last executing test programs: 16.585410254s ago: executing program 2 (id=1177): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x100c, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async, rerun: 32) close(r4) (async, rerun: 32) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x4d}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rW'], 0xa) (async) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000012000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 13.40285205s ago: executing program 2 (id=1177): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x100c, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async, rerun: 32) close(r4) (async, rerun: 32) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x4d}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rW'], 0xa) (async) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000012000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 10.670152536s ago: executing program 2 (id=1177): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x100c, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async, rerun: 32) close(r4) (async, rerun: 32) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x4d}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rW'], 0xa) (async) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000012000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 7.239530642s ago: executing program 1 (id=1357): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x1040, 0x8, 0x0, 0x0, 0x0, 0xaba00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x81) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/256, 0x100}, {&(0x7f0000000240)=""/193, 0xc1}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000f40)=""/202, 0xca}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f00000005c0)=""/176, 0xb0}], 0x9}, 0x40012100) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x7c2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfe}]}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'ipvlan0\x00', 0x1000}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r4}, 0x18) 6.980835683s ago: executing program 2 (id=1177): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x100c, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async, rerun: 32) close(r4) (async, rerun: 32) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x4d}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rW'], 0xa) (async) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000012000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 4.48133759s ago: executing program 1 (id=1360): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3ff, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.478336s ago: executing program 3 (id=1361): socket$kcm(0x11, 0x200000000000002, 0x300) (async) r0 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r4], 0x12) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r3, 0x20, &(0x7f00000000c0)={&(0x7f0000000700)=""/245, 0xf5, 0x0, &(0x7f0000000980)=""/4096, 0x1000}}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000940000000fad413e080000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f086ddeff9be34b6dae4a93a276032b785807d48097d74bddc47527f7f0851ee059c08006e1068ea961d36", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) (async, rerun: 64) r7 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffff, 0x0, 0xfffffffc, 0xb}, {0x2, 0xfffffffd}], 0x10, 0x20}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) (async) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x6e, &(0x7f0000000000)=r10, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x24, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x1c}, 0x94) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000080)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) 4.349072475s ago: executing program 1 (id=1362): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5c00000012006b1e003de3d86e6c1dff05137e0300230000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e610000000000000008f60a64c9f408000300060100000800cef007338b00000200000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc8c0) 4.174638863s ago: executing program 3 (id=1364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000094be0100000000000000000071123300000e64f2dc219c6860e7af789ccafb7f000000950000000000000822a31fb14e75070970d1894b2d2ea31103588b638647e0ee7fa062bc2e882d2f9dcd3787ae8e999a6beaf22a53e86ae40e6a3b294e2c2c1a264beb0cf9e21bec38b4fc143684204174400cb6c00c0c985b978a80efc40cd3bf9b86db7235d0a5b24c50d8c52bbdebfb53caeec20eef1938d41201efad7ec8a4c51abdbbce4ad2f95071e8a949b70df6127efc2ce6a8849199d3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4.073581657s ago: executing program 0 (id=1365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) recvmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000380)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/136, 0x88}, 0xc0002164) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3}]}, {0x0, [0x0, 0x2e, 0x2e, 0x1e]}}, 0x0, 0x2e}, 0x28) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594", 0xf}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000180)='FREEZING\x00', 0x9) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x53}, 0x28) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81200, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{0x0, 0x1, 0x3, 0x8000}, {0x4d, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0xfffffffd}, {0x6, 0x0, 0x10}]}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) 4.073122807s ago: executing program 1 (id=1366): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (fail_nth: 8) 3.601176557s ago: executing program 3 (id=1367): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.489836952s ago: executing program 1 (id=1368): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000003100)=""/4059, 0xfdb}, {&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000700)=""/108, 0x6c}], 0xa}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x400, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000340)="f0a3a5fd487f7553cb197dfbd0b8bf8a9ffbd7c89fe44db2ab06cd602616116d4535cd0da26b97e2b67a1426ed04740876", 0x31}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010101, @local}}}], 0x20}, 0x24004000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0x18) ioctl$SIOCSIFHWADDR(r2, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) sendmsg$sock(r2, &(0x7f00000013c0)={&(0x7f0000000c80)=@in={0x2, 0x4e20, @private=0xa010100}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000fc0)="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", 0xfb}, {&(0x7f0000000e00)="2fff4dd7830b869cc5939e6addd3de5b493f7e0782b748e6b4243fc16cdfbce7e6efeabb9f39ab629239bfe5", 0x2c}, {&(0x7f00000010c0)="d6316b03bba4675aac55495d9d25dfc06bf5c9b3313be26b68350170d7cb669dd7df58d565b0d5b60ca37dc89207a0bfbabb51c9dfbb1b061c072b2f44a86e4fd612eefd8a51b243a8dfa24b395a389d967cefeb679df067241232333c159014e73bbd6bda9fbf183464075ffe7a2b169cc34e432c4bef386aed28e0a15c26e967fd5ac5efe4ec0a7cecf4f6e0ae89373cc2266b52487364055c40b6bc22d9db292f37752f66e3bcc6601833ce4c5ad4b29ec2a7764d5f6fbf9801cfe5e20d8cf02a3516990d351f763b9936f3e0d99692d7f10715c18dacb0", 