last executing test programs: 5.465534459s ago: executing program 3 (id=7864): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES64=0x0], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r5 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b", 0x13}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x3ff, 0x2, 0xfffffffb, 0x6800, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) 5.227928834s ago: executing program 2 (id=7877): r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0xaf, 0xd, 0x5, 0x9, 0x0, 0x7, 0xc1a08, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x353, 0x0, @perf_bp, 0x504c, 0x0, 0x0, 0x3, 0x1, 0x9e93, 0x8, 0x0, 0x5, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x58, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x1, @perf_config_ext={0x100000005}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=[0x0], 0x0, 0x5a, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101ea8, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x51}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400020416000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x2) 5.131123276s ago: executing program 3 (id=7868): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0xfffffed2, &(0x7f0000000300)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@enum64={0x2, 0x4, 0x0, 0x13, 0x1, 0xfede3ba1b2649ee9, [{0x5, 0x91d, 0x4}, {0x6, 0x6, 0xbcd}, {0x5, 0x101, 0x8000}, {0x4, 0x2f0, 0xfffffffd}]}, @float={0xc}]}, {0x0, [0x5f]}}, &(0x7f0000000740)=""/130, 0x63, 0x82, 0x0, 0x1000, 0x10000, @value=r2}, 0x28) write$cgroup_pressure(r2, &(0x7f0000000040)={'some', 0x20, 0x8, 0x20, 0xa}, 0x2f) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000000), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0b621f2aee0c8fb8713c8"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b", 0x13}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500070008ffffffbd0301000000000095000000000000006916320000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e720000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000ff03000002000000fbffffff00680000", @ANYRES32, @ANYBLOB="b31640000000d856484949dabb4ef6ff0000001fda73514068050034caafea8a0abc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000005c0)={'ipvlan1\x00', @local}) 4.96983489s ago: executing program 1 (id=7869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x8, [@typedef={0xf, 0x0, 0x0, 0x8, 0x3}, @func={0x6, 0x0, 0x0, 0xc, 0x2}, @ptr={0xd, 0x0, 0x0, 0x2, 0x1}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x5a, 0x0, 0x5b, 0x4}, @func={0xe, 0x0, 0x0, 0xc, 0x3}, @float={0x3, 0x0, 0x0, 0x10, 0x10}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x5f, 0x30, 0x5f, 0x30, 0x0, 0x0]}}, &(0x7f0000000140)=""/38, 0x78, 0x26, 0x1, 0xabca, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002900)={r1, 0x20, &(0x7f00000028c0)={&(0x7f00000008c0)=""/4096, 0x1000, 0x0, &(0x7f00000018c0)=""/4096, 0x1000}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x8840080, &(0x7f0000000200)="fd55276edc1dffe22e6a3e19c5f0cf58870891d81a5b507ebd47425f0a4ca574b37f320fa2555ae36cb57f80f603b090eca3a746f34928293389fd2c0c8d835a25ce3972fef5eb943a7eb058a6eb80ccdc3083f88ea749ff8a4aca88efb06caf2533a6f04f15a10039e6", 0x6a, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="a8d32c9c90d624449e06b9809d49a7933e5d982e786a9bcdf83fd3fcb9080eeb7e14d32386c076a28ab27c6b38601e64bcc5be3704f15745e7008026773fd41683f4507470b10010c6565a8e976ca842244f3eb75c5c8dbaa117c260ddfc6d11dcdc28083a78be1e6031499396362634f64bed6199e3f29c83e85671a1d482471a39d59996b93a379e890dca19701de79af60429cc5618d4da1b7d84da9b367aa7a492908d6cc23cd2784b7015f23841f1e4b4895e226b5b3f4a958c1c7c761a372dffd3c81d24d54728c8c7c06183401ec2821ae96a17137f72f5e484588137cb208557e8828702a06abce083d94ba06fda5d5a8c72abeaa1ee4b0d") 4.529485501s ago: executing program 1 (id=7872): socket$kcm(0xa, 0x3, 0x73) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)}, 0x4000001) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) (async) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) gettid() (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac14"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r3, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)=r4}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x18, 0x9, 0x101, 0x0, 0x6b200, r3, 0x1141, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) (async) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x48004) setsockopt$sock_attach_bpf(r6, 0x1, 0x23, &(0x7f0000000000), 0x4) (async) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) 4.423391993s ago: executing program 0 (id=7873): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.//\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000001cc0)={0x0, 0x80, 0x0, 0x6, 0xf9, 0x0, 0x0, 0x7fffffffffffffff, 0xe1200, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x14d5, 0x2, @perf_config_ext={0x13a, 0x9c6}, 0x1420, 0x1000, 0x200, 0x4, 0x4000, 0x7ff, 0x3, 0x0, 0x80000000, 0x0, 0x9}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000d35a0800000000000000d906885c11eaee6586f2aad0ee381807607a548a6baea7c80553538b570657a61903b0387c039e8d23f0806f5b5d90fff075e50ccfc8b6bbcffab6ae6257b587cca84ee17595193d013a573afb294c2a5e779fdcf508ba9d59cddae860565fc8fe3ea9fa589294539793847f8fc5bb7fdd6645d63fd16cfe28812003c38ec5b3f0438890da9d01b65e695261099cded8a93d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) recvmsg(r6, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.108241731s ago: executing program 1 (id=7874): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, @perf_bp={&(0x7f0000000100)}, 0x10c002, 0xac60, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188e6b64f8acb31fbe467bff8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 4.101515111s ago: executing program 4 (id=7875): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x202000, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x891b, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000010080000000300000000000011030000000000000000000000010000040400ecb4f50ed002e2a8d6a3f65103000000000000"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x66419, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c402, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000a00000000000000000000000000000000b7f7295f2fa42ccd4b5c2cfcc07531d5cd61f465398eb94290bc70742d93357eb80ac8399a4318ba167e32cbf7de1f91e69cf6befb8508b3030000000000000070fac320e9d92e3f754901fc1485b19b5b59da554ed3b5d8a281", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) socket$kcm(0x10, 0x2, 0x0) 3.988679184s ago: executing program 3 (id=7876): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000240)={r3}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 3.858962597s ago: executing program 0 (id=7878): socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000240)="e2ef1844abff7ff7de1f69086e5910eff9d5118be02d46215f9f363921c4ce3a81ca005e350f15d62c5034f03cb36acf8135e91dbe14fb360753d990af056bc62a8bcf37a1b4bb8421b5e2094ed981f76a0f3c281666509900ca0ac43df449f1017bb601c476c6844de625e1e2d2315cd4ab9084e0df00edbf2bc8e5fc0ef1954f6f8add464c85398aea048dc243d2365d485098e762b578e74eef943e22ff0e8ccb768d6318e19aae0bedfda80d1161896680c6af9996d7763bd30f06e3d96542f6339ee6ce", 0xc6}], 0x1, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}, 0x4000091) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) (async) r1 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x30008800, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040), 0x0, 0x0, 0x0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1d876, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000100), 0xf}, 0x840, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async, rerun: 64) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x3a, 0x0, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) (rerun: 64) close(r3) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x845) (async) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) write$cgroup_subtree(r4, 0x0, 0x97) 3.74323964s ago: executing program 4 (id=7879): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x1e, 0x8, 0x4, 0x0, 0x0, 0x5, 0x180, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x99f0, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x600, 0x4, 0x9, 0x5, 0xfffffffffffffff8, 0x2, 0xd35, 0x0, 0x9, 0x0, 0x3}, r1, 0xf, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000050000f9be09000000000000650901000000000066000000060000002c930000000000008500000076000000b7000000000000009500"/96], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) socket$kcm(0x2, 0x2, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r5, 0x29, 0x15, &(0x7f00000000c0), 0xb9) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890c, &(0x7f0000000100)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688110000000000", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.73671597s ago: executing program 3 (id=7880): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.//\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000001cc0)={0x0, 0x80, 0x0, 0x6, 0xf9, 0x0, 0x0, 0x7fffffffffffffff, 0xe1200, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x14d5, 0x2, @perf_config_ext={0x13a, 0x9c6}, 0x1420, 0x1000, 0x200, 0x4, 0x4000, 0x7ff, 0x3, 0x0, 0x80000000, 0x0, 0x9}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000d35a0800000000000000d906885c11eaee6586f2aad0ee381807607a548a6baea7c80553538b570657a61903b0387c039e8d23f0806f5b5d90fff075e50ccfc8b6bbcffab6ae6257b587cca84ee17595193d013a573afb294c2a5e779fdcf508ba9d59cddae860565fc8fe3ea9fa589294539793847f8fc5bb7fdd6645d63fd16cfe28812003c38ec5b3f0438890da9d01b65e695261099cded8a93d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) recvmsg(r5, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.657971072s ago: executing program 0 (id=7881): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.//\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000001cc0)={0x0, 0x80, 0x0, 0x6, 0xf9, 0x0, 0x0, 0x7fffffffffffffff, 0xe1200, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x14d5, 0x2, @perf_config_ext={0x13a, 0x9c6}, 0x1420, 0x1000, 0x200, 0x4, 0x4000, 0x7ff, 0x3, 0x0, 0x80000000, 0x0, 0x9}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000d35a0800000000000000d906885c11eaee6586f2aad0ee381807607a548a6baea7c80553538b570657a61903b0387c039e8d23f0806f5b5d90fff075e50ccfc8b6bbcffab6ae6257b587cca84ee17595193d013a573afb294c2a5e779fdcf508ba9d59cddae860565fc8fe3ea9fa589294539793847f8fc5bb7fdd6645d63fd16cfe28812003c38ec5b3f0438890da9d01b65e695261099cded8a93d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) recvmsg(r5, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.551287504s ago: executing program 2 (id=7882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 32) r1 = getpid() (async, rerun: 32) socketpair(0x10, 0xa, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x403, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x27, 0x0, 0x2, 0x7, 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4, r0}, 0xc) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6) (async) r7 = getpid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1) (async) sendmsg$unix(r2, &(0x7f0000000c80)={&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80), 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14e7e5d47180527908461b14000000000100"/27, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYRES32], 0x70, 0x880}, 0x4048c25) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x2, 0x3, 0xc, 0x0, 0x5, 0x1000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp, 0x18, 0x6, 0xa0000000, 0x3, 0x5, 0x3b, 0x518b, 0x0, 0x3ff, 0x0, 0xd3f}, r1, 0x0, r6, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.343490599s ago: executing program 3 (id=7883): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000140)={0x2, 0xa0, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffff8}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x5, 0x0, &(0x7f0000000180)="0005000000", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) close(r4) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) 3.264019181s ago: executing program 1 (id=7885): r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x640000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075}, 0x38) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xa8, &(0x7f0000001ec0)=""/168, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000)=r1, 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x5, 0x0, 0x0, 0x10, 0xfffe, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x9, 0x0, 0x0, 0x0, 0x9, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000f000000000006b0f000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85febf0fc9"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r6], 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000c0000000800000040000000c0400000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r5, 0x0, 0xaf, 0x94, &(0x7f0000000b00)="2066c39b0d5d96e0989bec2076eb60ce8a944618399840ab83c0c1d7a8a5290d6a8469103169faf52868ccdbb1ddd01865e2d948d34dab4e8f0c864cbf191e41ebdb45c120ee3de6d065e1c3379710b3da1a92bf70ee96816876951865b05a3bad5bb2536e4e052e9460ff234de0ee1b1bb9cb8348df2be4e2611fcffd7a6afd19863f231c8d9f17cf7598f3240319597ee67dce8eea74b261e001965aead1edcfc179c30df7382740e1adecc93dc6", &(0x7f0000000c40)=""/148, 0x9, 0x0, 0x8e, 0x86, &(0x7f0000000d00)="f4833361b9237cbc7f68b4409cd2c403107b4006c135ac5392b304fcfde94c6cf78b7bf99625f94ebf476b3bb0c6c664e7009bb4507f04ef171be560afb899f44f88cf667ec6b6795bc7dad021edf559b7c7022b7083b15e20173b418bdf9bd5b99aaa8fdf4b0333a57d23bd24faa4a637fe505bcdd8d6b445054092479d722c491cf3cbbda5a579c9c13debf2ce", &(0x7f0000000dc0)="6637c982b80a9e13369fda6ddaa04f0a882ced30c8822a5a932f188eda985cb7c27fc03e1d7550f84177c223a6bcfda37d8dfe097333a247b4c73497b8f6518fd12ce8f6e2a251e8bd7574eafd556032a878b41806e4198ec33fcd6b3c0d62ba0978df469209c1a27014377fc5b4bdf6d2dbe9448a93cbad235c98fa4e3d141c21162b672c44", 0x4, 0x0, 0xf}, 0x50) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x10c002, 0xac5d, 0x0, 0x1, 0x20000000, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x62035, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000f14ff84000000000000fb000000000000001e4d115090eb0c993b85534d1dc003a226a771e9c789fc56d6167d045410bab8f3672e0fb0e85c00100dc7c696ca86fca17a04cedfda47452b1d5431b0d32eb8006bddca476081dbadc0b2e6150acdf1b9dc00b5aab51afa05665da9303b26c2ff08c2d38bea65bccacb3a579379b42f5852781ca950dd4312c57e51e727b4095481d1877c10cc6d7316264eaf107d185672a8ead39788012bed7733825fd1ade50786bf3ec11786478f3f7ee50000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b700000000d080da48af68185b0000009500000000000000442d4a4a8a87142f951d7f12edcd9b4fa7d13d2fdd4d32c37408ef802f0944f33e6b56162902d505f76bc6cd17b77902ee30307c34ad48c5f7f6f0eb4fc1ac1798ea7b368a88ec665f6eb430a5901296b596"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r7}, 0x8) 3.253301132s ago: executing program 0 (id=7886): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4470, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x4}, 0x51a4, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x41, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x7}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0xc000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0100000000000000009feef48bf1739e64000000557f57427b7fca8586f37bb1f877a0348271930f57bd5cc180810b3906cd0bcb7d4199f3f9929ab8b51639a1e3394014ef73d8a6486434b5e09e159b74adf714440ab683c9c6ab77594519f3a6b744f81c4cfdad56a6608103807abac091afaeb8ca497d4707a3d5974daedccc748ae1bbdedf9afd40ab6d1f93cbecf387c4f82673c0be962ef0874cecdbbdf802d33669f4", @ANYRES32], 0x50) 2.88363642s ago: executing program 2 (id=7887): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 2.840837181s ago: executing program 1 (id=7888): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.//\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000001cc0)={0x0, 0x80, 0x0, 0x6, 0xf9, 0x0, 0x0, 0x7fffffffffffffff, 0xe1200, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x14d5, 0x2, @perf_config_ext={0x13a, 0x9c6}, 0x1420, 0x1000, 0x200, 0x4, 0x4000, 0x7ff, 0x3, 0x0, 0x80000000, 0x0, 0x9}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000d35a0800000000000000d906885c11eaee6586f2aad0ee381807607a548a6baea7c80553538b570657a61903b0387c039e8d23f0806f5b5d90fff075e50ccfc8b6bbcffab6ae6257b587cca84ee17595193d013a573afb294c2a5e779fdcf508ba9d59cddae860565fc8fe3ea9fa589294539793847f8fc5bb7fdd6645d63fd16cfe28812003c38ec5b3f0438890da9d01b65e695261099cded8a93d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) recvmsg(r6, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.562336598s ago: executing program 4 (id=7889): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc6004000e", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='j'], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001cc0)={0xffffffffffffffff, 0x20, &(0x7f0000001c80)={&(0x7f0000000bc0)=""/4096, 0x1000, 0x0, &(0x7f0000001bc0)=""/137, 0x89}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)=r3}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000280)={r7, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001dc0), &(0x7f0000001e00)=r3}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e80)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x4, 0x1a, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000ac0)='GPL\x00', 0x800, 0x60, &(0x7f0000000b00)=""/96, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x5, 0xc, 0x7, 0xbc}, 0x10, r5, 0xffffffffffffffff, 0xa, &(0x7f0000001ec0)=[r6, r7, r8, r9], &(0x7f0000001f00)=[{0x4, 0x2, 0x10, 0x4}, {0x3, 0x5, 0x1, 0x2}, {0x2, 0x5, 0x0, 0x3}, {0x1, 0x5, 0x1, 0x8}, {0x5, 0x2, 0x4, 0x9}, {0x0, 0x2, 0xb, 0x2}, {0x4, 0x3, 0x4, 0x5}, {0x4, 0x4, 0x6, 0x6}, {0x5, 0x5}, {0x4, 0x1, 0xf, 0x5}], 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r10, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@jmp={0x5, 0x0, 0xa, 0x5, 0x5, 0x30, 0xfffffffffffffff1}, @printk={@u}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0xfa, &(0x7f00000002c0)=""/250, 0x40f00, 0x0, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x7, 0x8c, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x3, 0x2, 0x1, 0x4}], 0x10, 0x7}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 2.385363062s ago: executing program 2 (id=7890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000240)={r3}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 1.103319303s ago: executing program 4 (id=7891): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xa, 0x5, 0x0) (async) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f61006100"], 0x0, 0x58}, 0x28) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a92fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) (async) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a92fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x104000, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x7fff, @local, 0x48, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1}, 0x30008045) (async) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x7fff, @local, 0x48, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1}, 0x30008045) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3af8}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3af8}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80218, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2005, 0x0, 0x51, 0x1, 0xa1a, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800040043000000a8001600a400014020000500036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r5 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) 1.100057903s ago: executing program 1 (id=7892): r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0xaf, 0xd, 0x5, 0x9, 0x0, 0x7, 0xc1a08, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x353, 0x0, @perf_bp, 0x504c, 0x0, 0x0, 0x3, 0x1, 0x9e93, 0x8, 0x0, 0x5, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x58, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x1, @perf_config_ext={0x100000005}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=[0x0], 0x0, 0x5a, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101ea8, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x51}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400060416000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x2) 1.071318984s ago: executing program 2 (id=7893): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.