix(r6, &(0x7f0000000540)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x6}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="ff8ed8019bdc74f311b32e49733cbe022f52c239c940c86e442a0591674cde57715966cbf165ce569c8394827702b996948b2ee33fe3ecb62f9c8a7a119d7fbb188a970e8ed9586a0aa75b8bf2cdc23f247e65c6dd4aad8e1ef1edd9ba7ae9cc22e648bfd1824a4f778ea86361b66418abc5f19ed560bfebdd9c79055f19a2d8452b3376c61d754b5439622274886e69889b963bf024f87bc7a318d8321b00852aff0350bf4c78aa8cdca79a4a1c48d4c0dc1c", 0xb3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="227591e5c8f121f72dd8c55871a5af5bd72b7080e6759290ae3c0681521cee25b3ad4c46da9df77a5437c9c2dce1acb508f81315b7a475371bedc4827dd7798896b7b6656c27543a9ad78e7360a8cf75b4ab2743d4a3aa613ee9fdff510300717d55ce"], 0x18, 0x40000}, 0x800) 34.531837902s ago: executing program 0 (id=4132): socket$kcm(0xa, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x47d8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10150, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r0, r0], &(0x7f0000000740), 0x10, 0x80000000, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1a, 0x5, &(0x7f0000000040)=@framed={{0xc6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 33.974714041s ago: executing program 0 (id=4136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0xfffffffc, 0x0, 0x0, 0x4, 0x1, 0xffffffff}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004deffff070000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2002100, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00876100000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f", 0xbf}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40), 0x6000}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x17, 0x4, 0x2, 0x2, 0x4000, r3, 0x12000000, '\x00', 0x0, r2, 0x4, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x7ff, '\x00', 0x0, r2, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) 33.679148156s ago: executing program 5 (id=4139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x18, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400300142603600e1208000b0000000401a80008000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000440)=0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.144977185s ago: executing program 5 (id=4141): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000, 0x400}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x18) socket$kcm(0x18, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="20137e", 0x3}], 0x1}, 0x1) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0xc0004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r5, r4}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 32.107556471s ago: executing program 5 (id=4144): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) close(r0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89ee, &(0x7f0000000000)={r2}) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0xff, 0x9, 0x7, 0x5, 0x0, 0xffffffff80000000, 0x20000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1d, 0x1, @perf_config_ext={0x8, 0x39}, 0x80a, 0x5, 0x27ab, 0xb, 0x6, 0xe, 0x8, 0x0, 0x2f7c, 0x0, 0x5}, r1, 0x0, 0xffffffffffffffff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff, 0x1, @perf_config_ext={0x102, 0x80}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x6, 0x8}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r5, r7}, 0xc) sendmsg$unix(r6, &(0x7f0000000540)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x6}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="ff8ed8019bdc74f311b32e49733cbe022f52c239c940c86e442a0591674cde57715966cbf165ce569c8394827702b996948b2ee33fe3ecb62f9c8a7a119d7fbb188a970e8ed9586a0aa75b8bf2cdc23f247e65c6dd4aad8e1ef1edd9ba7ae9cc22e648bfd1824a4f778ea86361b66418abc5f19ed560bfebdd9c79055f19a2d8452b3376c61d754b5439622274886e69889b963bf024f87bc7a318d8321b00852aff0350bf4c78aa8cdca79a4a1c48d4c0dc1c", 0xb3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="227591e5c8f121f72dd8c55871a5af5bd72b7080e6759290ae3c0681521cee25b3ad4c46da9df77a5437c9c2dce1acb508f81315b7a475371bedc4827dd7798896b7b6656c27543a9ad78e7360a8cf75b4ab2743d4a3aa613ee9fdff510300717d55ce"], 0x18, 0x40000}, 0x800) 31.359995944s ago: executing program 5 (id=4146): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000180)='GPL\x00', 0x6, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340), 0x9}, 0x14100, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./cgroup/../file0\x00', 0x198) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/111, 0x6f}, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES16=r3, @ANYBLOB, @ANYRES8=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0xf, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)) close(0xffffffffffffffff) 30.767540283s ago: executing program 5 (id=4149): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x3, 0x1, 0x2, 0x1}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000095d8f16e00"/28], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x8008, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x1, 0x700}, 0x50) socketpair(0x2c, 0x803, 0x1000, &(0x7f00000003c0)) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xa, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000040000007110"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 25.186845964s ago: executing program 4 (id=4091): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x10, 0x0}, 0x40000) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x2}, {0x10000001, 0x0, 0x0, 0x4}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, 0x0, 0x80d1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891d, &(0x7f0000000000)={'sit0\x00', @remote}) r7 = perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff7d) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000001400000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.010303144s ago: executing program 0 (id=4136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0xfffffffc, 0x0, 0x0, 0x4, 0x1, 0xffffffff}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004deffff070000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2002100, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00876100000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f", 0xbf}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40), 0x6000}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x17, 0x4, 0x2, 0x2, 0x4000, r3, 0x12000000, '\x00', 0x0, r2, 0x4, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x7ff, '\x00', 0x0, r2, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) 11.721864391s ago: executing program 5 (id=4149): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x3, 0x1, 0x2, 0x1}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000095d8f16e00"/28], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x8008, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x1, 0x700}, 0x50) socketpair(0x2c, 0x803, 0x1000, &(0x7f00000003c0)) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xa, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000040000007110"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 7.729885765s ago: executing program 4 (id=4091): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x10, 0x0}, 0x40000) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x2}, {0x10000001, 0x0, 0x0, 0x4}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, 0x0, 0x80d1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891d, &(0x7f0000000000)={'sit0\x00', @remote}) r7 = perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff7d) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000001400000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.239476304s ago: executing program 1 (id=4279): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000, 0x400}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="20137e", 0x3}], 0x1}, 0x1) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0xc0004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r5, r4}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.318526409s ago: executing program 3 (id=4285): socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="20000000ff000000ffcd0b004000000004000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2300000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32], 0x48) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2100, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000080000000100000f0500010002000000050000000a000000040000000000000e020000000000000000300000cf0000202e00d5a25e69f603e692fc0a0edcac9acfaceb5556b18b116815d98369adcd84893b10e3ff9af9e8c0a3edbacb0ee9446146a391900b33bea83264586b618ac30360fba0a1a0cb5a217c63ff1a38a1da489fb3d9b58d09135a2233b9765fb8af08e9e21be9466e98b9312ab7618698d998bb03d76f55dbee745f"], &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6, 0x0, 0x0, @void, @value}, 0x28) 1.21065623s ago: executing program 1 (id=4286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 1.130393922s ago: executing program 3 (id=4287): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="20000000ff000000ffcd0b00400000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2100, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000080000000100000f0500010002000000050000000a000000040000000000000e020000000000000000300000cf0000202e00d5a25e69f603e692fc0a0edcac9acfaceb5556b18b116815d98369adcd84893b10e3ff9af9e8c0a3edbacb0ee9446146a391900b33bea83264586b618ac30360fba0a1a0cb5a217c63ff1a38a1da489fb3"], &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6, 0x0, 0x0, @void, @value}, 0x28) 1.049353403s ago: executing program 3 (id=4288): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x700}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 889.461885ms ago: executing program 3 (id=4289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1, 0xc000000}, 0x10) 807.979887ms ago: executing program 1 (id=4290): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000000200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x2, 0x7, 0x0, 0x0, 0x0, 0x3, 0xfffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x2, 0x80, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r4, 0x541b, 0xf0ff1f00000000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001800eb054e81f783db4cb9040a1d080006007c09e89f82a10a0015000600142603600e1208001e00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b364cb014ef20dfea76f6816277ce06bbace8017cbec4c2ee5a7cef409291a8130b71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300000000000000", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1bc000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) close(r5) 754.752268ms ago: executing program 3 (id=4291): r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x12019, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc44d}, r0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x3, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x757, '\x00', 0x0, r2, 0x1, 0x5, 0x2, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x18, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x60}}, {{0x5, 0x0, 0x6}, {0xa5}}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {}, {0x72}}], {{}, {0x5}}}, &(0x7f0000000040)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x2, &(0x7f0000000c00)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYBLOB="ff00000000000000"], &(0x7f0000000900)='GPL\x00', 0x2, 0xb3, &(0x7f0000000940)=""/179, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0xc}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x5, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x811, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r7, 0x400454ce, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa9}, {0x85, 0x0, 0x0, 0x6c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x2000000, &(0x7f0000000780)="19120449f441048da5de0ade34c5e86220300bb73dffad9f4dd2cdb6a0f5a55d82efbb7387ae486d4b9b83a88b38118f89cad11aae7eea81138da5850fade165f6a55606ff73deb6bbdc56efb53237251235653c2fa4e261b7b309d6e1ea07d38b7b78092a0d4d1798fcdfa048be455529be0ba2f34733cdb5b893a368244f5bfeb537511f5bedba0193e093d1ac0c8ac32d46e447e700282e57eeb33e73df78c973b2c8a06391b5586401eb2217c0fec4274a4a3f1c6a8d42b3", 0xba, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)="a0dcc68b12ba5e8b67c3ef123dc88a01c244fb7398129be9417d67d0853bae41ec2254c23cbde39bb42fdbc46971d9a7d8a94c0d73ad56a8405f65d1d6ffdd94507735892f318773d5c8950cf7de8a1e6d2df3101dd69c4b223aa406973b6f93f050344e76aa002d92e06dcd065e9900c7af") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x2000d00, 0xd, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c39", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0xf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 288.273265ms ago: executing program 1 (id=4292): socketpair(0x22, 0x2, 0x1, &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000ffffffe000ca549ffd284abaecdf00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) close(r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000280)=0x2d5, 0x12) 245.238046ms ago: executing program 1 (id=4293): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x1, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff], 0x0, 0x10, 0x2, @void, @value}, 0x94) sendmsg$sock(0xffffffffffffffff, 0x0, 0x2c0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value}, 0x28) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 168.475207ms ago: executing program 3 (id=4294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf45b, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xfffffffd, 0x0, 0x6, 0x200, r0, 0x481d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x4, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x90000, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fe0800ea00200200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/19, 0x13}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x1) write$cgroup_int(r11, &(0x7f00000001c0), 0xfffffdef) write$cgroup_pid(r8, &(0x7f0000000440), 0x12) ioctl$TUNSETVNETLE(r8, 0x400454dc, &(0x7f0000000040)=0x1) 113.975558ms ago: executing program 1 (id=4295): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000c00), &(0x7f0000000c40)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x9f9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00083b00fe80000000000000875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x0, 0x9f, &(0x7f00000006c0)=""/159, 0x41100, 0x8, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000840)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x8, 0xc3, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x4, 0x4, 0x7, 0x8}], 0x10, 0x8e5, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x8000}) 0s ago: executing program 0 (id=4136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0xfffffffc, 0x0, 0x0, 0x4, 0x1, 0xffffffff}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004deffff070000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2002100, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00876100000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f", 0xbf}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40), 0x6000}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x17, 0x4, 0x2, 0x2, 0x4000, r3, 0x12000000, '\x00', 0x0, r2, 0x4, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x7ff, '\x00', 0x0, r2, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) kernel console output (not intermixed with test programs): 5d/0x110 [ 429.656383][T15189] kvasprintf+0xd4/0x180 [ 429.660663][T15189] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 429.667295][T15189] ? bust_spinlocks+0xd0/0xd0 [ 429.672006][T15189] ? mark_lock+0x94/0x320 [ 429.676373][T15189] ? mark_lock+0x94/0x320 [ 429.680751][T15189] ? kvasprintf_const+0xdd/0x240 [ 429.685737][T15189] kobject_set_name_vargs+0x5d/0x110 [ 429.691065][T15189] kobject_init_and_add+0xda/0x190 [ 429.696209][T15189] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 429.702485][T15189] ? kobject_add+0x210/0x210 [ 429.707128][T15189] net_rx_queue_update_kobjects+0x1af/0x490 [ 429.713067][T15189] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 429.718917][T15189] veth_set_channels+0x3b1/0xbd0 [ 429.723930][T15189] ? __might_fault+0xb3/0x110 [ 429.728688][T15189] ethtool_set_channels+0x56b/0x5e0 [ 429.733936][T15189] ? ethtool_get_channels+0x180/0x180 [ 429.739354][T15189] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 429.745542][T15189] ? apparmor_capable+0x12c/0x190 [ 