0xd9}, {&(0x7f00000011c0)="4f79d4441d470a31ff03b02c33f5ca76cf669d10d1bf115687dbde1174dd5e7ce721934fcf83e8bf76416e077fcb1d6fb7be209a60b7877cbeaa039a4bd7966bef2ecac8bd949814766a2f1e4aa49df86063dab4c9d3ea7b2416b99adcaa07876ba957444ac90cdc16e4c982426e9a15f6f8a5e37702c6f5b3f920d46131d547cba53bdbb67ae78cead8b24c4ada72d279793c86310c06f5", 0x98}, {&(0x7f0000001280)="15b83b014ee0799d8a77a2103cd8d96146c1ac6a84f79b0676794174855d3598c33f87b5a805ff7d05a670316a4e518ebaf9f6c9a106b3ec6646b25c17b2c8a526082476ed0e95b74d127b82a231f1953deeb038026e06d7f883ad4450997e90f29f69723d29ea29fe30a5f849d7d4caa26ef1990f58ada734c3d3ecd119e501716019116bc9d6b915bc67c81880298dd4a7abe18a0f5febcf8070", 0x9b}], 0x5}, 0x40090) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000000000000220, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.449122413s ago: executing program 0 (id=1369): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xdc, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) 3.370320437s ago: executing program 0 (id=1370): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3ff, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.322502959s ago: executing program 2 (id=1177): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x100c, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async, rerun: 32) close(r4) (async, rerun: 32) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x4d}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rW'], 0xa) (async) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000012000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 1.066462505s ago: executing program 0 (id=1371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @private2, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[@ANYBLOB="18000000000000002900000005000000000002"], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5eb200000400000000", @ANYRES32=0x1, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="686c7670c3515c59aaa6fc0b617c8f2d591fc9efc47e0f94257b1c1293dc6ebbd25d4dbfaba3609c6a0452c8963a239b1e7c260366da02003d63f8c5b0b489", @ANYRESHEX=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x6, 0x9, 0x1, 0x73, 0x0, 0x1ff, 0x1000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x8, 0xc45, 0x2, 0x6, 0xffffffff, 0x1ef, 0xec91, 0x0, 0xb7, 0x0, 0x1000}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000070000000c000000ffffffff01000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x200, r4}, 0x38) socket$kcm(0x29, 0x7, 0x0) socketpair(0x21, 0x800, 0x6, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.063745535s ago: executing program 1 (id=1372): r0 = gettid() r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x80, 0x72, 0x4, 0x8, 0x0, 0x6, 0x44713, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x12860, 0x8, 0xbfdc, 0x2, 0x8, 0x4, 0x101, 0x0, 0x10001, 0x0, 0x9}, r0, 0x10, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x25, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xb, 0x4, 0x6, 0x20, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x0, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x2, 0x9, 0x3, 0x4, 0xfffffffffffffff0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x20, &(0x7f0000000240)=""/32, 0x41100, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x9, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x2, 0x3, 0x2, 0x3}, {0x1, 0x2, 0x3, 0x2}, {0x5, 0x3, 0xa, 0xa}, {0x1, 0x5}], 0x10, 0x3ff}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={0xffffffffffffffff, r3}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000480)=0x13) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xc7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000004c0)='\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r3, &(0x7f0000000500)="09fac1e7f0a156c1f1e36e9a4e2d7440a23898d57ca80fd14d5b79f24e495039bdfe9e691ef9117eb87c0812ac65d8fe8501d3fc8a2eee73084b87727864b00b", &(0x7f0000000540)=""/128}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000600)=0x1) recvmsg$kcm(r2, &(0x7f0000000800)={&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/30, 0x1e}], 0x1, &(0x7f0000000740)=""/182, 0xb6}, 0x1) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18) socketpair(0x2b, 0x800, 0x8, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x4200, 0x0) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000940)=""/46) sendmsg$sock(r5, &(0x7f0000000f00)={&(0x7f0000000980)=@in6={0xa, 0x4e22, 0x3ba, @mcast1, 0x5}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a00)="50945eac7b225151a6271e4e71d7bdc4cf726e34072dbf4eff07d29a412add368eb70f9a43046212fd12eeb06fd02dfe35bb1699b23806438fa27d913c5a13cc26fb2cb31d350b4b51a1eb4b7f6b52f0213bce1601cde1ab9baff97ce8d17bd79b96b66e9d22f8808c", 0x69}, {&(0x7f0000000a80)="e01389ff2563897ff83b525a90aa094b6606c4feb9c03a667e87d063a613edafa624801d90c6d5d27531160bbb7d369bdd2ec60bf83db00a09178f4a21eeb5d019eb0066309a235c1fb928e593cca8969eba3a30e7906d3a1ff986b85a1aec28cde7e1fc8f", 0x65}, {&(0x7f0000000b00)="b269c2329698562ee9bb6fa6ec30b60699ae2ef5e3e3b5bdaefaef0d92f2957717a887c1b9ddae109e84458928c93debd1e8fc155cabcbed94", 0x39}, {&(0x7f0000000b40)="83357a55914b1da75ab4659cf2f88fc479124ac8916a7a65b657ed882956cbfbe9c35fa9cb26825c6755c331af0373c8d372f8917760548f9745f20dd1a6f4998632acb7aede7dec1ac7a54c9b4ed0aaae26f8f55f4f2eb7a8073357de521a1c5fc2321318580dc7898e6ba6babdafcac836e005663937249a99a5cb3257a81bbfaba4a801ccb544a3484c868522cd8feede224ec4c47a6644797cd405fc28d88ab0ba", 0xa3}, {&(0x7f0000000c00)="7d6848a6ef88cca31aefda39e6abcf981dd8f0b86d2954868441d02e7676686633472be82ce77a541f004b3d4434f7f6a43056871f420923448df97c996ceb35400f40912e9c67c60d2f6755646b6b727571865b2d5e1205f9adbb8367cda648b21097dee7407f360516e8a2caaa33fd1da3f29b6d94f5069e80a73417c8091298969ba579d18862aa1921cfe9474e496d217ae9a759f632b32efdd5e5bd47467c4b981e8c59f78c0f442de5df27d9ff2f2313391616", 0xb6}, {&(0x7f0000000cc0)="9f1c1d5b00221e9d2dbe7aa17581bc88a9d3", 0x12}, {&(0x7f0000000d00)="187a6a0ada773edb77e8bce486decf933d6d7cc7c7182be1254523cf16ec5ec1de0d1807e58f93cbf2d712efcbbdf4231ba66f15163df664a680d3c36e401f57dc153709e1fc0cd09c56a2405263b8dfe621f2ae82fa03d42f19843e020b95f5fe39c9da5a1998d30bfa71b0c62010ba650e015fae8c", 0x76}, {&(0x7f0000000d80)="d02e3ccaaa87a2847b7f61fdf6614788672d3dca8ab283259358083d2ff1cc184d35e03e28bd86c62c010c2b8307b428613295f50bdc7c13f52fb43c49ca575064ac8ab15d3bb17637077c79516228cc786f3c0cb64601f0d50a26fe28fa46de3cbcdcf73ac1b7a5445bd8f7630c21c9e4", 0x71}], 0x8, &(0x7f0000000e80)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}, 0x42) r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001180)='devices.allow\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001200), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)=r4}, 0x20) r13 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001300)='tasks\x00', 0x2, 0x0) sendmsg$unix(r6, &(0x7f0000001400)={&(0x7f0000000f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="bc51bc07f7a0219218ad", 0xa}, {&(0x7f0000001100)="b78e6fde953298131d89975e0c8fe1ea7d0dcf7f0c6be5a200882c629fde70c3d57210771b92bebf16913f6970a2e4176cb21af3b838d62719af4a31", 0x3c}], 