//\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000001cc0)={0x0, 0x80, 0x0, 0x6, 0xf9, 0x0, 0x0, 0x7fffffffffffffff, 0xe1200, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x14d5, 0x2, @perf_config_ext={0x13a, 0x9c6}, 0x1420, 0x1000, 0x200, 0x4, 0x4000, 0x7ff, 0x3, 0x0, 0x80000000, 0x0, 0x9}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000d35a0800000000000000d906885c11eaee6586f2aad0ee381807607a548a6baea7c80553538b570657a61903b0387c039e8d23f0806f5b5d90fff075e50ccfc8b6bbcffab6ae6257b587cca84ee17595193d013a573afb294c2a5e779fdcf508ba9d59cddae860565fc8fe3ea9fa589294539793847f8fc5bb7fdd6645d63fd16cfe28812003c38ec5b3f0438890da9d01b65e695261099cded8a93d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) recvmsg(r5, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.007144946s ago: executing program 0 (id=7894): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x800002, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_devices(r0, 0x0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0189436, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xe8, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000700000044e883360000000085100000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x3, &(0x7f0000000380)=""/3, 0x41000, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x2, 0xa, 0xd0, 0x8000}, 0x10, r5, r2, 0x8, &(0x7f0000000a40)=[r1, r1, r1, r1, r1], &(0x7f0000000a80)=[{0x2, 0x5, 0xe, 0x3}, {0x3, 0x3, 0x9, 0x8}, {0x0, 0x5, 0x2, 0x3}, {0x5, 0x3, 0x9, 0xb}, {0x3, 0x4, 0xe}, {0x1, 0x1, 0x1, 0x2}, {0x5, 0x1, 0x7, 0x8}, {0x5, 0x4, 0x4, 0x7}], 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_pressure(r7, &(0x7f0000000200)={'full', 0x20, 0x6, 0x20, 0xfffffffffffffffa}, 0x2f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c40)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x80, 0x2, 0x5, 0x1334}, @jmp={0x5, 0x1, 0x6, 0x1, 0xb, 0xfffffffffffffff4, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0xfffffff7, 0xff, &(0x7f0000000780)=""/255, 0x41000, 0x32, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2000001, 0x1, 0x7, 0xb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r9, r8, r0, 0x1], 0x0, 0x10, 0xff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f0000000680), &(0x7f0000000700)=r11}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 737.306212ms ago: executing program 4 (id=7895): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x3}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @mcast1, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009000000060019c00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 637.053504ms ago: executing program 2 (id=7896): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, @perf_bp={&(0x7f0000000100)}, 0x10c002, 0xac60, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188e6b64f8acb31fbe467bff8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 99.184417ms ago: executing program 3 (id=7897): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x486, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x66}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x6f) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x60}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x9, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)="fcd373478fbffadcb8f80c675f38c0030262ade082588f97e88acb69b2c44140d71f242d2d24be185579b38ec55a98f0ad090c000000009068a4d5de9f7a65892f9f7e9ccd52fc44c0217d5d03a2da9e8d82392a95d92ad7a18121d3fbc40765567edbfaf84fe430f16d8c2c2f91d7760f6d71c2d6e6ac406783d7dbe5d763af1195138e5ceb3325cd85595809fbf06c7786894dca4d9ff0b4ea2bd73e0ab4fd00008d426687080f114a4018cc22270207e5fc0e11ca84b48f00"/196, &(0x7f0000000780), 0x1, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f0000000780)=""/211, 0xd3, 0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0x8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 0s ago: executing program 0 (id=7898): socket$kcm(0xa, 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x8}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[], 0x20) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xae58, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0f0000072000000000b2bc20c46d06fec3ae2bc90629486dde04bba13d4c1f71898becba81957e9e5b7358cfbfec57926d025e32eb15c4da3aa079f21524614a79f2d6b7d6c2afeb1a90a7a39333dba18f948368bc8d046fb41bbefb199642d3a4fbec1c7e1d9ad8f40e8be9278202f532cb4581102f7e9f246cde6c1bc4a33cbb0d7068f1d53072eb263e1873dae71a980689908f74b0", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) socket$kcm(0xa, 0x3, 0x73) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000440)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000700)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x30008800, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xa, 0x600fd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0x3fff8000}, 0x200, 0x32, 0x43a1bd79, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): etlink: 'syz.2.6067': attribute type 21 has an invalid length. [ 1215.523205][T26062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6067'. [ 1215.586267][T26069] netlink: 'syz.3.6069': attribute type 22 has an invalid length. [ 1215.873087][T25940] device hsr_slave_0 entered promiscuous mode [ 1215.892201][T25940] device hsr_slave_1 entered promiscuous mode [ 1215.945515][T25940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1215.965764][T25940] Cannot create hsr debugfs directory [ 1216.012473][T26086] netlink: 'syz.1.6072': attribute type 2 has an invalid length. [ 1216.081143][T26086] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6072'. [ 1216.419358][ T11] team0: Port device wlan1 removed [ 1216.467773][T23364] Bluetooth: hci0: command 0x040f tx timeout [ 1216.536767][T26105] netlink: 'syz.3.6074': attribute type 1 has an invalid length. [ 1216.555320][T26105] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6074'. [ 1216.566652][T26098] device syzkaller0 entered promiscuous mode [ 1218.557640][T23364] Bluetooth: hci0: command 0x0419 tx timeout [ 1219.508472][T26123] netlink: 'syz.1.6087': attribute type 21 has an invalid length. [ 1219.537521][T26123] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6087'. [ 1219.595308][T26130] netlink: 'syz.1.6087': attribute type 10 has an invalid length. [ 1219.618731][T26130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.657298][T26130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.725892][T26130] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1219.783647][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.801519][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.832934][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.866536][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.890970][ T11] bridge0: port 1(dummy0) entered disabled state [ 1221.136262][ T11] team0 (unregistering): Port device geneve1 removed [ 1221.216122][ T11] team0 (unregistering): Port device hsr_slave_0 removed [ 1221.422197][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1221.527066][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.588916][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.639691][ T11] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1221.914686][ T11] team0 (unregistering): Port device bridge0 removed [ 1221.949210][ T11] bond0 (unregistering): Released all slaves [ 1222.057177][T26156] netlink: 'syz.3.6083': attribute type 2 has an invalid length. [ 1222.795839][T26201] netlink: 'syz.4.6096': attribute type 21 has an invalid length. [ 1222.821676][T26201] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6096'. [ 1222.916997][T26204] netlink: 'syz.4.6096': attribute type 10 has an invalid length. [ 1223.010956][T26204] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1223.104586][T26218] netlink: 'syz.1.6101': attribute type 10 has an invalid length. [ 1223.186730][T26218] team0: Port device virt_wifi0 added [ 1223.296624][T25940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1223.341267][T25940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1223.369873][T25940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1223.402594][T25940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1223.695244][T25940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.745945][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1223.764498][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1223.800818][T25940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.835315][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1223.857027][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1223.886116][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.893416][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.936762][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1223.952653][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1223.993603][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1224.016858][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.024083][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.061957][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1224.100029][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1224.143251][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1224.181405][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1224.231459][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1224.264080][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1224.288598][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1224.304445][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1224.313885][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1224.339011][T25940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1224.368776][T25940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1224.394177][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1224.405599][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1224.459232][T26264] netlink: 'syz.3.6112': attribute type 21 has an invalid length. [ 1224.471755][T26264] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6112'. [ 1224.541222][T26264] netlink: 'syz.3.6112': attribute type 10 has an invalid length. [ 1224.564203][T26264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.615745][T26264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.699995][T26264] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1225.611033][T26284] netlink: 'syz.2.6115': attribute type 2 has an invalid length. [ 1225.622881][T26284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6115'. [ 1225.641691][T26287] netlink: 'syz.4.6116': attribute type 10 has an invalid length. [ 1225.652792][T26287] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6116'. [ 1225.705177][T26288] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6117'. [ 1225.748625][T26288] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1225.770475][T26288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1226.084287][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1226.095855][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1226.135779][T25940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.243660][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1226.261338][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1226.330553][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1226.364709][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1226.411674][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1226.450463][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1226.479450][T25940] device veth0_vlan entered promiscuous mode [ 1226.526828][T25940] device veth1_vlan entered promiscuous mode [ 1226.669537][T25940] device veth0_macvtap entered promiscuous mode [ 1226.677263][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1226.700113][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1226.734710][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1226.761324][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1226.783587][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1226.817747][T25940] device veth1_macvtap entered promiscuous mode [ 1226.843846][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1226.901122][T25940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.927938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1226.947242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1226.985972][T25940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.017194][T25940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.040714][T25940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.057353][T25940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.078972][T25940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.173252][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1227.192567][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1227.216466][T25940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.234265][T25940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.254040][T25940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.263163][T25940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.287069][T26335] : port 1(ip6gretap0) entered blocking state [ 1227.299116][T26335] : port 1(ip6gretap0) entered disabled state [ 1227.306811][T26335] device ip6gretap0 entered promiscuous mode [ 1227.321566][T26337] device ip6gretap0 left promiscuous mode [ 1227.331513][T26337] : port 1(ip6gretap0) entered disabled state [ 1227.559927][T12968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.588304][T12968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.613405][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1227.663461][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.674829][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.684244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1228.159973][T26357] netlink: 'syz.4.6129': attribute type 29 has an invalid length. [ 1228.185442][T26357] netlink: 'syz.4.6129': attribute type 29 has an invalid length. [ 1228.212679][T26363] netlink: 'syz.4.6129': attribute type 29 has an invalid length. [ 1228.613638][T26370] netlink: 'syz.2.6128': attribute type 21 has an invalid length. [ 1228.640530][T26370] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6128'. [ 1228.719598][T26357] can: request_module (can-proto-0) failed. [ 1228.804966][T26370] netlink: 'syz.2.6128': attribute type 10 has an invalid length. [ 1229.559333][T26394] netlink: 'syz.4.6139': attribute type 9 has an invalid length. [ 1229.615365][T26394] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.6139'. [ 1229.767092][T26404] tap0: tun_chr_ioctl cmd 35111 [ 1230.729562][T26433] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6149'. [ 1230.779384][T26433] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6149'. [ 1231.053896][T26449] netlink: 'syz.0.6151': attribute type 10 has an invalid length. [ 1231.528254][T26449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.535911][T26449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.654251][T26449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.661860][T26449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.670781][T26449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.678001][T26449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.882983][T26449] team0: Port device bridge0 added [ 1231.908088][T26466] netlink: 'syz.2.6155': attribute type 13 has an invalid length. [ 1231.966945][T26466] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6155'. [ 1232.139024][T26466] erspan0: refused to change device tx_queue_len [ 1232.864574][T26513] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 1232.907759][T26513] netlink: 151632 bytes leftover after parsing attributes in process `syz.1.6164'. [ 1233.116503][T26514] device syzkaller0 entered promiscuous mode [ 1233.182278][T26521] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6169'. [ 1234.373742][T26538] delete_channel: no stack [ 1236.497247][T26522] netlink: 'syz.4.6169': attribute type 10 has an invalid length. [ 1236.505948][T26522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6169'. [ 1236.516041][T26522] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1236.532184][T26531] netlink: 'syz.3.6168': attribute type 7 has an invalid length. [ 1236.772518][T26569] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6176'. [ 1238.093569][T26626] netlink: 'syz.1.6193': attribute type 2 has an invalid length. [ 1238.555634][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.562154][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.461540][T26677] netlink: 'syz.1.6210': attribute type 10 has an invalid length. [ 1240.493159][T26677] device syz_tun entered promiscuous mode [ 1240.636427][T26677] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1240.685816][T26682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6210'. [ 1241.127042][T26704] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.6218'. [ 1241.141667][T26703] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.6218'. [ 1241.499849][T26712] netlink: 'syz.0.6221': attribute type 21 has an invalid length. [ 1241.522374][T26712] IPv6: NLM_F_CREATE should be specified when creating new route [ 1242.345113][T26747] netlink: 'syz.4.6231': attribute type 2 has an invalid length. [ 1242.368022][T26747] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.6231'. [ 1243.851932][T26786] : port 1(ip6gretap0) entered blocking state [ 1243.913279][T26786] : port 1(ip6gretap0) entered disabled state [ 1243.931380][T26786] device ip6gretap0 entered promiscuous mode [ 1243.964056][T26783] device ip6gretap0 left promiscuous mode [ 1243.990584][T26783] : port 1(ip6gretap0) entered disabled state [ 1244.391990][T26803] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6252'. [ 1244.522373][T26809] netlink: 'syz.3.6253': attribute type 5 has an invalid length. [ 1244.547737][T26809] netlink: 'syz.3.6253': attribute type 30 has an invalid length. [ 1245.072596][T26825] netlink: 'syz.1.6259': attribute type 2 has an invalid length. [ 1245.107882][T26825] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6259'. [ 1245.437776][T26833] ip6tnl0: mtu greater than device maximum [ 1245.460551][T26833] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1245.645368][ T4282] Bluetooth: hci2: ISO packet for unknown connection handle 4095 [ 1245.825355][T26853] netlink: 'syz.0.6269': attribute type 9 has an invalid length. [ 1245.853485][T26853] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6269'. [ 1245.866982][T26850] device syzkaller0 entered promiscuous mode [ 1246.032329][T26854] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6270'. [ 1246.072288][T26850] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.6270'. [ 1246.086432][T26850] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.6270'. [ 1246.097390][T26850] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.6270'. [ 1248.493760][T26878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.501306][T26878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.509527][T26878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.517040][T26878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.996741][T26910] FAULT_INJECTION: forcing a failure. [ 1248.996741][T26910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1249.037587][T26910] CPU: 0 PID: 26910 Comm: syz.3.6288 Not tainted syzkaller #0 [ 1249.045132][T26910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1249.055233][T26910] Call Trace: [ 1249.058553][T26910] [ 1249.061517][T26910] dump_stack_lvl+0x188/0x24e [ 1249.066245][T26910] ? show_regs_print_info+0x12/0x12 [ 1249.071482][T26910] ? load_image+0x410/0x410 [ 1249.076114][T26910] ? __lock_acquire+0x7c40/0x7c40 [ 1249.081186][T26910] should_fail_ex+0x390/0x4c0 [ 1249.085937][T26910] _copy_from_user+0x2c/0x170 [ 1249.090651][T26910] ___sys_recvmsg+0x170/0x590 [ 1249.095372][T26910] ? __sys_recvmsg+0x2a0/0x2a0 [ 1249.100213][T26910] ? common_file_perm+0x171/0x1c0 [ 1249.105298][T26910] ? __fget_files+0x3fc/0x460 [ 1249.110040][T26910] __x64_sys_recvmsg+0x20d/0x2e0 [ 1249.115020][T26910] ? ___sys_recvmsg+0x590/0x590 [ 1249.119953][T26910] ? lockdep_hardirqs_on+0x94/0x140 [ 1249.125185][T26910] do_syscall_64+0x4c/0xa0 [ 1249.129722][T26910] ? clear_bhb_loop+0x60/0xb0 [ 1249.134441][T26910] ? clear_bhb_loop+0x60/0xb0 [ 1249.139160][T26910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1249.145081][T26910] RIP: 0033:0x7f150759e0d9 [ 1249.149528][T26910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.169168][T26910] RSP: 002b:00007f15083c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1249.177613][T26910] RAX: ffffffffffffffda RBX: 00007f1507825fa0 RCX: 00007f150759e0d9 [ 1249.185616][T26910] RDX: 0000000000000042 RSI: 0000200000000040 RDI: 0000000000000005 [ 1249.193615][T26910] RBP: 00007f15083c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.201611][T26910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.209610][T26910] R13: 00007f1507826038 R14: 00007f1507825fa0 R15: 00007ffeb580f5d8 [ 1249.217656][T26910] [ 1249.438728][T26922] device syzkaller0 entered promiscuous mode [ 1249.720428][T26932] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6293'. [ 1249.740857][T26932] netlink: 'syz.4.6293': attribute type 10 has an invalid length. [ 1249.752310][T26932] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6293'. [ 1249.765653][T26932] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1250.469417][T26939] ref_ctr_offset mismatch. inode: 0x158 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1253.233241][T26974] FAULT_INJECTION: forcing a failure. [ 1253.233241][T26974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.343800][T26974] CPU: 1 PID: 26974 Comm: syz.2.6305 Not tainted syzkaller #0 [ 1253.351451][T26974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1253.361550][T26974] Call Trace: [ 1253.364868][T26974] [ 1253.367829][T26974] dump_stack_lvl+0x188/0x24e [ 1253.372565][T26974] ? show_regs_print_info+0x12/0x12 [ 1253.377803][T26974] ? load_image+0x410/0x410 [ 1253.382369][T26974] ? __lock_acquire+0x7c40/0x7c40 [ 1253.387546][T26974] ? snprintf+0xe5/0x140 [ 1253.391838][T26974] should_fail_ex+0x390/0x4c0 [ 1253.396559][T26974] _copy_to_user+0x2c/0x130 [ 1253.401094][T26974] simple_read_from_buffer+0xe3/0x150 [ 1253.406501][T26974] proc_fail_nth_read+0x1a6/0x220 [ 1253.411553][T26974] ? proc_fault_inject_write+0x310/0x310 [ 1253.417216][T26974] ? fsnotify_perm+0x248/0x550 [ 1253.422008][T26974] ? proc_fault_inject_write+0x310/0x310 [ 1253.427670][T26974] vfs_read+0x2db/0x960 [ 1253.431862][T26974] ? kernel_read+0x1e0/0x1e0 [ 1253.436477][T26974] ? __fget_files+0x28/0x460 [ 1253.441088][T26974] ? __fget_files+0x3fc/0x460 [ 1253.445797][T26974] ? __fdget_pos+0x2ae/0x360 [ 1253.450502][T26974] ? ksys_read+0x70/0x260 [ 1253.454862][T26974] ksys_read+0x14d/0x260 [ 1253.459136][T26974] ? vfs_write+0x9a0/0x9a0 [ 1253.463597][T26974] ? lockdep_hardirqs_on+0x94/0x140 [ 1253.468842][T26974] do_syscall_64+0x4c/0xa0 [ 1253.473302][T26974] ? clear_bhb_loop+0x60/0xb0 [ 1253.478109][T26974] ? clear_bhb_loop+0x60/0xb0 [ 1253.482821][T26974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1253.488739][T26974] RIP: 0033:0x7f2809f5e90e [ 1253.493171][T26974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1253.512811][T26974] RSP: 002b:00007f280addcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1253.521284][T26974] RAX: ffffffffffffffda RBX: 00007f280addd6c0 RCX: 00007f2809f5e90e [ 1253.529282][T26974] RDX: 000000000000000f RSI: 00007f280addd0a0 RDI: 0000000000000006 [ 1253.537264][T26974] RBP: 00007f280addd090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.545253][T26974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.553253][T26974] R13: 00007f280a226038 R14: 00007f280a225fa0 R15: 00007ffcec49d858 [ 1253.561261][T26974] [ 1253.652936][T26984] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6308'. [ 1255.151895][T27035] netlink: 7054 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1255.334289][T27034] netlink: 7054 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1255.420673][T27041] netlink: 'syz.2.6325': attribute type 3 has an invalid length. [ 1255.428738][T27041] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.6325'. [ 1257.791323][T27119] netlink: 'syz.4.6349': attribute type 46 has an invalid length. [ 1257.911008][T27121] netlink: 3529 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1257.945700][T27121] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1258.002023][T27121] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1259.062476][T27142] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6357'. [ 1259.085067][T23364] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1259.095075][T23364] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1259.095398][T27142] netlink: zone id is out of range [ 1259.109418][T23364] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1259.117233][T23364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1259.126125][T23364] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1259.133617][T23364] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1259.157514][T27142] netlink: zone id is out of range [ 1259.162739][T27142] netlink: zone id is out of range [ 1259.171945][T27142] netlink: zone id is out of range [ 1259.177703][T27142] netlink: zone id is out of range [ 1259.183035][T27142] netlink: zone id is out of range [ 1259.188385][T27142] netlink: zone id is out of range [ 1259.194141][T27142] netlink: zone id is out of range [ 1259.199577][T27142] netlink: zone id is out of range [ 1259.204872][T27142] netlink: zone id is out of range [ 1259.213368][T27149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.392401][T27151] netlink: 'syz.2.6359': attribute type 41 has an invalid length. [ 1259.702916][T27147] chnl_net:caif_netlink_parms(): no params data found [ 1259.791617][T27147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.799097][T27147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.807466][T27147] device bridge_slave_0 entered promiscuous mode [ 1259.816696][T27147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.824052][T27147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.833124][T27147] device bridge_slave_1 entered promiscuous mode [ 1259.877089][T27147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.889507][T27147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.994508][T27178] netlink: 'syz.3.6367': attribute type 3 has an invalid length. [ 1260.003051][T27178] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6367'. [ 1260.465961][T27147] team0: Port device team_slave_0 added [ 1260.524210][T27147] team0: Port device team_slave_1 added [ 