last executing test programs: 11.78630966s ago: executing program 0 (id=7744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 10.898273148s ago: executing program 0 (id=7748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0x0, 0x7}, {0x6}]}) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x8, 0x8}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000001d711849000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000780)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1b, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @generic={0x0, 0xa, 0x8, 0x55, 0x5}, @generic={0x7c, 0x4, 0x7, 0x3, 0x54}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000580)={0xffffffff, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x7fff, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, r6, r3, r4], 0x0, 0x10, 0x8}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000"], 0x0, 0x34}, 0x28) 8.773432885s ago: executing program 0 (id=7757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000000)='/proc/sys\x00\x00\x00\x00\x00\x00(O\x00\x00\x10\x04\xba?BVEm\xe39\xf7\xe3\x9es\xa8\xab%nN\xd4\xa2=\x11\xc8\xdd\x15\xcc\x00\x00\x00\x00'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) r6 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000140), 0x4d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0xfeff, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v\x00'/20, @ANYRES32, @ANYBLOB="0000000000000800007300010009000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000240)={0x8, &(0x7f0000000080)=[{0x3, 0x9, 0x4, 0x5}, {0x8, 0x7, 0x9, 0x7}, {0x86a, 0x40, 0x8, 0x3}, {0x5, 0x1, 0x6, 0x5}, {0x1, 0x9, 0x4, 0x3}, {0x5, 0x6, 0x1, 0x7}, {0x7, 0x0, 0x7, 0x2}, {0xfffd, 0x1, 0xf0, 0x55f5}]}) ioctl$TUNSETFILTEREBPF(r11, 0x800454e1, &(0x7f0000000040)=r1) 8.678601477s ago: executing program 4 (id=7758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 8.664911468s ago: executing program 1 (id=7759): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x4bc875e52fd0ba69, 0x80, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) r1 = socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) close(r5) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x5421, 0x110e22fff7) socket$kcm(0x2, 0x3, 0x84) write$cgroup_type(r9, &(0x7f0000000080), 0x11ffffce1) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) 8.306612819s ago: executing program 2 (id=7761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000feffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000064ce85000000860000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000080), &(0x7f00000008c0)=""/177}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r3}, 0xc) 8.013626538s ago: executing program 2 (id=7762): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069"], 0x0, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x3, 0x80, 0x4, 0x69, 0x1b, 0x67, 0x0, 0x6, 0x400, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, @perf_config_ext={0x61700000000000, 0x1ff}, 0x100000, 0xb, 0x80, 0x8, 0x0, 0x5, 0x9, 0x0, 0x5, 0x0, 0x1bae}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x33, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80698c63940d0224fc602f6e35400c000200680ec00037153e370a000180feff0000bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0b0000000001000000180300000000000000000021937d6e09355d9b355c9fd243720890252f4e232d58cb96490ced938b48f2636571fd70c3fe678cd23c0342119a66cccc8276824b0b1620fe4ad4f34d78eb7c4f40b2e0f71197e1ddb96f9e6b1e9ef5592d1d9c4ac08ac6ee7a0c1ab978486949233d3dc32658022c107c7c5a74717710809db73e6881af09ff77e597bb50587d6753b66a15ddfe6acc3fd013114d35a7ed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x800) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r3}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0xa, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x0, 0x3}, {0x7}, {0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x3, 0x4}, {0xd, 0x1}]}, @volatile={0xc}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x6, 0x5}, {0x8, 0x2}, {0xc, 0x4}, {0xb, 0x3}, {0xe, 0x4}]}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x9}]}]}, {0x0, [0x2e, 0x6f, 0x2e, 0x51, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000980)=""/156, 0xca, 0x9c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f00000001000000020000003725000000800000", @ANYRES32=r3, @ANYBLOB="1000"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="04000000030000000500"/20, @ANYRES32=r8, @ANYBLOB="0000000051a66d9b7d75dc3d9e212faac6fc0656f8b9b4ab70f73d79a6118d42425e4f29d9cdd68a7743027fc022856f517697d00d161ae64a36f7d7a075f6e95c795ce48a1145a751b6b6789e7a0819e14596702939f929a00bb11706dd8553fdbf851b6eb6c205ab3ea92a804ef8387bda3e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0xffffffff, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0x22, 0x0, 0x3, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) 6.439815748s ago: executing program 1 (id=7763): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xbd, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0xcb6f88ba38d65275, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r1, 0x8) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000000000000000000000000000000000fa7b78f226bc57a88e9343adf85b48b00442d8c026ac6b7219f5c2417a66d77b0486324ac8baf9b0fd7e7a4544ac0ac7e284e1e2a4dd40a9fda7c4114f72c522ec0ffa14653d662f220762ac11146d3e3c3c030077ef9465e68123c93f44703d7dc1e516c9c94f7acb6c5ef07cf950367e2321deb567e04e9a10f4fd4b6adb324bb1d14531bbe2f43a0deeeb6db38ee7581d7d1cf8c2d4183983537c8427d9fcdc8ece0dedf30cb3395d6193d4f4b681129c8ac6aff6918984a0657b94f900c40d21414617dd52caa03b65da1245071c997ccff5a6", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x2b, 0x6, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0xfffffffffffffe3d}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="040000000400000003000000000000e3cf00000000000000000000005a439617dd12795ba7830d7db9cd0d6e26b6e6b6276884e3c992d1669cc3eb13b13da25b927da1d41e7c02065c4f5d1b2266b0013b8f6b842363e33a6a2f89321077f55e93db4c42182886ef55976a5ec553ec5b227c513c544d57385db848c4110ad2b07a95c2afd70ebb53c65c6d06657b03a72db3d215dc046cc37227f904d8f5bb18d1cbd65a6be268eb94220a46ef5cf71bb05c9b71811ec7fc"], 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r5], 0x0, 0x4e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x122d41, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.405959349s ago: executing program 3 (id=7764): r0 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.401319299s ago: executing program 4 (id=7765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000000000000009030000000000d3400000000105000000080000000000000000000003000000000200000002000000000000000000000001000068052314b14bb9d2000300000000005f2e000000001d0000"], 0x0, 0x65}, 0x28) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='!yzkaller\x00') ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xfff) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.174970376s ago: executing program 3 (id=7766): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b2557eb3c5ca683a4b6fc89398f2b9000f224891060017cfaa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f7098696afb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a032de54a2ad9cdac2e981ab59016f81860324b8003029e938858ffa30ce8a55129fa207d2513b711d83d366a7e0df0667a2c8dd2b0665de28cd407db6f8ef6082cb509b628203fab234cef6a77d6016a6cbf19f9687717d399233ef170b5bfdb55cab50aab08c8ddebd55654ea4d0caf2a2409db567260721a9b731cb58810978b60f930b7c92475c3483b06855d3b6ebde0092e67c0020000000000000067badf02c28f8cd94d347888a769591ce0dbb84a7aa02bff13398335aefbd1e874a6568d3f3d96dd30211bd963a45bca24a231d4f0b468a1667762972cdfde32ae7a69c23c50911a3c8a24622889f8aebce8e0bc88f35f5e40e21e4f2bf4b90655667acc84d84d67d6b240ddceafc5cd4fe94b79a00058566f49787d426ce3aae17094ab0078770155481c86c8e9e6ddb9a680af2d65ed710e3e9e370b711f31f865f2c1c5684e834ce38ff08bcc7429a596a7b1b3f45ffd6e2431f101189b00540986c22232521c8a87aecc3131595bac7c28076b55f071459adedd5953e4bde7c5e679739b07baa099338777899d54f13de88e5bdcd671c1742b0fabd0f40d1302e554090649eb2ec27f7b5afd721dab34"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_attach_bpf(r0, 0x10d, 0x11, &(0x7f0000000000)=r1, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0x3) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x0, 0x0, 0x0, 0x6, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb1ed1f8448c152a0) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8918, &(0x7f0000000000)={r7}) 6.174191986s ago: executing program 2 (id=7767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0x0, 0x7}, {0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) r3 = socket$kcm(0x29, 0x7, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x5, &(0x7f0000000040), 0x4) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r4, r5}) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 6.167535356s ago: executing program 0 (id=7768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="07016d0c000000000000180000000000000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156}, 0x80) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1da100007ea60864160af36504001a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f0000001a00)={&(0x7f0000000140)=@generic={0xa, "3261dd6d508a4d3ecf44485253a388e50f0df7aeb6e3da12fea25f3c5bd94255f9ffeba1f9232dea23d429e72503cdfa9b187b4df0f07b796961f9bda7441bcba4383ce757e1665029255f6901aa45991d27cefbb7c1be10848fabd6302e632f5c8605d091a9cb177d801463a82c8094958f51c853e0772293399c880a96"}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="c157443b38c08ae7ee144af6b1f040b6365dbe253dbbbb78acb2f478401364f7", 0x20}, {&(0x7f0000000200)="dc4694ef75f483603618cf339a332406f1915a5e2916c38f138e7ddbc2eb99c6325e17913817e4bd7a6c7101c2856ea7e0781bbedd32d84ab41f5129f92e85b9e5ec6915c3aca60547f4f2ea96d1f80e70d750e77e37174c1f6d129c9344af020e71bfb58706c09ca0963928787955308fb33c6523767c93d9a621ac76c33baa29262cdf7f3feff2636f49d00521a79bbfa5824295a48bc015fb05294d50c9623424193f80539fa799fc5096bdf4afb3b06fd8d5d332e79a43e7a1ec643f67107b46a6c49461dd3fa6e7ebda3d133f0b3d2b57d39df224c13507f0ba47e2870cfbbd31a1121b46888794905d5b", 0xed}, {&(0x7f0000000300)="5700f6f005ae431891c92afac460e5a74aeec385", 0x14}, {&(0x7f0000000340)="b8d0636e0e32af2cd7504a367cfd8828eb78c74147d9e98861654cb91994e84f5347bc13dde184be6d6fd5865a0ef608fe47d1ca2f6f209b91405cbf3b268cadb3defb08065d6e6024175c0fa2faab1a4b2d26ef0f9311a3d37bfe07c05a6757b535f71c8380b1be87b0912259771a2dc2e60f25be76e4c388c0464b36df3a23542670246b2b7ea95b88f68b256b49ef5ab3639081c9c3d980f962ec644011d9972fdc9b445e459cbf8bd214cb2f02559ad1cc5d2d030d7ffcf280b4212827d66f7f53f5999b1b22422279e80601f03b1f94a0", 0xd3}, {&(0x7f0000000440)="36366cf5610080bac2f6f1bcd0206c0737d20385641e2b5fba6061542ccccd45b259e9648025565a075989b1aef1f9f67c21a4b8ce7d6e5baf0337e72cea73dec459f8eececb4bdfa6b5a9800d56930f2dc9ff84f98556a29e7e85393592349f38c9faa530606d492241feaf37118166cddec0cefc1838e8d88125f3", 0x7c}], 0x5, &(0x7f0000000740)=[{0x1010, 0x101, 0x8, "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"}, {0xc8, 0x0, 0x7, "b468f095dde3f430673ae0f4b2bdf459e05299c38dd97f60ed61bc24b56065b455c4cf6c6411b6cd7e3ad23abf5071c4b99e9de0d4b596302451317fa63817ab635c5f07a58b331a2e09ebd909a90a6744650cd643ea3cbb6613b435b9da51671ed47fe06b34b0b8b3c59f203eec04561a940719cf6947dde7ae9610926f5990ce38538ff5f7387bf76ed08fb02ea897120d6127bb4987ce3abfa22844b40091d8895fd5c12167cedaf89a6cd0facfe9127de385819a05"}, {0x10, 0x6, 0xffffffff}, {0xd8, 0x118, 0x0, "1c389d968d91d4a350da1643a0a3dfe6bfd0387dcb3b64605e90bc7ecc71f125aa1edd30591c2a6e1ed50d348c0f8bdefdd6ed6d9118159a19244e6fd290d38d5f7596d4367a637213ac49300e171acad77e5da9d2de8e1d41f04606854111c891ac6d7f1d6bb74a3b53f0ea4abd6125689c87e9167e8229a8c1a5db0eb6519ccf6f8600da491b55a878b57c72052fe3e0f3535f196ea82a458c3534f37bc080b225697cc1874b66210aaa870b557ce9a8978b2b15f0953eaec0fafa540b4488deaf61975035"}, {0xd0, 0x118, 0x8, "b27891e8b1d1c46a448e10021e3d15a62e0f981fe4dc750e6d699beba45edccd62c83658268b9158a0dde90351c7547dfe516d20ffe3384dbfb3fef94edebf8e4a6d5724555c9e7128c7f37e044a06d41b657f244994d9c5dbd7db3f85fbef7d1fb1c0dc2d35f7e7dbff8001536ec9519918da5441b00bc6b31e4ff800acb234384e32bb25b5d83de2c07f1542ba394ea857c63c26da86852764fc3ac473939fd7516e71704f77021d20898d1596e279bdd56be26deddb4e99254ae8e27b1d"}], 0x1290}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0xa4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x52, 0x14}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4b, 0x0, 0x0) recvmsg(r3, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000001f80)=[{0x0}, {&(0x7f0000001d40)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f0000001a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x114, 0x114, 0x3, [@union={0x6, 0x6, 0x0, 0x5, 0x0, 0x3, [{0x2, 0x0, 0x400}, {0x8, 0x3, 0x7}, {0x9, 0x5, 0x2}, {0x5, 0x2}, {0x10, 0x2, 0x8}, {0x1, 0x4, 0x3}]}, @enum64={0x10, 0x8, 0x0, 0x13, 0x0, 0x8, [{0x8, 0x2, 0xfffffff8}, {0x8001, 0xffff4f25, 0x5}, {0x4, 0xbacb, 0xe6e}, {0x5, 0xb, 0x8a3}, {0x8, 0x7, 0x7}, {0xc, 0x0, 0x4}, {0x5, 0xc, 0x8}, {0xf, 0x2, 0x7}]}, @struct={0x10, 0x3, 0x0, 0x4, 0x0, 0x7ff80000, [{0x6, 0x4, 0x4}, {0xa, 0x1, 0x7}, {0x4, 0x1, 0x7}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}, @fwd={0x5}]}, {0x0, [0x2e]}}, &(0x7f0000001bc0)=""/139, 0x12f, 0x8b, 0x0, 0x8}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002000)={r0, 0xe0, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001d40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0], 0x0, 0x88, &(0x7f0000001e00)=[{}], 0x8, 0x10, &(0x7f0000001e40), &(0x7f0000001e80), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000001ec0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x3, 0x18, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x4f4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x3, 0x6, 0x5, 0x6, 0xfffffffffffffff0}]}, &(0x7f0000001a40)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @sched_cls=0x36, r6, 0x8, &(0x7f0000001cc0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001d00)={0x5, 0xb, 0x1, 0x8}, 0x10, r7, r0, 0x3, 0x0, &(0x7f0000002040)=[{0x0, 0x1, 0xe, 0x2}, {0x3, 0x5, 0xa, 0xc}, {0x1, 0x4, 0x7, 0x3}], 0x10, 0x7cc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r0}, 0xc) 6.078653129s ago: executing program 4 (id=7769): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="ac35b14da061fb6c939562e91ebd1279411c4547a41e8494ce89ef6e8c42888ba77401bc117f99ce077ddcef7342c0e39601be8c6785c4ddcce4b3bce179e5", 0x3f}], 0x1}, 0x24000080) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000b05d25a806f8c6394f90224fc602f00000004000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r1], 0xffdd) 5.987428312s ago: executing program 3 (id=7770): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000061104a0000000000950000"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x48}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0xa43, 0x0, 0x0, 0xf81d76b95c8858cb, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000005c0)=r8, 0x12) syz_clone(0x2000, &(0x7f0000001d00)="a732113962e51ad6b31030aee804b449f6fe32ba748c045f10a28629f1367aca14a95de1ebfae5826196aba351b53c99aab41cae7c3475cd191dacef49ba6901940871baaabe2afcb030b0136cbb31ea0ac5024aef0ccdf2d1f36334b6a843098aa52a9e6ac7548a34168e68eba018b4f491f79bc4e76b6f49027987f6a40dacc31239f041ee03da32d5ed6ac013945762285e06e562b63d14ff037b40592e6f8a84a2808494", 0xa6, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)="d338da48942602a328aa9dcaf74d7b1dbccbadf99991901b2512286949bd2143b0aa90d43e2a0b4c6987664548ef") sendmsg$unix(r6, &(0x7f0000001f00)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000300)="dcff021589835224788ac8ca5f1289005df298b86a1a2cb75e701aa54f4dfbfd62c8872cf0f4142608039741dbcbcad311be3ba15e8418c662538cf51cc251801d69f5561a4e6376abcf792fa6735dec846d98601b685dfe1200738e2afda8cc2924cb2ca8b5c41ab3944c87eda2167b1c8f0c7b2245fcf3e38a24ae600aedcbd1f1db4bc8da086d3d8886c17c6b2caa06a6ec7e1efab126643a32378f6c15620053a4457daf6e250ef836bfe4ada41d8a54b4db56901cf3cd77e056ec3f768770e6fadea950d68b758cb464a2ff0eb2f06e40c52bd00ebadde266321337d325e562b0e754c6bc975cd7935f2bdc53", 0xef}, {&(0x7f0000000400)="0a77c286e02c5470016e67d71a7f98eac1b0ad2becff186c9852adf42030be7679daf6ebe31016909f570b1103e30b67e5f082b02e402ee28190b10d8e5941ad61d0cbb7a3e9eb48d558b6314c354e8bc61c8ef5d586abbb8f8e460e9c849680d54a0dc1e010f8f729c28e571e63e9fa4c66156902c0797e3b773178d62d9696ddbc9d9faefa8ab88e847f37853b8d33152e389d83f022d48a3ab50d062b8c11ad7b99b1aa297376e79c7654a0f93bf58acd720ee87ec67e619acd3542ec5fd76b3b539025d78cbe37174992973ff3d8255fd4e758fd16cdb7307d31", 0xdc}, {&(0x7f0000000500)="26a657145c8cd48fdf323f471b4352d19508fe16f57271ad0bce51fd6164cbbda791bb666fdc82eaa2ccd51659b002160f5825800966dc57b1b5e5f05ee5e1080e1fb37c7df5caee7f5fc59fa7cf52fd8d8a724e6b6786f4e2e3bdfcef517ab134cd7243cd2493655fb1bba8fb3b9c0c00f2ebcbb9a87aa54f24cfc09b122e866c488b9625d965b39c21682f92fe788398955fcd60e5599bc1c188d517577c5582b2b7804120603093238ac52d7539f51dc2ceb0b2c6b7fe22fa6a4f490b97f9c8d473b25063e544afcaa7fd068e24958167c7c9fc2855f8eda58d10d341", 