0x3, &(0x7f0000001340)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r6, r5, r5, r9, r6, r3, r2, r11, r12]}}, @rights={{0x24, 0x1, 0x1, [r2, r5, 0xffffffffffffffff, r6, r13]}}], 0xb8, 0x40800}, 0x20020010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000019c0)={r9}) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a00)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$unix(r5, &(0x7f0000001bc0)={&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f00000014c0)="b5c9525e73b459578540eeb1b4a5b81506c45d2e71f664fcc896898b6449b1d5a3bb0db3078aed5356e1c406045fda8826ba8db93989a9f0c7cb6f91055bf9a90dd45507ed9d0d8aefd8e58d5577cadd18cfd77fd4d80613d518a547c84500e3b74c448b2a9750a21266db4b68a6f95adcd44fa839e89b39170afcab60931bc537c53b6d52dd23f676e6ab224f05da87110eb8748657b9f100738552954c61bf40b5334650872e2031bd9dda1a89238f2497c61089b216313019b84b3ce787c7dd4044d3c7082f5ad9e1409c154f09372c64e6331d8a22", 0xd7}, {&(0x7f00000015c0)="c318f120633e30ed24635b6c4f8e5460271424ac7446e5b13accd2830eb2e701c298adc655cf6fee8ff63a52dd00b49ecb12abfdd3601b0737c0ef0e4e7e9d920bfd5ee96a79e035b35c32a5165efa4521b702cc23f32c1d227fbec3dca95a4d82e5991c0c40c662711b29171edc", 0x6e}, {&(0x7f0000001640)="f9286468888af75162d66ca9796f91d86db9b816a94edca449904cf499d1942e378631b6a2c7ceb9f7a51e5089793a808b96994d43a0a27bdb3d1ef541ac21f678fa07de4b0c9e57de480e411face979a02b185af70b1e9933627ce23cc1907a2d20f2625acc1cf6edd65b4df134efd92268fd338fbfb4b3681e7ba15af6afa118221878986b88dfa48a9bd775e80558bc160d77a81b210ac9a7355f34df8b6b66c1c3dcb4cd1d3cc8c973b18efd43d859303b1fd68ad9f881994108cf25e0a01c1965eef6ec55bc24f89ed353bf476bb89d0feef872dc6d9b5e35e4306e3bef3ab995cf8d765cdb", 0xe8}, {&(0x7f0000001740)="5188bb20902554b540b37b83895efcef7e565fa8235ec2082df468bb446e0672ed181b44b6eab3523b1e52dd56c5162fc42eba5d428c1271cd1d6dab0a163ff548bc2f5b1f93813807595ed482c0819271a66a3d4084ea702273fd2e5cb465e70fbc0d1bb3fcd4f3b0eb2061a6457c569830f89176ce18f5f572c7e29e6e0c698fb75467d7427320d519a710a7208527fd5f58103b41c962570f640e5ded51bab4b964f25b02ac3dddaf5ea6f63182ad924e", 0xb2}, {&(0x7f0000001800)="a8c2f19588b7d395902060265fa764de01b323821d6a00648c50f793e24b9b1ef2e254ca436e50", 0x27}, {&(0x7f0000001840)="af7238e8de2bdd04a02dcc373128842d27f9ad35ffe48007a6461b5c590f8b2580b7169f3154e15b1cd4ff7a9bbf3746b240a5", 0x33}, {&(0x7f0000001880)="b4d2c9fc2665b6505be20aa165572240d12418d79ce3f7b17ec1e372a1b6e65661e887b257258a9d45d364ae62c1c65ba1767debad", 0x35}, {&(0x7f00000018c0)="3dbb5553430251", 0x7}], 0x8, &(0x7f0000001a40)=[@rights={{0x2c, 0x1, 0x1, [r9, r6, r6, r3, r14, r13, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r9, r4, 0xffffffffffffffff, r10, r6, r3, 0xffffffffffffffff, r10, r4, r5]}}, @rights={{0x1c, 0x1, 0x1, [r5, r15, r11]}}, @rights={{0x34, 0x1, 0x1, [r16, r11, r11, r13, r3, r6, r2, r1, r11]}}], 0x160, 0x8040}, 0x94) mkdir(&(0x7f0000001c00)='./file0\x00', 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f00)={r3, 0xe0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001c80)=[0x0], &(0x7f0000001cc0)=[0x0], 0x0, 0x43, &(0x7f0000001d00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001d40), &(0x7f0000001d80), 0x8, 0xc, 0x8, 0x8, &(0x7f0000001dc0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=@bloom_filter={0x1e, 0x6, 0x8, 0x8, 0x800, r12, 0x9, '\x00', r17, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x7}, 0x50) 1.062616035s ago: executing program 3 (id=1373): ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad03010000000000bf000000000000006916420000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 944.96683ms ago: executing program 0 (id=1374): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="40bbea81b6c93fd701f1fb6a327f66ef8800000009000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000e80), 0xa}, 0x108, 0x0, 0x402, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x27, 0x22, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125415bf4c0ebdceb6495ad7ddea9d1b1fe8680", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x600c01, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r1, 0x20, &(0x7f0000000900)={&(0x7f0000000800)=""/140, 0x8c, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000300)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcc}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}], &(0x7f0000000580)='syzkaller\x00', 0x80000000, 0xc5, &(0x7f00000005c0)=""/197, 0x41100, 0x20, '\x00', 0x0, @fallback=0x6, r5, 0x8, &(0x7f0000000780)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x0, 0x7, 0x80000000}, 0x10, r6, 0xffffffffffffffff, 0x6, &(0x7f0000000980)=[r0], &(0x7f00000009c0)=[{0x3, 0x3, 0x0, 0xb}, {0x4, 0x5, 0x3, 0xf}, {0x0, 0x5, 0x0, 0xc}, {0x4, 0x2, 0x7, 0x2}, {0x0, 0x2, 0x0, 0x7}, {0x0, 0x3, 0xb, 0x4}], 0x10, 0x80}, 0x94) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r7}, 0x18) r8 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x10d, 0x1b, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 694.018491ms ago: executing program 3 (id=1375): r0 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r0, 0x3a, 0x7, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="030000f143bd5234f0874cea45efced10d0004d564ca75ef7131d0da25d20e5a68a5fc00", @ANYRES32, @ANYBLOB='\t'], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000640), 0x1004, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r3 = openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f00000001c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="fcffffff00000000899094fb9db1", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) 398.453073ms ago: executing program 3 (id=1376): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (fail_nth: 9) 383.579464ms ago: executing program 0 (id=1377): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=1177): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x100c, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async, rerun: 32) close(r4) (async, rerun: 32) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x4d}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rW'], 0xa) (async) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000012000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. [ 69.583629][ T5778] cgroup: Unknown subsys name 'net' [ 69.748133][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.433386][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.904417][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.910963][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.975343][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.983722][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.992538][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.000843][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.009083][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.017302][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.023342][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.024755][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.040947][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.050415][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.052066][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.058292][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.071092][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.073524][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.086701][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.095342][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.102542][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.110503][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.115420][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.117654][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.125379][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.139282][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.139369][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.154556][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.632619][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 