1260.656273][T12970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.742956][T27147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.791603][T27147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.861874][T27147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.192886][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 1261.596293][T12970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.626822][T27147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.641601][T27147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.695069][T27147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.792256][T12970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.012300][T12970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.070346][T27147] device hsr_slave_0 entered promiscuous mode [ 1262.094890][T27147] device hsr_slave_1 entered promiscuous mode [ 1262.152850][T27147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1262.169187][T27147] Cannot create hsr debugfs directory [ 1262.395082][T12970] device 0 left promiscuous mode [ 1262.449363][T27222] netlink: 'syz.3.6381': attribute type 11 has an invalid length. [ 1262.475555][T27222] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6381'. [ 1263.267564][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 1263.468088][T27221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1263.928978][T27257] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1263.974031][T27260] netlink: 'syz.3.6388': attribute type 27 has an invalid length. [ 1264.026329][T27260] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1264.463057][T27276] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6393'. [ 1264.592737][T27281] netlink: 'syz.1.6396': attribute type 1 has an invalid length. [ 1264.713566][T27147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1264.741879][T27147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1264.772808][T27147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1264.868571][T27147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1265.354133][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 1265.598519][T27303] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.6400'. [ 1265.994631][T27147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.121314][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1266.139288][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1266.173762][T27147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.463459][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1266.500794][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1266.536687][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.543981][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.811315][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1266.843252][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1266.897817][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1266.927915][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.935136][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.001790][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1267.100627][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1267.175671][T12970] device hsr_slave_0 left promiscuous mode [ 1267.192071][T12970] device hsr_slave_1 left promiscuous mode [ 1267.263220][T12970] device veth0_macvtap left promiscuous mode [ 1267.288395][T12970] device veth1_vlan left promiscuous mode [ 1267.437532][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 1267.579350][T27337] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.6408'. [ 1267.867201][T12970] team0 (unregistering): Port device geneve1 removed [ 1268.011772][ T4282] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1268.288216][T12970] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1268.712426][T12970] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1268.784726][T12970] team0 (unregistering): Port device team_slave_1 removed [ 1268.900328][T12970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.301651][T12970] bond0 (unregistering): Released all slaves [ 1269.346109][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1269.360523][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1269.370363][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1269.395753][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1269.419372][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1269.448448][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1269.456861][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1269.474227][T27341] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1269.484588][T27356] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6413'. [ 1269.521508][T27147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1269.570160][T27147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1269.599942][T12959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1269.644537][T12959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1269.820570][T27370] netlink: 'syz.2.6415': attribute type 2 has an invalid length. [ 1269.863688][T27370] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6415'. [ 1270.157162][T27381] netlink: 'syz.3.6418': attribute type 10 has an invalid length. [ 1270.184964][T27381] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6418'. [ 1273.100643][T27382] netlink: 'syz.2.6415': attribute type 21 has an invalid length. [ 1273.138171][T27382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6415'. [ 1273.282484][T27147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.330483][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1273.355562][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1274.564135][T27436] netlink: 'syz.0.6430': attribute type 10 has an invalid length. [ 1274.992946][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1275.012623][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1275.102217][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1275.132665][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1275.161441][T27147] device veth0_vlan entered promiscuous mode [ 1275.183338][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1275.220591][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1275.266595][T27147] device veth1_vlan entered promiscuous mode [ 1275.412075][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1275.435433][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1275.468279][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1275.480647][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1275.519374][T27147] device veth0_macvtap entered promiscuous mode [ 1275.554031][T27147] device veth1_macvtap entered promiscuous mode [ 1275.626038][T27147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1275.650918][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1275.671651][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1275.688342][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1275.711680][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1275.724481][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.746013][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.766381][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.787557][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.809009][T27147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.851662][T27458] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.6434'. [ 1275.881721][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1275.897809][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1275.931758][T27147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.958217][T27147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.967017][T27147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.986401][T27147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.259865][ T5402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.289028][ T5402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.343415][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1276.416725][T12965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.437165][T12965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.457474][T12959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1276.842649][T27490] netlink: 'syz.0.6442': attribute type 29 has an invalid length. [ 1276.911415][T27490] netlink: 'syz.0.6442': attribute type 29 has an invalid length. [ 1276.957682][T27488] netlink: 'syz.0.6442': attribute type 29 has an invalid length. [ 1279.378837][T27534] netlink: 'syz.4.6455': attribute type 10 has an invalid length. [ 1279.589633][T27534] team0 (unregistering): Port device team_slave_0 removed [ 1279.631556][T27534] team0 (unregistering): Port device team_slave_1 removed [ 1280.458458][T27547] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1280.497128][T27557] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6462'. [ 1280.498434][T27547] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1280.547488][T27547] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1281.174570][T27576] FAULT_INJECTION: forcing a failure. [ 1281.174570][T27576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.207694][T27576] CPU: 0 PID: 27576 Comm: syz.3.6468 Not tainted syzkaller #0 [ 1281.215304][T27576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1281.225425][T27576] Call Trace: [ 1281.228858][T27576] [ 1281.231831][T27576] dump_stack_lvl+0x188/0x24e [ 1281.236564][T27576] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1281.242768][T27576] ? show_regs_print_info+0x12/0x12 [ 1281.248011][T27576] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1281.254376][T27576] should_fail_ex+0x390/0x4c0 [ 1281.259110][T27576] _copy_from_user+0x2c/0x170 [ 1281.263842][T27576] __sys_bpf+0x2ea/0x780 [ 1281.268131][T27576] ? bpf_link_show_fdinfo+0x380/0x380 [ 1281.273555][T27576] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1281.279763][T27576] __x64_sys_bpf+0x78/0x90 [ 1281.284228][T27576] do_syscall_64+0x4c/0xa0 [ 1281.288692][T27576] ? clear_bhb_loop+0x60/0xb0 [ 1281.293444][T27576] ? clear_bhb_loop+0x60/0xb0 [ 1281.298170][T27576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.304109][T27576] RIP: 0033:0x7f150759e0d9 [ 1281.308563][T27576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.328728][T27576] RSP: 002b:00007f15083c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1281.337176][T27576] RAX: ffffffffffffffda RBX: 00007f1507825fa0 RCX: 00007f150759e0d9 [ 1281.345191][T27576] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1281.353207][T27576] RBP: 00007f15083c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.361216][T27576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.369245][T27576] R13: 00007f1507826038 R14: 00007f1507825fa0 R15: 00007ffeb580f5d8 [ 1281.377277][T27576] [ 1281.551481][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1281.570389][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1281.587924][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1281.598429][T23364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1281.606411][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1281.615119][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1282.288565][T12968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.553622][T12968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.613148][T27581] chnl_net:caif_netlink_parms(): no params data found [ 1282.708525][T12968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.836752][T12968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.906224][T27619] FAULT_INJECTION: forcing a failure. [ 1282.906224][T27619] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.919862][T27619] CPU: 1 PID: 27619 Comm: syz.1.6479 Not tainted syzkaller #0 [ 1282.927373][T27619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1282.937460][T27619] Call Trace: [ 1282.940765][T27619] [ 1282.943727][T27619] dump_stack_lvl+0x188/0x24e [ 1282.948462][T27619] ? show_regs_print_info+0x12/0x12 [ 1282.953730][T27619] ? load_image+0x410/0x410 [ 1282.958276][T27619] ? __lock_acquire+0x7c40/0x7c40 [ 1282.963343][T27619] ? trace_call_bpf+0x5d6/0x6b0 [ 1282.968243][T27619] ? trace_call_bpf+0xbf/0x6b0 [ 1282.973063][T27619] should_fail_ex+0x390/0x4c0 [ 1282.977792][T27619] should_failslab+0x5/0x20 [ 1282.982329][T27619] slab_pre_alloc_hook+0x59/0x300 [ 1282.987384][T27619] ? verify_lock_unused+0x140/0x140 [ 1282.992709][T27619] ? bpf_test_init+0x9f/0x140 [ 1282.997422][T27619] __kmem_cache_alloc_node+0x4f/0x270 [ 1283.002833][T27619] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1283.008693][T27619] ? bpf_test_init+0x9f/0x140 [ 1283.013400][T27619] __kmalloc+0xa3/0x240 [ 1283.017590][T27619] bpf_test_init+0x9f/0x140 [ 1283.022127][T27619] bpf_prog_test_run_xdp+0x488/0xf80 [ 1283.027457][T27619] ? lock_chain_count+0x20/0x20 [ 1283.032341][T27619] ? lockdep_hardirqs_on+0x94/0x140 [ 1283.037566][T27619] ? dev_put+0x80/0x80 [ 1283.041674][T27619] ? bpf_prog_test_run+0x251/0x390 [ 1283.046817][T27619] ? dev_put+0x80/0x80 [ 1283.050910][T27619] bpf_prog_test_run+0x31c/0x390 [ 1283.055874][T27619] __sys_bpf+0x62b/0x780 [ 1283.060151][T27619] ? bpf_link_show_fdinfo+0x380/0x380 [ 1283.065549][T27619] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1283.071738][T27619] __x64_sys_bpf+0x78/0x90 [ 1283.076185][T27619] do_syscall_64+0x4c/0xa0 [ 1283.080626][T27619] ? clear_bhb_loop+0x60/0xb0 [ 1283.085322][T27619] ? clear_bhb_loop+0x60/0xb0 [ 1283.090041][T27619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1283.095954][T27619] RIP: 0033:0x7fac6539e0d9 [ 1283.100411][T27619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.120054][T27619] RSP: 002b:00007fac66201028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1283.128491][T27619] RAX: ffffffffffffffda RBX: 00007fac65625fa0 RCX: 00007fac6539e0d9 [ 1283.136485][T27619] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1283.144477][T27619] RBP: 00007fac66201090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.152506][T27619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.161213][T27619] R13: 00007fac65626038 R14: 00007fac65625fa0 R15: 00007ffe623e51f8 [ 1283.169353][T27619] [ 1283.346375][T27581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.354478][T27581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.364173][T27581] device bridge_slave_0 entered promiscuous mode [ 1283.385668][T27581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.403519][T27581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.430351][T27581] device bridge_slave_1 entered promiscuous mode [ 1283.472659][T27625] netlink: 'syz.1.6481': attribute type 2 has an invalid length. [ 1283.483521][T27625] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6481'. [ 1283.547094][T27581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.593871][T27581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.694566][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 1283.719366][T27581] team0: Port device team_slave_0 added [ 1283.729568][T27581] team0: Port device team_slave_1 added [ 1283.819083][T12968] device 0 left promiscuous mode [ 1283.959508][T27637] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6482'. [ 1283.984779][T27638] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6482'. [ 1284.024724][T27581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1284.031931][T27581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.074506][T27581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.389908][T27581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.397049][T27581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.522041][T27581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.724595][T27652] netlink: 'syz.1.6487': attribute type 21 has an invalid length. [ 1284.735429][T27652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6487'. [ 1284.758044][T27652] netlink: 'syz.1.6487': attribute type 5 has an invalid length. [ 1284.766036][T27652] netlink: 'syz.1.6487': attribute type 6 has an invalid length. [ 1284.811443][T27663] FAULT_INJECTION: forcing a failure. [ 1284.811443][T27663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.814807][T27652] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6487'. [ 1284.862397][T27663] CPU: 1 PID: 27663 Comm: syz.4.6489 Not tainted syzkaller #0 [ 1284.869947][T27663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1284.880047][T27663] Call Trace: [ 1284.883357][T27663] [ 1284.886333][T27663] dump_stack_lvl+0x188/0x24e [ 1284.891065][T27663] ? lockdep_hardirqs_on+0x94/0x140 [ 1284.896313][T27663] ? show_regs_print_info+0x12/0x12 [ 1284.901579][T27663] ? audit_tree_destroy_watch+0x20/0x20 [ 1284.907177][T27663] should_fail_ex+0x390/0x4c0 [ 1284.911917][T27663] _copy_from_user+0x2c/0x170 [ 1284.916651][T27663] bpf_test_init+0xde/0x140 [ 1284.921203][T27663] bpf_prog_test_run_xdp+0x488/0xf80 [ 1284.926560][T27663] ? __lock_acquire+0x7c40/0x7c40 [ 1284.931648][T27663] ? dev_put+0x80/0x80 [ 1284.935771][T27663] ? dev_put+0x80/0x80 [ 1284.939881][T27663] bpf_prog_test_run+0x31c/0x390 [ 1284.944877][T27663] __sys_bpf+0x62b/0x780 [ 1284.949185][T27663] ? bpf_link_show_fdinfo+0x380/0x380 [ 1284.954626][T27663] ? lock_chain_count+0x20/0x20 [ 1284.959534][T27663] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1284.965581][T27663] __x64_sys_bpf+0x78/0x90 [ 1284.970051][T27663] do_syscall_64+0x4c/0xa0 [ 1284.974548][T27663] ? clear_bhb_loop+0x60/0xb0 [ 1284.979283][T27663] ? clear_bhb_loop+0x60/0xb0 [ 1284.984018][T27663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1284.989968][T27663] RIP: 0033:0x7fed3799e0d9 [ 1284.994428][T27663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.014083][T27663] RSP: 002b:00007fed388a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1285.022539][T27663] RAX: ffffffffffffffda RBX: 00007fed37c25fa0 RCX: 00007fed3799e0d9 [ 1285.030546][T27663] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1285.038539][T27663] RBP: 00007fed388a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.046539][T27663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.054544][T27663] R13: 00007fed37c26038 R14: 00007fed37c25fa0 R15: 00007ffd531f7d38 [ 1285.062570][T27663] [ 1285.443847][T27656] netlink: 763 bytes leftover after parsing attributes in process `syz.1.6487'. [ 1285.534142][T27581] device hsr_slave_0 entered promiscuous mode [ 1285.550243][T27581] device hsr_slave_1 entered promiscuous mode [ 1285.758727][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 1287.828132][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 1288.190106][T27723] FAULT_INJECTION: forcing a failure. [ 1288.190106][T27723] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.238947][T27723] CPU: 0 PID: 27723 Comm: syz.4.6502 Not tainted syzkaller #0 [ 1288.246585][T27723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1288.256775][T27723] Call Trace: [ 1288.260108][T27723] [ 1288.263079][T27723] dump_stack_lvl+0x188/0x24e [ 1288.267809][T27723] ? show_regs_print_info+0x12/0x12 [ 1288.273046][T27723] ? load_image+0x410/0x410 [ 1288.277593][T27723] ? __might_sleep+0xd0/0xd0 [ 1288.282229][T27723] ? __lock_acquire+0x7c40/0x7c40 [ 1288.287309][T27723] should_fail_ex+0x390/0x4c0 [ 1288.292040][T27723] should_failslab+0x5/0x20 [ 1288.296615][T27723] slab_pre_alloc_hook+0x59/0x300 [ 1288.301676][T27723] ? __lock_acquire+0x7c40/0x7c40 [ 1288.306759][T27723] ? kvmalloc_node+0x6c/0x180 [ 1288.311575][T27723] __kmem_cache_alloc_node+0x4f/0x270 [ 1288.316991][T27723] ? schedule_delayed_monitor_work+0x160/0x160 [ 1288.323291][T27723] ? kvmalloc_node+0x6c/0x180 [ 1288.328021][T27723] __kmalloc_node+0xa2/0x240 [ 1288.332661][T27723] kvmalloc_node+0x6c/0x180 [ 1288.337209][T27723] bpf_test_run_xdp_live+0x1da/0x1a90 [ 1288.342624][T27723] ? 0xffffffffa0004440 [ 1288.346813][T27723] ? text_poke_copy+0x7b/0x90 [ 1288.351613][T27723] ? 0xffffffffa0004440 [ 1288.355813][T27723] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 1288.361833][T27723] ? xdp_convert_md_to_buff+0x330/0x330 [ 1288.367458][T27723] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1288.373767][T27723] ? bpf_test_init+0x119/0x140 [ 1288.378676][T27723] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1288.384232][T27723] bpf_prog_test_run_xdp+0x757/0xf80 [ 1288.389563][T27723] ? __lock_acquire+0x7c40/0x7c40 [ 1288.394632][T27723] ? lock_chain_count+0x20/0x20 [ 1288.399539][T27723] ? dev_put+0x80/0x80 [ 1288.403665][T27723] ? dev_put+0x80/0x80 [ 1288.407789][T27723] bpf_prog_test_run+0x31c/0x390 [ 1288.412777][T27723] __sys_bpf+0x62b/0x780 [ 1288.417059][T27723] ? bpf_link_show_fdinfo+0x380/0x380 [ 1288.422493][T27723] ? lock_chain_count+0x20/0x20 [ 1288.427394][T27723] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1288.433470][T27723] __x64_sys_bpf+0x78/0x90 [ 1288.437928][T27723] do_syscall_64+0x4c/0xa0 [ 1288.442393][T27723] ? clear_bhb_loop+0x60/0xb0 [ 1288.447137][T27723] ? clear_bhb_loop+0x60/0xb0 [ 1288.451870][T27723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1288.457811][T27723] RIP: 0033:0x7fed3799e0d9 [ 1288.462269][T27723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.481923][T27723] RSP: 002b:00007fed388a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1288.490379][T27723] RAX: ffffffffffffffda RBX: 00007fed37c25fa0 RCX: 00007fed3799e0d9 [ 1288.498396][T27723] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1288.506404][T27723] RBP: 00007fed388a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.514415][T27723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.522436][T27723] R13: 00007fed37c26038 R14: 00007fed37c25fa0 R15: 00007ffd531f7d38 [ 1288.530469][T27723] [ 1288.772492][T27733] netlink: 'syz.0.6503': attribute type 3 has an invalid length. [ 1288.910159][T27733] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6503'. [ 1288.989086][T27735] netlink: 'syz.4.6504': attribute type 1 has an invalid length. [ 1289.029218][T27735] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6504'. [ 1289.914110][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 1291.851004][T27728] netlink: 'syz.0.6503': attribute type 21 has an invalid length. [ 1291.859010][T27728] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6503'. [ 1291.868318][T27728] netlink: 'syz.0.6503': attribute type 4 has an invalid length. [ 1291.880957][T27728] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6503'. [ 1292.020242][ T4279] Bluetooth: Frame is too long (len 149, expected len 4) [ 1292.050377][T27581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1292.066747][T27581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1292.282015][T27581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1292.315934][T27753] delete_channel: no stack [ 1292.393995][T27581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1292.511839][T12968] device hsr_slave_0 left promiscuous mode [ 1292.536456][T12968] device hsr_slave_1 left promiscuous mode [ 1292.574591][T12968] bridge0: port 3(hsr0) entered disabled state [ 1292.641377][T12968] device bridge_slave_0 left promiscuous mode [ 1292.658327][T12968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.693261][T12968] device veth1_vlan left promiscuous mode [ 1292.700866][T12968] device veth0_vlan left promiscuous mode [ 1292.802966][T27761] netlink: 'syz.1.6510': attribute type 3 has an invalid length. [ 1292.843589][T27761] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6510'. [ 1293.045731][T27768] FAULT_INJECTION: forcing a failure. [ 1293.045731][T27768] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.068148][T27768] CPU: 1 PID: 27768 Comm: syz.0.6513 Not tainted syzkaller #0 [ 1293.075693][T27768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1293.085804][T27768] Call Trace: [ 1293.089120][T27768] [ 1293.092075][T27768] dump_stack_lvl+0x188/0x24e [ 1293.096792][T27768] ? show_regs_print_info+0x12/0x12 [ 1293.102010][T27768] ? load_image+0x410/0x410 [ 1293.106544][T27768] ? __might_sleep+0xd0/0xd0 [ 1293.111186][T27768] ? __lock_acquire+0x7c40/0x7c40 [ 1293.116283][T27768] should_fail_ex+0x390/0x4c0 [ 1293.121000][T27768] should_failslab+0x5/0x20 [ 1293.125531][T27768] slab_pre_alloc_hook+0x59/0x300 [ 1293.130588][T27768] ? kvmalloc_node+0x6c/0x180 [ 1293.135318][T27768] __kmem_cache_alloc_node+0x4f/0x270 [ 1293.140722][T27768] ? kvmalloc_node+0x6c/0x180 [ 1293.145428][T27768] __kmalloc_node+0xa2/0x240 [ 1293.150049][T27768] kvmalloc_node+0x6c/0x180 [ 1293.154584][T27768] bpf_test_run_xdp_live+0x206/0x1a90 [ 1293.159983][T27768] ? 