0xde}, {&(0x7f0000000bc0)="56a636d00cfb7e3a0c8b9775026c112b0313f018abd96cd84624b9600db3ceff5348a4d1db3b883a7c173a6afd3911ba726e311dc9c95c15a0afab73c64af8be1426f9c71cd6abdf435ebd13c4641f62ec0e6ad495ea7b2062b082bb763a57cbeaafb69cfd34543807a22566e656c803ecc90352086a57a2e402c4ae59bfc13d52b5435c2544695a15f7f5cf1536dc621b2138ff64816af8bfdd98fca920791778b572abe5fceba7be8ba6db1bab18471cf5b78324f1d24cefce5c4fc2bceffc738c4bb170fce93a18cd99d8fb63e33a723467ae824f43b223d5985387b7e757ee8d85549cb200d37bb19b9c7f5a22c0e5626988d70fa0d33d10b6998a24a56acc7489aa0d204c21b034e42f362a1eb23a6b0f39908679bab13e046ea39802efe7a1b39f123692fb5cc55c3f9b9be6e42e8ce527c2fd101375312541968a4abf360b20dc463d4043b216034b6c023f838b8634e146e2550c79109300ff243c8a9d409f90ac22a9b237ab4319fa6a137c2abf960e9a13010c6884d48d87c57c6e5b01259026984989e22c1e07002b55c93c68abb5ced24f37ac13585a9bd2de6d1d819115814e2437cdd63648fec02fd23df8bed8883dada18caeea8cbc24b938fb9973ac4e137132118e762ba2bf4a796fc2f8b23865dfcdf814bcea52ad97b0acb5018c41e7aff56dcbd0d3f093b8da43b9462dcf410124a33b4daeca05c66b4c7c8843ee8aabc13b6da2b4120ebd3bca9ad56f03a8e20eaa854b3cab8cacd16abaad309ac11a9d45766b7aa899b6c4bd98537a5710588c65ac0f68d69564ba58e1dd490c06acdaba7237b4662b0bb187000848323e2be5d1c2ea4470d3d69529c25641dcc51d62971086966c114f409e8e584b6918fbefd7f10c51cdc86a66c4ce907149234d7e24a3efd2c69980eedd8c1eef5a83adea398d9fe552f8e969ef3530c88c79b2929569261cbfba35ca7b885626fffd6f86e85091ad83558b1981f395bc0cdc75b543b214d1e28427a601ffeb7c16a5b65534d53dcfea63fd9c2fb21e1df6a1bff4c4ede4d1212e0fb3d1e5b5660dace06ed205c779f36aab308fb5642c2abae8c0b04a16685ae24de36103ffad34c0d69a9098bc6571010b31c7154b456bece2fadb435e479f8ec61e05d1682f7fde733d72ddcaf3318ff0a45243ecf02c57e4d43e00488ec2f956491dc269b458addae9eb700cc2d90b96d82611ab15697f5fdb19b6f1216f8f85100139fce7c7567fcea09b7f2a2f6e0036e2512e6b81fc1358b53430a7ecb3ad99f3aaf6526e5936c3af49e5865c1058b7fafe69642d9ac760013cd90ce7917b75f0231777abe1862ba329692640fb44d30b1b180349a8afa7322b6a8b1797d1b6d9170130cf0ee9dd3a183f9b965ff282a8278f1214602f988153dd3dfb402c3a05db67ecf046d96b071c477fa4ff9c2c3562fa37b531e3ae45084ec63a233ce8294e8eed69d85b756f9bd6d38c131a487cd4b04dc0a5f3e82906c35f24bb7b7af3c0c883ab4abada0e982eb0f4373e73d4075daa172ed3e10942b0ba87ea69345d9871bc312e7c880f8baf12938964a2c5a505583f046e16578d251ed197476172fb80aebd4b8e0a6165f29cad1b60efcaae6996a9e1f3c4450c1627c3e533becf35cb857cda887805c49c073d516e067ad0f303591a34f136e7fe4cb168c2e0b703479ba358809922eb814adfbd27a5384664f43cc8431e3c2ac0d6378f3ce3616466821b449887993e7d375482fe968569884b531d8c0d812aea0634174ecf0fc617ea96c24a682621382f36e4a91c6f36a3f466a2d96fd52e39073adaca18b58c89fa3424b8ccfed6b6d21bc63cbddbbf0a9bc9de8e9f27836cb957b4ba1c476850c6f376fa27bd66d6aec22257aa2c12ddbf256a3f7ec8f26a50df03ea10588a6d6a56f79da5e6d1bca424321af9e9c2c49c761aee2dd226f409f5e16cc5a6c4523918169ffeae13f29620dcc80e76bd41ec9ba046694dbfad922b743a66c133dee9741c1f66a10fff47b7b48a8502bc26f7dd61aec7794d525f00939a8bc8e4854bb033041f6242a9d7574740e9f16318b01b02339a4f130df0d965ce28de342e2c4abb97e4babb54ef4438c61e3490cfe87e2f9c4dbcc9e569eb021bf1407bbcf7a48ae03c5766b047178dce48ce792b44845d224ba5002d20c1b15a993f86ad4fd6ecce7d993f5479027fadd533cd8fd2a3e4cceaf76862ce69ed7c15d4ddefdaaab3bcc9b7671f03184a376244d77a6427220f7c7b9aa4d1eeef5c5c8694ffce05ffd6479a10720f4f7c30207353c2229c3aa6e2ae3598f7c7611a444778af2e74d2905dc9a9f9811d102ae99a561213de0cfec904717317519b56bccf3f41ec36557a54027c70a1c96ae70f6d1fdef61847fd29a852ca863221e8e71d737857265ae9be522960e6e865355f31ce3cc4501e4a5bad87617a6e9fa8b2e47212d6fca90c950042b0bb0c3a5599d748cad70d3e80dcf0d0e317d578f6965400164bc307a8a21158d122ba590896c1347e1512d97b172355b262afd96e864b1514ce9c05f74437274a0cdde85692e0a47be9171a0a0aa759158b093f620f399a50ab173b6c652874a0b7506784017f5d2843f837c03df3a16d541a671a47295bc11027728b369db3cadab6980ccb932a886570df6eac75d417ace91a94e5acfc4df6475406a4b96408b4bd041ef6035214790d0371b8e135635135d72c7151ea1d0589d933bc2fdb203639a94682cfacfe665776d442476ccc50a5b47a409adb8a35eeb5ede4fa65f6efb84d1ad1aae20fef721487bce5473256c7552adc24840755dbef1df86fa01d825737ad1f70265ead7743125a55add4db3047a016ccb6313ff42da421ecef189acc5ffdf8527af8f3ac72ce22f063b7d2b555e5d17a47802f4916f9dd59cd2d0aa9f0c25fe964c530d1d09f465845182471ab1135c60fd0c5a5affec4c6fc485ac4d05d969f0983cfdbb488282f0ede8bb96c59c57d3b54cdcdd97317a4a4e884e2e8afe8c055a0466e49bd3036cad38b8c10324b5240795e523e5c07ebc94e192b97efc8b33bcff0db133efe0d1c3371a23a1af2d4f32cbe2cc9cc281f01397c9b6d3a7149cc4f44289956af56d4ac0e269506cc17ce7b03662ebd6f53ba7b1cccd5d4ee945cfd267094989c1a935cbd50d391624a591184c102725065dfc85066f13ec5323697e661d9b8226ae2b86f1dadf47c5eb1139503f19814d7c54e9e4618560e35abac4987f2564d74b6764abbb4471b6ccbd21e4e9531214b5049a037ebb5169fb60bd04d9372a665bb489ca952a2a7d2fb3bc2d9de65a0890901245ec644e97d91e6de03258bee95a9141dd2bb66b297b65546d683569981003099e4c2021af9fc5167a648f0976d5606985e506efbfdd5243c4c658ef55880d7b173e2a212f0cd2990785c490461015558598da6296204e7e62c48796773add383d9263c9950fc3625f5ed07bfca8d5654e3b6b463cd0add76b6b3cff36321ae62a7326199f69f33ebe2d4da32436a67643661bb81ebe153447b7738510122471ac16eca95b45ed21e8732ba5486c930fe27936390af4f3c21c09595e8fd8b18f2186430c3295c186a0bd834df81a416f353c058f0e9bfe09aff75d751b26aa62e97d586f1fe7cba4533d55216687ea611f562c7d99aa60ce6c06b8ce147823d9fd3577213ce30a9b205ec39ba4d5de5316bfedd119faed1db0ba74778dead44e07dd0b4b92c8fa901b9a5a546fd38d2e6eeca937c617a2b9a7da0264a659b61b08821b05860c305f50debace63b70a4485d85186822c193cf4077210f00a95c1928b7244633e5d3c29ab470a87552388def32ecb9d5a5c904fe6905ac63b312383c939e74b86d514cbf74e405be37ac3a72d97eb4d970fe852a3fdcc6fc918393fb26296fbcbad22e58ba75456d3494e955dc619e88e11cffe8535bda56c045cc6b6104ac5dff9464ba1644ecbca99a3f881e314791a4607e98c947879afcc0e3c928afec4ce6e6502f9711f1e40f28f6022938d04a0f007b47a626b7f531ce0d023427fa10328d6dc0788df7c400f25b4dc8d4d1c4e1c5ada49d0111809cfc2b49c20c12bd4cf858cd61f5bb2f54f7ff94c4eb2084ffadf797eac7f09747d80ad2a3e132336d4a782ef0478b05ad370b032bc982539b86ded4728c35f03c94030fa26e95fa099f96f4cc66b7b915c72fd48f69bbfc882caa45f14ef1a9a6eb1d4ff24de6b5260c704cee0172036a4b7089ab8e9b49dcaa9db24e6a3c8696e8201d15ec6e82030177e273443ec751e9dd20a2508b73a3a1fe77d121e9f341b76e0f9275b19bbf0612ecf0132568ac1428821fc5d1b73a754a178a0aa70d6a0c4171e9b728e7c590435373fb8af10161f74485a99acea02b62c767e912142b2aea64cdbeec2e1d2e88ae02faad81262ff6a066c4d6494c534e0256608a82ddf20ac07e8bfe2edd4cd185d87d82b5979050eca2b2f5d29de6f7cda5b3a726d5838fd51ab5e99d3e44e1cde901306e3e58cd6c9a7d7bd93f540ae4bad18e0e434d0b62753e97b3fc4e8bcb0e2dd993d56e0001ecb40d44cbe4ab3e3b444464fef545ff8949964aa689e550eb374c2a7b8ddae7e26eaf60e1c189107239660d641ad4923a03ef5e4fd2b7895e34a5ac2bdf46a5357e0e3015d241ee048345e7236b129445e8837147663cb3e779963b2bcea7a0fc4b4b5664c3057cf19c77d97ae551bb20947d3e088735bffc8fc9deb9a57f1aef9e9198e54abb833039f81c75945d1d6df56655a1ce831c3dad5746a91480c6c66b47cd4b1d16dc09dd506dc6f29a57a41222d5ddb10d6447421d341c1c7a29f1c61da38e5ce49acc60187f767a5a789b8fffdcb9ee158fdf9697b74fcb86b80deb00f99dba8c87f4a1f6613d4b5b0293948ead67ac158371b2968e009f9ad33747027979a9f229cc1fae769000b7c20eff71593d24b20d33f773995cfd8a09eaa9cd95f89e21cf17dbce9303855f7ec815a11dab59ef7a57fe3e13446f1eff5bbc578be42da72a159424e2412eeee813cb7817cfacc70d54bb3d5aaf5240a2fd01e50b9df1ab2d01d9233c27491d99eee2017162d510f37d649fe124eb6efd4abcde5ae8a639832938165fc7d9c295065e2094995c2d2ec76e014a0653b5006df9690af6a046553d27a198fe1724123c770606d45e0907ef2f45fd82ef75ba1d76ca5d4b28c9976fef4f88415d8d64e119ade233d2b0589657521ae06dbfdf21355e9f081bb67d78f2abc3e239305377fa1a1e2726698e82a1221d9033ebc1c76adedb01b5af6be4fc3574810b5f195f3575e0c54a2fcba74ed44606e0ec5a7504d20e4035f257c0db1d481debd3a4bfd4460cd9d96c0bd0474a0cecd1f2fafb44efe071b63eaa4ce60c826150d2943df37053d970f8b557ef28fa504230db9c210f44fc7beb025199203b50f452c9eb934c8c95824296644e039ec9013100089d42e233ece6832ce37203fcf97da801391b2d2da02f98b8cfe5423f0e7ff813148e3666da4a31b20c5625b518e7fbe8f06ab07033532dcfd462cd66a6b7205e87ce6bcad9dbfba36608bfe2d3aa964e9ab4d3e481e8c52739ce092dc1787d0272b2932dee55e0928e74c8af3e8a2dd5888bff6e8c38f42bcf3954d86200f6bebec8663b3e02726cd30fe9102a8a90d4e940bb8c0e1af6ad02315190fb3550df7cd9033caae5fb2cbfce4ac0605987e974e18cfd56c4d1ee57936d14a3a4e190bfcde4c7656160acc7a9875747d3858e8af2", 0x1000}, {&(0x7f0000001bc0)="39af5de2750d21fc230adb406ce9fdcb9ac5d50665b9fa08053edb0d7b4c68ae881efac5337c39dafe3c73b928442ab652597233e106242980fa16a9baed3c22663e816bf7b7731af8d96558c4005ad4ca452cddb227712df693c38c2c5ee22ee79fedef660677f6bae4fccefc07a21c605506f2108a168440a6035ff93041dacd585f42482d", 0x86}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1c0000000000000001000000020000000135f1ae9eaaa54be30cc9dbafb0061744c3a7055aa34a38ffffffffffffffff83f20e30edf7bc285c6ad64b4a85b58c60077bd0046fbd77d5aef5d24716ec0fe10e4d6137919032a693389e19a81ea4e57300cd3012e39e95dfc514ed39e624a6e1ddd47c2a3a5ff8004f3b83fce4e717393c2bb2133bf32783abb29db0f8d8b6a1c89c8165f5d0ba84f8d3dc08b0bb8a2163c362f567998451ecff9b4f7ad175b00eecb754ae09d1acc71c93a57841f1aaeffc5eb03fc3c2934b2584b0d20d07cbd4a2f73a912d40e1fe895acfc65f027c4ad9daf030d90dc262d86e78da4921e3", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYBLOB="b6b97a9e29dbb0cbdfd580fb50b324297c7c79855ba8574e8847bd4d3b6baf520a03bfbc2711fddffbe8537e7754bcebf876e7a6fa8014b008397817ae5ecc77cbbff9709a7ccf493392", @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r12, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x541b, &(0x7f0000000080)={'syzkaller1\x00', @remote}) r13 = perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x90040, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2750, 0x4, @perf_config_ext={0x1, 0x14}, 0x4008, 0xd6a9, 0x980, 0x4, 0x2c4ee118, 0x80000000, 0x1, 0x0, 0xa, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r14, 0x8, 0x8}, 0xc) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 5.866260285s ago: executing program 1 (id=7771): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400090000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a891588d818a0afc0b3116a130974cac0615232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f84e4272d2cc72d4e771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de457f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5bfc182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456cd7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b4"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r5 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) 5.806291998s ago: executing program 0 (id=7772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x6}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xf0806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000000000000000}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000001840)=ANY=[@ANYBLOB="9feb01001800000000000000910000009100000005000000000000000200000d00000000100000000400000005000000030000000c000000020000840400000009000000000000008e0a0000000000020200000000080000060000000300000f0100000002000000f6ffffffff7fffff050000000400007ac081141a1d371a0040b30000080000008f0000000001000006040000000300000001010000020000000000000b0100000000000000305f0000"], &(0x7f0000000540)=""/26, 0xb1, 0x1a, 0x0, 0xd}, 0x28) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socketpair(0x23, 0x0, 0x8, &(0x7f0000000300)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f00000002c0)={'syzkaller0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f00000001c0), 0x2}, 0x12) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x282080, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x0, 0x4}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000200)="efad4f6fd53ed117220a58f12a06ada37b54fcabd51647b8179d6ca2d3902bc3269c", 0x22}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 5.805815158s ago: executing program 2 (id=7773): socket$kcm(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x76f3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x1, 0x7}, 0x2004, 0x0, 0x51, 0x4, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x400000c0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x3}, 0x8) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x21, &(0x7f0000000740), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeef, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfe33) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f00000002c0)=[{0x5, 0x1, 0x4, 0x4}, {0x9143, 0x1, 0x7, 0x1}]}) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='+cPu '], 0x5) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00a\x00\x00'], 0x5) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfffffffffffffd81}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x39, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x1, 0xf7}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000060000000a0000000000000802000000020000000700000508000000040005000300000008000000100000000300000005000000070000000400000007000000010000000100000001000000060000000400000002000000100000000200000081ffffff0c00000000000000ffffffff040000000000000b05000000003000000000"], &(0x7f0000001100)=""/4087, 0xfffffffffffffc3b, 0x1000, 0x0, 0xd, 0x10000, @value=r7}, 0x28) 5.434805789s ago: executing program 3 (id=7774): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000ed0000000000001c000080851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1d}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="811c4e8766d2e39500000000000000001811"], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @lsm=0x1b}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x800}) (async) socketpair(0x1, 0x3, 0xffffffff, &(0x7f0000000000)) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x1) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) (async) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b00)="d8000000180081064e81f782db4cb904021d0800fd02fd02e8fe50a1bc0001000000000000000e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb7e8ffb5e74a5d91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f90000010083f26c8b7b55", 0xd8}], 0x1}, 0x84) 5.163205688s ago: executing program 2 (id=7775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 5.042533942s ago: executing program 1 (id=7776): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000060020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x2018, 0xffffffffffffffff, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000001c0)=ANY=[]) 691.745658ms ago: executing program 1 (id=7777): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000abb356507ddc4a820004001400380013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7764fbd180e2959fcf50e4509", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x402}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 674.318149ms ago: executing program 4 (id=7778): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000000c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x80, 0x7, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}, 0x1904, 0x9, 0x6, 0x6, 0xeffffffffdf7bbfe, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x3}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0xa) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x21, 0x4, 0x80000008, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 659.635319ms ago: executing program 3 (id=7779): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0x6f85186349ea1728, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012"], &(0x7f0000000c00)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, 0x0, 0x4084) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100000, 0x0, 0x8000003}, 0x0, 0xffffffffffffffff, r1, 0x8) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe51) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r5, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x8, 0x7, 0x4000003}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (rerun: 64) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x4) (rerun: 64) setsockopt$sock_attach_bpf(r7, 0x10e, 0x2, &(0x7f0000000300)=r8, 0x4) (async) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r2, 0x8008743f, &(0x7f0000000180)) 510.422904ms ago: executing program 2 (id=7780): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000180)='FREEZING\x00', 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r0, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="7090e456e6645d1771b3ce1421469c723d", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000840)='GPL\x00', 0x100000, 0x0, 0x0, 0x41000, 0x40, '\x00', r3, 0x25, r0, 0x8, &(0x7f0000000940)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[r0, r4, r0, r0, r0, r1, r0], &(0x7f0000000a00)=[{0x4, 0x2, 0x5, 0xa}, {0x0, 0x4, 0x10}], 0x10, 0x957}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e03800e4d8c50ef2885634a8270001406"], 0xffdd) socket$kcm(0x2, 0x3, 0x2) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r11 = socket$kcm(0x28, 0x1, 0x0) close(r11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) close(r5) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x0) 509.947884ms ago: executing program 0 (id=7781): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000280)={r1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000002800007910000000000000c300e0ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5", 0x5}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000003180)={&(0x7f0000002d40)=@qipcrtr, 0x80, 0x0, 0x0, &(0x7f00000030c0)=""/177, 0xfffffffffffffc99}, 0x40000022) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00082025000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x13, 0x7400}, 0x8080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 454.282935ms ago: executing program 4 (id=7782): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 381.550578ms ago: executing program 1 (id=7783): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) r0 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x809, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc52, 0x0, 0x80000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782", 0xc}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000040000000200000048c7efaa93851733000000000000000000000002000000000000", @ANYRESDEC=r0], 0x0, 0x38}, 0x28) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) socket$kcm(0xa, 0x922000000003, 0x11) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x52283, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x4, 0x9, 0x84, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 256.934392ms ago: executing program 3 (id=7784): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0x0, 0x7}, {0x6}]}) ioctl$TUNGETVNETLE(r5, 0x40107446, &(0x7f0000000180)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000020000000000000000010000040018ed700000000001000000010000000000b68318bd5a3f0e875dcd40ff139e8fb18c7241747fe16c84fd7b7e36f4572df38d074c6aab5249fac744639f9be2a81744298505f7d99bd66b36fa7038ee4b15a04e38f8181fe9ca0c9ceaf3b86704e70b0fb653d93a82b157ec950d050c64e32c164a1bb39232b43ee398e224e6d16553969831a5b8b93d453d80b463c95bc7e18e5b17d0525ce0800320d67c3033da7e00c70f88613b08eeaf760435f2f63d"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d80000001c0081044e81f782db443ecd297f065d5e6094347879cca2b904021d08020700000081000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef21f4fffffffffca19750aa2297bce08affff8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060009000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d9345", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) 0s ago: executing program 4 (id=7785): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) kernel console output (not intermixed with test programs): bond0 (unregistering): Released all slaves [ 1151.211326][T26042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1151.235361][T26042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1151.253643][T21819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1151.279206][T21819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1151.295491][T26347] IPv6: Can't replace route, no match found [ 1151.824091][T26399] syz.3.6009[26399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.252471][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1152.279299][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1152.299629][T26042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.336244][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1152.350356][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1152.384342][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1152.399654][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1152.418712][T26042] device veth0_vlan entered promiscuous mode [ 1152.427985][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1152.439322][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1152.462282][T26042] device veth1_vlan entered promiscuous mode [ 1152.506776][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1152.522516][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1152.532677][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1152.546806][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1152.563121][T26042] device veth0_macvtap entered promiscuous mode [ 1152.581689][T26042] device veth1_macvtap entered promiscuous mode [ 1152.616817][T26042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.635893][T26042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.652425][T26042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.663580][T26042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.679808][T26042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.688736][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1152.702883][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1152.711818][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1152.721845][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1152.734344][T26042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.747188][T26042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.759266][T26042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.773922][T26042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.789858][T26042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.800362][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1152.814368][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1152.834941][T26042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.843721][T26042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.860342][T26042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.871788][T26042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.014057][ T9473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.047245][ T9473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.109245][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1155.134265][T26421] netlink: 'syz.3.6015': attribute type 29 has an invalid length. [ 1155.164899][T26421] netlink: 'syz.3.6015': attribute type 29 has an invalid length. [ 1155.188677][ T4533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.224085][T26424] netlink: 'syz.3.6015': attribute type 29 has an invalid length. [ 1155.256259][ T4533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.382005][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1155.394437][T23020] Bluetooth: hci4: ISO packet for unknown connection handle 62 [ 1155.439327][T26421] netlink: 'syz.3.6015': attribute type 29 has an invalid length. [ 1155.506800][T26424] netlink: 'syz.3.6015': attribute type 29 has an invalid length. [ 1156.030586][T26422] device syzkaller0 entered promiscuous mode [ 1156.174604][T26446] netlink: 'syz.1.6020': attribute type 1 has an invalid length. [ 1156.183044][T26446] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.6020'. [ 1158.532953][T26446] netlink: 'syz.1.6020': attribute type 10 has an invalid length. [ 1158.542397][T26446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6020'. [ 1158.551859][T26446] bridge0: port 4(veth0_vlan) entered blocking state [ 1158.560208][T26446] bridge0: port 4(veth0_vlan) entered disabled state [ 1158.569174][T26446] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1158.883567][T26471] netlink: 'syz.2.6028': attribute type 29 has an invalid length. [ 1158.928778][T26471] netlink: 'syz.2.6028': attribute type 29 has an invalid length. [ 1159.019295][T26477] netlink: 'syz.2.6028': attribute type 29 has an invalid length. [ 1159.089792][T26465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6025'. [ 1159.130959][T26466] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6025'. [ 1159.639322][T23020] Bluetooth: hci1: ISO packet for unknown connection handle 62 [ 1160.419298][T23020] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 1160.558752][T26532] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6043'. [ 1160.585158][T26534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6043'. [ 1160.613750][T26535] validate_nla: 8 callbacks suppressed [ 1160.613770][T26535] netlink: 'syz.3.6044': attribute type 10 has an invalid length. [ 1160.668319][T26533] netlink: 'syz.3.6044': attribute type 10 has an invalid length. [ 1161.028476][T26547] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6047'. [ 1161.060608][T26547] device batadv_slave_1 entered promiscuous mode [ 1161.076107][T26550] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6048'. [ 1161.240955][T26556] netlink: 'syz.0.6051': attribute type 29 has an invalid length. [ 1161.308736][T26556] netlink: 'syz.0.6051': attribute type 29 has an invalid length. [ 1161.366549][T26562] netlink: 'syz.0.6051': attribute type 29 has an invalid length. [ 1161.437039][T23020] Bluetooth: hci2: ISO packet for unknown connection handle 62 [ 1161.466799][T26556] netlink: 'syz.0.6051': attribute type 29 has an invalid length. [ 1161.497299][T26556] netlink: 'syz.0.6051': attribute type 29 has an invalid length. [ 1162.121578][T26591] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6062'. [ 1162.522845][T26604] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1162.552028][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.610417][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.658951][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.698387][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.783850][T26604] device batadv_slave_1 entered promiscuous mode [ 1162.992077][T26608] delete_channel: no stack [ 1163.275857][T26611] netlink: 'syz.0.6068': attribute type 10 has an invalid length. [ 1163.578887][T26611] team0: Device wg1 is of different type [ 1163.700312][T26606] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6066'. [ 1165.385394][T26660] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6078'. [ 1165.396724][T26660] bridge_slave_1: default FDB implementation only supports local addresses [ 1165.652283][T26668] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6081'. [ 1165.686688][T26668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.738927][T26668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.761993][T26668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.798161][T26668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.829232][T26668] device batadv_slave_1 entered promiscuous mode [ 1166.061842][T26681] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6085'. [ 1166.255096][T26688] netlink: 'syz.3.6087': attribute type 10 has an invalid length. [ 1166.348583][T26688] team0: Device wg1 is of different type [ 1167.844093][T21819] tipc: Subscription rejected, illegal request [ 1168.166013][T26728] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1168.711423][T26728] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1168.779816][T26728] CPU: 0 PID: 26728 Comm: syz.3.6097 Not tainted syzkaller #0 [ 1168.787380][T26728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1168.797492][T26728] Call Trace: [ 1168.800824][T26728] [ 1168.803793][T26728] dump_stack_lvl+0x188/0x24e [ 1168.808531][T26728] ? show_regs_print_info+0x12/0x12 [ 1168.813791][T26728] ? load_image+0x410/0x410 [ 1168.818389][T26728] sysfs_warn_dup+0x8a/0xa0 [ 1168.822956][T26728] sysfs_do_create_link_sd+0xc0/0x110 [ 1168.828395][T26728] device_add+0x83b/0x1050 [ 1168.832888][T26728] wiphy_register+0x1d8b/0x2aa0 [ 1168.837827][T26728] ? cfg80211_event_work+0x40/0x40 [ 1168.843007][T26728] ? minstrel_ht_alloc+0x894/0xa20 [ 1168.848189][T26728] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1168.854412][T26728] ieee80211_register_hw+0x2d48/0x39f0 [ 1168.859972][T26728] ? ieee80211_register_hw+0xed1/0x39f0 [ 1168.865605][T26728] ? ieee80211_register_hw+0xed1/0x39f0 [ 1168.871231][T26728] ? ieee80211_tasklet_handler+0x20/0x20 [ 1168.876937][T26728] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1168.882990][T26728] ? __debug_object_init+0xed/0x440 [ 1168.888260][T26728] ? memset+0x1e/0x40 [ 1168.892298][T26728] ? __hrtimer_init+0x189/0x270 [ 1168.897215][T26728] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1168.903003][T26728] ? memcpy+0x3c/0x60 [ 1168.907044][T26728] hwsim_new_radio_nl+0xab7/0xc90 [ 1168.912161][T26728] genl_family_rcv_msg_doit+0x22f/0x350 [ 1168.917763][T26728] ? end_current_label_crit_section+0x170/0x170 [ 1168.924178][T26728] ? trace_call_bpf+0xbf/0x6b0 [ 1168.929012][T26728] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1168.934979][T26728] ? bpf_lsm_capable+0x5/0x10 [ 1168.939695][T26728] ? security_capable+0x85/0xb0 [ 1168.944597][T26728] genl_rcv_msg+0x601/0x790 [ 1168.949153][T26728] ? genl_bind+0x360/0x360 [ 1168.953603][T26728] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1168.959982][T26728] netlink_rcv_skb+0x1ef/0x440 [ 1168.964779][T26728] ? genl_bind+0x360/0x360 [ 1168.969257][T26728] ? netlink_ack+0x1160/0x1160 [ 1168.974060][T26728] ? down_read+0x1a8/0x2d0 [ 1168.978513][T26728] genl_rcv+0x24/0x40 [ 1168.982528][T26728] netlink_unicast+0x7ad/0x920 [ 1168.987454][T26728] netlink_sendmsg+0x8ad/0xbd0 [ 1168.992284][T26728] ? netlink_getsockopt+0x550/0x550 [ 1168.997545][T26728] ? aa_sock_msg_perm+0x94/0x150 [ 1169.002544][T26728] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1169.007875][T26728] ? security_socket_sendmsg+0x7c/0xa0 [ 1169.013371][T26728] ? netlink_getsockopt+0x550/0x550 [ 1169.018620][T26728] ____sys_sendmsg+0x5ed/0x9a0 [ 1169.023427][T26728] ? __sys_sendmsg_sock+0x30/0x30 [ 1169.028483][T26728] ? __import_iovec+0x306/0x510 [ 1169.033372][T26728] ? import_iovec+0x6f/0xa0 [ 1169.037912][T26728] ___sys_sendmsg+0x2a2/0x360 [ 1169.042627][T26728] ? __sys_sendmsg+0x2a0/0x2a0 [ 1169.047464][T26728] __se_sys_sendmsg+0x1c3/0x2b0 [ 1169.052347][T26728] ? __x64_sys_sendmsg+0x80/0x80 [ 1169.057366][T26728] ? lockdep_hardirqs_on+0x94/0x140 [ 1169.062714][T26728] do_syscall_64+0x4c/0xa0 [ 1169.067161][T26728] ? clear_bhb_loop+0x60/0xb0 [ 1169.071869][T26728] ? clear_bhb_loop+0x60/0xb0 [ 1169.076575][T26728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1169.082510][T26728] RIP: 0033:0x7fb9d7f9ce59 [ 1169.086953][T26728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.106594][T26728] RSP: 002b:00007fb9d8e14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.115041][T26728] RAX: ffffffffffffffda RBX: 00007fb9d8216180 RCX: 00007fb9d7f9ce59 [ 1169.123051][T26728] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1169.131056][T26728] RBP: 00007fb9d8032e6f R08: 0000000000000000 R09: 0000000000000000 [ 1169.139053][T26728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.147054][T26728] R13: 00007fb9d8216218 R14: 00007fb9d8216180 R15: 00007ffff747f578 [ 1169.155074][T26728] [ 1169.525741][T14717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1169.544807][T14717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1169.553725][T14717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1169.562503][T14717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1169.570424][T14717] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1169.578117][T14717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1170.441836][T26750] chnl_net:caif_netlink_parms(): no params data found [ 1170.576384][T26761] netlink: 'syz.4.6103': attribute type 2 has an invalid length. [ 1170.606603][T26762] netlink: 'syz.4.6103': attribute type 10 has an invalid length. [ 1170.673539][T26762] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1171.260020][T26750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.269243][T26750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.278149][T26750] device bridge_slave_0 entered promiscuous mode [ 1171.341432][T26750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.354821][T26750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.395228][T26750] device bridge_slave_1 entered promiscuous mode [ 1171.494262][T26750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.684579][T23020] Bluetooth: hci1: command 0x0409 tx timeout [ 1171.692098][T26795] device syzkaller0 entered promiscuous mode [ 1171.736863][T26750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.983720][T14717] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 1172.165828][T26750] team0: Port device team_slave_0 added [ 1172.204745][T26805] netlink: 'syz.0.6114': attribute type 10 has an invalid length. [ 1172.213662][T26788] delete_channel: no stack [ 1172.235121][T26805] netlink: 'syz.0.6114': attribute type 11 has an invalid length. [ 1172.253393][T26805] netlink: 5145 bytes leftover after parsing attributes in process `syz.0.6114'. [ 1172.314270][ T4533] bridge0: port 5(ip6gretap0) entered disabled state [ 1172.413684][ T4533] device ip6gretap0 left promiscuous mode [ 1172.429436][ T4533] bridge0: port 5(ip6gretap0) entered disabled state [ 1173.762784][T14717] Bluetooth: hci1: command 0x041b tx timeout [ 1175.173815][T26823] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6115'. [ 1175.772025][T26750] team0: Port device team_slave_1 added [ 1175.834756][T14717] Bluetooth: hci1: command 0x040f tx timeout [ 1175.984695][T26750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.991741][T26750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.022260][T26750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.034051][T26841] netlink: 'syz.4.6117': attribute type 21 has an invalid length. [ 1176.045278][T26841] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6117'. [ 1176.059977][T26841] netlink: 'syz.4.6117': attribute type 4 has an invalid length. [ 1176.074645][T26841] netlink: 'syz.4.6117': attribute type 5 has an invalid length. [ 1176.082487][T26841] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6117'. [ 1176.115099][T26750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.122113][T26750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.173268][T26750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.391798][T26750] device hsr_slave_0 entered promiscuous mode [ 1176.399971][T26750] device hsr_slave_1 entered promiscuous mode [ 1176.410404][T26750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1176.418588][T26750] Cannot create hsr debugfs directory [ 1176.641231][ T4533] device gretap0 left promiscuous mode [ 1176.661765][ T4533] Ÿë: port 1(gretap0) entered disabled state [ 1176.749179][T26860] device wlan1 entered promiscuous mode [ 1177.284551][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.290934][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.915035][T14717] Bluetooth: hci1: command 0x0419 tx timeout [ 1177.992786][ T4533] device veth0_to_team left promiscuous mode [ 1178.006247][ T4533] Ÿë: port 2(veth0_to_team) entered disabled state [ 1178.191396][ T4533] device hsr_slave_0 left promiscuous mode [ 1178.285435][ T4533] device hsr_slave_1 left promiscuous mode [ 1178.299581][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.343401][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.390406][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.424745][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.469076][ T4533] bridge0: port 3(dummy0) entered disabled state [ 1178.495462][ T4533] device bridge_slave_1 left promiscuous mode [ 1178.520796][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.574087][ T4533] device bridge_slave_0 left promiscuous mode [ 1178.589617][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.646238][ T4533] device veth1_vlan left promiscuous mode [ 1178.889609][T26931] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1178.968349][ T4533] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1179.432466][ T4533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.485033][ T4533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.913927][ T4533] bond0 (unregistering): Released all slaves [ 1180.344288][T26750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1180.378395][T26750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1180.419913][T26750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1180.457387][T26750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1180.803792][T26750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.826857][T26962] netlink: 12508 bytes leftover after parsing attributes in process `syz.2.6144'. [ 1180.900891][T26750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.930425][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1180.940988][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1180.979990][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1181.003459][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1181.028925][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.036214][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.096139][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1181.112427][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1181.140483][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1181.173191][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.180442][ T4516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.216349][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1181.257298][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1181.289920][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1181.320919][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1181.371370][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1181.394191][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1181.409505][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1181.430072][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1181.441823][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1181.464346][T26750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1181.480456][T26750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1181.493815][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1181.509792][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1182.273343][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1182.282600][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1182.309113][T26750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.326721][T26984] netlink: 'syz.0.6146': attribute type 39 has an invalid length. [ 1182.507131][T26988] netlink: 'syz.2.6147': attribute type 21 has an invalid length. [ 1182.529032][T26988] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1182.617454][ T9473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1182.636718][ T9473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1182.766362][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1182.785727][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1182.813810][T26750] device veth0_vlan entered promiscuous mode [ 1182.843689][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1182.873136][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1182.908138][T26750] device veth1_vlan entered promiscuous mode [ 1183.019191][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1183.058642][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1183.095525][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1183.135452][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1183.163379][T26750] device veth0_macvtap entered promiscuous mode [ 1183.177813][T27010] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6152'. [ 1183.189896][T27012] netlink: 'syz.0.6153': attribute type 21 has an invalid length. [ 1183.201888][T26750] device veth1_macvtap entered promiscuous mode [ 1183.288083][T26750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.327759][T26750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.384611][T26750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.422255][T26750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.466865][T26750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.513900][T27018] netlink: 'syz.2.6154': attribute type 10 has an invalid length. [ 1183.557000][T27018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.423591][T27018] device bridge_slave_1 left promiscuous mode [ 1186.446153][T27018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.597442][T27018] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1186.635618][ T9473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1186.657094][ T9473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1186.686326][T26750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.724507][T26750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.735033][T26750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.775555][T26750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.790767][T26750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.829222][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1186.855478][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1186.904309][T26750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.950887][T26750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.970544][T26750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.000074][T26750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.025448][T27068] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6162'. [ 1187.046112][T27069] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6162'. [ 1187.249271][ T4537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.275242][ T4537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.295691][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1187.337871][T27085] netlink: 'syz.4.6166': attribute type 21 has an invalid length. [ 1187.352327][T27085] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.6166'. [ 1187.371002][T27094] netlink: 'syz.3.6168': attribute type 1 has an invalid length. [ 1187.386675][T27094] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.6168'. [ 1187.439816][ T4537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.460025][ T4537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.488124][ T9473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1187.513626][T27100] netlink: 'syz.2.6169': attribute type 21 has an invalid length. [ 1187.574697][T27100] IPv6: NLM_F_CREATE should be specified when creating new route [ 1187.766765][T27099] netlink: 'syz.2.6169': attribute type 10 has an invalid length. [ 1187.780615][T27099] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1187.949352][T27108] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6171'. [ 1187.993171][T27112] device virt_wifi0 entered promiscuous mode [ 1188.455125][T27127] netlink: 'syz.1.6176': attribute type 39 has an invalid length. [ 1188.806681][T27125] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6175'. [ 1188.836357][T27130] netlink: 'syz.3.6177': attribute type 17 has an invalid length. [ 1188.844349][T27130] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6177'. [ 1189.113454][T14717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1189.145984][T14717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1189.155473][T14717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1189.164260][T14717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1189.173073][T14717] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1189.186087][T14717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1189.383170][T27144] netlink: 'syz.0.6181': attribute type 1 has an invalid length. [ 1189.393877][T27144] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.6181'. [ 1189.421213][T27142] netlink: 'syz.3.6180': attribute type 21 has an invalid length. [ 1189.450063][T27142] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.6180'. [ 1190.384233][T27135] chnl_net:caif_netlink_parms(): no params data found [ 1190.672778][T27162] netlink: 'syz.3.6186': attribute type 10 has an invalid length. [ 1190.700975][T27162] device macvlan0 entered promiscuous mode [ 1190.911096][T27181] netlink: 'syz.1.6190': attribute type 29 has an invalid length. [ 1191.070145][T27135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.094718][T27135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.113425][T27135] device bridge_slave_0 entered promiscuous mode [ 1191.137580][T27135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.154638][T27135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.188391][T27135] device bridge_slave_1 entered promiscuous mode [ 1191.274759][T14717] Bluetooth: hci3: command 0x0409 tx timeout [ 1191.310363][T27135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.362948][T27135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.518718][T27135] team0: Port device team_slave_0 added [ 1191.554903][T27135] team0: Port device team_slave_1 added [ 1191.579353][T27135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.586528][T27135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.674130][T27135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.703482][T27135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.719808][T27135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.784733][T27135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.869157][T27135] device hsr_slave_0 entered promiscuous mode [ 1191.885982][T27135] device hsr_slave_1 entered promiscuous mode [ 1191.901441][T27135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1191.914395][T27135] Cannot create hsr debugfs directory [ 1192.885385][T27221] __nla_validate_parse: 3 callbacks suppressed [ 1192.885405][T27221] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6204'. [ 1192.906562][T27221] validate_nla: 3 callbacks suppressed [ 1192.906581][T27221] netlink: 'syz.2.6204': attribute type 2 has an invalid length. [ 1192.921575][T27221] netlink: 'syz.2.6204': attribute type 1 has an invalid length. [ 1192.964769][T27221] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6204'. [ 1193.229155][T27135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.335993][T27226] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.6206'. [ 1193.354644][T14717] Bluetooth: hci3: command 0x041b tx timeout [ 1193.497048][T27135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.724781][T27135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.818100][T27247] netlink: 'syz.0.6213': attribute type 12 has an invalid length. [ 1193.839536][T27248] netlink: 'syz.2.6211': attribute type 11 has an invalid length. [ 1193.872698][T27248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6211'. [ 1193.985614][T27135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.487048][T27135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1195.184628][T27255] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6215'. [ 1195.208636][T27135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1195.219893][T27135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1195.231065][T27135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1195.434728][T14717] Bluetooth: hci3: command 0x040f tx timeout [ 1195.469534][T27135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.565289][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1195.594315][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1195.627422][T27135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.745157][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1195.759261][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1195.780710][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.788840][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.828088][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1195.853907][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1195.863423][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.870639][ T4507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.889834][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1195.914278][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1195.964261][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1196.102878][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1196.114900][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1196.123962][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1196.144061][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1196.153582][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1196.163208][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1196.175225][T27277] netlink: 'syz.3.6221': attribute type 21 has an invalid length. [ 1196.183098][T27277] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6221'. [ 1196.212700][T27277] netlink: 'syz.3.6221': attribute type 4 has an invalid length. [ 1196.231225][T27277] netlink: 'syz.3.6221': attribute type 5 has an invalid length. [ 1196.240590][T27277] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6221'. [ 1196.345274][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1196.368229][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1196.388038][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1196.397963][T27290] tap0: tun_chr_ioctl cmd 1074025677 [ 1196.403615][T27290] tap0: linktype set to 823 [ 1196.417996][T27135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1197.130962][T27317] netlink: 'syz.0.6230': attribute type 10 has an invalid length. [ 1197.160160][T27317] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6230'. [ 1197.515035][T14717] Bluetooth: hci3: command 0x0419 tx timeout [ 1200.492874][T27322] netlink: 'syz.1.6231': attribute type 22 has an invalid length. [ 1200.501453][T27322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6231'. [ 1200.531530][T27326] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1200.544952][T27327] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1200.568815][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1200.587228][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1200.671150][T27329] device syzkaller0 entered promiscuous mode [ 1200.704139][T27135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.374240][T27374] device syzkaller0 entered promiscuous mode [ 1203.442004][T27384] netlink: 'syz.3.6242': attribute type 1 has an invalid length. [ 1203.475559][T27384] netlink: 'syz.3.6242': attribute type 2 has an invalid length. [ 1203.483360][T27384] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1204.012391][T27394] netlink: 'syz.0.6245': attribute type 3 has an invalid length. [ 1204.027361][T27394] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6245'. [ 1204.270831][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1204.288006][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1204.323269][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1204.349932][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1204.371373][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1204.392228][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1204.418302][T27135] device veth0_vlan entered promiscuous mode [ 1204.460673][T27135] device veth1_vlan entered promiscuous mode [ 1204.473199][T27413] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6249'. [ 1204.908498][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1204.926427][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1204.941757][T27135] device veth0_macvtap entered promiscuous mode [ 1205.021790][T27135] device veth1_macvtap entered promiscuous mode [ 1205.080298][T27135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.097254][T27135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.117067][T27135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.128308][T27135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.141427][T27135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.152783][T27135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.165475][T27135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1205.193681][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1205.225651][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1205.251928][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1205.279911][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1205.301333][T27135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.356595][T27135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.367850][T27135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.383517][T27135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.402981][T27135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.423803][T27135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.466638][T27135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1205.481337][T27450] device veth1_macvtap left promiscuous mode [ 1205.544041][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1205.567523][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1205.646463][T27135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.674593][T27135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.714927][T27135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.740918][T27135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.980396][T27479] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6267'. [ 1206.088483][T27485] netlink: 'syz.0.6269': attribute type 3 has an invalid length. [ 1206.154603][T27485] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6269'. [ 1206.164294][T27477] sock: sock_set_timeout: `syz.1.6268' (pid 27477) tries to set negative timeout [ 1206.247710][ T4507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.269501][ T4507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.324809][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1206.434624][ T9480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.442511][ T9480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.497146][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1208.535907][T27534] can: request_module (can-proto-0) failed. [ 1208.596779][T27542] netlink: 'syz.0.6283': attribute type 27 has an invalid length. [ 1208.621759][T27547] netlink: 'syz.4.6282': attribute type 7 has an invalid length. [ 1208.667471][T27547] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.6282'. [ 1211.517346][T27542] bond0: (slave bond_slave_0): Releasing backup interface [ 1211.719905][T27565] netlink: 'syz.3.6288': attribute type 29 has an invalid length. [ 1211.750841][T27565] netlink: 'syz.3.6288': attribute type 29 has an invalid length. [ 1211.777318][T27574] netlink: 'syz.3.6288': attribute type 29 has an invalid length. [ 1211.801664][T27565] netlink: 'syz.3.6288': attribute type 29 has an invalid length. [ 1211.860653][T27565] netlink: 'syz.3.6288': attribute type 29 has an invalid length. [ 1212.500703][T27594] netlink: 16214 bytes leftover after parsing attributes in process `syz.3.6295'. [ 1214.027138][T27606] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.6298'. [ 1214.688473][T27640] netlink: 'syz.2.6307': attribute type 11 has an invalid length. [ 1216.642526][T27690] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6321'. [ 1219.721554][T27691] IPv6: Can't replace route, no match found [ 1220.612468][T27727] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6333'. [ 1223.363876][T27800] netlink: 'syz.0.6357': attribute type 6 has an invalid length. [ 1224.892170][T27821] netlink: 'syz.3.6362': attribute type 10 has an invalid length. [ 1225.007029][T27826] netlink: 'syz.2.6363': attribute type 3 has an invalid length. [ 1225.052675][T27826] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6363'. [ 1225.176165][T27821] team0: Device wg1 is of different type [ 1226.689913][T27848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6370'. [ 1227.721729][T27852] netlink: 'syz.2.6373': attribute type 39 has an invalid length. [ 1228.004131][T27861] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6375'. [ 1228.797682][T27874] netlink: 'syz.0.6377': attribute type 2 has an invalid length. [ 1228.839189][T27874] device .*! entered promiscuous mode [ 1228.955737][T27879] netlink: 'syz.2.6380': attribute type 2 has an invalid length. [ 1228.977025][T27879] netlink: 'syz.2.6380': attribute type 3 has an invalid length. [ 1228.997265][T27879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6380'. [ 1229.016223][T23020] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1229.026591][T23020] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1229.038278][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1229.048707][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1229.057927][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1229.076258][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1229.601506][T27893] netlink: 'syz.2.6383': attribute type 10 has an invalid length. [ 1229.634889][T27893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6383'. [ 1229.650556][T27893] device team0 entered promiscuous mode [ 1229.684909][T27893] device team_slave_0 entered promiscuous mode [ 1229.705893][T27893] device team_slave_1 entered promiscuous mode [ 1229.734121][T27893] bridge0: port 2(team0) entered blocking state [ 1229.763567][T27893] bridge0: port 2(team0) entered disabled state [ 1229.795618][T27893] bridge0: port 2(team0) entered blocking state [ 1229.802063][T27893] bridge0: port 2(team0) entered forwarding state [ 1230.371873][T27900] netlink: 92148 bytes leftover after parsing attributes in process `syz.1.6384'. [ 1230.748521][T27887] chnl_net:caif_netlink_parms(): no params data found [ 1231.114787][T14717] Bluetooth: hci5: command 0x0409 tx timeout [ 1231.205107][T27887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.212288][T27887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.221758][T27887] device bridge_slave_0 entered promiscuous mode [ 1231.236033][T27887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.244846][T27887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.253230][T27887] device bridge_slave_1 entered promiscuous mode [ 1231.348125][T27887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.378247][T27887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.198807][T14717] Bluetooth: hci5: command 0x041b tx timeout [ 1234.536072][T27887] team0: Port device team_slave_0 added [ 1234.564586][T27920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6389'. [ 1234.727842][T27887] team0: Port device team_slave_1 added [ 1234.896977][ T4533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.934420][T27887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.951542][T27887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.992547][T27887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.163555][ T4533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.186538][T27887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.193549][T27887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.227654][T27887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.278060][T14717] Bluetooth: hci5: command 0x040f tx timeout [ 1235.388445][ T4533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.558595][ T4533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.594317][T27887] device hsr_slave_0 entered promiscuous mode [ 1235.617336][T27887] device hsr_slave_1 entered promiscuous mode [ 1235.652073][T27887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1235.674715][T14717] Bluetooth: hci0: command 0x0406 tx timeout [ 1235.712638][T27887] Cannot create hsr debugfs directory [ 1236.332816][T27956] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6398'. [ 1236.421896][ T4533] device 0 left promiscuous mode [ 1237.354810][ T4292] Bluetooth: hci5: command 0x0419 tx timeout [ 1237.565177][T27979] device sit0 entered promiscuous mode [ 1238.015686][T27998] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6408'. [ 1238.226910][T28002] netlink: 'syz.1.6409': attribute type 21 has an invalid length. [ 1238.248892][T28002] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1238.653983][T28012] netlink: 'syz.4.6411': attribute type 46 has an invalid length. [ 1238.698242][T28012] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6411'. [ 