73.699120][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 73.753530][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 73.806043][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.813397][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.821470][ T5790] bridge_slave_0: entered allmulticast mode [ 73.828355][ T5790] bridge_slave_0: entered promiscuous mode [ 73.841018][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 73.878211][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.885518][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.893328][ T5790] bridge_slave_1: entered allmulticast mode [ 73.900729][ T5790] bridge_slave_1: entered promiscuous mode [ 73.992114][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.005282][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.041482][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.048735][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.056277][ T5788] bridge_slave_0: entered allmulticast mode [ 74.064156][ T5788] bridge_slave_0: entered promiscuous mode [ 74.114059][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.122016][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.129209][ T5788] bridge_slave_1: entered allmulticast mode [ 74.136326][ T5788] bridge_slave_1: entered promiscuous mode [ 74.161491][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.168692][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.176767][ T5789] bridge_slave_0: entered allmulticast mode [ 74.183897][ T5789] bridge_slave_0: entered promiscuous mode [ 74.207237][ T5790] team0: Port device team_slave_0 added [ 74.225868][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.233210][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.240816][ T5789] bridge_slave_1: entered allmulticast mode [ 74.247698][ T5789] bridge_slave_1: entered promiscuous mode [ 74.268323][ T5790] team0: Port device team_slave_1 added [ 74.299618][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.312744][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.344968][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.352319][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.359467][ T5791] bridge_slave_0: entered allmulticast mode [ 74.367642][ T5791] bridge_slave_0: entered promiscuous mode [ 74.397722][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.404983][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.431667][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.443887][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.451424][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.458678][ T5791] bridge_slave_1: entered allmulticast mode [ 74.466265][ T5791] bridge_slave_1: entered promiscuous mode [ 74.486672][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.499471][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.517813][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.525323][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.551524][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.587696][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.611912][ T5788] team0: Port device team_slave_0 added [ 74.620529][ T5788] team0: Port device team_slave_1 added [ 74.637729][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.705971][ T5789] team0: Port device team_slave_0 added [ 74.723922][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.731405][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.757642][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.777868][ T5791] team0: Port device team_slave_0 added [ 74.786403][ T5789] team0: Port device team_slave_1 added [ 74.808018][ T5790] hsr_slave_0: entered promiscuous mode [ 74.814691][ T5790] hsr_slave_1: entered promiscuous mode [ 74.824978][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.832133][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.858845][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.871956][ T5791] team0: Port device team_slave_1 added [ 74.936515][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.944140][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.970154][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.983193][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.991113][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.017455][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.045717][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.053158][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.079373][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.097162][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.105409][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.108508][ T5796] Bluetooth: hci2: command tx timeout [ 75.136266][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.207603][ T5788] hsr_slave_0: entered promiscuous mode [ 75.215692][ T5788] hsr_slave_1: entered promiscuous mode [ 75.222178][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.229957][ T5788] Cannot create hsr debugfs directory [ 75.251004][ T5796] Bluetooth: hci0: command tx timeout [ 75.257013][ T5793] Bluetooth: hci3: command tx timeout [ 75.263304][ T5804] Bluetooth: hci1: command tx timeout [ 75.328371][ T5789] hsr_slave_0: entered promiscuous mode [ 75.335676][ T5789] hsr_slave_1: entered promiscuous mode [ 75.342307][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.349915][ T5789] Cannot create hsr debugfs directory [ 75.367893][ T5791] hsr_slave_0: entered promiscuous mode [ 75.374963][ T5791] hsr_slave_1: entered promiscuous mode [ 75.381932][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.389587][ T5791] Cannot create hsr debugfs directory [ 