0xffffffffa0004440 [ 1293.164179][T27768] ? text_poke_copy+0x7b/0x90 [ 1293.168909][T27768] ? 0xffffffffa0004440 [ 1293.173101][T27768] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 1293.179056][T27768] ? xdp_convert_md_to_buff+0x330/0x330 [ 1293.184660][T27768] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1293.190943][T27768] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1293.196427][T27768] bpf_prog_test_run_xdp+0x757/0xf80 [ 1293.201738][T27768] ? __lock_acquire+0x7c40/0x7c40 [ 1293.206799][T27768] ? dev_put+0x80/0x80 [ 1293.210892][T27768] ? dev_put+0x80/0x80 [ 1293.214980][T27768] bpf_prog_test_run+0x31c/0x390 [ 1293.219944][T27768] __sys_bpf+0x62b/0x780 [ 1293.224221][T27768] ? bpf_link_show_fdinfo+0x380/0x380 [ 1293.229629][T27768] ? lock_chain_count+0x20/0x20 [ 1293.234525][T27768] __x64_sys_bpf+0x78/0x90 [ 1293.238980][T27768] do_syscall_64+0x4c/0xa0 [ 1293.243435][T27768] ? clear_bhb_loop+0x60/0xb0 [ 1293.248136][T27768] ? clear_bhb_loop+0x60/0xb0 [ 1293.252843][T27768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1293.258771][T27768] RIP: 0033:0x7f0f7cb9e0d9 [ 1293.263213][T27768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.282838][T27768] RSP: 002b:00007f0f7d9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1293.291306][T27768] RAX: ffffffffffffffda RBX: 00007f0f7ce25fa0 RCX: 00007f0f7cb9e0d9 [ 1293.299303][T27768] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1293.307310][T27768] RBP: 00007f0f7d9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.315304][T27768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.323319][T27768] R13: 00007f0f7ce26038 R14: 00007f0f7ce25fa0 R15: 00007ffde9b21448 [ 1293.331332][T27768] [ 1293.446472][T27772] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6515'. [ 1293.565711][T27772] net_ratelimit: 141 callbacks suppressed [ 1293.565758][T27772] openvswitch: netlink: Message has 6 unknown bytes. [ 1294.751896][T27781] netlink: 'syz.0.6517': attribute type 10 has an invalid length. [ 1294.772462][T27781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.798231][T27781] device bridge_slave_1 left promiscuous mode [ 1294.804529][T27781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.818261][T27781] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1295.033433][T27581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.104549][T12959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1295.148072][T12959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1295.168632][T27581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.209034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1295.225063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1295.244168][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.251423][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.291651][T27794] netlink: 21187 bytes leftover after parsing attributes in process `syz.0.6520'. [ 1295.312712][T27804] netlink: 'syz.1.6522': attribute type 29 has an invalid length. [ 1295.347942][T27801] netlink: 'syz.1.6522': attribute type 29 has an invalid length. [ 1295.401013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1295.443542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1295.472600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1295.495015][T27812] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1295.510464][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.517665][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.528650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1295.551802][T27804] netlink: 'syz.1.6522': attribute type 29 has an invalid length. [ 1295.590287][T27812] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1295.618921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1295.640109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1295.660197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1295.707320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1295.715980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1295.755636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1295.771864][T27820] FAULT_INJECTION: forcing a failure. [ 1295.771864][T27820] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.786123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1295.795942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1295.816367][T27820] CPU: 1 PID: 27820 Comm: syz.1.6526 Not tainted syzkaller #0 [ 1295.823896][T27820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1295.833994][T27820] Call Trace: [ 1295.837310][T27820] [ 1295.840286][T27820] dump_stack_lvl+0x188/0x24e [ 1295.845016][T27820] ? show_regs_print_info+0x12/0x12 [ 1295.850261][T27820] ? load_image+0x410/0x410 [ 1295.854816][T27820] ? __might_sleep+0xd0/0xd0 [ 1295.859454][T27820] ? __lock_acquire+0x7c40/0x7c40 [ 1295.864560][T27820] should_fail_ex+0x390/0x4c0 [ 1295.869305][T27820] should_failslab+0x5/0x20 [ 1295.873842][T27820] slab_pre_alloc_hook+0x59/0x300 [ 1295.878912][T27820] ? page_pool_create+0x6d/0x5c0 [ 1295.884000][T27820] __kmem_cache_alloc_node+0x4f/0x270 [ 1295.889414][T27820] ? page_pool_create+0x6d/0x5c0 [ 1295.894387][T27820] kmalloc_node_trace+0x22/0xe0 [ 1295.899293][T27820] page_pool_create+0x6d/0x5c0 [ 1295.904105][T27820] bpf_test_run_xdp_live+0x220/0x1a90 [ 1295.909531][T27820] ? 0xffffffffa0004440 [ 1295.913743][T27820] ? text_poke_copy+0x7b/0x90 [ 1295.918519][T27820] ? 0xffffffffa0004440 [ 1295.922739][T27820] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 1295.928688][T27820] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1295.934906][T27820] ? xdp_convert_md_to_buff+0x330/0x330 [ 1295.940499][T27820] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1295.946791][T27820] ? bpf_test_init+0x119/0x140 [ 1295.951591][T27820] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1295.957083][T27820] bpf_prog_test_run_xdp+0x757/0xf80 [ 1295.962404][T27820] ? __lock_acquire+0x7c40/0x7c40 [ 1295.967479][T27820] ? dev_put+0x80/0x80 [ 1295.971595][T27820] ? dev_put+0x80/0x80 [ 1295.975688][T27820] bpf_prog_test_run+0x31c/0x390 [ 1295.980675][T27820] __sys_bpf+0x62b/0x780 [ 1295.984954][T27820] ? bpf_link_show_fdinfo+0x380/0x380 [ 1295.990369][T27820] ? lock_chain_count+0x20/0x20 [ 1295.995265][T27820] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1296.001302][T27820] __x64_sys_bpf+0x78/0x90 [ 1296.005746][T27820] do_syscall_64+0x4c/0xa0 [ 1296.010188][T27820] ? clear_bhb_loop+0x60/0xb0 [ 1296.014897][T27820] ? clear_bhb_loop+0x60/0xb0 [ 1296.019601][T27820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1296.025520][T27820] RIP: 0033:0x7fac6539e0d9 [ 1296.029957][T27820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.049684][T27820] RSP: 002b:00007fac66201028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1296.058114][T27820] RAX: ffffffffffffffda RBX: 00007fac65625fa0 RCX: 00007fac6539e0d9 [ 1296.066105][T27820] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1296.074102][T27820] RBP: 00007fac66201090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.082095][T27820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.090084][T27820] R13: 00007fac65626038 R14: 00007fac65625fa0 R15: 00007ffe623e51f8 [ 1296.098089][T27820] [ 1296.143280][T27817] netlink: 'syz.3.6525': attribute type 1 has an invalid length. [ 1296.151812][T27817] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.6525'. [ 1296.166949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1296.198697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1296.228260][T27581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1297.025903][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1297.033928][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1297.056844][T27581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.124889][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1297.143984][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1297.175216][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1297.208799][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1297.248344][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1297.276992][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1297.313309][T27581] device veth0_vlan entered promiscuous mode [ 1297.363245][T27581] device veth1_vlan entered promiscuous mode [ 1297.416065][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1297.431502][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1297.454257][T27581] device veth0_macvtap entered promiscuous mode [ 1297.474884][T27581] device veth1_macvtap entered promiscuous mode [ 1297.515084][T27581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.539787][T27581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.583133][T27581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.604318][T27874] FAULT_INJECTION: forcing a failure. [ 1297.604318][T27874] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.633225][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1297.649189][T27874] CPU: 1 PID: 27874 Comm: syz.4.6537 Not tainted syzkaller #0 [ 1297.656721][T27874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1297.666822][T27874] Call Trace: [ 1297.670138][T27874] [ 1297.673099][T27874] dump_stack_lvl+0x188/0x24e [ 1297.677854][T27874] ? show_regs_print_info+0x12/0x12 [ 1297.683092][T27874] ? load_image+0x410/0x410 [ 1297.687679][T27874] ? __might_sleep+0xd0/0xd0 [ 1297.692314][T27874] ? __lock_acquire+0x7c40/0x7c40 [ 1297.697394][T27874] should_fail_ex+0x390/0x4c0 [ 1297.702128][T27874] should_failslab+0x5/0x20 [ 1297.706676][T27874] slab_pre_alloc_hook+0x59/0x300 [ 1297.711754][T27874] ? kvmalloc_node+0x6c/0x180 [ 1297.716480][T27874] __kmem_cache_alloc_node+0x4f/0x270 [ 1297.721938][T27874] ? kvmalloc_node+0x6c/0x180 [ 1297.726665][T27874] __kmalloc_node+0xa2/0x240 [ 1297.731352][T27874] kvmalloc_node+0x6c/0x180 [ 1297.735904][T27874] page_pool_create+0x1e7/0x5c0 [ 1297.740823][T27874] bpf_test_run_xdp_live+0x220/0x1a90 [ 1297.746269][T27874] ? 0xffffffffa0004440 [ 1297.750476][T27874] ? text_poke_copy+0x7b/0x90 [ 1297.755205][T27874] ? 0xffffffffa0004440 [ 1297.758455][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1297.759382][T27874] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 1297.772701][T27874] ? xdp_convert_md_to_buff+0x330/0x330 [ 1297.778329][T27874] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1297.784619][T27874] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1297.789641][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1297.790722][T27874] ? bpf_test_init+0x119/0x140 [ 1297.803499][T27874] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1297.809009][T27874] bpf_prog_test_run_xdp+0x757/0xf80 [ 1297.814374][T27874] ? __lock_acquire+0x7c40/0x7c40 [ 1297.819461][T27874] ? dev_put+0x80/0x80 [ 1297.823767][T27874] ? dev_put+0x80/0x80 [ 1297.827897][T27874] bpf_prog_test_run+0x31c/0x390 [ 1297.829396][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1297.832867][T27874] __sys_bpf+0x62b/0x780 [ 1297.845218][T27874] ? bpf_link_show_fdinfo+0x380/0x380 [ 1297.850651][T27874] ? lock_chain_count+0x20/0x20 [ 1297.855552][T27874] __x64_sys_bpf+0x78/0x90 [ 1297.860027][T27874] do_syscall_64+0x4c/0xa0 [ 1297.864486][T27874] ? clear_bhb_loop+0x60/0xb0 [ 1297.869209][T27874] ? clear_bhb_loop+0x60/0xb0 [ 1297.873928][T27874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1297.879865][T27874] RIP: 0033:0x7fed3799e0d9 [ 1297.884311][T27874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.903962][T27874] RSP: 002b:00007fed388a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1297.912430][T27874] RAX: ffffffffffffffda RBX: 00007fed37c25fa0 RCX: 00007fed3799e0d9 [ 1297.920452][T27874] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1297.926536][T27581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.928440][T27874] RBP: 00007fed388a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1297.928457][T27874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1297.928469][T27874] R13: 00007fed37c26038 R14: 00007fed37c25fa0 R15: 00007ffd531f7d38 [ 1297.928512][T27874] [ 1298.008546][T27874] page_pool_create() gave up with errno -12 [ 1298.017418][T27581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.054177][T27581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.079174][T27581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.101529][T27581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.165918][T27581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.210652][T27581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.234261][T27581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.257387][T27581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.296768][T27581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.367499][T27581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.395431][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1298.425167][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1298.714104][ T5396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.761441][ T5396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.816845][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1298.902946][T12970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.929052][T12970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.971280][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1299.989820][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.996529][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.579493][T27950] netlink: 'syz.3.6553': attribute type 4 has an invalid length. [ 1300.708983][T27950] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.6553'. [ 1302.343504][T27959] device syzkaller0 entered promiscuous mode [ 1302.590171][T27979] netlink: 13695 bytes leftover after parsing attributes in process `syz.4.6556'. [ 1303.227241][T27995] netlink: 'syz.4.6560': attribute type 10 has an invalid length. [ 1303.648598][T28006] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.6565'. [ 1304.315165][T28019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6568'. [ 1304.491365][T28019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6568'. [ 1304.525379][T28027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6568'. [ 1305.037690][T28048] netlink: 'syz.1.6574': attribute type 10 has an invalid length. [ 1306.385767][T28077] netlink: 'syz.4.6586': attribute type 29 has an invalid length. [ 1306.434938][T28077] netlink: 'syz.4.6586': attribute type 29 has an invalid length. [ 1306.518657][T28077] netlink: 'syz.4.6586': attribute type 29 has an invalid length. [ 1306.573368][T28084] netlink: 'syz.2.6588': attribute type 39 has an invalid length. [ 1307.188122][ T4279] Bluetooth: hci5: command 0x0406 tx timeout [ 1308.359611][T28099] netlink: 'syz.2.6593': attribute type 2 has an invalid length. [ 1308.398517][T28099] netlink: 'syz.2.6593': attribute type 3 has an invalid length. [ 1308.406659][T28099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6593'. [ 1309.414072][T28126] netlink: 'syz.0.6603': attribute type 3 has an invalid length. [ 1309.446323][T28126] netlink: 'syz.0.6603': attribute type 1 has an invalid length. [ 1309.455538][T28126] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6603'. [ 1309.779670][T28126] cgroup: fork rejected by pids controller in /syz0 [ 1310.989592][T28161] device syzkaller0 entered promiscuous mode [ 1311.773093][T28196] netlink: 'syz.1.6621': attribute type 9 has an invalid length. [ 1311.826262][T28196] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6621'. [ 1312.226735][T12959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.480446][T12959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.657239][T12959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.727227][T28221] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.6630'. [ 1312.756603][T28221] openvswitch: netlink: Key type 386 is out of range max 32 [ 1312.838428][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1312.849748][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1312.858064][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1312.868798][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1312.877163][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1312.885071][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1312.892924][T12959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.751131][T28254] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.6636'. [ 1313.763431][T28223] chnl_net:caif_netlink_parms(): no params data found [ 1314.343778][T28223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.370010][T28223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.387054][T28223] device bridge_slave_0 entered promiscuous mode [ 1314.435659][T28223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.441783][T28274] netlink: 'syz.1.6640': attribute type 29 has an invalid length. [ 1314.465432][T28223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.477022][T28274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6640'. [ 1314.496078][T28223] device bridge_slave_1 entered promiscuous mode [ 1314.569776][T28283] netlink: 'syz.4.6641': attribute type 1 has an invalid length. [ 1314.607527][T28283] netlink: 'syz.4.6641': attribute type 3 has an invalid length. [ 1314.661126][T28283] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6641'. [ 1314.957530][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 1315.276471][T28278] delete_channel: no stack [ 1316.094958][T28274] netlink: 'syz.1.6640': attribute type 29 has an invalid length. [ 1316.104511][T28274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6640'. [ 1316.142859][T28223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.181568][T28223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.398129][T28223] team0: Port device team_slave_0 added [ 1316.513392][T28223] team0: Port device team_slave_1 added [ 1316.704627][T28223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.739794][T28223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.826802][T28223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.853107][T28223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.867056][T28223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.933447][T28223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.027829][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 1317.370605][T28223] device hsr_slave_0 entered promiscuous mode [ 1317.397872][T28223] device hsr_slave_1 entered promiscuous mode [ 1317.424640][T28223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1317.441215][T28223] Cannot create hsr debugfs directory [ 1317.778906][T12959] device hsr_slave_0 left promiscuous mode [ 1317.798330][T12959] device hsr_slave_1 left promiscuous mode [ 1317.804925][T12959] device bridge_slave_0 left promiscuous mode [ 1317.817222][T12959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.859640][T12959] device veth1_macvtap left promiscuous mode [ 1317.865919][T12959] device veth0_macvtap left promiscuous mode [ 1317.875871][T12959] device veth1_vlan left promiscuous mode [ 1317.884112][T12959] device veth0_vlan left promiscuous mode [ 1318.531942][T12959] team0 (unregistering): Port device team_slave_1 removed [ 1318.590396][T12959] team0 (unregistering): Port device team_slave_0 removed [ 1318.634191][T12959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.679356][T12959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.724374][T12959] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1318.955045][T12959] team0 (unregistering): Port device bridge0 removed [ 1318.985331][T12959] bond0 (unregistering): Released all slaves [ 1319.107488][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 1319.116874][T28341] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6654'. [ 1320.221304][T28363] device  entered promiscuous mode [ 1320.333239][T28223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1320.366025][T28223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1320.406546][T28223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1320.441224][T28223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1320.695990][T28223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.756396][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1320.771992][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1320.809292][T28223] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.871555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1320.894727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1320.938191][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.945356][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.979783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1321.001030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1321.041655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1321.100252][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.107466][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.187148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1321.197592][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 1321.256064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1321.299516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1321.369219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1321.436261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1321.485164][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1321.514672][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1321.591693][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1321.615693][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1321.662487][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1321.735723][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1321.770295][T28223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1321.893757][T28420] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6671'. [ 1323.090153][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1323.125187][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1323.173130][T28223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.244758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1323.262641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1323.344823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1323.371564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1323.409226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1323.430936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1323.475423][T28223] device veth0_vlan entered promiscuous mode [ 1323.512173][T28223] device veth1_vlan entered promiscuous mode [ 1323.599611][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1323.631242][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1323.662794][T28223] device