1238.717253][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.723695][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.350596][T27887] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1239.403634][T28031] netlink: 'syz.0.6415': attribute type 29 has an invalid length. [ 1239.522619][T28036] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6416'. [ 1241.750108][T28015] device syzkaller0 entered promiscuous mode [ 1241.764172][T28031] netlink: 'syz.0.6415': attribute type 29 has an invalid length. [ 1241.890972][T27887] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1241.935447][T27887] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1242.003131][T27887] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1242.117962][ T4516] tipc: Subscription rejected, illegal request [ 1242.397601][T28051] device sit0 entered promiscuous mode [ 1242.421232][T28057] netlink: 'syz.0.6421': attribute type 3 has an invalid length. [ 1242.491840][T28057] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6421'. [ 1242.913700][T28071] netlink: 'syz.2.6423': attribute type 2 has an invalid length. [ 1243.300733][T27887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.390813][T27887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.405959][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1243.426586][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1243.728793][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1243.750831][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1243.806427][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.813614][ T4542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.864931][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1243.886356][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1243.915928][ T4542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.923139][ T4542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.996899][T28100] netlink: 'syz.0.6430': attribute type 21 has an invalid length. [ 1244.054952][T28100] IPv6: NLM_F_CREATE should be specified when creating new route [ 1244.063325][T28100] IPv6: Can't replace route, no match found [ 1244.090258][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1244.125621][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1244.150108][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1244.220112][ T4533] device veth0_vlan left promiscuous mode [ 1244.601763][ T4533] team0 (unregistering): Port device geneve1 removed [ 1244.962177][ T4533] team0 (unregistering): Port device team_slave_1 removed [ 1245.012957][ T4533] team0 (unregistering): Port device team_slave_0 removed [ 1245.409425][T28111] netlink: 'syz.4.6429': attribute type 10 has an invalid length. [ 1245.673104][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1245.686905][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1245.699408][T28119] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.6434'. [ 1245.840489][T28129] device sit0 entered promiscuous mode [ 1246.001187][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1246.032353][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1246.057723][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1246.093344][T27887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1246.121840][T27887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1246.195752][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1246.217158][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1246.226523][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1246.236003][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1246.624884][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1247.082444][T28164] netlink: 'syz.0.6445': attribute type 21 has an invalid length. [ 1247.234561][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1247.242166][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1247.266810][T27887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.328083][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1247.350877][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1247.420046][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1247.435886][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1247.447806][T27887] device veth0_vlan entered promiscuous mode [ 1247.458666][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1247.467936][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1247.485830][T27887] device veth1_vlan entered promiscuous mode [ 1247.533144][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1247.542341][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1247.555535][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1247.565359][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1247.599446][T27887] device veth0_macvtap entered promiscuous mode [ 1247.619773][T27887] device veth1_macvtap entered promiscuous mode [ 1247.662394][T27887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.687575][T27887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.704708][T27887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.724505][T27887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.740819][T27887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.751504][T27887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.761758][T27887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.772481][T27887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.789118][T27887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.838132][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1247.847620][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1247.897128][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1247.921820][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1247.997406][T28179] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6449'. [ 1248.057241][T27887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.094721][T27887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.143033][T27887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.181626][T27887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.210794][T27887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.234663][T27887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.257351][T27887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.294864][T27887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.311442][T27887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.356317][T28186] netlink: 'syz.1.6450': attribute type 17 has an invalid length. [ 1248.371721][T28186] netlink: 'syz.1.6450': attribute type 16 has an invalid length. [ 1248.431156][T28186] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6450'. [ 1248.450681][T28192] netlink: 'syz.4.6452': attribute type 29 has an invalid length. [ 1248.484626][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1248.505491][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1248.530578][T27887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.563288][T27887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.586852][T27887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.601767][T27887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.628173][T28192] netlink: 'syz.4.6452': attribute type 29 has an invalid length. [ 1248.667818][T28194] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6453'. [ 1248.678229][T28195] netlink: 'syz.4.6452': attribute type 29 has an invalid length. [ 1248.705933][T28192] netlink: 'syz.4.6452': attribute type 2 has an invalid length. [ 1248.718070][T28199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6454'. [ 1248.781431][T28197] netlink: 'syz.4.6452': attribute type 29 has an invalid length. [ 1248.940311][ T4542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.984973][ T4542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.030706][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1249.058336][ T4542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.081306][ T4542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.113214][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1249.537135][T28233] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6463'. [ 1249.632449][T28237] delete_channel: no stack [ 1249.645013][T28237] delete_channel: no stack [ 1250.525670][T28254] netlink: 'syz.1.6469': attribute type 28 has an invalid length. [ 1250.578887][T28257] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6470'. [ 1250.628989][T28258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1250.665392][T28258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1250.688063][T28258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1250.805674][T28261] netlink: 'syz.3.6471': attribute type 10 has an invalid length. [ 1250.824020][T28264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1250.902617][T28261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.912404][T28261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.995198][T28261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.003144][T28261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.014214][T28261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.021991][T28261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.228622][T28261] team0: Port device bridge0 added [ 1251.816632][T28289] netlink: 'syz.4.6480': attribute type 11 has an invalid length. [ 1251.991243][T28288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1252.548929][T28303] device syzkaller0 entered promiscuous mode [ 1252.583983][T28314] netlink: 'syz.1.6485': attribute type 7 has an invalid length. [ 1257.270706][T28308] netlink: 'syz.1.6485': attribute type 46 has an invalid length. [ 1257.286800][T28308] __nla_validate_parse: 4 callbacks suppressed [ 1257.286821][T28308] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6485'. [ 1257.483202][T28344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6493'. [ 1260.401406][T28364] tipc: Started in network mode [ 1260.412968][T28364] tipc: Node identity 9215a268, cluster identity 4711 [ 1260.463836][T28364] tipc: Node number set to 2450891368 [ 1260.721492][T28373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1261.287384][T14717] Bluetooth: hci2: command 0x0406 tx timeout [ 1262.299412][T28416] device wlan1 entered promiscuous mode [ 1262.454180][T28418] netlink: 'syz.0.6513': attribute type 21 has an invalid length. [ 1262.491981][T28418] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1262.557465][T28426] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6516'. [ 1262.688841][T28430] device syzkaller0 entered promiscuous mode [ 1266.423868][T28451] netlink: 'syz.0.6524': attribute type 11 has an invalid length. [ 1266.572038][ T4540] tipc: Left network mode [ 1266.946828][T28467] netlink: 'syz.1.6529': attribute type 7 has an invalid length. [ 1267.724623][T28503] netlink: 'syz.3.6540': attribute type 29 has an invalid length. [ 1267.961969][T28503] netlink: 'syz.3.6540': attribute type 29 has an invalid length. [ 1267.991612][T28505] netlink: 'syz.3.6540': attribute type 29 has an invalid length. [ 1268.497266][T28520] netlink: 'syz.0.6546': attribute type 20 has an invalid length. [ 1268.529869][T28519] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1268.915681][T28530] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6550'. [ 1269.220721][T28557] netlink: 'syz.0.6557': attribute type 1 has an invalid length. [ 1269.249413][T28557] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6557'. [ 1269.389647][ T4540] device veth0_macvtap left promiscuous mode [ 1269.731963][T28576] netlink: 134260 bytes leftover after parsing attributes in process `syz.1.6562'. [ 1269.789044][T28574] netlink: 134260 bytes leftover after parsing attributes in process `syz.1.6562'. [ 1269.847196][ T4540] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1270.471316][ T4540] team0 (unregistering): Port device hsr_slave_0 removed [ 1270.612395][ T4540] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1270.703869][ T4540] team0 (unregistering): Port device team_slave_1 removed [ 1270.719543][T28600] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6567'. [ 1270.887830][ T4540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.991480][ T4540] team0 (unregistering): Port device bridge_slave_1 removed [ 1271.152300][T28593] delete_channel: no stack [ 1271.426123][ T4540] bond0 (unregistering): Released all slaves [ 1271.480421][T28580] netlink: 'syz.4.6563': attribute type 10 has an invalid length. [ 1271.609319][T28605] netlink: 'syz.3.6568': attribute type 12 has an invalid length. [ 1271.674605][T28605] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6568'. [ 1272.411550][T28631] netlink: 'syz.4.6576': attribute type 13 has an invalid length. [ 1272.444283][T28631] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.6576'. [ 1273.059026][T28655] netlink: 'syz.0.6582': attribute type 10 has an invalid length. [ 1273.118521][T28655] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6582'. [ 1273.139882][T28655] device bond0 entered promiscuous mode [ 1273.161552][T28655] device bond_slave_1 entered promiscuous mode [ 1273.236013][T28655] bridge0: port 3(bond0) entered blocking state [ 1273.287936][T28655] bridge0: port 3(bond0) entered disabled state [ 1273.432749][T28655] bridge0: port 3(bond0) entered blocking state [ 1273.440189][T28655] bridge0: port 3(bond0) entered forwarding state [ 1273.682916][T28651] netlink: 'syz.2.6581': attribute type 10 has an invalid length. [ 1273.775793][T28651] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1273.850790][T28661] delete_channel: no stack [ 1274.018379][T28672] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.6586'. [ 1274.458485][T28683] device syzkaller0 entered promiscuous mode [ 1274.464929][T28683] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1274.581897][T28666] delete_channel: no stack [ 1275.558233][T28699] netlink: 'syz.3.6595': attribute type 10 has an invalid length. [ 1275.592653][T28699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6595'. [ 1275.689193][T28699] batman_adv: batadv0: Adding interface: veth0_vlan [ 1275.709025][T28699] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.771831][T28699] batman_adv: batadv0: Interface activated: veth0_vlan [ 1275.942189][T28707] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.6598'. [ 1275.958206][T28707] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1276.213282][T28709] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1276.277017][T28709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6597'. [ 1276.840198][T28735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6608'. [ 1276.871790][T28738] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6607'. [ 1276.955458][T28740] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.6609'. [ 1278.132479][T28756] netlink: 'syz.2.6615': attribute type 13 has an invalid length. [ 1278.147465][T28756] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.6615'. [ 1278.205942][T28764] device vcan0 entered promiscuous mode [ 1278.211779][T28764] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1278.333759][T28767] netlink: 'syz.3.6618': attribute type 2 has an invalid length. [ 1278.413324][T28767] device 0 entered promiscuous mode [ 1278.805112][ T4540] wlan1: Trigger new scan to find an IBSS to join [ 1278.874591][T28786] netlink: 'syz.3.6622': attribute type 10 has an invalid length. [ 1278.892426][T28786] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.6622'. [ 1280.793009][T28851] netlink: 'syz.2.6639': attribute type 2 has an invalid length. [ 1280.807339][T28853] netlink: 'syz.2.6639': attribute type 2 has an invalid length. [ 1280.822544][T28851] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.6639'. [ 1280.839152][T28853] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.6639'. [ 1281.150040][T28869] netlink: 'syz.1.6644': attribute type 13 has an invalid length. [ 1281.174395][T28869] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.6644'. [ 1281.205180][T28870] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6645'. [ 1282.380647][T28911] netlink: 'syz.4.6656': attribute type 21 has an invalid length. [ 1282.423740][T28910] device wg2 entered promiscuous mode [ 1282.734786][T28933] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6660'. [ 1282.884762][ T9473] wlan1: Trigger new scan to find an IBSS to join [ 1283.148140][T28948] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.6663'. [ 1283.496343][T28958] netlink: 822 bytes leftover after parsing attributes in process `syz.0.6666'. [ 1283.823438][ T9480] wlan1: Creating new IBSS network, BSSID b6:82:b8:76:63:80 [ 1284.084372][T28980] netlink: 'syz.1.6671': attribute type 2 has an invalid length. [ 1284.110654][T28980] netlink: 'syz.1.6671': attribute type 8 has an invalid length. [ 1284.120435][T28980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6671'. [ 1284.713708][T29001] netlink: 'syz.1.6678': attribute type 15 has an invalid length. [ 1284.728803][T29001] netlink: 'syz.1.6678': attribute type 7 has an invalid length. [ 1284.745687][T29001] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6678'. [ 1285.242891][T29022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.268580][T29027] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 1286.311644][T29030] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.6687'. [ 1286.346815][T29033] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6688'. [ 1286.381841][T29043] netlink: 'syz.2.6689': attribute type 21 has an invalid length. [ 1286.860635][T29060] netlink: 'syz.1.6695': attribute type 5 has an invalid length. [ 1286.884917][T29060] netlink: 'syz.1.6695': attribute type 30 has an invalid length. [ 1287.221795][T29066] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6697'. [ 1287.818377][T29118] netlink: 'syz.2.6700': attribute type 21 has an invalid length. [ 1287.855703][T29118] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6700'. [ 1287.942380][T29120] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1288.033241][T29125] netlink: 'syz.1.6703': attribute type 3 has an invalid length. [ 1288.091209][T29123] netlink: 'syz.0.6702': attribute type 7 has an invalid length. [ 1288.104053][T29125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6703'. [ 1288.388819][T29136] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.6706'. [ 1288.754583][T29147] netlink: 63743 bytes leftover after parsing attributes in process `syz.1.6709'. [ 1288.824876][T29150] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1288.920161][T29135] can: request_module (can-proto-0) failed. [ 1289.082743][T29159] netlink: 763 bytes leftover after parsing attributes in process `syz.3.6712'. [ 1289.739875][T29091] failed while handling packet from 1:16384 [ 1289.859137][T29173] validate_nla: 1 callbacks suppressed [ 1289.859157][T29173] netlink: 'syz.4.6715': attribute type 1 has an invalid length. [ 1290.714906][T29206] netlink: 'syz.3.6725': attribute type 6 has an invalid length. [ 1291.583279][T29246] netlink: 'syz.0.6734': attribute type 21 has an invalid length. [ 1291.749901][T29250] __nla_validate_parse: 5 callbacks suppressed [ 1291.749924][T29250] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6737'. [ 1291.888243][T29253] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.6739'. [ 1292.012371][T14717] Bluetooth: hci1: command 