75.726823][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.747040][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.756734][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.771254][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.835806][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.863343][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.887627][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.916375][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.956050][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.969655][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.003559][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.014066][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.098157][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.108377][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.119789][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.141483][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.223358][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.259225][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.293649][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.301060][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.347089][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.354237][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.402558][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.428136][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.467708][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.487252][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.517653][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.543026][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.550303][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.559516][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.566679][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.592591][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.600145][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.612178][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.619410][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.633587][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.657616][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.664912][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.675160][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.682512][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.093243][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.172222][ T5793] Bluetooth: hci2: command tx timeout [ 77.244006][ T5790] veth0_vlan: entered promiscuous mode [ 77.308639][ T5790] veth1_vlan: entered promiscuous mode [ 77.331354][ T5793] Bluetooth: hci3: command tx timeout [ 77.336851][ T5793] Bluetooth: hci0: command tx timeout [ 77.342388][ T5796] Bluetooth: hci1: command tx timeout [ 77.352424][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.397739][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.466607][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.475269][ T5790] veth0_macvtap: entered promiscuous mode [ 77.488001][ T5790] veth1_macvtap: entered promiscuous mode [ 77.539960][ T5788] veth0_vlan: entered promiscuous mode [ 77.564513][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.575252][ T5789] veth0_vlan: entered promiscuous mode [ 77.602484][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.614930][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.624005][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.635775][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.644816][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.659725][ T5789] veth1_vlan: entered promiscuous mode [ 77.680441][ T5788] veth1_vlan: entered promiscuous mode [ 77.723422][ T5791] veth0_vlan: entered promiscuous mode [ 77.760434][ T5789] veth0_macvtap: entered promiscuous mode [ 77.769092][ T5791] veth1_vlan: entered promiscuous mode [ 77.784359][ T5789] veth1_macvtap: entered promiscuous mode [ 77.823069][ T5788] veth0_macvtap: entered promiscuous mode [ 77.855026][ T5788] veth1_macvtap: entered promiscuous mode [ 77.875554][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.888329][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.906182][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.918620][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.929708][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.944537][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.992429][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.002510][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.011627][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.021347][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.036697][ T5791] veth0_macvtap: entered promiscuous mode [ 78.047054][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.058200][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.068390][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.079439][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.092112][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.114211][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.125200][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.136305][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.146912][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.158202][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.171716][ T5791] veth1_macvtap: entered promiscuous mode [ 78.190986][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.199022][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.230021][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.239300][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.253611][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.262727][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.300019][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.313755][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.314197][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.326554][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.342990][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.354481][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.364517][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.375808][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.388858][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.428949][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.441921][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.453523][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.465256][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.475497][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.486356][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.498105][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.528053][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.537583][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.547039][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.556240][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.630312][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.643048][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.763937][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.783429][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.814084][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.834141][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.918868][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.951814][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.968482][ T5875] syz_tun: entered promiscuous mode [ 78.990865][ T5875] syz_tun: entered allmulticast