429.750603][T15189] ? security_capable+0x85/0xb0 [ 429.755500][T15189] dev_ethtool+0xac2/0xef0 [ 429.759959][T15189] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 429.766230][T15189] ? mutex_lock_io_nested+0x60/0x60 [ 429.771454][T15189] ? lockdep_hardirqs_on+0x94/0x140 [ 429.776692][T15189] ? full_name_hash+0x8e/0xe0 [ 429.781445][T15189] dev_ioctl+0x471/0xe50 [ 429.785731][T15189] ? _copy_from_user+0x111/0x170 [ 429.790709][T15189] sock_do_ioctl+0x222/0x2f0 [ 429.795348][T15189] ? sock_show_fdinfo+0xb0/0xb0 [ 429.800255][T15189] sock_ioctl+0x4ed/0x6e0 [ 429.804629][T15189] ? sock_poll+0x3f0/0x3f0 [ 429.809086][T15189] ? bpf_lsm_file_ioctl+0x5/0x10 [ 429.814052][T15189] ? security_file_ioctl+0x7c/0xa0 [ 429.819190][T15189] ? sock_poll+0x3f0/0x3f0 [ 429.823637][T15189] __se_sys_ioctl+0xfa/0x170 [ 429.828255][T15189] do_syscall_64+0x4c/0xa0 [ 429.832698][T15189] ? clear_bhb_loop+0x30/0x80 [ 429.837391][T15189] ? clear_bhb_loop+0x30/0x80 [ 429.842094][T15189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 429.848010][T15189] RIP: 0033:0x7f2d31d2d929 [ 429.852447][T15189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.872200][T15189] RSP: 002b:00007f2d2fb95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.880641][T15189] RAX: ffffffffffffffda RBX: 00007f2d31f54fa0 RCX: 00007f2d31d2d929 [ 429.888633][T15189] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000009 [ 429.896642][T15189] RBP: 00007f2d2fb95090 R08: 0000000000000000 R09: 0000000000000000 [ 429.904639][T15189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.912638][T15189] R13: 0000000000000000 R14: 00007f2d31f54fa0 R15: 00007ffcd6b6c088 [ 429.920650][T15189] [ 429.932931][T15189] kobject: can not set name properly! [ 430.217425][T15205] netlink: 'syz.5.3741': attribute type 2 has an invalid length. [ 430.237031][T15205] netlink: 'syz.5.3741': attribute type 8 has an invalid length. [ 430.245752][T15205] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3741'. [ 430.281176][T15209] netlink: 'syz.5.3741': attribute type 2 has an invalid length. [ 430.301724][T15209] netlink: 'syz.5.3741': attribute type 8 has an invalid length. [ 430.353055][T15209] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3741'. [ 430.413126][T15214] IPv6: Can't replace route, no match found [ 430.437954][T15213] delete_channel: no stack [ 430.607359][T15219] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 431.002023][T15219] device syzkaller0 entered promiscuous mode [ 431.385831][T15230] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3749'. [ 431.586081][T15233] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.3751'. [ 431.617359][T15242] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3752'. [ 431.868765][T15251] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3754'. [ 431.878330][ T4820] wlan1: Trigger new scan to find an IBSS to join [ 432.598729][T15276] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 433.426505][T15276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.477143][T15291] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 433.541907][T15291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.840931][T14579] wlan1: Trigger new scan to find an IBSS to join [ 433.920196][T15303] validate_nla: 10 callbacks suppressed [ 433.920469][T15303] netlink: 'syz.0.3769': attribute type 2 has an invalid length. [ 433.979707][T15303] netlink: 'syz.0.3769': attribute type 8 has an invalid length. [ 434.055566][T15303] __nla_validate_parse: 3 callbacks suppressed [ 434.055607][T15303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3769'. [ 434.182868][T15315] netlink: 'syz.0.3769': attribute type 2 has an invalid length. [ 434.303479][T15315] netlink: 'syz.0.3769': attribute type 8 has an invalid length. [ 434.311507][T15315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3769'. [ 434.768607][T15324] netlink: 'syz.1.3774': attribute type 10 has an invalid length. [ 434.815851][T15324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3774'. [ 434.846615][T15331] netlink: 'syz.5.3775': attribute type 2 has an invalid length. [ 434.935104][T15331] netlink: 'syz.5.3775': attribute type 8 has an invalid length. [ 434.977157][T15331] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3775'. [ 435.052393][T15335] netlink: 'syz.5.3775': attribute type 2 has an invalid length. [ 435.096307][T15335] netlink: 'syz.5.3775': attribute type 8 has an invalid length. [ 435.119721][T15335] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3775'. [ 435.262912][T15340] netlink: 'syz.3.3779': attribute type 2 has an invalid length. [ 435.289034][T15340] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.3779'. [ 435.353346][T15347] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 435.514606][T15347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.812598][ T4810] wlan1: Trigger new scan to find an IBSS to join [ 436.058886][T15374] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3787'. [ 436.385214][T15385] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 436.448084][T15385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.651921][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 437.189198][T15388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.408724][T15407] device syzkaller0 entered promiscuous mode [ 437.581295][T15418] IPv6: Can't replace route, no match found [ 437.612968][T15417] delete_channel: no stack [ 437.812384][ T4810] wlan1: Trigger new scan to find an IBSS to join [ 438.036580][T15441] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3801'. [ 438.408835][T15458] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 438.478874][T15458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.623425][T15468] IPv6: Can't replace route, no match found [ 438.682651][T15467] delete_channel: no stack [ 438.862814][T14579] wlan1: Trigger new scan to find an IBSS to join [ 438.913466][T15482] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3814'. [ 439.007203][T15480] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3811'. [ 439.482210][T15509] IPv6: Can't replace route, no match found [ 439.508230][T15508] delete_channel: no stack [ 439.619990][T15514] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 439.648089][T15514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.814156][T14579] wlan1: Creating new IBSS network, BSSID 06:0b:94:cf:80:ca [ 439.966727][T15529] validate_nla: 4 callbacks suppressed [ 439.966745][T15529] netlink: 'syz.3.3827': attribute type 3 has an invalid length. [ 439.992302][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.998809][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.008706][T15529] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3827'. [ 440.240307][T15543] IPv6: Can't replace route, no match found [ 440.274474][T15542] delete_channel: no stack [ 440.709534][T15558] netlink: 'syz.1.3839': attribute type 3 has an invalid length. [ 440.746139][T15552] device veth1_macvtap left promiscuous mode [ 440.783191][T15558] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3839'. [ 440.862736][ T4808] wlan1: Trigger new scan to find an IBSS to join [ 441.600410][T15584] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3846'. [ 441.819744][T15590] IPv6: Can't replace route, no match found [ 441.865711][T15587] delete_channel: no stack [ 441.880360][T15594] netlink: 'syz.4.3854': attribute type 3 has an invalid length. [ 441.930142][T15594] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3854'. [ 442.058217][T14375] Bluetooth: hci5: command 0x0406 tx timeout [ 442.766116][T15632] netlink: 'syz.3.3871': attribute type 3 has an invalid length. [ 442.789686][T15626] IPv6: Can't replace route, no match found [ 442.813190][T15625] delete_channel: no stack [ 442.901383][ T4808] wlan1: Trigger new scan to find an IBSS to join [ 442.910124][T15632] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3871'. [ 442.983352][T15639] netlink: 'syz.1.3870': attribute type 2 has an invalid length. [ 443.045626][T15639] netlink: 'syz.1.3870': attribute type 8 has an invalid length. [ 443.060033][T15639] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3870'. [ 443.093816][T15635] netlink: 'syz.1.3870': attribute type 2 has an invalid length. [ 443.110014][T15635] netlink: 'syz.1.3870': attribute type 8 has an invalid length. [ 443.133729][T15635] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3870'. [ 443.319706][T15653] netlink: 'syz.4.3874': attribute type 10 has an invalid length. [ 443.389118][T15653] team0: Device hsr_slave_0 failed to register rx_handler [ 443.840407][T15674] netlink: 'syz.5.3885': attribute type 3 has an invalid length. [ 443.851218][T15674] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3885'. [ 443.920818][ T4196] wlan1: Creating new IBSS network, BSSID 86:2e:45:cd:7d:89 [ 444.015557][T15682] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3886'. [ 444.111629][T15684] device veth1_macvtap left promiscuous mode [ 444.171138][T15679] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3886'. [ 444.430224][T15697] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 444.448551][T15697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.738138][T15702] delete_channel: no stack [ 444.979938][T15710] validate_nla: 5 callbacks suppressed [ 444.979957][T15710] netlink: 'syz.5.3898': attribute type 10 has an invalid length. [ 445.077019][T15710] team0: Device hsr_slave_0 failed to register rx_handler [ 445.281270][T15721] netlink: 'syz.3.3901': attribute type 2 has an invalid length. [ 445.299893][T15721] netlink: 'syz.3.3901': attribute type 8 has an invalid length. [ 445.309306][T15721] __nla_validate_parse: 1 callbacks suppressed [ 445.309321][T15721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3901'. [ 445.378217][T15722] netlink: 'syz.0.3903': attribute type 3 has an invalid length. [ 445.422657][T15722] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3903'. [ 445.812883][ T4820] wlan1: Trigger new scan to find an IBSS to join [ 445.829798][ T4808] wlan1: Trigger new scan to find an IBSS to join [ 445.984012][T15742] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 446.016265][T15742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.086609][T15743] delete_channel: no stack [ 446.239531][T15750] netlink: 'syz.0.3912': attribute type 3 has an invalid length. [ 446.250502][T15750] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3912'. [ 446.603185][T15762] netlink: 'syz.5.3916': attribute type 2 has an invalid length. [ 446.622529][T15762] netlink: 'syz.5.3916': attribute type 8 has an invalid length. [ 446.637312][T15762] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3916'. [ 446.677549][T15762] netlink: 'syz.5.3916': attribute type 2 has an invalid length. [ 446.686264][T15762] netlink: 'syz.5.3916': attribute type 8 has an invalid length. [ 446.694991][T15762] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3916'. [ 446.719317][T15774] IPv6: Can't replace route, no match found [ 446.731600][T15768] delete_channel: no stack [ 446.816057][T15777] delete_channel: no stack [ 446.994132][T15782] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 447.024844][T15782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.211697][T15790] netlink: 'syz.0.3927': attribute type 3 has an invalid length. [ 447.242595][T15790] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3927'. [ 447.626944][T15805] delete_channel: no stack [ 447.794781][T15811] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3935'. [ 447.813302][ T4196] wlan1: Trigger new scan to find an IBSS to join [ 447.847750][T15811] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3935'. [ 447.893032][T15816] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 447.933299][T15816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.008965][T15821] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3939'. [ 448.157759][T15827] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3940'. [ 448.599509][T15835] delete_channel: no stack [ 448.827541][T15841] IPv6: Can't replace route, no match found [ 448.860128][T15840] delete_channel: no stack [ 449.445319][T15870] delete_channel: no stack [ 449.730514][T15882] IPv6: Can't replace route, no match found [ 449.780607][T15881] delete_channel: no stack [ 450.156974][T15902] delete_channel: no stack [ 450.687250][T15917] validate_nla: 12 callbacks suppressed [ 450.687269][T15917] netlink: 'syz.0.3973': attribute type 2 has an invalid length. [ 450.714419][T15917] __nla_validate_parse: 4 callbacks suppressed [ 450.714438][T15917] netlink: 159492 bytes leftover after parsing attributes in process `syz.0.3973'. [ 450.778873][ T4808] wlan1: Trigger new scan to find an IBSS to join [ 451.079611][T15926] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 451.245606][T15926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.360834][T15935] delete_channel: no stack [ 451.556060][T15940] netlink: 'syz.0.3983': attribute type 10 has an invalid length. [ 451.582284][T15940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3983'. [ 451.759958][T15948] netlink: 'syz.3.3985': attribute type 2 has an invalid length. [ 451.771125][ T4810] wlan1: Creating new IBSS network, BSSID ae:64:2e:06:9d:43 [ 451.816289][T15948] netlink: 'syz.3.3985': attribute type 8 has an invalid length. [ 451.842574][T15948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3985'. [ 451.886312][T15956] netlink: 'syz.3.3985': attribute type 2 has an invalid length. [ 451.973705][T15956] netlink: 'syz.3.3985': attribute type 8 has an invalid length. [ 451.985560][T15956] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3985'. [ 452.179216][T15967] delete_channel: no stack [ 452.597739][T15985] netlink: 'syz.1.3999': attribute type 10 has an invalid length. [ 452.605817][T15985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3999'. [ 452.852703][ T4196] wlan1: Trigger new scan to find an IBSS to join [ 453.040983][T15998] netlink: 'syz.1.4004': attribute type 2 has an invalid length. [ 453.061723][T15998] netlink: 'syz.1.4004': attribute type 8 has an invalid length. [ 453.077770][T15998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4004'. [ 453.090417][T16002] delete_channel: no stack [ 453.126252][T15998] netlink: 'syz.1.4004': attribute type 2 has an invalid length. [ 453.141979][T15998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4004'. [ 453.726526][T16019] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4013'. [ 454.005357][T16030] delete_channel: no stack [ 454.359396][T16050] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 454.542947][T16050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.742488][T16057] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4029'. [ 454.772508][ T4820] wlan1: Trigger new scan to find an IBSS to join [ 454.817959][T16061] delete_channel: no stack [ 454.968722][T16064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4032'. [ 455.593454][T16095] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 455.601504][T16091] delete_channel: no stack [ 455.631645][T16095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.728215][T16097] IPv6: Can't replace route, no match found [ 455.755532][T16096] delete_channel: no stack [ 455.822310][ T4808] wlan1: Trigger new scan to find an IBSS to join [ 455.991916][T16110] validate_nla: 8 callbacks suppressed [ 455.991933][T16110] netlink: 'syz.4.4051': attribute type 21 has an invalid length. [ 456.170056][T16117] __nla_validate_parse: 1 callbacks suppressed [ 456.170077][T16117] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4054'. [ 456.574821][T16126] delete_channel: no stack [ 456.739098][T16131] IPv6: Can't replace route, no match found [ 456.771899][T16130] delete_channel: no stack [ 456.852701][ T9] wlan1: Trigger new scan to find an IBSS to join [ 456.871637][T16135] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 456.921785][T16135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.997167][T16143] netlink: 'syz.3.4063': attribute type 10 has an invalid length. [ 457.018543][T16143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4063'. [ 457.165303][T16151] delete_channel: no stack [ 457.813992][ T4808] wlan1: Trigger new scan to find an IBSS to join [ 458.434731][T16172] IPv6: Can't replace route, no match found [ 458.488518][T16174] netlink: 'syz.3.4074': attribute type 2 has an invalid