veth0_macvtap entered promiscuous mode [ 1323.698560][T28223] device veth1_macvtap entered promiscuous mode [ 1323.785823][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.791810][T28458] netlink: 'syz.3.6680': attribute type 2 has an invalid length. [ 1323.825595][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.857386][T28458] netlink: 'syz.3.6680': attribute type 1 has an invalid length. [ 1323.865279][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.896360][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.927038][T28458] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.6680'. [ 1323.939294][T28223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.955117][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1323.978330][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1324.003405][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1324.053028][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1324.085019][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.127515][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.157358][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.195846][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.227356][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.247454][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.264743][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.282444][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.304598][T28223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.328213][T28474] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6684'. [ 1324.341340][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1324.368935][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1324.396904][T28223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.422350][T28223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.455833][T28223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.486077][T28223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.996942][T12965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.017330][T12965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.053801][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1325.144824][T12965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.158487][T12965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.185781][T12965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1325.739843][T28512] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6691'. [ 1327.807938][T28558] netlink: 'syz.0.6702': attribute type 4 has an invalid length. [ 1327.870234][T28558] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6702'. [ 1328.044126][T28568] netlink: 'syz.1.6705': attribute type 10 has an invalid length. [ 1328.100771][T28568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6705'. [ 1328.155075][T28568] device dummy0 entered promiscuous mode [ 1328.200369][T28568] bridge0: port 1(dummy0) entered blocking state [ 1328.233925][T28568] bridge0: port 1(dummy0) entered disabled state [ 1328.320651][T28570] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6702'. [ 1328.579764][T28578] netlink: 'syz.1.6706': attribute type 46 has an invalid length. [ 1328.633216][T28580] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6707'. [ 1328.653788][T28578] netlink: 'syz.1.6706': attribute type 46 has an invalid length. [ 1329.695503][T28595] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6711'. [ 1334.036594][T28661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6719'. [ 1334.109904][T28664] netlink: 'syz.4.6721': attribute type 27 has an invalid length. [ 1334.141024][T28664] netlink: 'syz.4.6721': attribute type 3 has an invalid length. [ 1335.162624][T28695] Ÿë: port 1(gretap0) entered blocking state [ 1335.229333][T28695] Ÿë: port 1(gretap0) entered disabled state [ 1335.268076][T28695] device gretap0 entered promiscuous mode [ 1335.327253][T28697] Ÿë: port 2(veth0_to_team) entered blocking state [ 1335.353121][T28697] Ÿë: port 2(veth0_to_team) entered disabled state [ 1335.375470][T28697] device veth0_to_team entered promiscuous mode [ 1335.662575][T28703] netlink: 'syz.4.6731': attribute type 17 has an invalid length. [ 1336.080424][T28721] netlink: 'syz.3.6738': attribute type 3 has an invalid length. [ 1336.122101][T28721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1336.158246][T28723] netlink: 'syz.4.6739': attribute type 3 has an invalid length. [ 1336.166076][T28723] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.6739'. [ 1336.316218][T28726] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1336.460659][T28730] netlink: 'syz.3.6741': attribute type 13 has an invalid length. [ 1336.530213][T28730] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.6741'. [ 1336.818117][T28745] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6744'. [ 1337.080912][T28753] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.6747'. [ 1337.094346][T28757] netlink: 'syz.3.6750': attribute type 8 has an invalid length. [ 1337.109522][T28757] netlink: 'syz.3.6750': attribute type 1 has an invalid length. [ 1337.130843][T28757] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.6750'. [ 1337.809246][T28776] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.6756'. [ 1340.737479][T28795] netlink: 'syz.0.6759': attribute type 1 has an invalid length. [ 1340.788740][T28795] netlink: 'syz.0.6759': attribute type 4 has an invalid length. [ 1340.796631][T28795] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6759'. [ 1340.846940][T28799] netlink: 'syz.0.6759': attribute type 1 has an invalid length. [ 1340.866238][T28799] netlink: 'syz.0.6759': attribute type 4 has an invalid length. [ 1340.934340][T28799] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6759'. [ 1342.157966][T28842] netlink: 'syz.4.6774': attribute type 1 has an invalid length. [ 1342.240283][T28842] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6774'. [ 1342.634672][T28854] netlink: 'syz.2.6777': attribute type 29 has an invalid length. [ 1342.719432][T28854] netlink: 'syz.2.6777': attribute type 29 has an invalid length. [ 1342.729899][T28856] netlink: 'syz.2.6777': attribute type 29 has an invalid length. [ 1342.742860][T28854] netlink: 'syz.2.6777': attribute type 29 has an invalid length. [ 1342.752627][T28856] netlink: 'syz.2.6777': attribute type 29 has an invalid length. [ 1343.275498][T28878] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6784'. [ 1343.542090][ T4279] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 1344.332582][ T4279] Bluetooth: hci5: ISO packet for unknown connection handle 2096 [ 1344.365667][T28913] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6795'. [ 1344.518562][T28921] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6797'. [ 1345.020673][T28940] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.6804'. [ 1346.003647][T28954] validate_nla: 10 callbacks suppressed [ 1346.003664][T28954] netlink: 'syz.1.6807': attribute type 3 has an invalid length. [ 1346.051227][T28954] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6807'. [ 1346.122909][T28953] netlink: 'syz.1.6807': attribute type 3 has an invalid length. [ 1346.277774][T28953] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6807'. [ 1346.370203][T28968] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6811'. [ 1346.438126][T28968] netlink: zone id is out of range [ 1346.443430][T28968] netlink: zone id is out of range [ 1346.456730][T28968] netlink: zone id is out of range [ 1346.466401][T28968] netlink: zone id is out of range [ 1346.494773][T28968] netlink: zone id is out of range [ 1346.504887][T28968] netlink: zone id is out of range [ 1346.515313][T28968] netlink: zone id is out of range [ 1346.535398][T28968] netlink: zone id is out of range [ 1346.545589][T28968] netlink: zone id is out of range [ 1346.576170][T28968] netlink: zone id is out of range [ 1346.631877][T28972] netlink: 'syz.4.6813': attribute type 2 has an invalid length. [ 1346.663378][T28972] netlink: 'syz.4.6813': attribute type 8 has an invalid length. [ 1346.684221][T28972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6813'. [ 1346.777056][T28975] netlink: 'syz.4.6813': attribute type 2 has an invalid length. [ 1346.930480][T28975] netlink: 'syz.4.6813': attribute type 8 has an invalid length. [ 1346.967925][T28975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6813'. [ 1347.268732][T28994] netlink: 'syz.4.6818': attribute type 2 has an invalid length. [ 1347.276601][T28994] netlink: 'syz.4.6818': attribute type 1 has an invalid length. [ 1353.047616][T29065] netlink: 'syz.1.6839': attribute type 12 has an invalid length. [ 1353.073109][T29065] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6839'. [ 1354.479846][T29092] netlink: 'syz.4.6848': attribute type 1 has an invalid length. [ 1355.054255][T29114] netlink: 'syz.2.6857': attribute type 4 has an invalid length. [ 1355.062550][T29114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6857'. [ 1356.096143][T29138] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.6864'. [ 1356.331380][T29137] netlink: 'syz.3.6863': attribute type 1 has an invalid length. [ 1356.417534][T29137] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1357.122691][T29152] netlink: 'syz.4.6868': attribute type 21 has an invalid length. [ 1357.130791][T29152] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1357.140638][T29152] netlink: 'syz.4.6868': attribute type 21 has an invalid length. [ 1357.149218][T29152] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1357.199269][T29152] netlink: 'syz.4.6868': attribute type 21 has an invalid length. [ 1357.207146][T29152] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1357.278990][T29149] netlink: 'syz.0.6867': attribute type 2 has an invalid length. [ 1357.306899][T29149] netlink: 119 bytes leftover after parsing attributes in process `syz.0.6867'. [ 1357.347019][T29157] netlink: 'syz.1.6869': attribute type 2 has an invalid length. [ 1357.401057][T29157] netlink: 175020 bytes leftover after parsing attributes in process `syz.1.6869'. [ 1357.825821][T29177] device syzkaller0 entered promiscuous mode [ 1361.081515][T29198] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6880'. [ 1361.090753][T29202] netlink: 'syz.4.6882': attribute type 10 has an invalid length. [ 1361.123663][T29202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.138123][T29202] device bridge_slave_1 left promiscuous mode [ 1361.144536][T29202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.157397][T29202] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1361.166926][T29207] netlink: 'syz.1.6883': attribute type 10 has an invalid length. [ 1361.177411][T29207] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1361.363411][T29219] netlink: 'syz.2.6886': attribute type 21 has an invalid length. [ 1361.408482][T29219] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6886'. [ 1361.430019][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.436805][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.763936][T29264] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.6898'. [ 1363.303852][T29280] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.6902'. [ 1363.711437][T29295] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6909'. [ 1364.091235][T29304] netlink: 'syz.1.6912': attribute type 1 has an invalid length. [ 1366.065073][T29342] netlink: 'syz.3.6921': attribute type 2 has an invalid length. [ 1366.127440][T29342] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6921'. [ 1366.323777][T29340] netlink: 'syz.4.6923': attribute type 2 has an invalid length. [ 1366.366152][T29340] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.6923'. [ 1366.560045][T29343] netlink: 'syz.3.6921': attribute type 21 has an invalid length. [ 1366.577445][T29343] netlink: 'syz.3.6921': attribute type 1 has an invalid length. [ 1366.633804][T29343] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6921'. [ 1367.427363][T29372] netlink: 'syz.2.6931': attribute type 10 has an invalid length. [ 1367.518364][T29372] team0: Device ipvlan1 failed to register rx_handler [ 1368.974760][T29393] netlink: 'syz.2.6937': attribute type 2 has an invalid length. [ 1369.014033][T29393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6937'. [ 1369.318199][T29399] netlink: 'syz.1.6939': attribute type 2 has an invalid length. [ 1369.357423][T29399] netlink: 'syz.1.6939': attribute type 8 has an invalid length. [ 1369.387827][T29399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6939'. [ 1369.966250][T29409] netlink: 'syz.3.6942': attribute type 10 has an invalid length. [ 1370.018093][T29409] device netdevsim0 entered promiscuous mode [ 1370.573721][T29426] netlink: 'syz.3.6947': attribute type 10 has an invalid length. [ 1370.648157][T29426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.680995][T29426] device bridge_slave_1 left promiscuous mode [ 1370.731777][T29426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.953085][T29431] can: request_module (can-proto-0) failed. [ 1372.627892][T29460] netlink: 'syz.3.6954': attribute type 2 has an invalid length. [ 1372.797886][T29460] device 0 entered promiscuous mode [ 1373.382016][T29477] netlink: 'syz.2.6960': attribute type 3 has an invalid length. [ 1373.480384][T29477] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6960'. [ 1373.876799][T29488] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6963'. [ 1374.362241][T29497] device syzkaller0 left promiscuous mode [ 1374.615600][T29506] device syzkaller0 entered promiscuous mode [ 1374.811233][T29519] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.6970'. [ 1374.887931][T29519] net_ratelimit: 23 callbacks suppressed [ 1374.887952][T29519] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1378.073500][T29548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.084316][T29548] device bridge_slave_0 left promiscuous mode [ 1378.091294][T29548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.452400][T29567] netlink: 'syz.2.6984': attribute type 4 has an invalid length. [ 1378.462804][T29567] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6984'. [ 1378.507022][T29567] netlink: 'syz.2.6984': attribute type 10 has an invalid length. [ 1378.518031][T29567] device veth1_macvtap left promiscuous mode [ 1378.623798][T29570] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6986'. [ 1378.658652][T29570] device hsr_slave_0 left promiscuous mode [ 1378.671765][T29570] device hsr_slave_1 left promiscuous mode [ 1378.887714][T29571] netlink: 'syz.0.6986': attribute type 21 has an invalid length. [ 1378.896039][T29571] netlink: 'syz.0.6986': attribute type 2 has an invalid length. [ 1378.904394][T29573] netlink: 'syz.0.6986': attribute type 21 has an invalid length. [ 1378.913275][T29573] netlink: 'syz.0.6986': attribute type 2 has an invalid length. [ 1378.940808][T29578] netlink: 'syz.2.6988': attribute type 1 has an invalid length. [ 1378.967438][T29578] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6988'. [ 1379.608337][T29604] netlink: 'syz.0.6995': attribute type 39 has an invalid length. [ 1382.395655][T29604] device macvlan0 entered promiscuous mode [ 1382.592580][T29614] netlink: 'syz.0.6998': attribute type 10 has an invalid length. [ 1382.679449][T29614] netlink: 'syz.0.6998': attribute type 1 has an invalid length. [ 1382.703311][T29614] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6998'. [ 1382.781047][T29620] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1383.408002][T29628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.511639][T29628] device bridge_slave_1 left promiscuous mode [ 1383.548113][T29628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.801592][T29642] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7007'. [ 1383.854826][T29642] netlink: zone id is out of range [ 1383.916081][T29642] netlink: zone id is out of range [ 1383.937691][T29642] netlink: zone id is out of range [ 1383.948121][T29642] netlink: zone id is out of range [ 1383.971331][T29642] netlink: zone id is out of range [ 1383.987813][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 1384.189589][T29642] netlink: del zone limit has 4 unknown bytes [ 1384.708546][T29673] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7016'. [ 1384.746744][T29675] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7016'. [ 1385.090117][T29697] validate_nla: 2 callbacks suppressed [ 1385.090134][T29697] netlink: 'syz.1.7023': attribute type 46 has an invalid length. [ 1385.124848][T29697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7023'. [ 1385.169368][T29702] netlink: 'syz.4.7024': attribute type 21 has an invalid length. [ 1385.208999][T29702] netlink: 'syz.4.7024': attribute type 6 has an invalid length. [ 1385.216788][T29702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7024'. [ 1386.067570][T29727] netlink: 'syz.1.7032': attribute type 21 has an invalid length. [ 1386.111203][T29727] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7032'. [ 1386.167081][T29737] netlink: 'syz.2.7035': attribute type 4 has an invalid length. [ 1386.218410][T29737] netlink: 159388 bytes leftover after parsing attributes in process `syz.2.7035'. [ 1386.288079][T29736] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7034'. [ 1386.448159][T29736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1386.540015][T29737] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7035'. [ 1386.571533][T29741] netlink: 'syz.3.7034': attribute type 21 has an invalid length. [ 1386.612025][T29741] netlink: 'syz.3.7034': attribute type 2 has an invalid length. [ 1386.651148][T29741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7034'. [ 1386.680260][T29736] netlink: 'syz.3.7034': attribute type 46 has an invalid length. [ 1388.808280][T29791] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1388.867959][T29791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1388.925164][T29796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7050'. [ 1388.954924][T29796] tc_dump_action: action bad kind [ 1389.366261][T29806] netlink: 'syz.1.7053': attribute type 28 has an invalid length. [ 1389.398734][T29806] netlink: 'syz.1.7053': attribute type 3 has an invalid length. [ 1389.421140][T29806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7053'. [ 1390.664760][T29841] netlink: 'syz.0.7063': attribute type 2 has an invalid length. [ 1391.018084][T29839] netlink: 'syz.3.7062': attribute type 16 has an invalid length. [ 1391.033365][T29839] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7062'. [ 1391.091812][T29839] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1392.928328][T29884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7074'. [ 1392.998867][T29884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7074'. [ 1393.067811][T29885] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7074'. [ 1393.132193][T29888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7074'. [ 1393.232036][T29890] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.7075'. [ 1393.394572][T29896] netlink: 'syz.4.7079': attribute type 10 has an invalid length. [ 1393.574099][T29896] device syz_tun entered promiscuous mode [ 1393.659717][T29896] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1393.979573][T29906] : port 1(ip6gretap0) entered blocking state [ 1394.063293][T29906] : port 1(ip6gretap0) entered disabled state [ 1394.552694][T29906] device ip6gretap0 entered promiscuous mode [ 1394.825302][T29911] netlink: 'syz.4.7083': attribute type 2 has an invalid length. [ 1394.857054][T29911] netlink: 'syz.4.7083': attribute type 8 has an invalid length. [ 1394.897649][T29911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7083'. [ 1394.947408][T29912] device ip6gretap0 left promiscuous mode [ 1394.953736][T29912] : port 1(ip6gretap0) entered disabled state [ 1396.444539][ T4282] Bluetooth: hci0: ISO packet for unknown connection handle 2096 [ 1397.785428][T29978] netlink: 'syz.3.7099': attribute type 2 has an invalid length. [ 1397.815136][T29978] netlink: 'syz.3.7099': attribute type 8 has an invalid length. [ 1397.849904][T29978] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7099'. [ 1400.443348][T30017] netlink: 'syz.2.7123': attribute type 3 has an invalid length. [ 1400.467450][T30017] netlink: 'syz.2.7123': attribute type 1 has an invalid length. [ 1400.475742][T30017] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7123'. [ 1400.630848][T30017] cgroup: fork rejected by pids controller in /syz2 [ 1400.741012][T30025] netlink: 'syz.3.7115': attribute type 4 has an invalid length. [ 1400.793655][T30025] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7115'. [ 1401.121703][T30027] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7115'. [ 1401.771184][T30042] netlink: 'syz.3.7121': attribute type 9 has an invalid length. [ 1401.808207][T30042] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.7121'. [ 1402.826129][T30049] delete_channel: no stack [ 1403.497906][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1403.518675][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1403.557495][T23364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1403.565777][T23364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1403.574018][T23364] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1403.581662][T23364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1403.780130][T30060] chnl_net:caif_netlink_parms(): no params data found [ 1403.895800][T30060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.903432][T30060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.912344][T30060] device bridge_slave_0 entered promiscuous mode [ 1403.922413][T30060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.930424][T30060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.939288][T30060] device bridge_slave_1 entered promiscuous mode [ 1404.002224][T30060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.024230][T30060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.086475][T30060] team0: Port device team_slave_0 added [ 1404.103622][T30060] team0: Port device team_slave_1 added [ 1404.149307][T30060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.156411][T30060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.185520][T30060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.204083][T30060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.211308][T30060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.240199][T30060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.327203][T30060] device hsr_slave_0 entered promiscuous mode [ 1404.334394][T30060] device hsr_slave_1 entered promiscuous mode [ 1404.342683][T30060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1404.351642][T30060] Cannot create hsr debugfs directory [ 1404.744661][T30071] netlink: 'syz.4.7129': attribute type 3 has an invalid length. [ 1404.786201][T30071] netlink: 'syz.4.7129': attribute type 1 has an invalid length. [ 1404.817483][T30071] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7129'. [ 1404.835055][T30060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.106543][T30071] cgroup: fork rejected by pids controller in /syz4 [ 1405.190254][T30060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.265352][T30086] netlink: 'syz.0.7130': attribute type 1 has an invalid length. [ 1405.347965][T30086] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7130'. [ 1405.668186][T23364] Bluetooth: hci2: command 0x0409 tx timeout [ 