mode [ 79.029601][ T5875] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 79.050876][ T5875] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.251001][ T5804] Bluetooth: hci2: command tx timeout [ 79.410576][ T5804] Bluetooth: hci0: command tx timeout [ 79.416073][ T5804] Bluetooth: hci1: command tx timeout [ 79.425751][ T5793] Bluetooth: hci3: command tx timeout [ 79.597577][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.660944][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.806569][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.848752][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.938158][ T5884] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.976317][ C0] hrtimer: interrupt took 73620 ns [ 80.175373][ T5886] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.333286][ T5793] Bluetooth: hci2: command tx timeout [ 81.346044][ T5910] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9'. [ 81.362871][ T5910] openvswitch: netlink: Flow key attribute not present in set flow. [ 81.495439][ T5793] Bluetooth: hci1: command tx timeout [ 81.495474][ T5796] Bluetooth: hci3: command tx timeout [ 81.509332][ T5804] Bluetooth: hci0: command tx timeout [ 83.251336][ T5917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.389673][ T5923] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 83.444969][ T5923] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.14'. [ 83.685611][ T5927] syz_tun: entered promiscuous mode [ 83.697612][ T5927] syz_tun: entered allmulticast mode [ 83.845151][ T5927] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 83.859613][ T5927] netlink: 55 bytes leftover after parsing attributes in process `syz.2.15'. [ 85.359793][ T5927] syz.2.15 (5927) used greatest stack depth: 20528 bytes left [ 85.480177][ T5953] netlink: 176 bytes leftover after parsing attributes in process `syz.3.19'. [ 87.287021][ T787] cfg80211: failed to load regulatory.db [ 87.631084][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.746955][ T5997] syz_tun: entered promiscuous mode [ 89.754213][ T5997] syz_tun: entered allmulticast mode [ 89.773709][ T5997] netlink: 'syz.1.31': attribute type 10 has an invalid length. [ 89.790025][ T5997] netlink: 55 bytes leftover after parsing attributes in process `syz.1.31'. [ 90.766704][ T6009] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.35'. [ 90.868594][ T6014] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 91.033125][ T6016] syzkaller0: entered promiscuous mode [ 91.038995][ T6016] syzkaller0: entered allmulticast mode [ 91.082553][ T6009] bond_slave_1: entered promiscuous mode [ 91.088295][ T6009] bond_slave_1: entered allmulticast mode [ 91.567769][ T6023] Zero length message leads to an empty skb [ 93.750960][ T6046] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.45'. [ 93.794534][ T6045] netlink: 176 bytes leftover after parsing attributes in process `syz.0.44'. [ 95.390031][ T6068] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.52'. [ 95.834750][ T6076] netlink: 21 bytes leftover after parsing attributes in process `syz.2.54'. [ 95.909370][ T6076] ksmbd: Unknown IPC event: 0, ignore. [ 99.007529][ T6113] netlink: 'syz.0.63': attribute type 21 has an invalid length. [ 99.017437][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 103.299910][ T6124] netlink: 'syz.3.67': attribute type 21 has an invalid length. [ 103.307850][ T6124] netlink: 132 bytes leftover after parsing attributes in process `syz.3.67'. [ 106.550185][ T6140] netlink: 72 bytes leftover after parsing attributes in process `syz.1.70'. [ 106.913326][ T6146] netlink: 'syz.3.71': attribute type 2 has an invalid length. [ 106.922351][ T6146] netlink: 'syz.3.71': attribute type 8 has an invalid length. [ 106.932620][ T6146] netlink: 132 bytes leftover after parsing attributes in process `syz.3.71'. [ 106.979232][ T6148] netlink: 'syz.2.73': attribute type 10 has an invalid length. [ 107.014882][ T6148] netlink: 156 bytes leftover after parsing attributes in process `syz.2.73'. [ 107.198850][ T6157] netlink: 'syz.3.75': attribute type 10 has an invalid length. [ 107.225805][ T6157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.75'. [ 107.263910][ T6157] ipvlan1: entered promiscuous mode [ 107.342450][ T6157] ipvlan1: entered allmulticast mode [ 107.382609][ T6157] veth0_vlan: entered allmulticast mode [ 107.439326][ T6157] bridge0: port 3(ipvlan1) entered blocking state [ 107.477047][ T6157] bridge0: port 3(ipvlan1) entered disabled state [ 107.524313][ T6157] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 117.099290][ T6207] Driver unsupported XDP return value 0 on prog (id 83) dev N/A, expect packet loss! [ 118.953024][ T6238] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.92'. [ 118.982153][ T6238] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.92'. [ 119.009603][ T5804] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 119.342481][ T6255] netlink: 180 bytes leftover after parsing attributes in process `syz.2.99'. [ 120.099232][ T6283] syz.0.105[6283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.099486][ T6283] syz.0.105[6283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.103396][ T5804] Bluetooth: hci2: command tx timeout [ 121.339539][ T6293] netlink: 196 bytes leftover after parsing attributes in process `syz.1.107'. [ 121.356319][ T6293] netlink: 'syz.1.107': attribute type 29 has an invalid length. [ 122.656209][ T6290] netlink: 'syz.0.106': attribute type 10 has an invalid length. [ 122.664115][ T6290] netlink: 'syz.0.106': attribute type 19 has an invalid length. [ 122.672858][ T6290] netlink: 156 bytes leftover after parsing attributes in process `syz.0.106'. [ 122.682230][ T6293] netlink: 'syz.1.107': attribute type 29 has an invalid length. [ 123.518489][ T6321] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 123.528334][ T6321] netlink: 5 bytes leftover after parsing attributes in process `syz.3.116'. [ 123.637705][ T6308] netlink: 'syz.0.113': attribute type 2 has an invalid length. [ 123.646789][ T6308] netlink: 'syz.0.113': attribute type 8 has an invalid length. [ 123.658060][ T6308] netlink: 132 bytes leftover after parsing attributes in process `syz.0.113'. [ 123.677007][ T6317] netlink: 'syz.3.116': attribute type 25 has an invalid length. [ 124.041592][ T6330] netlink: 'syz.0.117': attribute type 21 has an invalid length. [ 124.079941][ T6330] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.117'. [ 124.122432][ T6332] netlink: 188 bytes leftover after parsing attributes in process `syz.1.118'. [ 124.255570][ T6337] netlink: 'syz.2.119': attribute type 9 has an invalid length. [ 124.287112][ T6337] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.119'. [ 125.769049][ T6362] syzkaller0: entered promiscuous mode [ 125.807246][ T6362] syzkaller0: entered allmulticast mode [ 125.825665][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.840331][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.944035][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.951663][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.832258][ T6402] netlink: 'syz.3.136': attribute