length. [ 458.515485][T16168] delete_channel: no stack [ 458.556657][T16174] netlink: 'syz.3.4074': attribute type 8 has an invalid length. [ 458.590546][T16174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4074'. [ 458.677861][T16171] netlink: 'syz.3.4074': attribute type 2 has an invalid length. [ 458.696020][T16171] netlink: 'syz.3.4074': attribute type 8 has an invalid length. [ 458.713866][T16171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4074'. [ 458.844220][T16187] IPv6: Can't replace route, no match found [ 458.844262][T16185] delete_channel: no stack [ 458.855670][ T9] wlan1: Trigger new scan to find an IBSS to join [ 458.913896][T16179] delete_channel: no stack [ 459.349254][T16207] netlink: 'syz.0.4086': attribute type 10 has an invalid length. [ 459.358630][T16207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4086'. [ 459.662370][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.758585][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.794735][T16216] delete_channel: no stack [ 459.875535][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.949874][T16223] IPv6: Can't replace route, no match found [ 459.959774][T16220] delete_channel: no stack [ 459.988296][T16226] FAULT_INJECTION: forcing a failure. [ 459.988296][T16226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.023406][T16226] CPU: 1 PID: 16226 Comm: syz.1.4096 Not tainted 5.15.185-syzkaller #0 [ 460.031698][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.041779][T16226] Call Trace: [ 460.045083][T16226] [ 460.048037][T16226] dump_stack_lvl+0x168/0x230 [ 460.052752][T16226] ? show_regs_print_info+0x20/0x20 [ 460.057977][T16226] ? load_image+0x3b0/0x3b0 [ 460.062507][T16226] ? __lock_acquire+0x7c60/0x7c60 [ 460.067558][T16226] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 460.073569][T16226] should_fail+0x38c/0x4c0 [ 460.078027][T16226] _copy_from_user+0x2e/0x170 [ 460.082830][T16226] ethtool_flash_device+0xab/0x1a0 [ 460.087979][T16226] ? ethtool_set_rxnfc+0x2e0/0x2e0 [ 460.093136][T16226] ? dev_ethtool+0xdd4/0xef0 [ 460.097765][T16226] dev_ethtool+0xddf/0xef0 [ 460.102222][T16226] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 460.108502][T16226] ? mutex_lock_io_nested+0x60/0x60 [ 460.113756][T16226] dev_ioctl+0x471/0xe50 [ 460.118036][T16226] ? _copy_from_user+0x111/0x170 [ 460.123009][T16226] sock_do_ioctl+0x222/0x2f0 [ 460.127639][T16226] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 460.133836][T16226] ? sock_show_fdinfo+0xb0/0xb0 [ 460.138725][T16226] ? sock_ioctl+0x4da/0x6e0 [ 460.143252][T16226] sock_ioctl+0x4ed/0x6e0 [ 460.147666][T16226] ? sock_poll+0x3f0/0x3f0 [ 460.152125][T16226] ? bpf_lsm_file_ioctl+0x5/0x10 [ 460.157094][T16226] ? security_file_ioctl+0x7c/0xa0 [ 460.162331][T16226] ? sock_poll+0x3f0/0x3f0 [ 460.166778][T16226] __se_sys_ioctl+0xfa/0x170 [ 460.171418][T16226] do_syscall_64+0x4c/0xa0 [ 460.176040][T16226] ? clear_bhb_loop+0x30/0x80 [ 460.180756][T16226] ? clear_bhb_loop+0x30/0x80 [ 460.185471][T16226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.191401][T16226] RIP: 0033:0x7f5c195ec929 [ 460.195853][T16226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.215495][T16226] RSP: 002b:00007f5c17454038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.223950][T16226] RAX: ffffffffffffffda RBX: 00007f5c19813fa0 RCX: 00007f5c195ec929 [ 460.231961][T16226] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000034 [ 460.239963][T16226] RBP: 00007f5c17454090 R08: 0000000000000000 R09: 0000000000000000 [ 460.247963][T16226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.255968][T16226] R13: 0000000000000000 R14: 00007f5c19813fa0 R15: 00007fff8fcbb928 [ 460.263992][T16226] [ 460.306222][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.571500][T16248] FAULT_INJECTION: forcing a failure. [ 460.571500][T16248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.596536][T16248] CPU: 1 PID: 16248 Comm: syz.0.4103 Not tainted 5.15.185-syzkaller #0 [ 460.604952][T16248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.615050][T16248] Call Trace: [ 460.618442][T16248] [ 460.621389][T16248] dump_stack_lvl+0x168/0x230 [ 460.626097][T16248] ? show_regs_print_info+0x20/0x20 [ 460.631432][T16248] ? load_image+0x3b0/0x3b0 [ 460.635974][T16248] ? __lock_acquire+0x7c60/0x7c60 [ 460.641039][T16248] should_fail+0x38c/0x4c0 [ 460.645492][T16248] _copy_from_iter+0x22a/0x1150 [ 460.650375][T16248] ? __lock_acquire+0x7c60/0x7c60 [ 460.655441][T16248] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 460.660860][T16248] ? __virt_addr_valid+0x3c6/0x470 [ 460.666001][T16248] ? __phys_addr+0xb6/0x170 [ 460.670533][T16248] ? __phys_addr_symbol+0x2b/0x70 [ 460.675590][T16248] ? __check_object_size+0x30c/0x410 [ 460.680918][T16248] netlink_sendmsg+0x749/0xbc0 [ 460.685739][T16248] ? netlink_getsockopt+0x560/0x560 [ 460.690976][T16248] ? aa_sock_msg_perm+0x94/0x150 [ 460.695956][T16248] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 460.701277][T16248] ? security_socket_sendmsg+0x7c/0xa0 [ 460.706772][T16248] ? netlink_getsockopt+0x560/0x560 [ 460.712026][T16248] ____sys_sendmsg+0x5a2/0x8c0 [ 460.716841][T16248] ? memset+0x1e/0x40 [ 460.720860][T16248] ? __sys_sendmsg_sock+0x30/0x30 [ 460.725939][T16248] ? import_iovec+0x6f/0xa0 [ 460.730477][T16248] ___sys_sendmsg+0x1f0/0x260 [ 460.735202][T16248] ? __sys_sendmsg+0x250/0x250 [ 460.740056][T16248] __se_sys_sendmsg+0x190/0x250 [ 460.744954][T16248] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 460.751152][T16248] ? __x64_sys_sendmsg+0x80/0x80 [ 460.756146][T16248] ? syscall_enter_from_user_mode+0x2a/0x70 [ 460.762088][T16248] do_syscall_64+0x4c/0xa0 [ 460.766544][T16248] ? clear_bhb_loop+0x30/0x80 [ 460.771254][T16248] ? clear_bhb_loop+0x30/0x80 [ 460.776054][T16248] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.781983][T16248] RIP: 0033:0x7fcb22e86929 [ 460.786452][T16248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.806093][T16248] RSP: 002b:00007fcb20cee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.814547][T16248] RAX: ffffffffffffffda RBX: 00007fcb230adfa0 RCX: 00007fcb22e86929 [ 460.822564][T16248] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 460.830570][T16248] RBP: 00007fcb20cee090 R08: 0000000000000000 R09: 0000000000000000 [ 460.838673][T16248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.846677][T16248] R13: 0000000000000000 R14: 00007fcb230adfa0 R15: 00007ffdc93eb808 [ 460.854702][T16248] [ 460.865818][ T4196] wlan1: Creating new IBSS network, BSSID ca:97:bd:bb:65:0e [ 460.877239][ T4810] wlan1: Trigger new scan to find an IBSS to join [ 460.934503][T16245] netlink: 'syz.1.4101': attribute type 10 has an invalid length. [ 460.946884][T16245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4101'. [ 461.047089][T16252] netlink: 'syz.0.4105': attribute type 3 has an invalid length. [ 461.116761][T16252] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4105'. [ 461.131286][T16258] delete_channel: no stack [ 461.393973][T16230] chnl_net:caif_netlink_parms(): no params data found [ 461.462375][T16269] IPv6: Can't replace route, no match found [ 461.475490][T16268] delete_channel: no stack [ 461.597255][T16279] netlink: 'syz.0.4111': attribute type 21 has an invalid length. [ 461.640169][T16230] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.647954][T16230] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.657791][T16230] device bridge_slave_0 entered promiscuous mode [ 461.686080][T16230] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.717074][T16230] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.736914][T16230] device bridge_slave_1 entered promiscuous mode [ 461.785195][T16230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.802118][T16230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.827515][ T4808] wlan1: Creating new IBSS network, BSSID ce:a0:22:6f:5d:8c [ 461.857529][ T4820] wlan1: Creating new IBSS network, BSSID fa:9b:50:14:76:ff [ 462.057332][T16230] team0: Port device team_slave_0 added [ 462.113328][T16230] team0: Port device team_slave_1 added [ 462.225919][T16309] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4117'. [ 462.252898][T16230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.260032][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.294831][ T4218] Bluetooth: hci0: command 0x0409 tx timeout [ 462.307279][T16311] netlink: 'syz.5.4119': attribute type 3 has an invalid length. [ 462.321981][T16230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.348130][T16230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.370495][T16311] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4119'. [ 462.385873][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.440821][T16230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.491792][T16307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 462.532865][ T1111] Bluetooth: hci2: command 0x0406 tx timeout [ 462.558562][T16307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.923266][T16230] device hsr_slave_0 entered promiscuous mode [ 462.950697][T16230] device hsr_slave_1 entered promiscuous mode [ 462.976288][T16230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.999100][T16230] Cannot create hsr debugfs directory [ 463.208265][ T9] device hsr_slave_0 left promiscuous mode [ 463.238924][ T9] device hsr_slave_1 left promiscuous mode [ 463.292918][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.333112][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.379595][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.400178][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.422035][ T9] bridge0: port 3(batadv0) entered disabled state [ 463.438375][ T9] device bridge_slave_1 left promiscuous mode [ 463.448729][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.461358][ T9] device bridge_slave_0 left promiscuous mode [ 463.468543][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.494683][ T9] device veth1_macvtap left promiscuous mode [ 463.505889][ T9] device veth0_macvtap left promiscuous mode [ 463.512827][ T9] device veth1_vlan left promiscuous mode [ 463.520427][ T9] device veth0_vlan left promiscuous mode [ 463.883594][ T9] team0 (unregistering): Port device team_slave_1 removed [ 463.904907][ T9] team0 (unregistering): Port device team_slave_0 removed [ 463.918339][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.936896][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.021119][ T9] bond0 (unregistering): Released all slaves [ 464.372901][ T4221] Bluetooth: hci0: command 0x041b tx timeout [ 464.454762][T16365] netlink: 'syz.3.4133': attribute type 3 has an invalid length. [ 464.488661][T16365] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4133'. [ 464.589228][T16370] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 464.612829][T16370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.838485][T16381] IPv6: Can't replace route, no match found [ 464.852717][ T4820] wlan1: Trigger new scan to find an IBSS to join [ 464.878463][T16380] delete_channel: no stack [ 465.218721][T16395] netlink: 'syz.5.4139': attribute type 21 has an invalid length. [ 465.233858][T16397] FAULT_INJECTION: forcing a failure. [ 465.233858][T16397] name failslab, interval 1, probability 0, space 0, times 0 [ 465.295072][T16230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 465.305919][T16397] CPU: 0 PID: 16397 Comm: syz.1.4140 Not tainted 5.15.185-syzkaller #0 [ 465.314321][T16397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.324421][T16397] Call Trace: [ 465.327739][T16397] [ 465.330701][T16397] dump_stack_lvl+0x168/0x230 [ 465.335436][T16397] ? show_regs_print_info+0x20/0x20 [ 465.340675][T16397] ? load_image+0x3b0/0x3b0 [ 465.345665][T16397] ? __might_sleep+0xf0/0xf0 [ 465.350317][T16397] ? __lock_acquire+0x7c60/0x7c60 [ 465.355535][T16397] should_fail+0x38c/0x4c0 [ 465.360026][T16397] should_failslab+0x5/0x20 [ 465.364569][T16397] slab_pre_alloc_hook+0x51/0xc0 [ 465.369557][T16397] kmem_cache_alloc_node+0x47/0x2d0 [ 465.374791][T16397] ? alloc_vmap_area+0x18a/0x1b20 [ 465.379876][T16397] alloc_vmap_area+0x18a/0x1b20 [ 465.384846][T16397] ? vm_map_ram+0xb70/0xb70 [ 465.389435][T16397] __get_vm_area_node+0x14f/0x2d0 [ 465.394544][T16397] __vmalloc_node_range+0xef/0x8b0 [ 465.399762][T16397] ? netlink_sendmsg+0x5dd/0xbc0 [ 465.404736][T16397] ? netlink_data_ready+0x10/0x10 [ 465.409841][T16397] ? netlink_sendmsg+0x5dd/0xbc0 [ 465.414829][T16397] vmalloc+0x75/0x80 [ 465.418770][T16397] ? netlink_sendmsg+0x5dd/0xbc0 [ 465.423759][T16397] netlink_sendmsg+0x5dd/0xbc0 [ 465.428599][T16397] ? netlink_getsockopt+0x560/0x560 [ 465.433858][T16397] ? aa_sock_msg_perm+0x94/0x150 [ 465.438851][T16397] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 465.444174][T16397] ? security_socket_sendmsg+0x7c/0xa0 [ 465.449674][T16397] ? netlink_getsockopt+0x560/0x560 [ 465.454921][T16397] ____sys_sendmsg+0x5a2/0x8c0 [ 465.459847][T16397] ? memset+0x1e/0x40 [ 465.463866][T16397] ? __sys_sendmsg_sock+0x30/0x30 [ 465.468963][T16397] ? import_iovec+0x6f/0xa0 [ 465.473525][T16397] ___sys_sendmsg+0x1f0/0x260 [ 465.478280][T16397] ? __sys_sendmsg+0x250/0x250 [ 465.483136][T16397] ? trace_event_raw_event_lock+0x250/0x250 [ 465.489069][T16397] ? vfs_write+0x84d/0xd00 [ 465.493599][T16397] ? __fdget+0x18b/0x210 [ 465.497902][T16397] __se_sys_sendmsg+0x190/0x250 [ 465.502805][T16397] ? __x64_sys_sendmsg+0x80/0x80 [ 465.507775][T16397] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 465.513841][T16397] ? lockdep_hardirqs_on+0x94/0x140 [ 465.519091][T16397] do_syscall_64+0x4c/0xa0 [ 465.523540][T16397] ? clear_bhb_loop+0x30/0x80 [ 465.528245][T16397] ? clear_bhb_loop+0x30/0x80 [ 465.532963][T16397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 465.538918][T16397] RIP: 0033:0x7f5c195ec929 [ 465.543382][T16397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.563030][T16397] RSP: 002b:00007f5c17454038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.571500][T16397] RAX: ffffffffffffffda RBX: 00007f5c19813fa0 RCX: 00007f5c195ec929 [ 465.579519][T16397] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 465.587533][T16397] RBP: 00007f5c17454090 R08: 0000000000000000 R09: 0000000000000000 [ 465.595551][T16397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.603562][T16397] R13: 0000000000000000 R14: 00007f5c19813fa0 R15: 00007fff8fcbb928 [ 465.611637][T16397] [ 465.738681][T16230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 465.742627][T16397] warn_alloc: 1 callbacks suppressed [ 465.742649][T16397] syz.1.4140: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 465.787552][T16230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 465.846805][T16230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 465.921734][T16397] CPU: 1 PID: 16397 Comm: syz.1.4140 Not tainted 5.15.185-syzkaller #0 [ 465.930051][T16397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.940172][T16397] Call Trace: [ 465.943511][T16397] [ 465.946486][T16397] dump_stack_lvl+0x168/0x230 [ 465.951214][T16397] ? rcu_lock_release+0x5/0x20 [ 465.956032][T16397] ? show_regs_print_info+0x20/0x20 [ 465.961297][T16397] ? load_image+0x3b0/0x3b0 [ 465.965897][T16397] warn_alloc+0x20e/0x2f0 [ 465.970384][T16397] ? zone_watermark_ok_safe+0x240/0x240 [ 465.975983][T16397] ? __get_vm_area_node+0x164/0x2d0 [ 465.981230][T16397] ? kfree+0xef/0x2a0 [ 465.985318][T16397] __vmalloc_node_range+0x2b1/0x8b0 [ 465.990560][T16397] ? netlink_data_ready+0x10/0x10 [ 465.995669][T16397] ? netlink_sendmsg+0x5dd/0xbc0 [ 466.000660][T16397] vmalloc+0x75/0x80 [ 466.004608][T16397] ? netlink_sendmsg+0x5dd/0xbc0 [ 466.009597][T16397] netlink_sendmsg+0x5dd/0xbc0 [ 466.014444][T16397] ? netlink_getsockopt+0x560/0x560 [ 466.019701][T16397] ? aa_sock_msg_perm+0x94/0x150 [ 466.024697][T16397] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 466.030037][T16397] ? security_socket_sendmsg+0x7c/0xa0 [ 466.035540][T16397] ? netlink_getsockopt+0x560/0x560 [ 466.040785][T16397] ____sys_sendmsg+0x5a2/0x8c0 [ 466.045723][T16397] ? memset+0x1e/0x40 [ 466.049754][T16397] ? __sys_sendmsg_sock+0x30/0x30 [ 466.054860][T16397] ? import_iovec+0x6f/0xa0 [ 466.059429][T16397] ___sys_sendmsg+0x1f0/0x260 [ 466.064217][T16397] ? __sys_sendmsg+0x250/0x250 [ 466.069085][T16397] ? trace_event_raw_event_lock+0x250/0x250 [ 466.075027][T16397] ? vfs_write+0x84d/0xd00 [ 466.079544][T16397] ? __fdget+0x18b/0x210 [ 466.083831][T16397] __se_sys_sendmsg+0x190/0x250 [ 466.088723][T16397] ? __x64_sys_sendmsg+0x80/0x80 [ 466.093824][T16397] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 466.099865][T16397] ? lockdep_hardirqs_on+0x94/0x140 [ 466.105125][T16397] do_syscall_64+0x4c/0xa0 [ 466.109561][T16397] ? clear_bhb_loop+0x30/0x80 [ 466.114259][T16397] ? clear_bhb_loop+0x30/0x80 [ 466.118965][T16397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 466.124881][T16397] RIP: 0033:0x7f5c195ec929 [ 466.129322][T16397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.148948][T16397] RSP: 002b:00007f5c17454038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.157386][T16397] RAX: ffffffffffffffda RBX: 00007f5c19813fa0 RCX: 00007f5c195ec929 [ 466.165376][T16397] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 466.173376][T16397] RBP: 00007f5c17454090 R08: 0000000000000000 R09: 0000000000000000 [ 466.181375][T16397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.189368][T16397] R13: 0000000000000000 R14: 00007f5c19813fa0 R15: 00007fff8fcbb928 [ 466.197403][T16397] [ 466.229102][T16397] Mem-Info: [ 466.232919][T16397] active_anon:284 inactive_anon:6085 isolated_anon:0 [ 466.232919][T16397] active_file:5223 inactive_file:46287 isolated_file:0 [ 466.232919][T16397] unevictable:768 dirty:180 writeback:0 [ 466.232919][T16397] slab_reclaimable:20445 slab_unreclaimable:94994 [ 466.232919][T16397] mapped:29697 shmem:1641 pagetables:659 bounce:0 [ 466.232919][T16397] kernel_misc_reclaimable:0 [ 466.232919][T16397] free:1388179 free_pcp:7055 free_cma:0 [ 466.342428][T16397] Node 0 active_anon:1104kB inactive_anon:23832kB active_file:20688kB inactive_file:185148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118788kB dirty:720kB writeback:0kB shmem:4488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10380kB pagetables:2636kB all_unreclaimable? no [ 466.376103][T16397] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 466.405565][T16397] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.432771][T16397] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 466.438584][T16397] Node 0 DMA32 free:1618272kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1104kB inactive_anon:23832kB active_file:20688kB inactive_file:185148kB unevictable:1536kB writepending:720kB present:3129332kB managed:2609060kB mlocked:0kB bounce:0kB free_pcp:23264kB local_pcp:21704kB free_cma:0kB [ 466.470922][ T4221] Bluetooth: hci0: command 0x040f tx timeout [ 466.509451][T16230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.535647][T16397] lowmem_reserve[]: 0 0 0 0 0 [ 466.548984][T16397] Node 0 Normal free:12kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 466.624647][T16397] lowmem_reserve[]: 0 0 0 0 0 [ 466.629553][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.677137][T16397] Node 1 Normal free:3919380kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5056kB local_pcp:0kB free_cma:0kB [ 466.683669][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.787456][T16397] lowmem_reserve[]: 0 0 0 0 0 [ 466.845382][T16230] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.862068][T16397] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 466.875553][T16397] Node 0 DMA32: 1625*4kB (ME) 671*8kB (UME) 351*16kB (UME) 1138*32kB (UME) 331*64kB (UME) 79*128kB (UME) 22*256kB (UM) 13*512kB (UM) 8*1024kB (UM) 6*2048kB (UME) 366*4096kB (UM) = 1617100kB [ 466.895565][T16397] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 466.912382][T16397] Node 1 Normal: 165*4kB (UME) 38*8kB (UME) 29*16kB (UME) 166*32kB (UME) 71*64kB (UME) 16*128kB (UE) 14*256kB (UME) 4*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 951*4096kB (UM) = 3919380kB [ 466.935255][T16397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.945123][T16397] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 467.260550][T16397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.301747][T16397] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 467.322335][T16397] 53151 total pagecache pages [ 467.332041][T16397] 0 pages in swap cache [ 467.341070][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.362757][T16397] Swap cache stats: add 0, delete 0, find 0/0 [ 467.368892][T16397] Free swap = 124996kB [ 467.384866][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.449912][T16397] Total swap = 124996kB [ 467.478445][ T4820] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.485626][ T4820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.493321][T16397] 2097051 pages RAM [ 467.497691][T16397] 0 pages HighMem/MovableOnly [ 467.522406][T16397] 410799 pages reserved [ 467.526612][T16397] 0 pages cma reserved [ 467.531253][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.555546][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.574991][ T4820] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.582108][ T4820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.605666][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.631551][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.802126][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.824144][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.848402][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.864004][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.873414][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.904723][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.928068][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.945724][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.985970][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.030581][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.074988][T16230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.105775][T16402] chnl_net:caif_netlink_parms(): no params data found [ 468.139572][T16440] IPv6: Can't replace route, no match found [ 468.161987][T16438] delete_channel: no stack [ 468.299739][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 468.444705][T16402] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.518043][T16402] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.532480][ T4224] Bluetooth: hci0: command 0x0419 tx timeout [ 468.570531][T16402] device bridge_slave_0 entered promiscuous mode [ 468.611379][T16459] netlink: 'syz.3.4151': attribute type 10 has an invalid length. [ 468.642285][T16459] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4151'. [ 468.678206][T16402] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.688300][T16402] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.724866][T16402] device bridge_slave_1 entered promiscuous mode [ 468.897086][T16402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.933051][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.940630][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.001852][T16230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.022019][T16402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.141142][T16402] team0: Port device team_slave_0 added [ 469.171318][T16402] team0: Port device team_slave_1 added [ 469.296592][T16402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.319821][T16402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.375135][T16402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.419002][T16402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.441889][T16402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.529744][T16402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.710779][T16501] netlink: 'syz.3.4157': attribute type 21 has an invalid length. [ 469.740567][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.750618][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 469.773024][T16460] chnl_net:caif_netlink_parms(): no params data found [ 469.815753][T16402] device hsr_slave_0 entered promiscuous mode [ 469.830231][T16402] device hsr_slave_1 entered promiscuous mode [ 469.856509][T16504] delete_channel: no stack [ 469.899135][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 469.912873][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.940905][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 469.951103][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 470.061274][T16230] device veth0_vlan entered promiscuous mode [ 470.196642][T16520] netlink: 'syz.3.4161': attribute type 21 has an invalid length. [ 470.225020][T16520] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 470.342068][T16230] device veth1_vlan entered promiscuous mode [ 470.372728][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 470.380784][T16460] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.403294][T16460] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.411779][T16460] device bridge_slave_0 entered promiscuous mode [ 470.440615][T16527] IPv6: Can't replace route, no match found [ 470.450410][T16526] delete_channel: no stack [ 470.454640][T16460] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.462046][T16460] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.473905][T16460] device bridge_slave_1 entered promiscuous mode [ 470.526076][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.536902][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 470.578444][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.603807][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.654441][T16230] device veth0_macvtap entered promiscuous mode [ 470.675938][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.743688][T16537] netlink: 'syz.1.4164': attribute type 10 has an invalid length. [ 470.751565][T16537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'. [ 470.790444][T16230] device veth1_macvtap entered promiscuous mode [ 470.804526][T16460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.827412][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.893695][T16460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.915537][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.925284][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 471.000544][T16230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.017656][T16230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.038047][T16230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.059052][T16230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.080333][T16230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.098823][T16230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.111521][T16230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.129345][T16230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.155166][T16230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.176193][T16460] team0: Port device team_slave_0 added [ 471.220611][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.279843][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.293513][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.312706][T16230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.328994][T16230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.339691][T16230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.350387][T16230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.363921][T16230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.374534][T16230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.384440][T16230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.395381][T16230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.406663][T16230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.422295][T16559] netlink: 'syz.1.4169': attribute type 21 has an invalid length. [ 471.434755][T16460] team0: Port device team_slave_1 added [ 471.447443][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.458349][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 471.497656][T16565] delete_channel: no stack [ 471.547576][T16230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.562511][T16230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.574707][T16230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.583939][T16230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.641268][T16570] FAULT_INJECTION: forcing a failure. [ 471.641268][T16570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.660765][T16570] CPU: 1 PID: 16570 Comm: syz.3.4172 Not tainted 5.15.185-syzkaller #0 [ 471.669160][T16570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.679248][T16570] Call Trace: [ 471.682546][T16570] [ 471.685492][T16570] dump_stack_lvl+0x168/0x230 [ 471.690202][T16570] ? show_regs_print_info+0x20/0x20 [ 471.695420][T16570] ? load_image+0x3b0/0x3b0 [ 471.699959][T16570] ? __lock_acquire+0x7c60/0x7c60 [ 471.705024][T16570] should_fail+0x38c/0x4c0 [ 471.709475][T16570] _copy_from_iter+0x22a/0x1150 [ 471.714466][T16570] ? __lock_acquire+0x7c60/0x7c60 [ 471.719517][T16570] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 471.725016][T16570] ? __virt_addr_valid+0x3c6/0x470 [ 471.730148][T16570] ? __phys_addr+0xb6/0x170 [ 471.734675][T16570] ? __phys_addr_symbol+0x2b/0x70 [ 471.739721][T16570] ? __check_object_size+0x30c/0x410 [ 471.745206][T16570] netlink_sendmsg+0x749/0xbc0 [ 471.750001][T16570] ? netlink_getsockopt+0x560/0x560 [ 471.755226][T16570] ? aa_sock_msg_perm+0x94/0x150 [ 471.760191][T16570] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 471.765525][T16570] ? security_socket_sendmsg+0x7c/0xa0 [ 471.771003][T16570] ? netlink_getsockopt+0x560/0x560 [ 471.776227][T16570] ____sys_sendmsg+0x5a2/0x8c0 [ 471.781025][T16570] ? memset+0x1e/0x40 [ 471.785116][T16570] ? __sys_sendmsg_sock+0x30/0x30 [ 471.790170][T16570] ? import_iovec+0x6f/0xa0 [ 471.794698][T16570] ___sys_sendmsg+0x1f0/0x260 [ 471.799410][T16570] ? __sys_sendmsg+0x250/0x250 [ 471.804265][T16570] ? vfs_write+0x84d/0xd00 [ 471.808727][T16570] ? __fdget+0x18b/0x210 [ 471.812992][T16570] __se_sys_sendmsg+0x190/0x250 [ 471.817868][T16570] ? __x64_sys_sendmsg+0x80/0x80 [ 471.822822][T16570] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 471.829012][T16570] ? lockdep_hardirqs_on+0x94/0x140 [ 471.834272][T16570] do_syscall_64+0x4c/0xa0 [ 471.838735][T16570] ? clear_bhb_loop+0x30/0x80 [ 471.843442][T16570] ? clear_bhb_loop+0x30/0x80 [ 471.848145][T16570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 471.854070][T16570] RIP: 0033:0x7f2d31d2d929 [ 471.858615][T16570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.878246][T16570] RSP: 002b:00007f2d2fb95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.886686][T16570] RAX: ffffffffffffffda RBX: 00007f2d31f54fa0 RCX: 00007f2d31d2d929 [ 471.894881][T16570] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 471.903084][T16570] RBP: 00007f2d2fb95090 R08: 0000000000000000 R09: 0000000000000000 [ 471.911087][T16570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.919084][T16570] R13: 0000000000000000 R14: 00007f2d31f54fa0 R15: 00007ffcd6b6c088 [ 471.927096][T16570] [ 471.971707][T16460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.991829][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.020881][T16574] FAULT_INJECTION: forcing a failure. [ 472.020881][T16574] name failslab, interval 1, probability 0, space 0, times 0 [ 472.025875][T16460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.044086][T16574] CPU: 1 PID: 16574 Comm: syz.3.4173 Not tainted 5.15.185-syzkaller #0 [ 472.050903][T16460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.052499][T16574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.052516][T16574] Call Trace: [ 472.052525][T16574] [ 472.052534][T16574] dump_stack_lvl+0x168/0x230 [ 472.052563][T16574] ? show_regs_print_info+0x20/0x20 [ 472.052585][T16574] ? load_image+0x3b0/0x3b0 [ 472.059753][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.069590][T16574] ? __might_sleep+0xf0/0xf0 [ 472.069618][T16574] ? __lock_acquire+0x7c60/0x7c60 [ 472.069648][T16574] should_fail+0x38c/0x4c0 [ 472.073154][T16460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.075992][T16574] should_failslab+0x5/0x20 [ 472.076024][T16574] slab_pre_alloc_hook+0x51/0xc0 [ 472.076051][T16574] __kmalloc_node+0x6e/0x3b0 [ 472.154987][T16574] ? memcg_alloc_page_obj_cgroups+0x81/0x120 [ 472.161021][T16574] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 472.166873][T16574] slab_post_alloc_hook+0xba/0x380 [ 472.172017][T16574] kmem_cache_alloc_node+0x12d/0x2d0 [ 472.177308][T16574] ? __alloc_skb+0xf4/0x750 [ 472.181832][T16574] __alloc_skb+0xf4/0x750 [ 