1405.742078][T30060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.884947][T30060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.287163][T30060] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1406.449824][T27147] bond0: (slave syz_tun): Releasing backup interface [ 1406.542453][T30060] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1406.556842][T30060] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1406.632789][T30060] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1407.113465][T30060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.153828][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1407.162831][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1407.180811][T30060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.195012][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1407.204941][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1407.228100][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.235262][ T5402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.277796][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1407.290667][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1407.327669][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1407.337691][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.344820][ T5402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.359394][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1407.402335][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1407.426890][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1407.452019][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1407.468329][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1407.484554][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1407.494556][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1407.510850][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1407.524621][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1407.552558][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1407.566377][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1407.586068][T30060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1407.628559][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1407.645591][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1407.655119][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1407.668086][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1407.676235][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1407.684277][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1407.747802][T23364] Bluetooth: hci2: command 0x041b tx timeout [ 1407.871474][T15061] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.076307][T15061] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.154154][T30112] netlink: 'syz.0.7136': attribute type 10 has an invalid length. [ 1408.488999][T30112] team0: Port device geneve1 added [ 1408.519352][T15061] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.546658][T30099] chnl_net:caif_netlink_parms(): no params data found [ 1408.634064][T15061] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.677847][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1408.686152][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1408.771016][T30060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.838334][T30099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.845783][T30099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.855959][T30099] device bridge_slave_0 entered promiscuous mode [ 1408.875473][T30099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.883479][T30099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.892581][T30099] device bridge_slave_1 entered promiscuous mode [ 1408.994173][T30099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.006208][T30099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.078825][T30099] team0: Port device team_slave_0 added [ 1409.152653][T30099] team0: Port device team_slave_1 added [ 1409.272903][T30129] netlink: 'syz.3.7141': attribute type 1 has an invalid length. [ 1409.308347][T30129] netlink: 'syz.3.7141': attribute type 3 has an invalid length. [ 1409.346463][T30129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7141'. [ 1409.748010][T23364] Bluetooth: hci1: command 0x0409 tx timeout [ 1409.842446][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 1410.084182][T30126] delete_channel: no stack [ 1410.825653][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1410.835836][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1410.885351][T30099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.897702][T30099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.985172][T30099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.059079][T30099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.066077][T30099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.163949][T30099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.225443][T30060] device veth0_vlan entered promiscuous mode [ 1411.263968][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1411.278027][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1411.332114][T30060] device veth1_vlan entered promiscuous mode [ 1411.393699][T30142] netlink: 'syz.3.7144': attribute type 3 has an invalid length. [ 1411.405592][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1411.416397][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1411.431623][T30142] netlink: 'syz.3.7144': attribute type 1 has an invalid length. [ 1411.465032][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1411.477795][T30142] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7144'. [ 1411.723992][T30099] device hsr_slave_0 entered promiscuous mode [ 1411.768847][T30099] device hsr_slave_1 entered promiscuous mode [ 1411.780935][T30099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1411.803926][T30099] Cannot create hsr debugfs directory [ 1411.827644][T23364] Bluetooth: hci1: command 0x041b tx timeout [ 1411.892355][T30142] cgroup: fork rejected by pids controller in /syz3 [ 1411.908707][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 1412.169527][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1412.214308][T30060] device veth0_macvtap entered promiscuous mode [ 1412.323080][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1412.342547][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1412.500035][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1412.514406][T30060] device veth1_macvtap entered promiscuous mode [ 1412.607212][T30060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.635220][T30060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.655549][T30060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.677471][T30060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.697351][T30060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.717464][T30060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.769779][T30060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.931726][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1412.945135][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1412.962760][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1412.977074][T30060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.995516][T30060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.005659][T30060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.025405][T30060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.035476][T30060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.053827][T30060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.064006][T30060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.082347][T30060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.094636][T30060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.112340][T30060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.131739][T30060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.177895][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1413.186741][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1413.206576][T30060] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.236954][T30060] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.257164][T30060] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.267508][T30060] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.615409][ T5402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.635541][ T5402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.645188][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1413.808195][ T5402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.829298][ T5402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.852236][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1413.911352][T23364] Bluetooth: hci1: command 0x040f tx timeout [ 1414.126014][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1414.136306][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1414.154347][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1414.163628][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1414.174770][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1414.182226][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1414.328302][T15061] device hsr_slave_0 left promiscuous mode [ 1414.338385][T15061] device hsr_slave_1 left promiscuous mode [ 1414.358251][T15061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1414.365738][T15061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.388903][T15061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1414.396345][T15061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.412458][T15061] device bridge_slave_0 left promiscuous mode [ 1414.447580][T15061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.502932][T15061] device veth1_macvtap left promiscuous mode [ 1414.517628][T15061] device veth0_macvtap left promiscuous mode [ 1414.525391][T15061] device veth1_vlan left promiscuous mode [ 1415.988367][T23364] Bluetooth: hci1: command 0x0419 tx timeout [ 1416.014737][T15061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.060790][T15061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.108765][T15061] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1416.231852][T23364] Bluetooth: hci3: command 0x0409 tx timeout [ 1416.366516][T15061] bond0 (unregistering): Released all slaves [ 1416.736351][T30099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1416.754052][T30099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1416.825916][T30099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1416.838567][T30099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1417.011305][T30173] chnl_net:caif_netlink_parms(): no params data found [ 1417.086614][T30099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.140907][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1417.158251][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1417.186121][T30099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.210834][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1417.247037][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1417.265453][T12966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.272670][T12966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.289989][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1417.299804][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1417.310006][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1417.319057][T12966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.326305][T12966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.480598][T30173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.498736][T30173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.543073][T30173] device bridge_slave_0 entered promiscuous mode [ 1417.588752][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1417.619701][T30173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.626920][T30173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.730421][T30173] device bridge_slave_1 entered promiscuous mode [ 1417.773650][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1417.810296][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1417.868392][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1418.079676][T30220] netlink: 'syz.2.7153': attribute type 10 has an invalid length. [ 1418.256625][T30220] team0: Port device geneve1 added [ 1418.283411][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1418.308828][T23364] Bluetooth: hci3: command 0x041b tx timeout [ 1418.328648][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1418.348377][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1418.405806][T15061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.488114][T29160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1418.501350][T29160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1418.510969][T29160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1418.521792][T29160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1418.542193][T30173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.558980][T30099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1418.659721][T15061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.739593][T30173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.868849][T15061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.996748][T15061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.101203][T30173] team0: Port device team_slave_0 added [ 1419.208627][T30173] team0: Port device team_slave_1 added [ 1419.303180][T30173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.346389][T30173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.505056][T30173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.652575][T30173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.677510][T30173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.820335][T30173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.387580][T23364] Bluetooth: hci3: command 0x040f tx timeout [ 1420.461281][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1420.480008][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1420.497755][T15061] device 0 left promiscuous mode [ 1420.515166][T30173] device hsr_slave_0 entered promiscuous mode [ 1420.545021][T30173] device hsr_slave_1 entered promiscuous mode [ 1420.636629][T30173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1420.666330][T30173] Cannot create hsr debugfs directory [ 1420.749219][T30099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.468311][T23364] Bluetooth: hci3: command 0x0419 tx timeout [ 1422.886131][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.892567][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.246089][T30173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1423.269925][T30173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1423.364559][T30173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1423.392908][T30173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1423.603685][T30293] FAULT_INJECTION: forcing a failure. [ 1423.603685][T30293] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.655739][T30293] CPU: 1 PID: 30293 Comm: syz.0.7162 Not tainted syzkaller #0 [ 1423.663362][T30293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1423.673453][T30293] Call Trace: [ 1423.676757][T30293] [ 1423.679717][T30293] dump_stack_lvl+0x188/0x24e [ 1423.684438][T30293] ? show_regs_print_info+0x12/0x12 [ 1423.689677][T30293] ? load_image+0x410/0x410 [ 1423.694230][T30293] ? __might_sleep+0xd0/0xd0 [ 1423.698849][T30293] ? __lock_acquire+0x7c40/0x7c40 [ 1423.703908][T30293] ? lockdep_hardirqs_on+0x94/0x140 [ 1423.709150][T30293] should_fail_ex+0x390/0x4c0 [ 1423.713908][T30293] should_failslab+0x5/0x20 [ 1423.718453][T30293] slab_pre_alloc_hook+0x59/0x300 [ 1423.723516][T30293] ? lock_is_held_type+0x13a/0x190 [ 1423.728664][T30293] ? kernfs_fop_write_iter+0x154/0x520 [ 1423.734170][T30293] __kmem_cache_alloc_node+0x4f/0x270 [ 1423.739593][T30293] ? kernfs_fop_write_iter+0x154/0x520 [ 1423.745184][T30293] __kmalloc+0xa3/0x240 [ 1423.749400][T30293] kernfs_fop_write_iter+0x154/0x520 [ 1423.754739][T30293] vfs_write+0x482/0x9a0 [ 1423.759042][T30293] ? file_end_write+0x250/0x250 [ 1423.763944][T30293] ? __fget_files+0x3fc/0x460 [ 1423.768690][T30293] ? __fdget_pos+0x2ae/0x360 [ 1423.773329][T30293] ? ksys_write+0x70/0x260 [ 1423.777809][T30293] ksys_write+0x14d/0x260 [ 1423.782184][T30293] ? __ia32_sys_read+0x80/0x80 [ 1423.787086][T30293] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1423.793041][T30293] do_syscall_64+0x4c/0xa0 [ 1423.797508][T30293] ? clear_bhb_loop+0x60/0xb0 [ 1423.802232][T30293] ? clear_bhb_loop+0x60/0xb0 [ 1423.806959][T30293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1423.812897][T30293] RIP: 0033:0x7fb7c679e0d9 [ 1423.817432][T30293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1423.837075][T30293] RSP: 002b:00007fb7c770f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1423.845530][T30293] RAX: ffffffffffffffda RBX: 00007fb7c6a25fa0 RCX: 00007fb7c679e0d9 [ 1423.853532][T30293] RDX: 000000000000002f RSI: 0000200000000080 RDI: 0000000000000009 [ 1423.861536][T30293] RBP: 00007fb7c770f090 R08: 0000000000000000 R09: 0000000000000000 [ 1423.869537][T30293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1423.877537][T30293] R13: 00007fb7c6a26038 R14: 00007fb7c6a25fa0 R15: 00007fffb8687c88 [ 1423.885559][T30293] [ 1423.960991][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1423.981199][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1424.131925][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1424.148562][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1424.167911][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1424.175914][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1424.344822][T30099] device veth0_vlan entered promiscuous mode [ 1424.413582][T15061] device hsr_slave_0 left promiscuous mode [ 1424.421079][T15061] device hsr_slave_1 left promiscuous mode [ 1424.428130][T15061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1424.435786][T15061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.445933][T15061] device bridge_slave_0 left promiscuous mode [ 1424.453746][T15061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.489071][T15061] device veth1_macvtap left promiscuous mode [ 1424.495581][T15061] device veth0_macvtap left promiscuous mode [ 1424.502747][T15061] device veth1_vlan left promiscuous mode [ 1424.508900][T15061] device veth0_vlan left promiscuous mode [ 1425.288695][T15061] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1425.334951][T15061] team0 (unregistering): Port device team_slave_1 removed [ 1425.385730][T15061] team0 (unregistering): Port device team_slave_0 removed [ 1425.425193][T15061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.471141][T15061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.777165][T15061] bond0 (unregistering): Released all slaves [ 1425.880624][T30099] device veth1_vlan entered promiscuous mode [ 1425.904502][T29160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1426.009713][T30173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.030528][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1426.040631][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1426.054843][T30173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.082994][T30099] device veth0_macvtap entered promiscuous mode [ 1426.119767][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1426.137185][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1426.153221][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1426.166270][T30099] device veth1_macvtap entered promiscuous mode [ 1426.199296][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1426.207984][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1426.216937][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1426.226483][T12975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.233652][T12975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.267824][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1426.287687][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1426.297666][T12975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.304796][T12975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.313443][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1426.357609][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1426.366704][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1426.404134][T30099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.415300][T30099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.433715][T30099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.462143][T30099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.479524][T30099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.491354][T30099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.503291][T30099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.540351][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1426.558220][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1426.567156][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1426.586345][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1426.618276][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1426.649003][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1426.661811][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1426.681945][T30099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.702796][T30099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.716267][T30099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.726866][T30099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.736779][T30099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.751939][T30099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.762096][T30099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.772733][T30099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.784547][T30099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.801650][T30309] netlink: 'syz.0.7166': attribute type 10 has an invalid length. [ 1426.815194][T30309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.849249][T30309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.856690][T30309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.882286][T30309] team0: Port device bridge0 added [ 1426.894013][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1426.905464][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1426.922769][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1426.942131][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1426.962460][T30173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1426.975129][T30173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1426.987205][T30099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.996828][T30099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.006880][T30099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.015863][T30099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.039972][T29160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1427.048667][T29160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1427.169257][ T5391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.178032][ T5391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.185614][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1427.253388][T12968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.262342][T12968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.279124][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1427.598377][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1427.607136][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1427.622548][T30173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.645903][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1427.654782][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1427.683302][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1427.692517][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1427.702289][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1427.714779][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1427.725039][T30173] device veth0_vlan entered promiscuous mode [ 1427.739148][T30173] device veth1_vlan entered promiscuous mode [ 1427.762977][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1427.771564][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1427.782425][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1427.791697][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1427.803785][T30173] device veth0_macvtap entered promiscuous mode [ 1427.816022][T30173] device veth1_macvtap entered promiscuous mode [ 1427.839682][T30173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.850633][T30173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.860860][T30173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.871425][T30173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.881359][T30173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.893848][T30173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.903816][T30173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.914421][T30173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.925926][T30173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1427.936279][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1427.946317][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1427.955765][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1427.964731][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1427.977576][T30173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.991345][T30173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.002174][T30173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.012933][T30173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.023210][T30173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.033861][T30173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.043850][T30173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.054610][T30173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.064824][T30173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.076454][T30173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.088282][T30173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.097700][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1428.108334][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1428.127693][T30173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.136488][T30173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.145552][T30173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.155983][T30173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.253869][T29160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.270464][T15061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.278170][T29160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.282812][T15061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.286408][T12968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1428.348539][T15061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1428.495585][T30326] netlink: 'syz.1.7168': attribute type 29 has an invalid length. [ 1428.508903][T30321] netlink: 'syz.4.7167': attribute type 10 has an invalid length. [ 1428.673159][T30321] team0: Port device geneve1 added [ 1428.731489][T30326] netlink: 'syz.1.7168': attribute type 29 has an invalid length. [ 1428.797948][T30330] netlink: 'syz.1.7168': attribute type 29 has an invalid length. [ 1428.814704][T30334] netlink: 'syz.1.7168': attribute type 29 has an invalid length. [ 1428.843879][T30336] netlink: 'syz.1.7168': attribute type 29 has an invalid length. [ 1430.027128][T30352] netlink: 'syz.2.7174': attribute type 1 has an invalid length. [ 1430.110260][T30352] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7174'. [ 1431.338995][T30358] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1432.462012][T30381] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7182'. [ 1432.595341][T30381] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1433.373993][T30411] netlink: 'syz.4.7190': attribute type 1 has an invalid length. [ 1433.402028][T30411] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7190'. [ 1434.218478][T30422] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1434.531842][T30433] netlink: 763 bytes leftover after parsing attributes in process `syz.0.7196'. [ 1434.587434][T30433] netlink: 'syz.0.7196': attribute type 2 has an invalid length. [ 1434.635052][T30433] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7196'. [ 1435.187543][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 1435.601468][T30462] netlink: 'syz.0.7203': attribute type 1 has an invalid length. [ 1435.617438][T30462] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7203'. [ 1435.654567][T30466] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7205'. [ 1435.780210][T30473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7206'. [ 1436.012103][T30477] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1436.575880][T30490] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1436.618798][T30490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7210'. [ 1436.983052][T30509] netlink: 'syz.3.7215': attribute type 10 has an invalid length. [ 1437.027628][T30509] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.7215'. [ 1437.071347][T30512] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7216'. [ 1437.597408][T30527] netlink: 'syz.3.7220': attribute type 1 has an invalid length. [ 1437.605307][T30527] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7220'. [ 1437.923366][T30542] netlink: 'syz.0.7225': attribute type 1 has an invalid length. [ 1437.970386][T30542] netlink: 'syz.0.7225': attribute type 3 has an invalid length. [ 1438.083677][T30542] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7225'. [ 1438.399344][T30551] bridge0: port 1(dummy0) entered disabled state [ 1438.552212][T30551] device bridge_slave_1 left promiscuous mode [ 1438.626926][T30551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.635307][ T5402] wlan1: Trigger new scan to find an IBSS to join [ 1440.145416][T30591] netlink: 'syz.2.7241': attribute type 1 has an invalid length. [ 1440.194961][T30591] netlink: 'syz.2.7241': attribute type 3 has an invalid length. [ 1440.206554][T30591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7241'. [ 1442.656430][T30650] netlink: 'syz.1.7258': attribute type 1 has an invalid length. [ 1442.672221][T30650] netlink: 'syz.1.7258': attribute type 3 has an invalid length. [ 1442.683818][T30650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1443.669235][T12968] wlan1: Trigger new scan to find an IBSS to join [ 1444.372890][T30676] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7265'. [ 1446.175878][T15061] wlan1: Creating new IBSS network, BSSID 22:70:0d:c8:51:a4 [ 1446.420898][T30683] netlink: 'syz.1.7268': attribute type 1 has an invalid length. [ 1446.507344][T30683] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1447.256514][T30708] netlink: 'syz.4.7277': attribute type 2 has an invalid length. [ 1447.274621][T30708] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7277'. [ 1448.586078][T30754] netlink: 'syz.1.7283': attribute type 1 has an invalid length. [ 1448.618579][T30754] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7283'. [ 1448.690519][T30757] netlink: 'syz.3.7284': attribute type 2 has an invalid length. [ 1448.708403][T30757] netlink: 'syz.3.7284': attribute type 8 has an invalid length. [ 1448.716192][T30757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7284'. [ 1448.747014][T30760] netlink: 'syz.4.7285': attribute type 1 has an invalid length. [ 1448.776085][T30756] netlink: 'syz.3.7284': attribute type 2 has an invalid length. [ 1448.795283][T30760] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7285'. [ 1448.795355][T30768] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1448.817589][T30756] netlink: 'syz.3.7284': attribute type 8 has an invalid length. [ 1448.837516][T30756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7284'. [ 1448.905432][T30760] sctp: [Deprecated]: syz.4.7285 (pid 30760) Use of int in max_burst socket option deprecated. [ 1448.905432][T30760] Use struct sctp_assoc_value instead [ 1449.005710][T30774] netlink: 'syz.1.7288': attribute type 13 has an invalid length. [ 1449.067836][T30774] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1449.116348][T30774] erspan0: refused to change device tx_queue_len [ 1449.168337][T30774] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1449.411946][T30799] device veth1_macvtap left promiscuous mode [ 1449.835491][T30815] netlink: 'syz.2.7302': attribute type 3 has an invalid length. [ 1449.907826][T30815] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7302'. [ 1450.098180][T30820] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1450.585529][T30846] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7310'. [ 1452.636426][T12974] wlan1: Trigger new scan to find an IBSS to join [ 1454.767573][T30857] device  entered promiscuous mode [ 1454.775956][T30867] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7316'. [ 1455.125238][T30886] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7320'. [ 1455.135979][T30886] bridge_slave_1: default FDB implementation only supports local addresses [ 1455.679662][T30749] wlan1: Trigger new scan to find an IBSS to join [ 1456.447646][T30915] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1456.453746][T30915] syzkaller0: linktype set to 8 [ 1456.834056][T30922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.918221][T30922] device bridge_slave_0 left promiscuous mode [ 1456.930802][T30922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.082152][T30923] can: request_module (can-proto-0) failed. [ 1457.106392][T30922] team0: Port device bridge0 removed [ 1458.439126][T30961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7343'. [ 1458.628632][T12959] wlan1: Trigger new scan to find an IBSS to join [ 1458.830126][T30963] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.7344'. [ 1459.614023][T12943] wlan1: Creating new IBSS network, BSSID 7a:11:6a:b7:d7:58 [ 1460.887545][T30973] netlink: 'syz.2.7347': attribute type 41 has an invalid length. [ 1462.126717][T31011] netlink: 'syz.3.7359': attribute type 29 has an invalid length. [ 1462.150597][T31011] netlink: 'syz.3.7359': attribute type 29 has an invalid length. [ 1462.465008][T31027] netlink: 'syz.0.7364': attribute type 21 has an invalid length. [ 1462.722124][T31036] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.7367'. [ 1463.745598][T31059] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1463.889249][T31059] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1463.927496][T31059] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1463.964057][T31059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1464.013234][T31062] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.7374'. [ 1465.099087][T31093] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7381'. [ 1465.411174][T31101] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7385'. [ 1465.442999][ T4279] Bluetooth: hci2: unknown advertising packet type: 0x63 [ 1466.528688][T31134] netlink: 61955 bytes leftover after parsing attributes in process `syz.2.7394'. [ 1466.577365][T31134] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7394'. [ 1467.078002][T31142] netlink: 'syz.1.7397': attribute type 10 has an invalid length. [ 1467.153558][T31142] device dummy0 left promiscuous mode [ 1467.230903][T31142] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1467.242038][ T4279] Bluetooth: hci1: unknown advertising packet type: 0x63 [ 1467.317058][T31144] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7398'. [ 1467.811954][T31156] netlink: 'syz.2.7402': attribute type 6 has an invalid length. [ 1468.066621][T31170] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7407'. [ 1468.085795][T31170] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7407'. [ 1468.565742][T31176] netlink: 'syz.0.7409': attribute type 3 has an invalid length. [ 1468.603051][T31176] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7409'. [ 1470.584664][T31219] netlink: 'syz.3.7420': attribute type 2 has an invalid length. [ 1470.629152][T31219] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7420'. [ 1471.088406][T31227] netlink: 'syz.0.7422': attribute type 3 has an invalid length. [ 1471.096224][T31227] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7422'. [ 1471.175344][T31241] netlink: 'syz.2.7425': attribute type 1 has an invalid length. [ 1471.187793][T31241] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7425'. [ 1472.499599][T31256] netlink: 'syz.3.7428': attribute type 15 has an invalid length. [ 1472.517645][T31256] netlink: 'syz.3.7428': attribute type 7 has an invalid length. [ 1472.999690][T31264] netlink: 'syz.2.7430': attribute type 3 has an invalid length. [ 1473.047313][T31264] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7430'. [ 1473.065128][T12974] device hsr_slave_0 left promiscuous mode [ 1473.099365][T12974] device hsr_slave_1 left promiscuous mode [ 1473.126180][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.136488][T12974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.176322][T12974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.194073][T12974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.486677][T12974] device veth0_macvtap left promiscuous mode [ 1473.511512][T12974] device veth1_vlan left promiscuous mode [ 1473.533554][T12974] device veth0_vlan left promiscuous mode [ 1475.385963][T12974] team0 (unregistering): Port device team_slave_1 removed [ 1475.476388][T12974] team0 (unregistering): Port device team_slave_0 removed [ 1475.546332][T12974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.588755][T12974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1475.860148][T12974] bond0 (unregistering): Released all slaves [ 1475.894975][T31271] netlink: 'syz.2.7430': attribute type 1 has an invalid length. [ 1475.917475][T31277] netlink: 'syz.4.7433': attribute type 10 has an invalid length. [ 1476.000604][T31268] delete_channel: no stack [ 1476.006560][T31277] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1477.089498][T31342] netlink: 'syz.2.7451': attribute type 10 has an invalid length. [ 1477.220039][T31342] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1478.061782][T31376] netlink: 'syz.2.7460': attribute type 10 has an invalid length. [ 1478.083656][T31376] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7460'. [ 1478.348150][T31384] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7464'. [ 1479.961835][T31417] sctp: [Deprecated]: syz.1.7472 (pid 31417) Use of int in max_burst socket option deprecated. [ 1479.961835][T31417] Use struct sctp_assoc_value instead [ 1479.995297][T31418] netlink: 'syz.0.7473': attribute type 10 has an invalid length. [ 1480.058679][T31418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1480.109754][T31418] team0: Port device batadv0 added [ 1480.117109][T31426] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1480.427692][T31433] netlink: 'syz.4.7476': attribute type 3 has an invalid length. [ 1480.437965][T31436] netlink: 'syz.1.7477': attribute type 25 has an invalid length. [ 1480.457520][T31436] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.7477'. [ 1480.470204][T31433] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7476'. [ 1481.027675][T31451] netlink: 'syz.3.7482': attribute type 2 has an invalid length. [ 1481.573517][T31480] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7492'. [ 1481.847973][T31492] delete_channel: no stack [ 1481.984896][T31497] netlink: 'syz.4.7496': attribute type 21 has an invalid length. [ 1482.007094][T31497] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7496'. [ 1482.118965][T31505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7498'. [ 1482.291270][T31513] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7500'. [ 1482.317536][T31513] bridge_slave_1: default FDB implementation only supports local addresses [ 1482.912315][T31536] device syzkaller0 entered promiscuous mode [ 1483.882575][T31576] netlink: 'syz.4.7518': attribute type 4 has an invalid length. [ 1483.906656][T31576] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7518'. [ 1484.309519][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.316181][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.492166][T31597] netlink: 'syz.4.7524': attribute type 29 has an invalid length. [ 1485.540261][T31614] netlink: 'syz.1.7527': attribute type 3 has an invalid length. [ 1485.564170][T31614] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7527'. [ 1487.799581][T31597] netlink: 'syz.4.7524': attribute type 29 has an invalid length. [ 1488.262622][T31637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7533'. [ 1490.036768][T31670] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.7543'. [ 1490.088174][T31670] netlink: zone id is out of range [ 1490.108536][T31670] netlink: zone id is out of range [ 1490.262320][T31670] netlink: del zone limit has 4 unknown bytes [ 1490.962914][T31691] -1: renamed from syzkaller0 [ 1491.117103][T31708] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1491.144094][T31708] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1491.159002][T31709] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1491.300469][T31708] device pim6reg1 entered promiscuous mode [ 1492.366476][T31750] netlink: 'syz.0.7564': attribute type 11 has an invalid length. [ 1492.374804][T31750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7564'. [ 1492.440398][T31745] netlink: 'syz.1.7563': attribute type 1 has an invalid length. [ 1492.454120][T31745] netlink: 'syz.1.7563': attribute type 4 has an invalid length. [ 1492.464899][T31745] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7563'. [ 1492.853691][T31766] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.7571'. [ 1492.866672][T31766] netlink: zone id is out of range [ 1492.873234][T31766] netlink: zone id is out of range [ 1492.883411][T31768] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7570'. [ 1492.931324][T31766] netlink: del zone limit has 4 unknown bytes [ 1493.176075][T31784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7575'. [ 1493.635722][T31784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7575'. [ 1493.818203][T31796] netlink: 'syz.1.7578': attribute type 1 has an invalid length. [ 1493.826466][T31796] netlink: 'syz.1.7578': attribute type 3 has an invalid length. [ 1496.941510][T31832] __nla_validate_parse: 3 callbacks suppressed [ 1496.941572][T31832] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7586'. [ 1496.987743][T31832] netlink: zone id is out of range [ 1497.006703][T31832] netlink: zone id is out of range [ 1497.089297][T31832] netlink: del zone limit has 4 unknown bytes [ 1497.379993][T31848] netlink: 'syz.3.7590': attribute type 21 has an invalid length. [ 1497.406988][T31845] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7591'. [ 1497.443969][T31848] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7590'. [ 1498.565128][T31873] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7600'. [ 1498.790142][T31873] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1498.824611][T31891] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7602'. [ 1498.936355][T31891] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7602'. [ 1499.103477][T31898] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.7605'. [ 1499.172999][T31892] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7602'. [ 1500.603115][T31918] netlink: 'syz.1.7608': attribute type 10 has an invalid length. [ 1500.937146][T31917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7608'. [ 1501.611140][T31941] netlink: 'syz.3.7614': attribute type 1 has an invalid length. [ 1501.639773][T31941] netlink: 'syz.3.7614': attribute type 3 has an invalid length. [ 1501.660028][T31941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7614'. [ 1505.532863][T31961] netlink: 'syz.3.7619': attribute type 16 has an invalid length. [ 1505.543300][T31961] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7619'. [ 1505.799796][T31986] netlink: 'syz.0.7626': attribute type 1 has an invalid length. [ 1505.823343][T31986] netlink: 'syz.0.7626': attribute type 3 has an invalid length. [ 1505.860926][T31986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7626'. [ 1505.951538][T31989] netlink: 64771 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1507.570453][T32024] netlink: 'syz.4.7641': attribute type 21 has an invalid length. [ 1507.596003][T32024] netlink: 'syz.4.7641': attribute type 12 has an invalid length. [ 1507.611352][T32024] netlink: 'syz.4.7641': attribute type 13 has an invalid length. [ 1507.622116][T32024] netlink: 'syz.4.7641': attribute type 14 has an invalid length. [ 1507.681225][T32024] netlink: 'syz.4.7641': attribute type 15 has an invalid length. [ 1507.699602][T32030] netlink: 'syz.4.7641': attribute type 9 has an invalid length. [ 1507.723562][T32024] netlink: 'syz.4.7641': attribute type 16 has an invalid length. [ 1507.755307][T32024] netlink: 12926 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1507.824402][T32030] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1507.844532][T32031] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7644'. [ 1507.979928][T32037] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.7643'. [ 1508.103526][T32031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.168278][T32031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.220899][T32031] bond0 (unregistering): Released all slaves [ 1508.263562][T32041] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7646'. [ 1508.295800][T32041] device hsr_slave_0 left promiscuous mode [ 1508.317764][T32041] device hsr_slave_1 left promiscuous mode [ 1508.561949][T32055] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7650'. [ 1509.362011][T32086] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1509.509657][T32094] netlink: 13226 bytes leftover after parsing attributes in process `syz.4.7663'. [ 1510.940356][T32137] __nla_validate_parse: 1 callbacks suppressed [ 1510.940375][T32137] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7676'. [ 1511.014340][T32133] device syzkaller0 entered promiscuous mode [ 1511.064104][T32137] validate_nla: 17 callbacks suppressed [ 1511.064122][T32137] netlink: 'syz.2.7676': attribute type 10 has an invalid length. [ 1511.154035][T32137] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1511.674956][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1511.739658][T32155] netlink: 22 bytes leftover after parsing attributes in process `syz.4.7681'. [ 1512.490133][T32162] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7683'. [ 1514.467026][T32158] netlink: 'syz.2.7682': attribute type 10 has an invalid length. [ 1514.491676][T32158] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1514.509725][T32168] netlink: 'syz.4.7684': attribute type 22 has an invalid length. [ 1514.537293][T32168] netlink: 14526 bytes leftover after parsing attributes