type 3 has an invalid length. [ 128.842572][ T6402] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.136'. [ 129.007298][ T6408] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.137'. [ 133.340646][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.347032][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.995291][ T6433] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'. [ 134.027523][ T6433] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'. [ 134.307560][ T6434] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'. [ 134.747716][ T6457] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.150'. [ 136.727683][ T6452] lo: entered allmulticast mode [ 136.739843][ T6457] netlink: 'syz.2.150': attribute type 10 has an invalid length. [ 136.747795][ T6457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.150'. [ 136.812662][ T6457] team0: Port device geneve0 added [ 137.136793][ T6474] netlink: 'syz.1.156': attribute type 10 has an invalid length. [ 137.211791][ T6474] netlink: 152 bytes leftover after parsing attributes in process `syz.1.156'. [ 137.227702][ T6474] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 137.250341][ T6476] netlink: 'syz.3.154': attribute type 10 has an invalid length. [ 137.330011][ T6476] team0: Port device dummy0 added [ 137.347931][ T6477] netlink: 'syz.3.154': attribute type 10 has an invalid length. [ 137.489709][ T6477] team0: Port device dummy0 removed [ 137.519602][ T6477] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.532846][ T6482] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.157'. [ 137.735560][ T6488] netlink: 'syz.1.160': attribute type 10 has an invalid length. [ 137.788007][ T6488] netlink: 2 bytes leftover after parsing attributes in process `syz.1.160'. [ 137.838100][ T6488] bond0: entered promiscuous mode [ 137.860837][ T6488] bond_slave_0: entered promiscuous mode [ 137.867879][ T6488] bridge0: port 3(bond0) entered blocking state [ 137.890678][ T6488] bridge0: port 3(bond0) entered disabled state [ 137.901047][ T6488] bond0: entered allmulticast mode [ 137.930396][ T6488] bond_slave_0: entered allmulticast mode [ 137.939289][ T6488] bridge0: port 3(bond0) entered blocking state [ 137.946166][ T6488] bridge0: port 3(bond0) entered forwarding state [ 144.319811][ T6531] mac80211_hwsim hwsim5 .3ãc¤±: renamed from wlan1 (while UP) [ 144.756388][ T6548] netlink: 'syz.1.176': attribute type 4 has an invalid length. [ 144.814472][ T6548] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.176'. [ 145.151823][ T6559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.179'. [ 145.225379][ T6560] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.181'. [ 145.243449][ T6559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.179'. [ 145.259143][ T6554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.179'. [ 145.289631][ T6560] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.181'. [ 145.343913][ T6554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.179'. [ 145.393775][ T6562] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.181'. [ 146.017529][ T6570] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 146.699898][ T6599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'. [ 149.481733][ T6599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'. [ 149.883933][ T6625] netlink: 'syz.1.197': attribute type 29 has an invalid length. [ 149.929371][ T6625] netlink: 'syz.1.197': attribute type 29 has an invalid length. [ 149.979700][ T6618] syz.2.195[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.980006][ T6618] syz.2.195[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.007699][ T6625] netlink: 'syz.1.197': attribute type 9 has an invalid length. [ 150.112594][ T6625] __nla_validate_parse: 1 callbacks suppressed [ 150.112614][ T6625] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.197'. [ 150.352491][ T6616] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.194'. [ 150.976383][ T6643] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 156.870562][ T6696] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 156.906409][ T6696] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.214'. [ 159.076404][ T6712] netlink: 'syz.2.218': attribute type 21 has an invalid length. [ 159.085084][ T6712] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 159.099333][ T6712] netlink: 'syz.2.218': attribute type 2 has an invalid length. [ 159.117999][ T6712] netlink: 9062 bytes leftover after parsing attributes in process `syz.2.218'. [ 164.079730][ T6758] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.230'. [ 167.444994][ T6803] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 169.708368][ T6828] netlink: 'syz.1.247': attribute type 10 has an invalid length. [ 169.738580][ T6828] dummy0: entered promiscuous mode [ 169.763228][ T6828] dummy0: entered allmulticast mode [ 169.769192][ T6828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.948464][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 171.160345][ T6848] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 171.476698][ T6856] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.254'. [ 174.364365][ T6884] netlink: 'syz.2.260': attribute type 5 has an invalid length. [ 174.372633][ T6880] netlink: 'syz.2.260': attribute type 10 has an invalid length. [ 174.390878][ T6880] team0: Port device netdevsim0 added [ 178.306685][ T6932] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 178.365327][ T6932] team0: Port device geneve0 removed [ 179.003773][ T6966] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 179.020543][ T6966] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.278'. [ 179.213427][ T6970] netlink: 'syz.3.279': attribute type 21 has an invalid length. [ 179.258479][ T6970] netlink: 128 bytes leftover after parsing attributes in process `syz.3.279'. [ 179.289096][ T6970] netlink: 'syz.3.279': attribute type 5 has an invalid length. [ 179.316699][ T6970] netlink: 'syz.3.279': attribute type 6 has an invalid length. [ 179.410671][ T6970] netlink: 3 bytes leftover after parsing attributes in process `syz.3.279'. [ 179.441831][ T6978] TCP: TCP_TX_DELAY enabled [ 179.448125][ T6978] netlink: 'syz.1.282': attribute type 3 has an invalid length. [ 179.456618][ T6978] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.282'. [ 179.585752][ T6980] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 179.649774][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.672839][ T6980] team0: Port device batadv0 added [ 179.679789][ T6982] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.284'. [ 180.381411][ T7004] netlink: 180 bytes leftover after parsing attributes in process `syz.0.290'. [ 180.648279][ T7007] netlink: 'syz.3.291': attribute type 19 has an invalid length. [ 180.666801][ T7007] netlink: 156 bytes leftover after parsing attributes in process `syz.3.291'. [ 180.752261][ T7011] netlink: 'syz.2.292': attribute type 10 has an invalid length. [ 180.780616][ T7011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.292'. [ 180.789579][ T7011] dummy0: entered promiscuous mode [ 180.985005][ T7025] netlink: 