472.186192][T16574] alloc_skb_with_frags+0xa7/0x730 [ 472.191311][T16574] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 472.197932][T16574] sock_alloc_send_pskb+0x853/0x980 [ 472.203182][T16574] ? sock_kzfree_s+0x50/0x50 [ 472.207784][T16574] ? do_raw_spin_lock+0x11d/0x280 [ 472.212833][T16574] ? __rwlock_init+0x140/0x140 [ 472.217607][T16574] ? do_raw_spin_unlock+0x11d/0x230 [ 472.222823][T16574] unix_dgram_sendmsg+0x5ef/0x1890 [ 472.227958][T16574] ? aa_sk_perm+0x7b4/0x8f0 [ 472.232471][T16574] ? unix_dgram_poll+0x660/0x660 [ 472.237410][T16574] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 472.243844][T16574] ? aa_sock_msg_perm+0x94/0x150 [ 472.248814][T16574] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 472.254367][T16574] ? unix_dgram_peer_wake_me+0x430/0x430 [ 472.260007][T16574] ____sys_sendmsg+0x5a2/0x8c0 [ 472.264792][T16574] ? __sys_sendmsg_sock+0x30/0x30 [ 472.269860][T16574] ? import_iovec+0x6f/0xa0 [ 472.274397][T16574] ___sys_sendmsg+0x1f0/0x260 [ 472.279099][T16574] ? __sys_sendmsg+0x250/0x250 [ 472.283881][T16574] ? vfs_write+0x84d/0xd00 [ 472.288314][T16574] ? __fdget+0x18b/0x210 [ 472.292574][T16574] __se_sys_sendmsg+0x190/0x250 [ 472.297606][T16574] ? __x64_sys_sendmsg+0x80/0x80 [ 472.302557][T16574] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 472.308653][T16574] ? lockdep_hardirqs_on+0x94/0x140 [ 472.313882][T16574] do_syscall_64+0x4c/0xa0 [ 472.318309][T16574] ? clear_bhb_loop+0x30/0x80 [ 472.322995][T16574] ? clear_bhb_loop+0x30/0x80 [ 472.327685][T16574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.333681][T16574] RIP: 0033:0x7f2d31d2d929 [ 472.338104][T16574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.357819][T16574] RSP: 002b:00007f2d2fb95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.366392][T16574] RAX: ffffffffffffffda RBX: 00007f2d31f54fa0 RCX: 00007f2d31d2d929 [ 472.374374][T16574] RDX: 0000000000008810 RSI: 0000200000000480 RDI: 0000000000000004 [ 472.382357][T16574] RBP: 00007f2d2fb95090 R08: 0000000000000000 R09: 0000000000000000 [ 472.390347][T16574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.398330][T16574] R13: 0000000000000000 R14: 00007f2d31f54fa0 R15: 00007ffcd6b6c088 [ 472.406327][T16574] [ 472.454089][ T4218] Bluetooth: hci1: command 0x040f tx timeout [ 472.488035][T16460] device hsr_slave_0 entered promiscuous mode [ 472.495510][T16460] device hsr_slave_1 entered promiscuous mode [ 472.502380][T16460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.509962][T16460] Cannot create hsr debugfs directory [ 472.540051][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.576125][T16576] IPv6: Can't replace route, no match found [ 472.614183][T16575] delete_channel: no stack [ 472.622608][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 472.647490][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.725926][ T4808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.726986][T16580] netlink: 'syz.1.4175': attribute type 21 has an invalid length. [ 472.760815][ T4808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.764076][T16581] netlink: 'syz.1.4175': attribute type 10 has an invalid length. [ 472.852662][T16581] team0 (unregistering): Port device team_slave_0 removed [ 472.884142][T16581] team0 (unregistering): Port device team_slave_1 removed [ 472.967251][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.991876][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 473.049587][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.083088][ T4808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.091340][ T4808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.116612][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 473.412341][T16600] netlink: 'syz.3.4178': attribute type 10 has an invalid length. [ 473.427832][T16600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4178'. [ 473.801213][T16616] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 473.957983][T16620] delete_channel: no stack [ 474.544388][T13414] Bluetooth: hci1: command 0x0419 tx timeout [ 474.692271][ T4220] Bluetooth: hci2: command 0x040f tx timeout [ 474.772259][ T4196] wlan1: Trigger new scan to find an IBSS to join [ 474.964408][T16402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 475.036610][T16402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 475.078951][T16402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 475.143451][T16646] IPv6: Can't replace route, no match found [ 475.157361][T16645] delete_channel: no stack [ 475.194592][T16402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 475.428872][T16661] netlink: 'syz.1.4190': attribute type 10 has an invalid length. [ 475.487467][T16661] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4190'. [ 475.497395][T16661] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 475.714317][T16629] chnl_net:caif_netlink_parms(): no params data found [ 475.849387][T16460] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 475.904762][T16460] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 475.970806][T16402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.008424][T16460] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.043778][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.051643][T16629] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.063674][T16629] device bridge_slave_0 entered promiscuous mode [ 476.088591][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 476.109000][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.131868][T16460] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 476.159590][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.192563][T16629] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.213181][T16629] device bridge_slave_1 entered promiscuous mode [ 476.271405][T16402] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.293545][ T4224] Bluetooth: hci0: command 0x0409 tx timeout [ 476.345758][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.363943][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.411772][T16673] delete_channel: no stack [ 476.415315][ T4810] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.423372][ T4810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.491573][T16629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.511644][T16672] netlink: 'syz.3.4191': attribute type 10 has an invalid length. [ 476.523771][T16672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4191'. [ 476.555914][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 476.566796][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.576623][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.586238][ T4810] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.593381][ T4810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.647701][T16629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.672908][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.699513][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.766735][T16690] FAULT_INJECTION: forcing a failure. [ 476.766735][T16690] name failslab, interval 1, probability 0, space 0, times 0 [ 476.784384][ T4221] Bluetooth: hci2: command 0x0419 tx timeout [ 476.794849][T16690] CPU: 0 PID: 16690 Comm: syz.3.4197 Not tainted 5.15.185-syzkaller #0 [ 476.803160][T16690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.813243][T16690] Call Trace: [ 476.816550][T16690] [ 476.819613][T16690] dump_stack_lvl+0x168/0x230 [ 476.824332][T16690] ? show_regs_print_info+0x20/0x20 [ 476.829566][T16690] ? load_image+0x3b0/0x3b0 [ 476.834109][T16690] ? __might_sleep+0xf0/0xf0 [ 476.838735][T16690] ? __lock_acquire+0x7c60/0x7c60 [ 476.843806][T16690] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 476.850005][T16690] should_fail+0x38c/0x4c0 [ 476.854474][T16690] should_failslab+0x5/0x20 [ 476.859034][T16690] slab_pre_alloc_hook+0x51/0xc0 [ 476.864005][T16690] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 476.870410][T16690] ? proc_alloc_inode+0x19/0xa0 [ 476.875298][T16690] kmem_cache_alloc+0x3d/0x290 [ 476.880098][T16690] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 476.886467][T16690] proc_alloc_inode+0x19/0xa0 [ 476.891171][T16690] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 476.897671][T16690] new_inode_pseudo+0x5f/0x210 [ 476.902490][T16690] new_inode+0x25/0x1c0 [ 476.906699][T16690] proc_pid_make_inode+0x20/0x1c0 [ 476.911765][T16690] proc_pident_instantiate+0x69/0x2b0 [ 476.917166][T16690] proc_pident_lookup+0x1c6/0x260 [ 476.922224][T16690] ? proc_task_instantiate+0x2b0/0x2b0 [ 476.927720][T16690] path_openat+0x1003/0x2f30 [ 476.932392][T16690] ? verify_lock_unused+0x140/0x140 [ 476.937780][T16690] ? do_filp_open+0x3e0/0x3e0 [ 476.942515][T16690] do_filp_open+0x1b3/0x3e0 [ 476.947070][T16690] ? vfs_tmpfile+0x300/0x300 [ 476.951720][T16690] ? noop_direct_IO+0x10/0x10 [ 476.956706][T16690] ? _raw_spin_unlock+0x24/0x40 [ 476.961674][T16690] ? alloc_fd+0x598/0x630 [ 476.966126][T16690] do_sys_openat2+0x142/0x4a0 [ 476.970839][T16690] ? __lock_acquire+0x7c60/0x7c60 [ 476.975916][T16690] ? do_sys_open+0xe0/0xe0 [ 476.980365][T16690] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 476.986385][T16690] ? lock_chain_count+0x20/0x20 [ 476.991276][T16690] ? vtime_user_exit+0x2dc/0x400 [ 476.996255][T16690] __x64_sys_openat+0x135/0x160 [ 477.001148][T16690] do_syscall_64+0x4c/0xa0 [ 477.005590][T16690] ? clear_bhb_loop+0x30/0x80 [ 477.010298][T16690] ? clear_bhb_loop+0x30/0x80 [ 477.015016][T16690] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.020943][T16690] RIP: 0033:0x7f2d31d2c290 [ 477.025389][T16690] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 477.045149][T16690] RSP: 002b:00007f2d2fb94f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 477.053604][T16690] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2d31d2c290 [ 477.061612][T16690] RDX: 0000000000000002 RSI: 00007f2d2fb94fa0 RDI: 00000000ffffff9c [ 477.069620][T16690] RBP: 00007f2d2fb94fa0 R08: 0000000000000000 R09: 0000000000000000 [ 477.077627][T16690] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 477.085634][T16690] R13: 0000000000000000 R14: 00007f2d31f54fa0 R15: 00007ffcd6b6c088 [ 477.093663][T16690] [ 477.116427][ T9] device hsr_slave_0 left promiscuous mode [ 477.123385][ T9] device hsr_slave_1 left promiscuous mode [ 477.133934][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.152918][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.173873][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.181361][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.190959][ T9] bridge0: port 3(batadv0) entered disabled state [ 477.201093][ T9] device bridge_slave_1 left promiscuous mode [ 477.215515][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.234306][ T9] device bridge_slave_0 left promiscuous mode [ 477.240572][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.282084][ T9] device hsr_slave_0 left promiscuous mode [ 477.300716][ T9] device hsr_slave_1 left promiscuous mode [ 477.310432][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.327608][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.347846][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.355675][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.363971][ T9] bridge0: port 3(batadv0) entered disabled state [ 477.377257][ T9] device bridge_slave_1 left promiscuous mode [ 477.383919][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.394183][ T9] device bridge_slave_0 left promiscuous mode [ 477.400390][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.417343][ T9] device veth0_macvtap left promiscuous mode [ 477.424554][ T9] device veth1_vlan left promiscuous mode [ 477.430569][ T9] device veth0_vlan left promiscuous mode [ 477.438330][ T9] device veth0_macvtap left promiscuous mode [ 477.444701][ T9] device veth1_vlan left promiscuous mode [ 477.450758][ T9] device veth0_vlan left promiscuous mode [ 477.774454][ T9] team0 (unregistering): Port device team_slave_1 removed [ 477.789413][ T9] team0 (unregistering): Port device team_slave_0 removed [ 477.806024][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.822096][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.822344][ T4810] wlan1: Trigger new scan to find an IBSS to join [ 477.921872][ T9] bond0 (unregistering): Released all slaves [ 478.060213][ T9] team0 (unregistering): Port device team_slave_1 removed [ 478.077427][ T9] team0 (unregistering): Port device team_slave_0 removed [ 478.092016][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.109624][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.194905][ T9] bond0 (unregistering): Released all slaves [ 478.261006][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 478.284231][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 478.298297][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 478.320843][T16629] team0: Port device team_slave_0 added [ 478.329787][T16629] team0: Port device team_slave_1 added [ 478.352450][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 478.361505][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 478.374780][ T4224] Bluetooth: hci0: command 0x041b tx timeout [ 478.401420][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 478.412886][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 478.424523][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 478.433490][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 478.476410][T16402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 478.536809][T16708] IPv6: Can't replace route, no match found [ 478.558134][T16707] delete_channel: no stack [ 478.569665][T16629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.602241][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.679448][T16629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.719798][T16629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.738029][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.765252][ T4196] wlan1: Creating new IBSS network, BSSID 7a:0c:a3:76:b8:67 [ 478.781182][T16629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.823129][T16460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.999173][T16629] device hsr_slave_0 entered promiscuous mode [ 479.013881][T16629] device hsr_slave_1 entered promiscuous mode [ 479.031176][T16629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.039030][T16629] Cannot create hsr debugfs directory [ 479.046092][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.055804][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.067423][T16460] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.126705][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.147577][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.178138][T16402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.196371][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.216145][T16735] delete_channel: no stack [ 479.219993][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.250373][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.257628][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.287986][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.301303][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.319953][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.327154][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.347836][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.361875][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.422278][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.431564][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.444330][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.471165][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 479.481518][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 479.535507][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.555563][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 479.575765][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.586238][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.597176][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.606759][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.615833][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.627660][T16460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 479.708075][T16402] device veth0_vlan entered promiscuous mode [ 479.723567][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 