0x0406 tx timeout [ 1292.787601][T29274] netlink: 'syz.4.6745': attribute type 1 has an invalid length. [ 1292.807075][T29274] netlink: 'syz.4.6745': attribute type 3 has an invalid length. [ 1292.815286][T29274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6745'. [ 1293.081190][T29255] netlink: 'syz.1.6738': attribute type 21 has an invalid length. [ 1293.090350][T29255] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6738'. [ 1293.393200][T29284] device syzkaller0 entered promiscuous mode [ 1293.529823][T29285] delete_channel: no stack [ 1293.669454][T29297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6751'. [ 1296.177991][T29308] netlink: 'syz.0.6754': attribute type 39 has an invalid length. [ 1296.604989][T29320] netlink: 'syz.0.6757': attribute type 4 has an invalid length. [ 1296.734679][T29320] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6757'. [ 1297.394381][T29311] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1297.441687][T29311] device syzkaller0 entered promiscuous mode [ 1297.453678][T29317] netlink: 'syz.2.6758': attribute type 10 has an invalid length. [ 1297.520343][T29317] device geneve1 entered promiscuous mode [ 1297.535547][T29317] team0: Port device geneve1 added [ 1298.119796][T29353] netlink: 'syz.2.6765': attribute type 1 has an invalid length. [ 1298.131627][T29353] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1298.149109][T29353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1300.161380][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.167792][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.279171][T29335] netlink: 'syz.0.6760': attribute type 21 has an invalid length. [ 1300.290034][T29335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6760'. [ 1300.300908][T29348] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1300.314698][T29348] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1300.344754][T29348] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1300.760001][T29379] netlink: 'syz.2.6773': attribute type 3 has an invalid length. [ 1300.785721][T29379] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6773'. [ 1300.846356][T29379] netlink: 'syz.2.6773': attribute type 21 has an invalid length. [ 1300.860992][T29379] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6773'. [ 1300.890070][T29379] netlink: 'syz.2.6773': attribute type 4 has an invalid length. [ 1300.952899][T29379] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6773'. [ 1301.967332][T29415] device syzkaller0 entered promiscuous mode [ 1305.972457][T29460] netlink: 'syz.4.6800': attribute type 3 has an invalid length. [ 1305.990683][T29460] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6800'. [ 1306.270642][T29473] netlink: 'syz.3.6803': attribute type 39 has an invalid length. [ 1306.455332][T29480] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.6806'. [ 1306.503322][T29480] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1306.544987][T29485] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6807'. [ 1307.377432][T29485] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1307.890544][T29535] netlink: 'syz.1.6820': attribute type 2 has an invalid length. [ 1307.921040][T29535] netlink: 'syz.1.6820': attribute type 8 has an invalid length. [ 1307.940722][T29535] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6820'. [ 1308.059717][T29542] netlink: 'syz.2.6822': attribute type 11 has an invalid length. [ 1308.083724][T29542] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6822'. [ 1308.143157][T29542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.829757][T29584] netlink: 'syz.1.6833': attribute type 10 has an invalid length. [ 1312.482523][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 1315.282273][T29619] Â: renamed from pim6reg1 [ 1315.303096][T29618] netlink: 'syz.1.6840': attribute type 2 has an invalid length. [ 1315.316724][T29618] netlink: 'syz.1.6840': attribute type 8 has an invalid length. [ 1315.329245][T29618] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6840'. [ 1315.789071][T29632] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6843'. [ 1315.836966][T29604] €Â0: renamed from pim6reg1 [ 1316.416690][T29646] netlink: 'syz.1.6847': attribute type 3 has an invalid length. [ 1316.434009][T29646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6847'. [ 1316.897206][T29650] netlink: 'syz.3.6849': attribute type 1 has an invalid length. [ 1316.944723][T29650] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6849'. [ 1317.909398][T29670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1317.916785][T29670] IPv6: NLM_F_CREATE should be set when creating new route [ 1317.924113][T29670] IPv6: NLM_F_CREATE should be set when creating new route [ 1317.931462][T29670] IPv6: NLM_F_CREATE should be set when creating new route [ 1318.341586][T29680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6857'. [ 1318.464683][T29677] netlink: 'syz.1.6857': attribute type 12 has an invalid length. [ 1318.524533][T29677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6857'. [ 1318.640257][T21819] tipc: Subscription rejected, illegal request [ 1318.671672][T29679] can: request_module (can-proto-0) failed. [ 1318.772484][T29692] netlink: 'syz.0.6859': attribute type 2 has an invalid length. [ 1318.782889][T29692] netlink: 'syz.0.6859': attribute type 8 has an invalid length. [ 1318.808740][T29692] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6859'. [ 1318.818240][T29694] netlink: 'syz.2.6860': attribute type 3 has an invalid length. [ 1318.818275][T29694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6860'. [ 1319.730544][T29715] netlink: 'syz.2.6866': attribute type 39 has an invalid length. [ 1319.739486][T29716] netlink: 'syz.2.6866': attribute type 39 has an invalid length. [ 1320.643590][T29740] netlink: 'syz.3.6872': attribute type 6 has an invalid length. [ 1320.676626][T29740] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6872'. [ 1322.671623][T29784] delete_channel: no stack [ 1323.983290][T29835] device wlan1 entered promiscuous mode [ 1324.266341][T29835] netlink: 'syz.1.6895': attribute type 3 has an invalid length. [ 1324.294187][T29835] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6895'. [ 1326.106535][T29858] netlink: 'syz.4.6902': attribute type 2 has an invalid length. [ 1326.114387][T29858] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6902'. [ 1326.188106][T29858] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.6902'. [ 1326.251207][T29867] netlink: 'syz.4.6902': attribute type 27 has an invalid length. [ 1326.300624][T29867] netlink: 'syz.4.6902': attribute type 4 has an invalid length. [ 1326.344799][T29867] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6902'. [ 1327.827529][T29902] netlink: 'syz.1.6914': attribute type 10 has an invalid length. [ 1327.866458][T29902] device hsr0 entered promiscuous mode [ 1327.890159][T29902] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1329.186896][T29942] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1329.305209][T29942] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1329.347604][T29945] netlink: 'syz.2.6926': attribute type 3 has an invalid length. [ 1329.386129][T29945] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.6926'. [ 1330.025945][T29971] netlink: 'syz.2.6933': attribute type 21 has an invalid length. [ 1330.055298][T29971] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1330.230357][T29984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6936'. [ 1330.547723][T29973] delete_channel: no stack [ 1330.596499][T29991] delete_channel: no stack [ 1330.690213][T29986] netlink: 92148 bytes leftover after parsing attributes in process `syz.2.6937'. [ 1331.407292][T30022] netlink: 'syz.1.6946': attribute type 3 has an invalid length. [ 1331.435588][T30022] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6946'. [ 1331.475869][T30024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1331.637968][T30027] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6948'. [ 1332.513204][T30061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6961'. [ 1332.711219][T30066] -1: renamed from syzkaller0 [ 1332.871237][T30074] netlink: 'syz.4.6964': attribute type 46 has an invalid length. [ 1332.917555][T30074] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6964'. [ 1333.340643][T30104] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6973'. [ 1333.603906][T30115] netlink: 'syz.3.6977': attribute type 17 has an invalid length. [ 1333.633721][T30115] netlink: 'syz.3.6977': attribute type 16 has an invalid length. [ 1333.673337][T30115] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6977'. [ 1333.775101][T30122] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6978'. [ 1333.909120][T30124] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6980'. [ 1333.975551][T30128] netlink: 'syz.4.6979': attribute type 23 has an invalid length. [ 1334.190637][T30137] netlink: 'syz.0.6982': attribute type 29 has an invalid length. [ 1334.230363][T30137] netlink: 'syz.0.6982': attribute type 29 has an invalid length. [ 1334.412679][T30139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6984'. [ 1334.474046][T30139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6984'. [ 1335.156248][T30166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1337.052389][T30214] __nla_validate_parse: 3 callbacks suppressed [ 1337.052411][T30214] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7004'. [ 1337.210701][T30214] device hsr_slave_0 left promiscuous mode [ 1337.228454][T30214] device hsr_slave_1 left promiscuous mode [ 1337.661251][T30236] netlink: 'syz.2.7011': attribute type 11 has an invalid length. [ 1337.705866][T30236] netlink: 'syz.2.7011': attribute type 11 has an invalid length. [ 1337.735048][T30238] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7012'. [ 1337.744175][T30238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1337.800802][T30236] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7011'. [ 1338.379841][T30256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7015'. [ 1338.798740][T30269] netlink: 'syz.4.7021': attribute type 21 has an invalid length. [ 1340.065893][T30304] netlink: 'syz.0.7027': attribute type 33 has an invalid length. [ 1340.110295][T30304] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7027'. [ 1341.907412][T30337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7036'. [ 1342.008055][T30341] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7040'. [ 1342.079560][T30341] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1342.754534][T30368] netlink: 'syz.2.7046': attribute type 3 has an invalid length. [ 1342.814837][T30368] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7046'. [ 1345.816624][T30400] device pim6reg1 entered promiscuous mode [ 1346.375780][T30425] sctp: [Deprecated]: syz.3.7064 (pid 30425) Use of int in max_burst socket option deprecated. [ 1346.375780][T30425] Use struct sctp_assoc_value instead [ 1346.472571][T30431] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7065'. [ 1346.532718][T30435] device wlan1 left promiscuous mode [ 1346.570126][T30435] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7066'. [ 1346.974702][T30447] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7069'. [ 1347.207438][T30452] netlink: 'syz.2.7070': attribute type 2 has an invalid length. [ 1347.560040][T30465] netlink: 'syz.2.7075': attribute type 8 has an invalid length. [ 1348.119032][T30477] delete_channel: no stack [ 1348.292393][T30504] netlink: 'syz.2.7087': attribute type 10 has an invalid length. [ 1349.402328][T30533] netlink: 'syz.4.7097': attribute type 2 has an invalid length. [ 1349.807175][T30559] netlink: 'syz.3.7105': attribute type 3 has an invalid length. [ 1349.824022][T30558] netlink: 'syz.2.7104': attribute type 1 has an invalid length. [ 1349.853080][T30559] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7105'. [ 1349.875367][T30558] netlink: 'syz.2.7104': attribute type 4 has an invalid length. [ 1349.899029][T30558] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7104'. [ 1350.803337][T30573] tap0: tun_chr_ioctl cmd 1074025677 [ 1350.823962][T30573] tap0: linktype set to 805 [ 1353.117804][T14717] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1353.414102][T30611] netlink: 'syz.0.7115': attribute type 29 has an invalid length. [ 1353.446870][T14717] Bluetooth: hci5: command 0x0406 tx timeout [ 1353.467988][T30612] netlink: 'syz.0.7115': attribute type 2 has an invalid length. [ 1354.067867][T30604] device syzkaller0 entered promiscuous mode [ 1354.075792][T30611] netlink: 'syz.0.7115': attribute type 29 has an invalid length. [ 1354.578235][T30632] netlink: 'syz.4.7123': attribute type 21 has an invalid length. [ 1354.698156][T30638] netlink: 'syz.1.7124': attribute type 10 has an invalid length. [ 1354.726753][T30638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7124'. [ 1354.754861][T30638] netlink: 'syz.1.7124': attribute type 10 has an invalid length. [ 1354.774685][T30638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7124'. [ 1354.880354][T30646] netlink: 'syz.3.7126': attribute type 29 has an invalid length. [ 1354.960668][T30646] netlink: 'syz.3.7126': attribute type 29 has an invalid length. [ 1355.194951][T14717] Bluetooth: hci3: command 0x2016 tx timeout [ 1356.200077][T30682] netlink: 'syz.0.7135': attribute type 11 has an invalid length. [ 1356.212471][T30682] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7135'. [ 1356.263318][T30685] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7137'. [ 1356.525905][T30683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7136'. [ 1358.942720][T30727] FAULT_INJECTION: forcing a failure. [ 1358.942720][T30727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.986893][T30727] CPU: 1 PID: 30727 Comm: syz.2.7147 Not tainted syzkaller #0 [ 1358.994438][T30727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1359.004541][T30727] Call Trace: [ 1359.007869][T30727] [ 1359.010841][T30727] dump_stack_lvl+0x188/0x24e [ 1359.015579][T30727] ? show_regs_print_info+0x12/0x12 [ 1359.020833][T30727] ? load_image+0x410/0x410 [ 1359.025398][T30727] ? __lock_acquire+0x7bd0/0x7bd0 [ 1359.030489][T30727] should_fail_ex+0x390/0x4c0 [ 1359.035219][T30727] _copy_from_user+0x2c/0x170 [ 1359.039955][T30727] __sys_bpf+0x2ea/0x780 [ 1359.044261][T30727] ? bpf_link_show_fdinfo+0x380/0x380 [ 1359.049713][T30727] ? lock_chain_count+0x20/0x20 [ 1359.054628][T30727] __x64_sys_bpf+0x78/0x90 [ 1359.059130][T30727] do_syscall_64+0x4c/0xa0 [ 1359.063592][T30727] ? clear_bhb_loop+0x60/0xb0 [ 1359.068312][T30727] ? clear_bhb_loop+0x60/0xb0 [ 1359.073044][T30727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1359.079005][T30727] RIP: 0033:0x7f4aaf59ce59 [ 1359.083472][T30727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.103133][T30727] RSP: 002b:00007f4aad7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1359.111602][T30727] RAX: ffffffffffffffda RBX: 00007f4aaf815fa0 RCX: 00007f4aaf59ce59 [ 1359.119628][T30727] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 1359.127687][T30727] RBP: 00007f4aad7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.135712][T30727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.143736][T30727] R13: 00007f4aaf816038 R14: 00007f4aaf815fa0 R15: 00007ffc746196e8 [ 1359.151781][T30727] [ 1360.814212][T30760] IPv6: pim6reg1: Disabled Multicast RS [ 1361.011174][T30768] netlink: 'syz.3.7160': attribute type 12 has an invalid length. [ 1361.042554][T30768] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7160'. [ 1361.251393][T30779] FAULT_INJECTION: forcing a failure. [ 1361.251393][T30779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.264744][T30779] CPU: 1 PID: 30779 Comm: syz.2.7162 Not tainted syzkaller #0 [ 1361.272713][T30779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1361.282841][T30779] Call Trace: [ 1361.286187][T30779] [ 1361.289188][T30779] dump_stack_lvl+0x188/0x24e [ 1361.293959][T30779] ? show_regs_print_info+0x12/0x12 [ 1361.299240][T30779] ? load_image+0x410/0x410 [ 1361.303871][T30779] should_fail_ex+0x390/0x4c0 [ 1361.308644][T30779] strncpy_from_user+0x32/0x340 [ 1361.313575][T30779] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1361.320267][T30779] strncpy_from_user_nofault+0x6d/0x140 [ 1361.325915][T30779] bpf_probe_read_user_str+0x26/0x70 [ 1361.331303][T30779] bpf_prog_6ac03d064e4fcc51+0x37/0x5f [ 1361.336834][T30779] __bpf_prog_test_run_raw_tp+0x364/0x430 [ 1361.342616][T30779] ? __bpf_prog_test_run_raw_tp+0xc7/0x430 [ 1361.348484][T30779] ? bpf_prog_test_run_raw_tp+0x680/0x680 [ 1361.354257][T30779] ? __lock_acquire+0x7bd0/0x7bd0 [ 1361.359357][T30779] bpf_prog_test_run_raw_tp+0x45a/0x680 [ 1361.364969][T30779] ? trace_bpf_test_finish+0x220/0x220 [ 1361.370502][T30779] ? trace_bpf_test_finish+0x220/0x220 [ 1361.376019][T30779] bpf_prog_test_run+0x31c/0x390 [ 1361.381018][T30779] __sys_bpf+0x62b/0x780 [ 1361.385322][T30779] ? bpf_link_show_fdinfo+0x380/0x380 [ 1361.390787][T30779] ? lock_chain_count+0x20/0x20 [ 1361.395719][T30779] __x64_sys_bpf+0x78/0x90 [ 1361.400189][T30779] do_syscall_64+0x4c/0xa0 [ 1361.404650][T30779] ? clear_bhb_loop+0x60/0xb0 [ 1361.409364][T30779] ? clear_bhb_loop+0x60/0xb0 [ 1361.414107][T30779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.420052][T30779] RIP: 0033:0x7f4aaf59ce59 [ 1361.424523][T30779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.444186][T30779] RSP: 002b:00007f4aad7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1361.452656][T30779] RAX: ffffffffffffffda RBX: 00007f4aaf816090 RCX: 00007f4aaf59ce59 [ 1361.460667][T30779] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 1361.468687][T30779] RBP: 00007f4aad7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.476716][T30779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.484746][T30779] R13: 00007f4aaf816128 R14: 00007f4aaf816090 R15: 00007ffc746196e8 [ 1361.492811][T30779] [ 1361.597809][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.604244][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.056565][T30794] FAULT_INJECTION: forcing a failure. [ 1362.056565][T30794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1362.070198][T30794] CPU: 0 PID: 30794 Comm: syz.1.7167 Not tainted syzkaller #0 [ 1362.077722][T30794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1362.087826][T30794] Call Trace: [ 1362.091151][T30794] [ 1362.094134][T30794] dump_stack_lvl+0x188/0x24e [ 1362.098960][T30794] ? show_regs_print_info+0x12/0x12 [ 1362.104213][T30794] ? load_image+0x410/0x410 [ 1362.108788][T30794] should_fail_ex+0x390/0x4c0 [ 1362.113543][T30794] strncpy_from_user+0x32/0x340 [ 1362.118610][T30794] ? verify_lock_unused+0x140/0x140 [ 1362.123879][T30794] strncpy_from_user_nofault+0x6d/0x140 [ 1362.129485][T30794] bpf_probe_read_user_str+0x26/0x70 [ 1362.134846][T30794] bpf_prog_6ac03d064e4fcc51+0x37/0x5f [ 1362.140356][T30794] __bpf_prog_test_run_raw_tp+0x1ed/0x430 [ 1362.146142][T30794] ? __bpf_prog_test_run_raw_tp+0xc7/0x430 [ 1362.152017][T30794] ? bpf_prog_test_run_raw_tp+0x680/0x680 [ 1362.157806][T30794] ? __lock_acquire+0x7bd0/0x7bd0 [ 1362.162902][T30794] bpf_prog_test_run_raw_tp+0x45a/0x680 [ 1362.168519][T30794] ? trace_bpf_test_finish+0x220/0x220 [ 1362.174055][T30794] ? trace_bpf_test_finish+0x220/0x220 [ 1362.179580][T30794] bpf_prog_test_run+0x31c/0x390 [ 1362.184583][T30794] __sys_bpf+0x62b/0x780 [ 1362.188888][T30794] ? bpf_link_show_fdinfo+0x380/0x380 [ 1362.194341][T30794] ? lock_chain_count+0x20/0x20 [ 1362.199261][T30794] __x64_sys_bpf+0x78/0x90 [ 1362.203739][T30794] do_syscall_64+0x4c/0xa0 [ 1362.208207][T30794] ? clear_bhb_loop+0x60/0xb0 [ 1362.212933][T30794] ? clear_bhb_loop+0x60/0xb0 [ 1362.217666][T30794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1362.223734][T30794] RIP: 0033:0x7fed07f9ce59 [ 1362.228235][T30794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.247899][T30794] RSP: 002b:00007fed08da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1362.256391][T30794] RAX: ffffffffffffffda RBX: 00007fed08215fa0 RCX: 00007fed07f9ce59 [ 1362.264421][T30794] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 1362.272444][T30794] RBP: 00007fed08da6090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.280466][T30794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.288488][T30794] R13: 00007fed08216038 R14: 00007fed08215fa0 R15: 00007ffc4ff7f598 [ 1362.296546][T30794] [ 1363.145582][T30816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7169'. [ 1363.212983][T30818] device syzkaller0 entered promiscuous mode [ 1363.232121][T30828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7174'. [ 1363.244129][T30829] netlink: 'syz.1.7174': attribute type 21 has an invalid length. [ 1377.272718][T30922] netlink: 'syz.4.7196': attribute type 10 has an invalid length. [ 1377.305563][T30922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.313273][T30922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.371964][T30922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.379328][T30922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.387144][T30922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.394506][T30922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.478576][T30922] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1377.665432][T30927] netlink: 15746 bytes leftover after parsing attributes in process `syz.3.7198'. [ 1377.815628][T30933] netlink: 'syz.2.7200': attribute type 10 has an invalid length. [ 1377.823664][T30933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7200'. [ 1377.917243][T30933] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1378.869968][T30960] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.7209'. [ 1378.971642][T30960] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.7209'. [ 1379.971139][T30992] device syzkaller0 entered promiscuous mode [ 1383.097813][T31033] netlink: 22 bytes leftover after parsing attributes in process `syz.4.7226'. [ 1383.246689][T31043] netlink: 'syz.3.7229': attribute type 22 has an invalid length. [ 1383.264704][T31043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7229'. [ 1383.593152][T31049] device syzkaller0 entered promiscuous mode [ 1384.029118][T31073] netlink: 'syz.1.7240': attribute type 1 has an invalid length. [ 1384.091442][T31073] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.7240'. [ 1385.903405][T31108] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7248'. [ 1387.649283][T31082] IPv6: Can't replace route, no match found [ 1387.658706][T31081] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.7241'. [ 1387.668940][T31093] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.7244'. [ 1387.683676][T31093] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.7244'. [ 1387.693765][T31093] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.7244'. [ 1387.703649][T31096] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7244'. [ 1387.715730][T31106] netlink: 'syz.1.7248': attribute type 20 has an invalid length. [ 1387.734222][T31108] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7248'. [ 1388.320393][T31130] device syzkaller0 entered promiscuous mode [ 1390.215695][T31158] netlink: 'syz.1.7263': attribute type 3 has an invalid length. [ 1390.224166][T31158] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7263'. [ 1392.290365][T31168] IPv6: Can't replace route, no match found [ 1392.818107][T31164] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.7264'. [ 1392.835092][T31183] netlink: 'syz.4.7270': attribute type 1 has an invalid length. [ 1392.864673][T31183] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7270'. [ 1392.896281][T31184] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.7269'. [ 1392.917977][T31183] netlink: 'syz.4.7270': attribute type 1 has an invalid length. [ 1392.990039][T31183] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7270'. [ 1393.262629][T31197] netlink: 'syz.0.7273': attribute type 21 has an invalid length. [ 1393.963755][T31211] device veth1_macvtap left promiscuous mode [ 1394.422698][T31223] netlink: 'syz.2.7279': attribute type 10 has an invalid length. [ 1394.443585][T31223] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7279'. [ 1394.464008][T31223] device bond0 entered promiscuous mode [ 1394.486228][T31223] device bond_slave_0 entered promiscuous mode [ 1394.526425][T31223] device bond_slave_1 entered promiscuous mode [ 1394.549350][T31223] device bridge_slave_1 entered promiscuous mode [ 1394.574607][T31223] bridge0: port 3(bond0) entered blocking state [ 1394.609023][T31223] bridge0: port 3(bond0) entered disabled state [ 1394.753599][T31223] bridge0: port 3(bond0) entered blocking state [ 1394.762354][T31223] bridge0: port 3(bond0) entered forwarding state [ 1394.824678][T31222] netlink: 'syz.3.7280': attribute type 1 has an invalid length. [ 1394.857093][T31222] netlink: 'syz.3.7280': attribute type 4 has an invalid length. [ 1394.904657][T31222] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7280'. [ 1395.948890][T31252] netlink: 'syz.4.7288': attribute type 3 has an invalid length. [ 1395.984464][T31252] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7288'. [ 1396.091930][T31250] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7288'. [ 1396.606574][T31275] netlink: 'syz.0.7295': attribute type 3 has an invalid length. [ 1396.632946][T31275] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7295'. [ 1396.748756][T31283] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.7298'. [ 1396.788977][T31284] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.7298'. [ 1397.341474][T31302] device syzkaller0 entered promiscuous mode [ 1400.601391][T31307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1400.614955][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1400.899876][T31332] netlink: 'syz.4.7309': attribute type 3 has an invalid length. [ 1400.944239][T31332] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7309'. [ 1401.481634][T31363] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1401.583402][T31370] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1401.677292][T31372] netlink: 'syz.4.7319': attribute type 21 has an invalid length. [ 1401.714520][T31372] netlink: 'syz.4.7319': attribute type 15 has an invalid length. [ 1402.334314][T31378] device bridge_slave_1 left promiscuous mode [ 1402.368540][T31378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.594348][T31389] sctp: [Deprecated]: syz.4.7324 (pid 31389) Use of int in maxseg socket option. [ 1402.594348][T31389] Use struct sctp_assoc_value instead [ 1403.040999][T31378] device ÿÿÿÿÿÿ left promiscuous mode [ 1403.058624][T31378] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 1403.246703][T31378] team0: Port device bridge0 removed [ 1403.251770][T31399] netlink: 'syz.2.7326': attribute type 11 has an invalid length. [ 1403.268558][T31399] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.7326'. [ 1403.581306][T31398] device wg2 left promiscuous mode [ 1403.643439][T31399] device wg2 entered promiscuous mode [ 1403.778185][T31406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7327'. [ 1403.875176][T31406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7327'. [ 1404.066482][T31408] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7327'. [ 1404.104988][T31403] netlink: 'syz.4.7327': attribute type 21 has an invalid length. [ 1404.120620][T31403] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7327'. [ 1404.285150][T31403] netlink: 'syz.4.7327': attribute type 4 has an invalid length. [ 1404.293314][T31403] netlink: 'syz.4.7327': attribute type 5 has an invalid length. [ 1404.376561][T31403] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7327'. [ 1404.452247][T31414] netlink: 'syz.2.7330': attribute type 21 has an invalid length. [ 1404.479027][T31414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1404.486563][T31414] IPv6: NLM_F_CREATE should be set when creating new route [ 1404.494074][T31414] IPv6: NLM_F_CREATE should be set when creating new route [ 1404.501503][T31414] IPv6: NLM_F_CREATE should be set when creating new route [ 1405.535804][T31432] netlink: 'syz.2.7335': attribute type 29 has an invalid length. [ 1405.731827][T31432] netlink: 'syz.2.7335': attribute type 29 has an invalid length. [ 1407.036687][T31446] netlink: 15766 bytes leftover after parsing attributes in process `syz.4.7339'. [ 1407.306395][T31456] IPv6: Can't replace route, no match found [ 1407.375402][T31456] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1409.447830][T31494] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.7350'. [ 1409.544708][T31494] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.7350'. [ 1409.645052][T31494] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.7350'. [ 1409.774751][T31496] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7350'. [ 1410.048522][T31507] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1410.112517][T31507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1410.431597][T31519] netlink: 'syz.2.7359': attribute type 39 has an invalid length. [ 1410.540889][T31522] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7360'. [ 1410.578196][T31529] bridge0: port 3(bond0) entered disabled state [ 1410.584834][T31529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.592383][T31529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.707213][T31534] netlink: 'syz.3.7363': attribute type 29 has an invalid length. [ 1410.712795][T31522] bridge0: port 3(bond0) entered disabled state [ 1410.772704][T31522] device bridge_slave_1 left promiscuous mode [ 1410.783625][T31522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.858536][T31522] device bridge_slave_0 left promiscuous mode [ 1410.868328][T31522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.807126][T31534] netlink: 'syz.3.7363': attribute type 29 has an invalid length. [ 1411.887269][T31548] device virt_wifi0 entered promiscuous mode [ 1413.082797][T31576] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.7372'. [ 1413.111679][T31576] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.7372'. [ 1413.153812][T31576] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.7372'. [ 1413.221745][T31577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7372'. [ 1415.912809][T31592] netlink: 'syz.1.7374': attribute type 12 has an invalid length. [ 1415.955263][T31592] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7374'. [ 1416.085654][T31601] syz.4.7377[31601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1416.087731][T31601] syz.4.7377[31601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1416.373416][T31609] netlink: 'syz.4.7377': attribute type 1 has an invalid length. [ 1416.489493][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1416.508477][T31609] netlink: 'syz.4.7377': attribute type 3 has an invalid length. [ 1416.632428][T31609] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7377'. [ 1417.017927][T31629] netlink: 'syz.1.7388': attribute type 2 has an invalid length. [ 1417.044466][T31629] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7388'. [ 1417.109046][T31630] netlink: 'syz.0.7387': attribute type 2 has an invalid length. [ 1417.153060][T31630] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.7387'. [ 1417.976038][T31652] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.7394'. [ 1419.313304][T31683] FAULT_INJECTION: forcing a failure. [ 1419.313304][T31683] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.404488][T31683] CPU: 1 PID: 31683 Comm: syz.0.7401 Not tainted syzkaller #0 [ 1419.412042][T31683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1419.422149][T31683] Call Trace: [ 1419.425470][T31683] [ 1419.428444][T31683] dump_stack_lvl+0x188/0x24e [ 1419.433179][T31683] ? show_regs_print_info+0x12/0x12 [ 1419.438432][T31683] ? load_image+0x410/0x410 [ 1419.443004][T31683] ? __might_sleep+0xd0/0xd0 [ 1419.447655][T31683] ? __lock_acquire+0x7bd0/0x7bd0 [ 1419.452769][T31683] ? aa_file_perm+0x3ea/0xf00 [ 1419.457506][T31683] ? verify_lock_unused+0x140/0x140 [ 1419.462768][T31683] should_fail_ex+0x390/0x4c0 [ 1419.467505][T31683] should_failslab+0x5/0x20 [ 1419.472093][T31683] slab_pre_alloc_hook+0x59/0x300 [ 1419.477175][T31683] ? aa_path_link+0x8a0/0x8a0 [ 1419.481914][T31683] kmem_cache_alloc_node+0x5a/0x310 [ 1419.487201][T31683] ? __alloc_skb+0xf9/0x7d0 [ 1419.491772][T31683] __alloc_skb+0xf9/0x7d0 [ 1419.496158][T31683] ppp_write+0xb0/0x3e0 [ 1419.500368][T31683] ? vfs_write+0x2c7/0x9a0 [ 1419.504843][T31683] ? ppp_read+0x860/0x860 [ 1419.509250][T31683] vfs_write+0x2dc/0x9a0 [ 1419.513566][T31683] ? file_end_write+0x250/0x250 [ 1419.518497][T31683] ? __fget_files+0x28/0x460 [ 1419.523150][T31683] ? __fget_files+0x3fc/0x460 [ 1419.527903][T31683] ? __fdget_pos+0x1d4/0x360 [ 1419.532554][T31683] ? ksys_write+0x70/0x260 [ 1419.537037][T31683] ksys_write+0x14d/0x260 [ 1419.541432][T31683] ? __ia32_sys_read+0x80/0x80 [ 1419.546265][T31683] ? lockdep_hardirqs_on+0x94/0x140 [ 1419.551525][T31683] do_syscall_64+0x4c/0xa0 [ 1419.555996][T31683] ? clear_bhb_loop+0x60/0xb0 [ 1419.560723][T31683] ? clear_bhb_loop+0x60/0xb0 [ 1419.565451][T31683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1419.571413][T31683] RIP: 0033:0x7fb51c79ce59 [ 1419.575882][T31683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.595718][T31683] RSP: 002b:00007fb51d6e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1419.604278][T31683] RAX: ffffffffffffffda RBX: 00007fb51ca15fa0 RCX: 00007fb51c79ce59 [ 1419.612297][T31683] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000004 [ 1419.620319][T31683] RBP: 00007fb51d6e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.628343][T31683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.636390][T31683] R13: 00007fb51ca16038 R14: 00007fb51ca15fa0 R15: 00007ffd2250aec8 [ 1419.644436][T31683] [ 1419.967190][T31697] netlink: 'syz.1.7405': attribute type 10 has an invalid length. [ 1422.427585][T31697] team0 (unregistering): Port device team_slave_0 removed [ 1422.475052][T31697] team0 (unregistering): Port device team_slave_1 removed [ 1422.499493][T31698] netlink: 'syz.1.7405': attribute type 25 has an invalid length. [ 1422.516217][T31698] netlink: 'syz.1.7405': attribute type 25 has an invalid length. [ 1422.682294][T31707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7409'. [ 1422.796253][T31717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7411'. [ 1422.827356][T31717] netlink: 'syz.0.7411': attribute type 39 has an invalid length. [ 1422.981807][T31728] netlink: 'syz.2.7415': attribute type 2 has an invalid length. [ 1423.019250][T31728] device 0 entered promiscuous mode [ 1423.037115][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.043491][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.016412][T31756] netlink: 'syz.4.7426': attribute type 10 has an invalid length. [ 1424.053488][T31756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.060906][T31756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.463147][T31770] netlink: 'syz.0.7432': attribute type 17 has an invalid length. [ 1424.483840][T31770] netlink: 160 bytes leftover after parsing attributes in process `syz.0.7432'. [ 1424.963503][T31787] FAULT_INJECTION: forcing a failure. [ 1424.963503][T31787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.004477][T31787] CPU: 0 PID: 31787 Comm: syz.2.7435 Not tainted syzkaller #0 [ 1425.012027][T31787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1425.022127][T31787] Call Trace: [ 1425.025458][T31787] [ 1425.028428][T31787] dump_stack_lvl+0x188/0x24e [ 1425.033189][T31787] ? show_regs_print_info+0x12/0x12 [ 1425.038450][T31787] ? load_image+0x410/0x410 [ 1425.043015][T31787] ? __lock_acquire+0x7bd0/0x7bd0 [ 1425.048112][T31787] should_fail_ex+0x390/0x4c0 [ 1425.052850][T31787] _copy_from_user+0x2c/0x170 [ 1425.057589][T31787] ppp_write+0x18b/0x3e0 [ 1425.061892][T31787] ? ppp_read+0x860/0x860 [ 1425.066283][T31787] vfs_write+0x2dc/0x9a0 [ 1425.070592][T31787] ? file_end_write+0x250/0x250 [ 1425.075501][T31787] ? __fget_files+0x28/0x460 [ 1425.080150][T31787] ? __fget_files+0x3fc/0x460 [ 1425.084907][T31787] ? __fdget_pos+0x1d4/0x360 [ 1425.089551][T31787] ? ksys_write+0x70/0x260 [ 1425.094031][T31787] ksys_write+0x14d/0x260 [ 1425.098448][T31787] ? __ia32_sys_read+0x80/0x80 [ 1425.103294][T31787] ? lockdep_hardirqs_on+0x94/0x140 [ 1425.108554][T31787] do_syscall_64+0x4c/0xa0 [ 1425.113024][T31787] ? clear_bhb_loop+0x60/0xb0 [ 1425.117783][T31787] ? clear_bhb_loop+0x60/0xb0 [ 1425.122513][T31787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1425.128459][T31787] RIP: 0033:0x7f4aaf59ce59 [ 1425.132916][T31787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.152582][T31787] RSP: 002b:00007f4aad7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1425.161058][T31787] RAX: ffffffffffffffda RBX: 00007f4aaf815fa0 RCX: 00007f4aaf59ce59 [ 1425.169079][T31787] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000004 [ 1425.177105][T31787] RBP: 00007f4aad7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.185129][T31787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.193248][T31787] R13: 00007f4aaf816038 R14: 00007f4aaf815fa0 R15: 00007ffc746196e8 [ 1425.201291][T31787] [ 1426.637731][T31822] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.7445'. [ 1426.657811][T31822] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1426.993968][T31839] device sit0 left promiscuous mode [ 1427.792249][T31883] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.7464'. [ 1427.833179][T31883] netlink: zone id is out of range [ 1427.858162][T31883] netlink: zone id is out of range [ 1427.875350][T31887] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7463'. [ 1427.896366][T31883] netlink: zone id is out of range [ 1427.916655][T31883] netlink: zone id is out of range [ 1427.950232][T31883] netlink: zone id is out of range [ 1427.971356][T31883] netlink: zone id is out of range [ 1427.993687][T31883] netlink: zone id is out of range [ 1428.018367][T31883] netlink: zone id is out of range [ 1428.039553][T31883] netlink: get zone limit has 8 unknown bytes [ 1428.791395][T31893] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7465'. [ 1430.367079][T31930] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.7478'. [ 1430.778285][T31951] netlink: 'syz.1.7485': attribute type 2 has an invalid length. [ 1430.799889][T31951] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1431.008951][T31953] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1431.045091][T31951] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1433.583138][T31953] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1433.613290][T31953] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1433.645671][T31953] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1433.979114][T31973] netlink: 