in process `syz.4.7684'. [ 1514.577480][T32167] netlink: 'syz.1.7685': attribute type 21 has an invalid length. [ 1514.585466][T32167] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7685'. [ 1514.660350][T32180] netlink: 'syz.3.7686': attribute type 10 has an invalid length. [ 1514.705061][T32180] team0: Device nlmon0 is of different type [ 1514.712746][T12970] wlan1: Trigger new scan to find an IBSS to join [ 1514.751253][T32183] netlink: 'syz.3.7686': attribute type 2 has an invalid length. [ 1514.759414][T32183] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7686'. [ 1515.076747][T32196] netlink: 'syz.1.7693': attribute type 3 has an invalid length. [ 1515.154859][T32198] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7695'. [ 1515.175143][T32196] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7693'. [ 1516.167991][T32225] netlink: 'syz.0.7701': attribute type 21 has an invalid length. [ 1516.175960][T32225] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7701'. [ 1517.667502][T12959] wlan1: Creating new IBSS network, BSSID a6:f6:22:00:3c:93 [ 1517.741813][T32265] netlink: 'syz.2.7715': attribute type 3 has an invalid length. [ 1517.760641][T32265] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7715'. [ 1517.926187][T32270] device syzkaller0 entered promiscuous mode [ 1517.959251][T32270] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1519.671230][T32292] netlink: 'syz.2.7720': attribute type 9 has an invalid length. [ 1519.699160][T32292] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.7720'. [ 1519.752831][T32297] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1520.270374][T32305] __sock_release: fasync list not empty! [ 1520.513457][T32323] netlink: 'syz.2.7731': attribute type 21 has an invalid length. [ 1520.543467][T32323] netlink: 'syz.2.7731': attribute type 12 has an invalid length. [ 1520.575599][T32323] netlink: 'syz.2.7731': attribute type 13 has an invalid length. [ 1520.702115][T32323] netlink: 'syz.2.7731': attribute type 14 has an invalid length. [ 1520.797630][T32328] netlink: 'syz.2.7731': attribute type 9 has an invalid length. [ 1520.856022][T32323] netlink: 'syz.2.7731': attribute type 15 has an invalid length. [ 1520.925324][T32328] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7731'. [ 1521.013731][T32323] netlink: 'syz.2.7731': attribute type 16 has an invalid length. [ 1521.069565][T32323] netlink: 12926 bytes leftover after parsing attributes in process `syz.2.7731'. [ 1522.290190][T32356] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7740'. [ 1522.323213][T32356] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1522.349608][T32356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1522.639070][T32358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7741'. [ 1523.266092][T32376] netlink: 'syz.0.7746': attribute type 21 has an invalid length. [ 1523.296042][T32376] netlink: 'syz.0.7746': attribute type 12 has an invalid length. [ 1523.384929][T32378] netlink: 'syz.0.7746': attribute type 9 has an invalid length. [ 1523.414274][T32378] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.7746'. [ 1523.427870][T32376] netlink: 'syz.0.7746': attribute type 13 has an invalid length. [ 1523.427900][T32376] netlink: 'syz.0.7746': attribute type 14 has an invalid length. [ 1523.427925][T32376] netlink: 'syz.0.7746': attribute type 15 has an invalid length. [ 1523.427949][T32376] netlink: 'syz.0.7746': attribute type 16 has an invalid length. [ 1523.427973][T32376] netlink: 12926 bytes leftover after parsing attributes in process `syz.0.7746'. [ 1523.678552][T12969] wlan1: Trigger new scan to find an IBSS to join [ 1524.489028][T32408] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.7756'. [ 1524.905318][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7760'. [ 1525.131089][T32443] netlink: 'syz.1.7763': attribute type 9 has an invalid length. [ 1525.157307][T32443] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7763'. [ 1525.206288][T32444] netlink: 'syz.0.7760': attribute type 2 has an invalid length. [ 1525.444938][T32444] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7760'. [ 1526.216054][T32459] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7768'. [ 1526.668108][T32475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7772'. [ 1527.138130][T32477] netlink: 'syz.3.7773': attribute type 10 has an invalid length. [ 1527.347789][T23364] Bluetooth: hci2: command 0x0406 tx timeout [ 1527.434809][T32477] team0: Device wg1 is of different type [ 1527.720106][T32490] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.7775'. [ 1528.413216][T32502] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7782'. [ 1528.605374][T32514] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1528.616431][T31610] bond0: (slave syz_tun): Releasing backup interface [ 1528.717832][T12943] wlan1: Trigger new scan to find an IBSS to join [ 1528.834062][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.982648][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.141837][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.160488][T32526] validate_nla: 1 callbacks suppressed [ 1529.160506][T32526] netlink: 'syz.4.7789': attribute type 9 has an invalid length. [ 1529.200113][T32526] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.7789'. [ 1529.927282][T12959] wlan1: Creating new IBSS network, BSSID fa:fd:98:0b:13:c5 [ 1529.988127][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1530.000516][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1530.009091][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1530.017053][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1530.024845][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1530.032351][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1530.039333][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.052708][T32527] IPv6: NLM_F_CREATE should be specified when creating new route [ 1530.695175][ T11] tipc: Left network mode [ 1531.016995][T32553] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7796'. [ 1531.401702][T32533] chnl_net:caif_netlink_parms(): no params data found [ 1531.506879][T32567] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7798'. [ 1531.652577][T32573] netlink: 'syz.4.7800': attribute type 9 has an invalid length. [ 1531.685538][T32573] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.7800'. [ 1531.778131][T32571] netlink: 'syz.4.7800': attribute type 21 has an invalid length. [ 1531.797784][T32571] netlink: 'syz.4.7800': attribute type 12 has an invalid length. [ 1531.835544][T32571] netlink: 'syz.4.7800': attribute type 13 has an invalid length. [ 1531.884573][T32571] netlink: 'syz.4.7800': attribute type 14 has an invalid length. [ 1531.904864][T32571] netlink: 'syz.4.7800': attribute type 15 has an invalid length. [ 1531.924307][T32571] netlink: 'syz.4.7800': attribute type 16 has an invalid length. [ 1531.936972][T32571] netlink: 12926 bytes leftover after parsing attributes in process `syz.4.7800'. [ 1532.147329][T23364] Bluetooth: hci4: command 0x0409 tx timeout [ 1532.225715][T32533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.294805][T32533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.327488][T32533] device bridge_slave_0 entered promiscuous mode [ 1532.467298][T23364] Bluetooth: hci1: command 0x0406 tx timeout Stopping sshd: [ 1532.690913][T32533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.707617][T32533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.715773][T32533] device bridge_slave_1 entered promiscuous mode stopped /usr/sbin/sshd (pid 4029) OK [ 1532.971723][T32604] netlink: 'syz.4.7805': attribute type 21 has an invalid length. [ 1532.985984][T32604] netlink: 'syz.4.7805': attribute type 6 has an invalid length. [ 1533.027500][T32604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7805'. [ 1533.099743][T32533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.153527][T32533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link Stopping crond: [ 1533.284295][T32616] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7807'. [ 1533.368785][T32533] team0: Port device team_slave_0 added [ 1533.418100][T32603] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue stopped /usr/sbin/crond (pid 4014) [ 1533.430327][T32603] device syzkaller0 entered promiscuous mode OK [ 1533.462957][T32533] team0: Port device team_slave_1 added Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3932) [ 1534.138819][T32533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.145835][T32533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1534.227380][T23364] Bluetooth: hci4: command 0x041b tx timeout [ 1534.247094][T32533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.331764][T32533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.347218][T32533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1534.434277][T32533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.461803][T32634] validate_nla: 1 callbacks suppressed [ 1534.461818][T32634] netlink: 'syz.3.7820': attribute type 11 has an invalid length. Stopping network: [ 1535.063026][T32533] device hsr_slave_0 entered promiscuous mode [ 1535.128935][T32533] device hsr_slave_1 entered promiscuous mode [ 1535.213777][T32657] netlink: 'syz.3.7815': attribute type 9 has an invalid length. [ 1535.233550][T32657] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7815'. [ 1535.298667][T32654] netlink: 'syz.3.7815': attribute type 21 has an invalid length. [ 1535.323796][T32654] netlink: 'syz.3.7815': attribute type 12 has an invalid length. [ 1535.334838][T32654] netlink: 'syz.3.7815': attribute type 13 has an invalid length. [ 1535.352345][T32654] netlink: 'syz.3.7815': attribute type 14 has an invalid length. [ 1535.364942][T32654] netlink: 'syz.3.7815': attribute type 15 has an invalid length. [ 1535.373821][T32654] netlink: 'syz.3.7815': attribute type 16 has an invalid length. [ 1535.382303][T32654] netlink: 12926 bytes leftover after parsing attributes in process `syz.3.7815'. [ 1535.709012][ T11] device hsr_slave_0 left promiscuous mode [ 1535.763661][ T11] device hsr_slave_1 left promiscuous mode [ 1535.774204][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1535.817361][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1535.990848][ T11] device veth1_macvtap left promiscuous mode [ 1535.996992][ T11] device veth0_macvtap left promiscuous mode [ 1536.018286][ T11] device veth1_vlan left promiscuous mode [ 1536.024172][ T11] device veth0_vlan left promiscuous mode [ 1536.065848][T32676] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7817'. [ 1536.307362][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 1537.587382][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 1538.197104][ T11] team0 (unregistering): Port device geneve1 removed [ 1538.387390][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 1538.405023][ T11] team0 (unregistering): Port device virt_wifi0 removed [ 1538.574103][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1538.624649][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1538.672218][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1538.724940][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1538.772422][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.993619][ T11] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1539.045932][ T11] bond0 (unregistering): Released all slaves [ 1539.097023][T32675] netlink: 'syz.4.7819': attribute type 12 has an invalid length. [ 1539.105286][T32675] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7819'. [ 1539.144547][T32678] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7819'. [ 1539.378331][T32684] netlink: 'syz.4.7821': attribute type 2 has an invalid length. [ 1539.389350][T32684] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7821'. [ 1539.777923][T32703] validate_nla: 1 callbacks suppressed [ 1539.777942][T32703] netlink: 'syz.3.7825': attribute type 10 has an invalid length. [ 1539.807339][T32703] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7825'. [ 1539.909306][T32707] netlink: 'syz.4.7826': attribute type 3 has an invalid length. [ 1539.933516][T32707] netlink: 'syz.4.7826': attribute type 1 has an invalid length. [ 1539.965814][T32707] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7826'. OK Stopping iptables: [ 1540.524367][T32712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7826'. OK Stopping system message bus: [ 1541.070772][T32533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1541.124932][T32533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1541.154938][T32533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1541.195683][T32533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1541.309269][T32735] netlink: 'syz.2.7830': attribute type 21 has an invalid length. [ 1541.319419][T32735] netlink: 'syz.2.7830': attribute type 12 has an invalid length. [ 1541.354995][T32735] netlink: 'syz.2.7830': attribute type 13 has an invalid length. [ 1541.373026][T32740] netlink: 'syz.2.7830': attribute type 9 has an invalid length. [ 1541.391321][T32735] netlink: 'syz.2.7830': attribute type 14 has an invalid length. [ 1541.438392][T32740] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7830'. [ 1541.466962][T32735] netlink: 'syz.2.7830': attribute type 15 has an invalid length. [ 1541.498366][T32735] netlink: 'syz.2.7830': attribute type 16 has an invalid length. [ 1541.526624][T32735] netlink: 12926 bytes leftover after parsing attributes in process `syz.2.7830'. [ 1541.803417][T32533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.922000][T30726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1541.948682][T30726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1541.986577][T32533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.032582][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1542.061169][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1542.102964][T12970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.110181][T12970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.160925][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1542.218273][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1542.258652][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1542.308379][T12970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.315534][T12970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.382942][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready done [ 1542.431734][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1542.459308][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1542.520460][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1542.602536][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1542.612302][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1542.653763][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1542.698327][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1542.749468][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1542.778360][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1542.817558][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1542.880303][ T314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7841'. [ 1542.920195][T32533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1544.128352][ T349] netlink: 12926 bytes leftover after parsing attributes in process `syz.0.7846'. [ 1544.188884][ T354] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.7846'. [ 1544.465927][ T356] netlink: 12926 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1544.500661][ T356] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1544.528413][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1544.558042][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1544.606353][T32533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.729534][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1544.763094][T12970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1544.816302][ T366] validate_nla: 14 callbacks suppressed [ 1544.816322][ T366] netlink: 'syz.0.7850': attribute type 21 has an invalid length. [ 1544.897839][ T366] netlink: 'syz.0.7850': attribute type 4 has an invalid length. [ 1544.925269][ T366] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7850'. [ 1545.021923][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1545.048428][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1545.100751][T32533] device veth0_vlan entered promiscuous mode [ 1545.118780][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1545.126790][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1545.171042][T32533] device veth1_vlan entered promiscuous mode [ 1545.317234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1545.325515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1545.349341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1545.389813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1545.422009][T32533] device veth0_macvtap entered promiscuous mode [ 1545.522546][T32533] device veth1_macvtap entered promiscuous mode [ 1545.616594][T30726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1545.648270][T30726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1545.706019][T32533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.729204][T32533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.751048][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.760320][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.777219][T32533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.808407][T32533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.847311][T32533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.878313][T32533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.898565][T32533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.937237][T32533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.979097][T32533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.986753][ T384] netlink: 'syz.4.7853': attribute type 10 has an invalid length. Stopping klogd: [ 1546.152156][ T392] netlink: 'syz.3.7856': attribute type 3 has an invalid length. [ 1546.175630][ T392] netlink: 'syz.3.7856': attribute type 1 has an invalid length. [ 1546.179905][ T384] team0: Device wg1 is of different type [ 1546.202808][ T392] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7856'. [ 1546.359300][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1546.386871][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1546.530579][T32533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.573907][T32533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.597402][T32533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.652668][T32533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! OK [ 1546.685974][T32533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.703675][T32533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.756361][T32533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.795181][T32533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.818388][T32533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1546.846711][ T391] device sit0 entered promiscuous mode Stopping acpid: [ 1547.156835][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7856'. [ 1547.227540][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1547.248313][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1547.293358][T32533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.323799][T32533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.364470][T32533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.402924][T32533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.714559][T12974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.723036][ T405] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7859'. [ 1547.737370][T12974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.786466][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1547.832424][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.844316][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.868101][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1548.095142][ T415] netlink: 'syz.1.7786': attribute type 3 has an invalid length. [ 1548.122462][ T414] netlink: 'syz.2.7860': attribute type 21 has an invalid length. [ 1548.133285][ T415] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7786'. [ 1548.166202][ T414] netlink: 'syz.2.7860': attribute type 12 has an invalid length. [ 1548.192869][ T414] netlink: 'syz.2.7860': attribute type 13 has an invalid length. [ 1548.206610][ T417] netlink: 'syz.2.7860': attribute type 9 has an invalid length. [ 1548.242969][ T414] netlink: 12926 bytes leftover after parsing attributes in process `syz.2.7860'. [ 1548.618011][ T426] device veth1_macvtap left promiscuous mode OK Stopping syslogd: stopped /sbin/syslogd (pid 3620) OK [ 1549.835852][ T460] validate_nla: 18 callbacks suppressed [ 1549.835889][ T460] netlink: 'syz.0.7873': attribute type 9 has an invalid length. [ 1549.897471][ T460] __nla_validate_parse: 5 callbacks suppressed [ 1549.897510][ T460] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.7873'. [ 1549.996697][ T462] netlink: 'syz.4.7875': attribute type 10 has an invalid length. [ 1550.022909][ T462] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7875'. [ 1550.061937][ T467] netlink: 'syz.1.7874': attribute type 10 has an invalid length. [ 1550.277884][ T467] team0: Device wg1 is of different type umount: can't remount debugfs read-only [ 1551.004410][ T501] netlink: 'syz.4.7884': attribute type 1 has an invalid length. [ 1551.056641][ T501] netlink: 'syz.4.7884': attribute type 4 has an invalid length. [ 1551.093760][ T501] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7884'. [ 1551.137883][ T494] netlink: 'syz.4.7884': attribute type 1 has an invalid length. [ 1551.171029][ T494] netlink: 'syz.4.7884': attribute type 4 has an invalid length. [ 1551.209309][ T494] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7884'. [ 1551.392817][ T508] netlink: 'syz.1.7888': attribute type 9 has an invalid length. [ 1551.413714][ T508] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7888'. [ 1551.719092][ T514] netlink: 'syz.4.7889': attribute type 14 has an invalid length. [ 1553.466865][ T533] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7895'. [ 1553.568415][ T533] netlink: 'syz.4.7895': attribute type 10 has an invalid length. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't re[ 1554.026296][ T533] team0 (unregistering): Port device team_slave_0 removed mount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.90 closed by remote host. [ 1554.239439][ T533] team0 (unregistering): Port device team_slave_1 removed [ 1554.435861][ T533] team0 (unregistering): Port device geneve1 removed [ 1554.600385][ T536] team0: Device wg1 is of different type [ 1554.702331][ T538] device 0 entered promiscuous mode [ 1555.115311][T12943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 1555.445511][T12943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.582708][T12943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.691067][T12943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.279708][T12943] device gretap0 left promiscuous mode [ 1556.285274][T12943] Ÿë: port 1(gretap0) entered disabled state [ 1556.367960][ T541] kvm: exiting hardware virtualization [ 1556.394832][ T541] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1556.406532][ T541] ACPI: PM: Preparing to enter system sleep state S5 [ 1556.415813][ T541] reboot: Power down serialport: VM disconnected.