479.738816][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.772643][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.798276][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.854328][T16402] device veth1_vlan entered promiscuous mode [ 480.121176][T16629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.303515][T16765] netlink: 'syz.1.4207': attribute type 10 has an invalid length. [ 480.311395][T16765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4207'. [ 480.371031][T16460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.419053][T16629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.452815][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 480.506804][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 480.521707][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 480.558391][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.569663][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.582929][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 480.600710][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 480.634490][T16402] device veth0_macvtap entered promiscuous mode [ 480.663895][T16402] device veth1_macvtap entered promiscuous mode [ 480.843345][T16782] netlink: 'syz.1.4208': attribute type 3 has an invalid length. [ 480.851242][T16782] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4208'. [ 482.532536][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 482.780106][T16629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.809849][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.832225][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.854954][ T4808] wlan1: Trigger new scan to find an IBSS to join [ 482.862290][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.883914][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.893901][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.906737][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.919007][T16402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.933320][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.951530][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.981797][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 483.002901][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.024932][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.035570][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.046313][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.056566][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.067626][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.086799][T16402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.114674][T16629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.143180][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 483.153156][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 483.174747][T16402] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.191178][T16402] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.201651][T16402] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.218504][T16402] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.244761][T16790] IPv6: Can't replace route, no match found [ 483.256913][T16789] delete_channel: no stack [ 483.300447][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 483.319946][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 483.505684][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 483.515912][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 483.526014][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 483.534534][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 483.543072][T16460] device veth0_vlan entered promiscuous mode [ 483.571293][ T4196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.607885][ T4196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.621770][T16460] device veth1_vlan entered promiscuous mode [ 483.654050][T16629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 483.725779][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 483.748708][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.780710][T16629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 483.807569][ T4810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.847115][ T4810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.952204][T16629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 484.006788][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 484.019384][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 484.036771][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 484.057784][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 484.222490][T16629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 484.267851][T16460] device veth0_macvtap entered promiscuous mode [ 484.289754][T16805] delete_channel: no stack [ 484.319900][T16460] device veth1_macvtap entered promiscuous mode [ 484.525696][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.536859][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.548308][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.578037][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.595648][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.613548][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.640501][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.651694][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.677571][T16460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.707138][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 484.717358][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 484.726726][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 484.751453][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.766900][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.778553][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.789397][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.799821][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.811152][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.821788][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.832869][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.847427][T16460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.882764][T16814] netlink: 'syz.1.4218': attribute type 21 has an invalid length. [ 484.916623][T16814] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4218'. [ 484.942091][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 484.964582][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 484.997662][T16460] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.022735][T16460] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.062200][T16460] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.070970][T16460] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.185762][T16820] netlink: 'syz.1.4219': attribute type 10 has an invalid length. [ 485.197376][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4219'. [ 485.263304][T16629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.312571][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 485.320790][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.345071][T16629] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.374820][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.403259][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.424352][T14579] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.431559][T14579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.478023][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 485.550230][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.582760][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.613118][T14579] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.620245][T14579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.663394][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.687289][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.724280][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.759766][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 485.794768][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 485.809872][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 485.869852][T16831] IPv6: Can't replace route, no match found [ 485.876442][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 485.885413][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 485.893760][T16830] delete_channel: no stack [ 485.897652][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.942124][T16629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.953602][ T4808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.989843][T16629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 486.022772][ T4808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.036803][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.048678][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.073618][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 486.185803][T16844] delete_channel: no stack [ 486.262721][T14579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.281969][T14579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.306424][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 486.416459][T16857] delete_channel: no stack [ 486.421094][T16857] delete_channel: no stack [ 486.494067][T16821] chnl_net:caif_netlink_parms(): no params data found [ 486.766117][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.774143][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 486.798726][T16629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.816084][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.855087][T16867] netlink: 'syz.1.4231': attribute type 10 has an invalid length. [ 486.864204][T16867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4231'. [ 486.900156][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.926963][T16821] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.934621][T16821] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.943046][T16821] device bridge_slave_0 entered promiscuous mode [ 486.955835][T16821] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.963271][T16821] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.971566][T16821] device bridge_slave_1 entered promiscuous mode [ 486.986499][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.066090][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.097878][T16821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.128013][T16821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.186409][T16821] team0: Port device team_slave_0 added [ 487.215840][T16821] team0: Port device team_slave_1 added [ 487.254242][T13414] Bluetooth: hci1: command 0x0409 tx timeout [ 487.394345][T16821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.401337][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.491911][T16821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.520654][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 487.534207][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 487.606761][T16821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.622551][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.671306][T16821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.871816][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 487.891681][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 487.943276][T16895] IPv6: Can't replace route, no match found [ 487.953111][T16894] delete_channel: no stack [ 487.955182][T16821] device hsr_slave_0 entered promiscuous mode [ 487.983385][T16821] device hsr_slave_1 entered promiscuous mode [ 487.992749][T16821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.017838][T16821] Cannot create hsr debugfs directory [ 488.034803][T16629] device veth0_vlan entered promiscuous mode [ 488.110187][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.121317][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.204256][T16629] device veth1_vlan entered promiscuous mode [ 488.332741][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 488.341715][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 488.370870][T16916] netlink: 'syz.1.4240': attribute type 21 has an invalid length. [ 488.402530][T16916] netlink: 'syz.1.4240': attribute type 1 has an invalid length. [ 488.420801][T16916] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4240'. [ 488.504721][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.523252][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.566820][T16922] delete_channel: no stack [ 488.575324][T16629] device veth0_macvtap entered promiscuous mode [ 488.608963][T16629] device veth1_macvtap entered promiscuous mode [ 488.755499][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.766821][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.778468][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.789959][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.805896][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.821192][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.831352][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.842088][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.855421][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.871115][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.888810][T16629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.058455][T16932] netlink: 'syz.3.4244': attribute type 10 has an invalid length. [ 489.066824][T16932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4244'. [ 489.084736][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 489.096046][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 489.108627][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 489.134345][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.160672][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.178592][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.189781][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.200515][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.214696][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.225466][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.235621][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.247721][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.258819][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.270050][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.294896][T16629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.332738][T16885] Bluetooth: hci1: command 0x041b tx timeout [ 489.348683][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.367628][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.489386][T16954] FAULT_INJECTION: forcing a failure. [ 489.489386][T16954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.493309][T16629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.512028][T16954] CPU: 0 PID: 16954 Comm: syz.1.4247 Not tainted 5.15.185-syzkaller #0 [ 489.520311][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 489.530402][T16954] Call Trace: [ 489.533713][T16954] [ 489.536670][T16954] dump_stack_lvl+0x168/0x230 [ 489.541376][T16954] ? show_regs_print_info+0x20/0x20 [ 489.546591][T16954] ? load_image+0x3b0/0x3b0 [ 489.551106][T16954] ? __lock_acquire+0x7c60/0x7c60 [ 489.556574][T16954] should_fail+0x38c/0x4c0 [ 489.561004][T16954] _copy_to_user+0x2e/0x130 [ 489.565539][T16954] simple_read_from_buffer+0xe3/0x150 [ 489.571197][T16954] proc_fail_nth_read+0x19a/0x210 [ 489.576235][T16954] ? proc_fault_inject_write+0x2f0/0x2f0 [ 489.581887][T16954] ? fsnotify_perm+0x254/0x560 [ 489.586657][T16954] ? proc_fault_inject_write+0x2f0/0x2f0 [ 489.592299][T16954] vfs_read+0x2f6/0xcf0 [ 489.596475][T16954] ? kernel_read+0x1e0/0x1e0 [ 489.601076][T16954] ? __fget_files+0x40f/0x480 [ 489.605787][T16954] ? mutex_lock_nested+0x17/0x20 [ 489.610732][T16954] ? __fdget_pos+0x2bf/0x370 [ 489.615337][T16954] ? ksys_read+0x71/0x250 [ 489.619685][T16954] ksys_read+0x14d/0x250 [ 489.624038][T16954] ? vfs_write+0xd00/0xd00 [ 489.628469][T16954] ? lockdep_hardirqs_on+0x94/0x140 [ 489.633774][T16954] do_syscall_64+0x4c/0xa0 [ 489.638200][T16954] ? clear_bhb_loop+0x30/0x80 [ 489.642884][T16954] ? clear_bhb_loop+0x30/0x80 [ 489.647593][T16954] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 489.653501][T16954] RIP: 0033:0x7f5c195eb33c [ 489.657927][T16954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 