'syz.1.7491': attribute type 3 has an invalid length. [ 1433.988163][T31973] netlink: 'syz.1.7491': attribute type 1 has an invalid length. [ 1434.102603][T31979] delete_channel: no stack [ 1434.126889][T31979] delete_channel: no stack [ 1434.692476][T31996] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.7497'. [ 1434.772341][T31997] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7496'. [ 1435.504662][T32018] netlink: 'syz.2.7503': attribute type 10 has an invalid length. [ 1436.074945][T32033] device syzkaller0 entered promiscuous mode [ 1436.573982][T32060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7513'. [ 1440.042194][T32084] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7517'. [ 1440.101285][T32084] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1440.214802][T32084] net_ratelimit: 1 callbacks suppressed [ 1440.214820][T32084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1440.975847][T32120] netlink: 'syz.4.7529': attribute type 2 has an invalid length. [ 1441.143468][T32120] device 0 entered promiscuous mode [ 1441.557640][T32142] netlink: 'syz.2.7534': attribute type 27 has an invalid length. [ 1441.576619][T32143] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7533'. [ 1441.603884][T32143] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7533'. [ 1441.643703][T32143] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7533'. [ 1442.623764][T32175] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7543'. [ 1442.674621][T32175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1444.727324][T32189] netlink: 'syz.1.7546': attribute type 10 has an invalid length. [ 1444.737824][T32189] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7546'. [ 1446.392260][T32218] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1446.423987][T32218] device syzkaller0 entered promiscuous mode [ 1446.489277][T32228] netlink: 'syz.2.7558': attribute type 21 has an invalid length. [ 1449.918853][T32240] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7562'. [ 1449.933553][T32243] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7562'. [ 1450.183970][T32262] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7567'. [ 1450.290248][T32264] device syzkaller0 entered promiscuous mode [ 1452.581019][T32273] netlink: 'syz.1.7571': attribute type 10 has an invalid length. [ 1452.589019][T32273] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1452.614779][T32275] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.7571'. [ 1456.324910][T32351] delete_channel: no stack [ 1456.920761][T32381] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.7601'. [ 1456.930324][T32381] openvswitch: netlink: Flow actions attr not present in new flow. [ 1457.860334][T32402] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7605'. [ 1458.070727][T32393] netlink: 'syz.2.7602': attribute type 21 has an invalid length. [ 1458.109594][T32393] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7602'. [ 1459.085001][T32450] netlink: 'syz.4.7615': attribute type 3 has an invalid length. [ 1459.124630][T32450] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7615'. [ 1459.858571][T32461] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7618'. [ 1460.180432][T32472] wlan1: mtu greater than device maximum [ 1460.275144][T32480] netlink: 'syz.0.7625': attribute type 2 has an invalid length. [ 1460.300665][T32480] netlink: 'syz.0.7625': attribute type 8 has an invalid length. [ 1460.314615][T32480] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7625'. [ 1460.597659][T32493] netlink: 'syz.0.7629': attribute type 3 has an invalid length. [ 1460.625361][T32493] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7629'. [ 1461.101598][T32517] netlink: 'syz.1.7636': attribute type 49 has an invalid length. [ 1461.251081][T32516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7637'. [ 1461.341498][T32528] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.7641'. [ 1461.382459][T32529] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.7641'. [ 1462.047090][T32540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7644'. [ 1462.616823][T32576] netlink: 'syz.2.7654': attribute type 29 has an invalid length. [ 1462.829795][T32576] netlink: 'syz.2.7654': attribute type 29 has an invalid length. [ 1462.931252][T32575] netlink: 'syz.2.7654': attribute type 29 has an invalid length. [ 1463.161972][T32583] -1: renamed from syzkaller0 [ 1463.621587][T32596] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7660'. [ 1463.645688][T32596] netlink: zone id is out of range [ 1463.651102][T32596] netlink: zone id is out of range [ 1463.681391][T32600] netlink: 'syz.2.7662': attribute type 21 has an invalid length. [ 1463.699670][T32600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7662'. [ 1463.812313][T32599] device syzkaller0 entered promiscuous mode [ 1463.888636][T32599] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7661'. [ 1463.901857][T32612] netlink: 'syz.1.7665': attribute type 1 has an invalid length. [ 1463.922358][T32599] netlink: zone id is out of range [ 1463.935360][T32612] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1463.954679][T32599] netlink: zone id is out of range [ 1463.972423][T32599] netlink: zone id is out of range [ 1463.983716][T32599] netlink: zone id is out of range [ 1464.000578][T32599] netlink: zone id is out of range [ 1464.024856][T32599] netlink: zone id is out of range [ 1464.057040][T32599] netlink: get zone limit has 8 unknown bytes [ 1465.462997][T32676] netlink: 'syz.2.7670': attribute type 11 has an invalid length. [ 1465.482729][T32676] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7670'. [ 1465.576837][T32686] netlink: 'syz.2.7670': attribute type 11 has an invalid length. [ 1465.601446][T32686] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7670'. [ 1465.876071][T32698] netlink: 'syz.1.7674': attribute type 46 has an invalid length. [ 1466.143538][T32675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1466.384001][T32701] netlink: 'syz.0.7675': attribute type 30 has an invalid length. [ 1466.405096][T32701] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7675'. [ 1468.210827][T32681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7670'. [ 1468.223976][T32690] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1468.233951][T32693] netlink: 'syz.1.7674': attribute type 21 has an invalid length. [ 1468.244525][T32693] netlink: 'syz.1.7674': attribute type 6 has an invalid length. [ 1468.252452][T32693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7674'. [ 1468.262660][T32695] netlink: 'syz.1.7674': attribute type 17 has an invalid length. [ 1468.271896][T32698] netlink: 'syz.1.7674': attribute type 46 has an invalid length. [ 1468.275256][T32690] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1468.376836][T32690] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1469.564091][T32739] netlink: 'syz.2.7684': attribute type 39 has an invalid length. [ 1470.493162][T32753] netlink: 'syz.3.7689': attribute type 9 has an invalid length. [ 1470.558498][T32753] netlink: 399 bytes leftover after parsing attributes in process `syz.3.7689'. [ 1470.649007][T32757] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.7689'. [ 1471.601193][T32766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7692'. [ 1473.893194][ T354] netlink: 'syz.0.7704': attribute type 10 has an invalid length. [ 1473.959972][ T354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7704'. [ 1474.012312][ T354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1474.117652][ T359] netlink: 'syz.3.7707': attribute type 21 has an invalid length. [ 1474.130626][ T359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7707'. [ 1474.151342][ T359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7707'. [ 1474.450476][ T364] netlink: 'syz.1.7709': attribute type 5 has an invalid length. [ 1474.511510][ T364] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7709'. [ 1474.965000][ T378] netlink: 'syz.2.7714': attribute type 1 has an invalid length. [ 1474.990203][ T378] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.7714'. [ 1475.465620][ T386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7715'. [ 1476.988898][ T442] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.7731'. [ 1477.078095][ T445] netlink: 'syz.3.7731': attribute type 1 has an invalid length. [ 1477.196436][ T445] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.7731'. [ 1477.251928][ T444] netlink: 'syz.0.7732': attribute type 153 has an invalid length. [ 1477.301094][ T444] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.7732'. [ 1478.759059][ T473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7738'. [ 1479.003748][ T473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7738'. [ 1479.033740][ T474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7738'. [ 1479.549523][ T485] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7741'. [ 1480.306914][ T506] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.7742'. [ 1480.405413][ T506] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1480.975339][ T525] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 1481.024306][ T529] netlink: 'syz.4.7752': attribute type 10 has an invalid length. [ 1481.064712][ T525] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 1481.184813][ T525] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 1481.229052][ T525] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 1481.274051][ T525] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 1481.323200][ T525] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 1481.370864][ T525] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 1481.457171][ T516] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.7748'. [ 1481.694244][ T538] netlink: 'syz.3.7753': attribute type 19 has an invalid length. [ 1481.806272][ T538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7753'. [ 1483.559113][ T573] netlink: 'syz.2.7762': attribute type 2 has an invalid length. [ 1483.584068][ T573] netlink: 'syz.2.7762': attribute type 1 has an invalid length. [ 1484.508914][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.515542][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.911333][ T560] netlink: 'syz.0.7757': attribute type 10 has an invalid length. [ 1484.934680][ T560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7757'. [ 1484.946629][ T560] device team0 entered promiscuous mode [ 1484.952273][ T560] device team_slave_0 entered promiscuous mode [ 1484.963301][ T560] device team_slave_1 entered promiscuous mode [ 1484.972085][ T560] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1485.056230][ T573] netlink: 'syz.2.7762': attribute type 16 has an invalid length. [ 1485.064221][ T573] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7762'. [ 1485.115118][ T576] netlink: 'syz.4.7765': attribute type 3 has an invalid length. [ 1485.151405][ T580] netlink: 'syz.1.7763': attribute type 29 has an invalid length. [ 1485.166427][ T576] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7765'. [ 1485.183384][ T580] netlink: 'syz.1.7763': attribute type 29 has an invalid length. [ 1485.264983][ T580] netlink: 'syz.1.7763': attribute type 10 has an invalid length. [ 1485.432417][ T588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7768'. [ 1486.330759][ T596] device syzkaller0 entered promiscuous mode [ 1486.338531][ T607] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.7772'. [ 1486.595259][ T627] validate_nla: 1 callbacks suppressed [ 1486.595297][ T627] netlink: 'syz.1.7776': attribute type 2 has an invalid length. [ 1490.688435][ T625] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7776'. [ 1490.708390][ T627] device 0 entered promiscuous mode [ 1491.411257][ T651] device syzkaller0 entered promiscuous mode [ 1491.517344][ C0] [ 1491.517356][ C0] ================================ [ 1491.517364][ C0] WARNING: inconsistent lock state [ 1491.517384][ C0] syzkaller #0 Not tainted [ 1491.517397][ C0] -------------------------------- [ 1491.517403][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1491.517413][ C0] syz.3.7784/658 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1491.517437][ C0] ffff888058eb38f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 1491.517613][ C0] {INITIAL USE} state was registered at: [ 1491.517622][ C0] lock_acquire+0x1bb/0x4a0 [ 1491.517665][ C0] _raw_spin_lock+0x2a/0x40 [ 1491.517732][ C0] htab_lock_bucket+0x179/0x2f0 [ 1491.517756][ C0] htab_lru_map_update_elem+0x2eb/0xe60 [ 1491.517781][ C0] bpf_map_update_value+0x59d/0x670 [ 1491.517855][ C0] generic_map_update_batch+0x52e/0x7f0 [ 1491.517883][ C0] bpf_map_do_batch+0x475/0x5f0 [ 1491.517914][ C0] __sys_bpf+0x6f7/0x780 [ 1491.517942][ C0] __x64_sys_bpf+0x78/0x90 [ 1491.517969][ C0] do_syscall_64+0x4c/0xa0 [ 1491.517997][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1491.518065][ C0] irq event stamp: 3470 [ 1491.518074][ C0] hardirqs last enabled at (3469): [] __local_bh_enable_ip+0x136/0x1c0 [ 1491.518129][ C0] hardirqs last disabled at (3470): [] exc_debug+0x6e/0x130 [ 1491.518160][ C0] softirqs last enabled at (3468): [] netlink_insert+0x101d/0x13b0 [ 1491.518216][ C0] softirqs last disabled at (3466): [] release_sock+0x2b/0x1b0 [ 1491.518278][ C0] [ 1491.518278][ C0] other info that might help us debug this: [ 1491.518285][ C0] Possible unsafe locking scenario: [ 1491.518285][ C0] [ 1491.518291][ C0] CPU0 [ 1491.518296][ C0] ---- [ 1491.518300][ C0] lock(&htab->lockdep_key); [ 1491.518315][ C0] [ 1491.518320][ C0] lock(&htab->lockdep_key); [ 1491.518334][ C0] [ 1491.518334][ C0] *** DEADLOCK *** [ 1491.518334][ C0] [ 1491.518340][ C0] no locks held by syz.3.7784/658. [ 1491.518349][ C0] [ 1491.518349][ C0] stack backtrace: [ 1491.518356][ C0] CPU: 0 PID: 658 Comm: syz.3.7784 Not tainted syzkaller #0 [ 1491.518379][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1491.518392][ C0] Call Trace: [ 1491.518399][ C0] <#DB> [ 1491.518409][ C0] dump_stack_lvl+0x188/0x24e [ 1491.518440][ C0] ? show_regs_print_info+0x12/0x12 [ 1491.518503][ C0] ? print_usage_bug+0x42a/0x690 [ 1491.518539][ C0] ? verify_lock_unused+0x15/0x140 [ 1491.518577][ C0] lock_acquire+0x2df/0x4a0 [ 1491.518616][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 1491.518647][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1491.518687][ C0] ? rcu_is_watching+0x11/0xa0 [ 1491.518770][ C0] ? lock_release+0xcf/0x920 [ 1491.518808][ C0] _raw_spin_lock+0x2a/0x40 [ 1491.518837][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 1491.518864][ C0] htab_lock_bucket+0x179/0x2f0 [ 1491.518896][ C0] ? htab_lru_map_delete_node+0x610/0x610 [ 1491.518925][ C0] ? look_up_lock_class+0x75/0x140 [ 1491.518960][ C0] ? verify_lock_unused+0x15/0x140 [ 1491.518995][ C0] ? htab_map_hash+0x329/0x6d0 [ 1491.519026][ C0] htab_lru_map_delete_elem+0x1a1/0x760 [ 1491.519064][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 1491.519101][ C0] ? htab_lru_map_update_elem+0xe60/0xe60 [ 1491.519168][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 1491.519196][ C0] bpf_overflow_handler+0x6d1/0x790 [ 1491.519229][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 1491.519257][ C0] ? perf_swevent_overflow+0x230/0x230 [ 1491.519303][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1491.519368][ C0] __perf_event_overflow+0x457/0x630 [ 1491.519412][ C0] perf_swevent_event+0x315/0x570 [ 1491.519452][ C0] ? perf_tp_event+0xc10/0xc10 [ 1491.519488][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1491.519561][ C0] perf_bp_event+0x311/0x3f0 [ 1491.519601][ C0] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1491.519630][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 1491.519703][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1491.519761][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1491.519805][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 1491.519874][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 1491.519902][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1491.519936][ C0] notify_die+0x141/0x1a0 [ 1491.519967][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 1491.520015][ C0] notify_debug+0x20/0x30 [ 1491.520056][ C0] exc_debug+0xd9/0x130 [ 1491.520087][ C0] asm_exc_debug+0x1a/0x40 [ 1491.520120][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1491.520159][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1491.520180][ C0] RSP: 0018:ffffc900037e7788 EFLAGS: 00050202 [ 1491.520228][ C0] RAX: ffffffff840dde01 RBX: 00000000000000d8 RCX: 0000000000000008 [ 1491.520245][ C0] RDX: 00000000000000d8 RSI: 0000200000000310 RDI: ffff88805539d0d0 [ 1491.520262][ C0] RBP: 0000000000000000 R08: ffff88805539d0d7 R09: 1ffff1100aa73a1a [ 1491.520279][ C0] R10: dffffc0000000000 R11: ffffed100aa73a1b R12: 00007fffffffef28 [ 1491.520297][ C0] R13: 0000000000000000 R14: 0000200000000240 R15: ffff88805539d000 [ 1491.520324][ C0] ? copyin+0x91/0x120 [ 1491.520361][ C0] [ 1491.520368][ C0] [ 1491.520375][ C0] copyin+0xe7/0x120 [ 1491.520399][ C0] _copy_from_iter+0x447/0x1130 [ 1491.520433][ C0] ? copyout_mc+0x110/0x110 [ 1491.520455][ C0] ? __virt_addr_valid+0x188/0x540 [ 1491.520537][ C0] ? __virt_addr_valid+0x188/0x540 [ 1491.520570][ C0] ? __virt_addr_valid+0x467/0x540 [ 1491.520605][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 1491.520637][ C0] ? __check_object_size+0x4f6/0xa70 [ 1491.520694][ C0] netlink_sendmsg+0x755/0xbd0 [ 1491.520732][ C0] ? netlink_getsockopt+0x550/0x550 [ 1491.520762][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 1491.520818][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1491.520843][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 1491.520888][ C0] ? netlink_getsockopt+0x550/0x550 [ 1491.520918][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 1491.520955][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 1491.520978][ C0] ? __import_iovec+0x306/0x510 [ 1491.521014][ C0] ? import_iovec+0x6f/0xa0 [ 1491.521050][ C0] ___sys_sendmsg+0x2a2/0x360 [ 1491.521081][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 1491.521170][ C0] __se_sys_sendmsg+0x1c3/0x2b0 [ 1491.521199][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 1491.521246][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1491.521283][ C0] do_syscall_64+0x4c/0xa0 [ 1491.521305][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1491.521326][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1491.521351][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1491.521385][ C0] RIP: 0033:0x7f4f74f9ce59 [ 1491.521405][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.521424][ C0] RSP: 002b:00007f4f731f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1491.521448][ C0] RAX: ffffffffffffffda RBX: 00007f4f75215fa0 RCX: 00007f4f74f9ce59 [ 1491.521465][ C0] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000000c [ 1491.521480][ C0] RBP: 00007f4f75032e6f R08: 0000000000000000 R09: 0000000000000000 [ 1491.521495][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1491.521509][ C0] R13: 00007f4f75216038 R14: 00007f4f75215fa0 R15: 00007fff6f572708 [ 1491.521548][ C0] [ 1493.847622][ T658] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7784'.