489.677555][T16954] RSP: 002b:00007f5c17454030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.685998][T16954] RAX: ffffffffffffffda RBX: 00007f5c19813fa0 RCX: 00007f5c195eb33c [ 489.694088][T16954] RDX: 000000000000000f RSI: 00007f5c174540a0 RDI: 0000000000000005 [ 489.702066][T16954] RBP: 00007f5c17454090 R08: 0000000000000000 R09: 0000000000000000 [ 489.710068][T16954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.718042][T16954] R13: 0000000000000000 R14: 00007f5c19813fa0 R15: 00007fff8fcbb928 [ 489.726037][T16954] [ 489.771246][T16629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.788488][T16629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.799663][T16629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.831720][ T4219] Bluetooth: hci2: command 0x0409 tx timeout [ 489.860828][T16959] IPv6: Can't replace route, no match found [ 489.924161][T16955] delete_channel: no stack [ 490.000369][T16892] chnl_net:caif_netlink_parms(): no params data found [ 490.109014][ T4196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.144643][ T4196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.235954][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 490.263651][T14579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.331609][T14579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.385974][T16892] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.393934][T16892] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.402671][T16892] device bridge_slave_0 entered promiscuous mode [ 490.413255][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.421036][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.430057][T16892] device bridge_slave_1 entered promiscuous mode [ 490.488642][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.540554][T16892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.571974][T16982] delete_channel: no stack [ 490.581715][T16892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.819626][T16821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 490.909117][T16892] team0: Port device team_slave_0 added [ 490.958185][T16821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 490.994856][T16821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 491.016148][T16892] team0: Port device team_slave_1 added [ 491.129438][T16821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 491.207049][T17000] device syzkaller0 entered promiscuous mode [ 491.267156][T16892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.276643][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.304994][T16892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.375956][T16892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.384736][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.412699][ T4219] Bluetooth: hci1: command 0x040f tx timeout [ 491.416925][T16892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.558517][T17010] netlink: 'syz.1.4257': attribute type 10 has an invalid length. [ 491.577491][T17010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4257'. [ 491.672454][T16892] device hsr_slave_0 entered promiscuous mode [ 491.711524][T16892] device hsr_slave_1 entered promiscuous mode [ 491.720691][T16892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.743309][T16892] Cannot create hsr debugfs directory [ 491.902829][T16779] Bluetooth: hci2: command 0x041b tx timeout [ 491.922689][ T9] device hsr_slave_0 left promiscuous mode [ 491.952563][ T9] device hsr_slave_1 left promiscuous mode [ 491.963120][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.989577][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.023174][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.030695][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.081107][ T9] device bridge_slave_1 left promiscuous mode [ 492.092338][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.101510][ T9] device bridge_slave_0 left promiscuous mode [ 492.116122][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.263741][ T9] device hsr_slave_0 left promiscuous mode [ 492.270728][ T9] device hsr_slave_1 left promiscuous mode [ 492.290858][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.306235][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.325587][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.333302][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.341222][ T9] device bridge_slave_1 left promiscuous mode [ 492.348134][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.357136][ T9] device bridge_slave_0 left promiscuous mode [ 492.364017][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.382292][ T9] device veth1_macvtap left promiscuous mode [ 492.388457][ T9] device veth0_macvtap left promiscuous mode [ 492.394926][ T9] device veth1_vlan left promiscuous mode [ 492.400789][ T9] device veth0_vlan left promiscuous mode [ 492.408890][ T9] device veth1_macvtap left promiscuous mode [ 492.415448][ T9] device veth0_macvtap left promiscuous mode [ 492.421560][ T9] device veth1_vlan left promiscuous mode [ 492.428775][ T9] device veth0_vlan left promiscuous mode [ 492.748594][ T9] team0 (unregistering): Port device team_slave_1 removed [ 492.764827][ T9] team0 (unregistering): Port device team_slave_0 removed [ 492.769471][T17028] delete_channel: no stack [ 492.781631][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.801568][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.904442][ T9] bond0 (unregistering): Released all slaves [ 493.052213][ T9] team0 (unregistering): Port device team_slave_1 removed [ 493.072547][ T9] team0 (unregistering): Port device team_slave_0 removed [ 493.088034][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.109385][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.187805][ T9] bond0 (unregistering): Released all slaves [ 493.255859][T17030] IPv6: Can't replace route, no match found [ 493.264785][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 493.358820][T16821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.419439][T17039] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 493.494499][ T4224] Bluetooth: hci1: command 0x0419 tx timeout [ 493.503563][T17039] batman_adv: batadv0: Adding interface: team0 [ 493.510838][T17039] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.547178][T17039] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 493.637413][T17044] delete_channel: no stack [ 493.723159][T16821] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.732661][ T4224] Bluetooth: hci0: command 0x0409 tx timeout [ 493.784479][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 493.793282][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 493.801134][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.812354][ T4808] wlan1: Trigger new scan to find an IBSS to join [ 493.819578][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.829305][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.836468][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.844551][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 493.853983][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.862498][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.869580][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.881345][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 493.939499][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 493.967559][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 493.972534][T14376] Bluetooth: hci2: command 0x040f tx timeout [ 493.993727][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 494.022807][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 494.032272][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 494.041811][T17054] sctp: [Deprecated]: syz.1.4267 (pid 17054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.041811][T17054] Use struct sctp_sack_info instead [ 494.064336][T16892] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.088249][T17016] chnl_net:caif_netlink_parms(): no params data found [ 494.101006][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 494.111214][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 494.129495][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 494.148467][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.172012][T16821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.189839][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 494.198965][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.209096][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.230088][T16892] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.298611][T16892] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.344406][T17016] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.351573][T17016] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.363870][T17016] device bridge_slave_0 entered promiscuous mode [ 494.384902][T16892] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.399139][T17016] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.418030][T17016] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.426865][T17016] device bridge_slave_1 entered promiscuous mode [ 494.499006][T17016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.516240][T17016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.610251][T17063] FAULT_INJECTION: forcing a failure. [ 494.610251][T17063] name failslab, interval 1, probability 0, space 0, times 0 [ 494.623429][T17063] CPU: 1 PID: 17063 Comm: syz.3.4268 Not tainted 5.15.185-syzkaller #0 [ 494.631702][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.641965][T17063] Call Trace: [ 494.645272][T17063] [ 494.648225][T17063] dump_stack_lvl+0x168/0x230 [ 494.652925][T17063] ? show_regs_print_info+0x20/0x20 [ 494.658145][T17063] ? load_image+0x3b0/0x3b0 [ 494.662675][T17063] ? __might_sleep+0xf0/0xf0 [ 494.667300][T17063] ? __lock_acquire+0x7c60/0x7c60 [ 494.672373][T17063] should_fail+0x38c/0x4c0 [ 494.676845][T17063] should_failslab+0x5/0x20 [ 494.681384][T17063] slab_pre_alloc_hook+0x51/0xc0 [ 494.686356][T17063] ? __alloc_file+0x25/0x240 [ 494.690981][T17063] kmem_cache_alloc+0x3d/0x290 [ 494.695770][T17063] __alloc_file+0x25/0x240 [ 494.700303][T17063] alloc_empty_file+0x90/0x180 [ 494.705217][T17063] alloc_file+0x5b/0x4f0 [ 494.709566][T17063] ? do_raw_spin_unlock+0x11d/0x230 [ 494.714791][T17063] alloc_file_pseudo+0x17a/0x1f0 [ 494.719756][T17063] ? alloc_empty_file_noaccount+0x80/0x80 [ 494.725498][T17063] ? __lock_acquire+0x7c60/0x7c60 [ 494.730539][T17063] ? __local_bh_enable_ip+0x12a/0x1b0 [ 494.735933][T17063] ? _local_bh_enable+0xa0/0xa0 [ 494.740815][T17063] anon_inode_getfile+0xc1/0x1a0 [ 494.745787][T17063] bpf_link_prime+0x125/0x270 [ 494.750497][T17063] bpf_raw_tracepoint_open+0x4bc/0x780 [ 494.755973][T17063] ? ksys_write+0x1c7/0x250 [ 494.760514][T17063] ? bpf_obj_get_info_by_fd+0x2a80/0x2a80 [ 494.766268][T17063] ? __might_fault+0xb3/0x110 [ 494.770972][T17063] ? bpf_lsm_bpf+0x5/0x10 [ 494.775311][T17063] ? security_bpf+0x7a/0xa0 [ 494.779842][T17063] __sys_bpf+0x48b/0x670 [ 494.784106][T17063] ? bpf_link_show_fdinfo+0x310/0x310 [ 494.789529][T17063] ? vtime_user_exit+0x2dc/0x400 [ 494.794498][T17063] __x64_sys_bpf+0x78/0x90 [ 494.798941][T17063] do_syscall_64+0x4c/0xa0 [ 494.803383][T17063] ? clear_bhb_loop+0x30/0x80 [ 494.808265][T17063] ? clear_bhb_loop+0x30/0x80 [ 494.813055][T17063] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 494.818984][T17063] RIP: 0033:0x7f2d31d2d929 [ 494.823427][T17063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.843053][T17063] RSP: 002b:00007f2d2fb95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.851496][T17063] RAX: ffffffffffffffda RBX: 00007f2d31f54fa0 RCX: 00007f2d31d2d929 [ 494.859496][T17063] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 494.867494][T17063] RBP: 00007f2d2fb95090 R08: 0000000000000000 R09: 0000000000000000 [ 494.875571][T17063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.883557][T17063] R13: 0000000000000000 R14: 00007f2d31f54fa0 R15: 00007ffcd6b6c088 [ 494.891571][T17063] [ 494.960926][T17016] team0: Port device team_slave_0 added [ 494.996865][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 495.043034][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.076826][T16821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.104674][T17016] team0: Port device team_slave_1 added [ 495.120720][T17065] netlink: 'syz.3.4269': attribute type 10 has an invalid length. [ 495.160915][T17067] netlink: 'syz.1.4270': attribute type 10 has an invalid length. [ 495.169570][T17067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4270'. [ 495.220421][T17016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.239890][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.281007][T17016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.300301][T16892] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 495.330380][T17016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.346204][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.427490][T17016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.447191][T16892] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 495.469331][T16892] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 495.502485][T16892] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 495.528992][T17074] IPv6: Can't replace route, no match found [ 495.560223][T17072] delete_channel: no stack [ 495.568241][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.585832][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.715143][T17079] netlink: 'syz.1.4275': attribute type 21 has an invalid length. [ 495.732439][T17079] netlink: 'syz.1.4275': attribute type 1 has an invalid length. [ 495.769863][T17016] device hsr_slave_0 entered promiscuous mode [ 495.782208][T17080] delete_channel: no stack [ 495.802961][T17016] device hsr_slave_1 entered promiscuous mode [ 495.812651][ T4158] Bluetooth: hci0: command 0x041b tx timeout [ 495.880188][T17082] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.972546][T17082] device bridge_slave_0 left promiscuous mode [ 495.992335][T17082] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.037327][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.053358][ T4158] Bluetooth: hci2: command 0x0419 tx timeout [ 496.055044][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.086494][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.100758][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.193380][T16821] device veth0_vlan entered promiscuous mode [ 496.246154][T16821] device veth1_vlan entered promiscuous mode [ 496.366605][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 496.394477][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 496.526786][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.543317][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.567721][T16892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.587273][T16821] device veth0_macvtap entered promiscuous mode [ 496.624836][T17016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.665196][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.680122][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.691643][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.704283][T16821] device veth1_macvtap entered promiscuous mode [ 496.732761][T16892] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.754940][T17016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.778567][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.794096][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.813280][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.831843][ T4820] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.839048][ T4820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.848127][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 496.868914][T16821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.879747][T16821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.891363][T16821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.902725][T16821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.912909][T16821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.923456][T16821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.934241][T16821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.944937][T16821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.956541][T16821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.986152][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 497.000372][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 497.009910][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.020363][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.037151][ T4810] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.044356][ T4810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.079905][T17016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.099785][T16821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.111420][T16821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.121800][T16821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.133054][T16821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.142957][T16821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.154561][T16821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.172087][T16821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.183591][T16821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.195701][T16821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.219653][T17016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.231986][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 497.244678][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 497.265516][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.290466][T17103] netlink: 'syz.3.4284': attribute type 10 has an invalid length. [ 497.299465][T17103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4284'. [ 497.312565][T16821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.323162][T16821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.332059][T16821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.342032][T16821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.358314][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.380046][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.405417][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.460661][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.471307][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.481324][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.506573][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.534075][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.549704][T16892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.562767][T16892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.572468][T17105] IPv6: Can't replace route, no match found [ 497.590015][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.599118][T17104] delete_channel: no stack [ 497.601530][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.657928][T17109] delete_channel: no stack [ 497.789635][ T4196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.809984][ T4196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.821328][ T4820] wlan1: Trigger new scan to find an IBSS to join [ 497.864775][T17016] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 497.892842][ T4158] Bluetooth: hci0: command 0x040f tx timeout [ 497.911954][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 497.934775][T17016] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 497.943716][ T4820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.000552][ T4820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.112830][T17016] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.170606][T17016] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.184651][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 498.210033][T17121] netlink: 'syz.1.4290': attribute type 21 has an invalid length. [ 498.224968][T17121] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4290'. [ 498.239771][T17121] netlink: 'syz.1.4290': attribute type 1 has an invalid length. [ 498.276945][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.286314][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.375693][T16892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.743764][T17016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.769214][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 498.781158][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.796370][T17016] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.833893][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 498.846202][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.858461][ T4810] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.865667][ T4810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.875163][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 498.884447][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.893466][ T4810] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.900765][ T4810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.920345][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 498.931001][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 498.944030][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 498.983201][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 499.001093][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 499.011123][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 499.041873][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 499.049927][ C0] ------------[ cut here ]------------ [ 499.049957][ C0] WARNING: CPU: 0 PID: 4810 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 499.050005][ C0] Modules linked in: [ 499.050017][ C0] CPU: 0 PID: 4810 Comm: kworker/u4:11 Not tainted 5.15.185-syzkaller #0 [ 499.050039][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.050052][ C0] Workqueue: events_unbound linkwatch_event [ 499.050071][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 499.050091][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ad e2 d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 df d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 499.050106][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00010006 [ 499.050120][ C0] RAX: ffffffff819fe2f0 RBX: 0000000000000008 RCX: ffff888028178000 [ 499.050138][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.050148][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100502f001 [ 499.050160][ C0] R10: ffffed100502f001 R11: 1ffff1100502f000 R12: ffff888028179788 [ 499.050173][ C0] R13: 00007ffffffff000 R14: ffffc90000007cc8 R15: 0000000020000000 [ 499.050185][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 499.050199][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.050211][ C0] CR2: 00007fc4f09a3740 CR3: 000000000be8e000 CR4: 00000000003506f0 [ 499.050225][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 499.050236][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 499.050246][ C0] Call Trace: [ 499.050254][ C0] [ 499.050265][ C0] bpf_probe_read_compat+0xdd/0x170 [ 499.050295][ C0] bpf_prog_bcff4640d6a7c5a9+0x5e/0x42c [ 499.050313][ C0] bpf_trace_run2+0x15b/0x2d0 [ 499.050330][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 499.050348][ C0] ? ktime_get+0x7b/0x270 [ 499.050370][ C0] trace_tlb_flush+0xe6/0x110 [ 499.050388][ C0] switch_mm_irqs_off+0x6e3/0x9a0 [ 499.050408][ C0] ? switch_mm+0x120/0x120 [ 499.050431][ C0] flush_tlb_func+0x1bc/0x510 [ 499.050445][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 499.050461][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 499.050484][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 499.050503][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 499.050521][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 499.050535][ C0] flush_smp_call_function_queue+0x2a9/0x760 [ 499.050560][ C0] __sysvec_call_function_single+0x98/0x240 [ 499.050580][ C0] sysvec_call_function_single+0x98/0xc0 [ 499.050600][ C0] [ 499.050605][ C0] [ 499.050612][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 499.050629][ C0] RIP: 0010:console_unlock+0xd90/0x1200 [ 499.050649][ C0] Code: 00 48 83 7c 24 28 00 75 19 e8 ec 9e 18 00 eb 18 e8 e5 9e 18 00 e8 80 49 42 08 48 83 7c 24 28 00 74 e7 e8 d3 9e 18 00 fb 31 ff <89> de e8 29 a2 18 00 85 db 0f 94 c0 22 44 24 17 3c 01 75 1f e8 b7 [ 499.050662][ C0] RSP: 0018:ffffc900034b7620 EFLAGS: 00000246 [ 499.050676][ C0] RAX: ffffffff815f234d RBX: 0000000000000000 RCX: ffff888028178000 [ 499.050688][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.050697][ C0] RBP: ffffc900034b7890 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 499.050710][ C0] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: 1ffffffff194c725 [ 499.050722][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffffffff194c71e [ 499.050739][ C0] ? console_unlock+0xd8d/0x1200 [ 499.050770][ C0] ? console_trylock_spinning+0x350/0x350 [ 499.050788][ C0] ? __down_trylock_console_sem+0xeb/0x1e0 [ 499.050807][ C0] ? __down_trylock_console_sem+0x184/0x1e0 [ 499.050822][ C0] ? vprintk_emit+0xa7/0x150 [ 499.050840][ C0] ? printk_parse_prefix+0x330/0x330 [ 499.050857][ C0] ? vprintk_emit+0xa7/0x150 [ 499.050875][ C0] ? console_trylock+0x70/0x70 [ 499.050901][ C0] ? vprintk_emit+0x150/0x150 [ 499.050919][ C0] ? tee_netdev_event+0x84/0x440 [ 499.050939][ C0] ? mark_lock+0x94/0x320 [ 499.050959][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 499.050981][ C0] vprintk_emit+0xc0/0x150 [ 499.051002][ C0] _printk+0xcc/0x110 [ 499.051022][ C0] ? load_image+0x3b0/0x3b0 [ 499.051036][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 499.051059][ C0] ? addrconf_link_ready+0x116/0x170 [ 499.051080][ C0] addrconf_notify+0xa5b/0xf00 [ 499.051103][ C0] raw_notifier_call_chain+0xcb/0x160 [ 499.051124][ C0] netdev_state_change+0xd2/0x140 [ 499.051141][ C0] ? netdev_features_change+0xc0/0xc0 [ 499.051155][ C0] ? dev_activate+0xaf0/0x12b0 [ 499.051178][ C0] ? __netdev_watchdog_up+0x99/0x210 [ 499.051197][ C0] linkwatch_do_dev+0x10d/0x160 [ 499.051214][ C0] __linkwatch_run_queue+0x4a9/0x7b0 [ 499.051235][ C0] ? linkwatch_run_queue+0x10/0x10 [ 499.051250][ C0] ? try_to_wake_up+0x6cf/0x1050 [ 499.051275][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 499.051303][ C0] linkwatch_event+0x48/0x50 [ 499.051317][ C0] process_one_work+0x863/0x1000 [ 499.051347][ C0] ? worker_detach_from_pool+0x240/0x240 [ 499.051363][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 499.051384][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 499.051402][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 499.051422][ C0] ? wq_worker_running+0x97/0x170 [ 499.051440][ C0] worker_thread+0xaa8/0x12a0 [ 499.051478][ C0] kthread+0x436/0x520 [ 499.051493][ C0] ? rcu_lock_release+0x20/0x20 [ 499.051507][ C0] ? kthread_blkcg+0xd0/0xd0 [ 499.051524][ C0] ret_from_fork+0x1f/0x30 [ 499.051552][ C0] [ 499.051564][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 499.051573][ C0] CPU: 0 PID: 4810 Comm: kworker/u4:11 Not tainted 5.15.185-syzkaller #0 [ 499.051589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.051599][ C0] Workqueue: events_unbound linkwatch_event [ 499.051614][ C0] Call Trace: [ 499.051620][ C0] [ 499.051626][ C0] dump_stack_lvl+0x168/0x230 [ 499.051645][ C0] ? show_regs_print_info+0x20/0x20 [ 499.051660][ C0] ? load_image+0x3b0/0x3b0 [ 499.051685][ C0] panic+0x2c9/0x7f0 [ 499.051707][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 499.051730][ C0] ? ret_from_fork+0x1f/0x30 [ 499.051748][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 499.051768][ C0] __warn+0x248/0x2b0 [ 499.051785][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 499.051806][ C0] report_bug+0x1b7/0x2e0 [ 499.051826][ C0] handle_bug+0x3a/0x70 [ 499.051842][ C0] exc_invalid_op+0x16/0x40 [ 499.051858][ C0] asm_exc_invalid_op+0x16/0x20 [ 499.051873][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 499.051891][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ad e2 d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 df d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 499.051906][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00010006 [ 499.051919][ C0] RAX: ffffffff819fe2f0 RBX: 0000000000000008 RCX: ffff888028178000 [ 499.051932][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.051942][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100502f001 [ 499.051954][ C0] R10: ffffed100502f001 R11: 1ffff1100502f000 R12: ffff888028179788 [ 499.051966][ C0] R13: 00007ffffffff000 R14: ffffc90000007cc8 R15: 0000000020000000 [ 499.051984][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 499.052010][ C0] bpf_probe_read_compat+0xdd/0x170 [ 499.052032][ C0] bpf_prog_bcff4640d6a7c5a9+0x5e/0x42c [ 499.052049][ C0] bpf_trace_run2+0x15b/0x2d0 [ 499.052066][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 499.052083][ C0] ? ktime_get+0x7b/0x270 [ 499.052104][ C0] trace_tlb_flush+0xe6/0x110 [ 499.052120][ C0] switch_mm_irqs_off+0x6e3/0x9a0 [ 499.052143][ C0] ? switch_mm+0x120/0x120 [ 499.052169][ C0] flush_tlb_func+0x1bc/0x510 [ 499.052187][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 499.052205][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 499.052231][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 499.052252][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 499.052275][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 499.052295][ C0] flush_smp_call_function_queue+0x2a9/0x760 [ 499.052317][ C0] __sysvec_call_function_single+0x98/0x240 [ 499.052335][ C0] sysvec_call_function_single+0x98/0xc0 [ 499.052353][ C0] [ 499.052359][ C0] [ 499.052366][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 499.052381][ C0] RIP: 0010:console_unlock+0xd90/0x1200 [ 499.052400][ C0] Code: 00 48 83 7c 24 28 00 75 19 e8 ec 9e 18 00 eb 18 e8 e5 9e 18 00 e8 80 49 42 08 48 83 7c 24 28 00 74 e7 e8 d3 9e 18 00 fb 31 ff <89> de e8 29 a2 18 00 85 db 0f 94 c0 22 44 24 17 3c 01 75 1f e8 b7 [ 499.052413][ C0] RSP: 0018:ffffc900034b7620 EFLAGS: 00000246 [ 499.052428][ C0] RAX: ffffffff815f234d RBX: 0000000000000000 RCX: ffff888028178000 [ 499.052440][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.052449][ C0] RBP: ffffc900034b7890 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 499.052462][ C0] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: 1ffffffff194c725 [ 499.052474][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffffffff194c71e [ 499.052491][ C0] ? console_unlock+0xd8d/0x1200 [ 499.052521][ C0] ? console_trylock_spinning+0x350/0x350 [ 499.052539][ C0] ? __down_trylock_console_sem+0xeb/0x1e0 [ 499.052558][ C0] ? __down_trylock_console_sem+0x184/0x1e0 [ 499.052573][ C0] ? vprintk_emit+0xa7/0x150 [ 499.052590][ C0] ? printk_parse_prefix+0x330/0x330 [ 499.052607][ C0] ? vprintk_emit+0xa7/0x150 [ 499.052625][ C0] ? console_trylock+0x70/0x70 [ 499.052651][ C0] ? vprintk_emit+0x150/0x150 [ 499.052668][ C0] ? tee_netdev_event+0x84/0x440 [ 499.052686][ C0] ? mark_lock+0x94/0x320 [ 499.052706][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 499.052728][ C0] vprintk_emit+0xc0/0x150 [ 499.052748][ C0] _printk+0xcc/0x110 [ 499.052767][ C0] ? load_image+0x3b0/0x3b0 [ 499.052780][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 499.052801][ C0] ? addrconf_link_ready+0x116/0x170 [ 499.052821][ C0] addrconf_notify+0xa5b/0xf00 [ 499.052842][ C0] raw_notifier_call_chain+0xcb/0x160 [ 499.052863][ C0] netdev_state_change+0xd2/0x140 [ 499.052879][ C0] ? netdev_features_change+0xc0/0xc0 [ 499.052893][ C0] ? dev_activate+0xaf0/0x12b0 [ 499.052915][ C0] ? __netdev_watchdog_up+0x99/0x210 [ 499.052934][ C0] linkwatch_do_dev+0x10d/0x160 [ 499.052951][ C0] __linkwatch_run_queue+0x4a9/0x7b0 [ 499.052971][ C0] ? linkwatch_run_queue+0x10/0x10 [ 499.052986][ C0] ? try_to_wake_up+0x6cf/0x1050 [ 499.053004][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 499.053026][ C0] linkwatch_event+0x48/0x50 [ 499.053042][ C0] process_one_work+0x863/0x1000 [ 499.053070][ C0] ? worker_detach_from_pool+0x240/0x240 [ 499.053087][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 499.053108][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 499.053125][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 499.053146][ C0] ? wq_worker_running+0x97/0x170 [ 499.053163][ C0] worker_thread+0xaa8/0x12a0 [ 499.053206][ C0] kthread+0x436/0x520 [ 499.053220][ C0] ? rcu_lock_release+0x20/0x20 [ 499.053240][ C0] ? kthread_blkcg+0xd0/0xd0 [ 499.053256][ C0] ret_from_fork+0x1f/0x30 [ 499.053292][ C0] [ 499.053520][ C0] Kernel Offset: disabled [ 500.140520][ C0] Rebooting in 86400 seconds..