'syz.1.297': attribute type 2 has an invalid length. [ 181.006462][ T7025] netlink: 132 bytes leftover after parsing attributes in process `syz.1.297'. [ 181.671647][ T7039] pim6reg1: entered promiscuous mode [ 181.677146][ T7039] pim6reg1: entered allmulticast mode [ 182.200197][ T5804] Bluetooth: hci0: Dropping invalid advertising data [ 182.208228][ T5804] Bluetooth: hci0: unknown advertising packet type: 0xff [ 182.208260][ T5804] Bluetooth: hci0: Malformed LE Event: 0x02 [ 182.878939][ T7069] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.310'. [ 185.409153][ T7098] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.318'. [ 185.450906][ T7098] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 186.075338][ T7117] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.323'. [ 186.315652][ T7115] validate_nla: 3 callbacks suppressed [ 186.315671][ T7115] netlink: 'syz.0.322': attribute type 2 has an invalid length. [ 186.430289][ T7115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.322'. [ 186.493417][ T7127] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.325'. [ 194.594671][ T7178] netlink: 144 bytes leftover after parsing attributes in process `syz.0.339'. [ 194.778234][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.786425][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.509840][ T7204] sctp: [Deprecated]: syz.3.346 (pid 7204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.509840][ T7204] Use struct sctp_sack_info instead [ 195.709438][ T7205] netlink: 'syz.1.348': attribute type 10 has an invalid length. [ 195.746260][ T7205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.348'. [ 195.849063][ T7205] bond0: (slave dummy0): Releasing backup interface [ 196.047505][ T7205] bridge0: port 4(dummy0) entered blocking state [ 196.061234][ T7205] bridge0: port 4(dummy0) entered disabled state [ 196.208525][ T7216] syzkaller0: entered promiscuous mode [ 196.215144][ T7216] syzkaller0: entered allmulticast mode [ 196.224741][ T7218] netlink: 'syz.0.351': attribute type 12 has an invalid length. [ 196.233173][ T7205] syz.1.348 (7205) used greatest stack depth: 20264 bytes left [ 196.241125][ T7218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.351'. [ 196.858176][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 196.858220][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 196.870918][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 196.876187][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 200.721397][ T7225] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.353'. [ 200.758191][ T7262] netlink: 'syz.0.364': attribute type 10 has an invalid length. [ 200.861808][ T7262] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 201.076201][ T7270] netlink: 76 bytes leftover after parsing attributes in process `syz.3.366'. [ 201.271652][ T7280] netlink: 52 bytes leftover after parsing attributes in process `syz.1.370'. [ 201.292446][ T7280] team_slave_0: entered allmulticast mode [ 201.385603][ T7280] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 201.431465][ T7285] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 201.568833][ T7293] netlink: 'syz.2.372': attribute type 58 has an invalid length. [ 201.599031][ T7293] netlink: 152 bytes leftover after parsing attributes in process `syz.2.372'. [ 201.674767][ T7299] netlink: 'syz.1.374': attribute type 21 has an invalid length. [ 201.703587][ T7299] netlink: 164 bytes leftover after parsing attributes in process `syz.1.374'. [ 202.358856][ T5159] udevd[5159]: worker [7138] terminated by signal 33 (Unknown signal 33) [ 202.393827][ T5159] udevd[5159]: worker [7138] failed while handling '/devices/virtual/block/loop1' [ 202.485503][ T7319] netlink: 'syz.1.381': attribute type 39 has an invalid length. [ 204.622502][ T7362] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.391'. [ 205.704635][ T7374] netlink: 'syz.1.393': attribute type 10 has an invalid length. [ 205.738900][ T7374] bond0: (slave bond_slave_0): Releasing backup interface [ 205.798262][ T7365] delete_channel: no stack [ 205.812112][ T7374] bond_slave_0: left promiscuous mode [ 205.817749][ T7374] bond_slave_0: left allmulticast mode [ 206.099791][ T7377] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.395'. [ 206.126846][ T7387] netlink: 'syz.2.397': attribute type 2 has an invalid length. [ 206.173059][ T7387] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 206.230136][ T7387] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.397'. [ 206.383378][ T7379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.396'. [ 207.913151][ T7441] syz.3.411[7441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.913320][ T7441] syz.3.411[7441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.914083][ T7440] syz.3.411[7440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.943794][ T7434] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 207.967301][ T7440] syz.3.411[7440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.091651][ T7434] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.408'. [ 208.903707][ T7458] netlink: 'syz.1.416': attribute type 3 has an invalid length. [ 208.912057][ T7458] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.416'. [ 209.048294][ T7468] netlink: 'syz.3.418': attribute type 27 has an invalid length. [ 209.062560][ T7468] netlink: 152 bytes leftover after parsing attributes in process `syz.3.418'. [ 209.083432][ T7468] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 209.315255][ T7465] netlink: 'syz.0.415': attribute type 21 has an invalid length. [ 209.332074][ T7465] netlink: 'syz.0.415': attribute type 1 has an invalid length. [ 209.424620][ T7476] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 209.443195][ T7476] netlink: 'syz.3.420': attribute type 3 has an invalid length. [ 209.465941][ T7476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.420'. [ 209.475532][ T7465] netlink: 100 bytes leftover after parsing attributes in process `syz.0.415'. [ 212.304671][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.355074][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.362695][ T7529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.862695][ T7568] netlink: 'syz.3.439': attribute type 21 has an invalid length. [ 214.665871][ T7585] netlink: 'syz.1.444': attribute type 10 has an invalid length. [ 214.692767][ T7587] netlink: 'syz.0.446': attribute type 21 has an invalid length. [ 214.717195][ T7587] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 214.740258][ T7587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.446'. [ 214.895465][ T7588] netlink: 'syz.3.445': attribute type 16 has an invalid length. [ 214.907833][ T7588] netlink: 156 bytes leftover after parsing attributes in process `syz.3.445'. [ 214.997713][ T7589] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 215.024560][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.446'. [ 215.045423][ T7589] caif0: entered promiscuous mode [ 215.067413][ T7589] caif0: entered allmulticast mode [ 215.080463][ T7589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.111327][ T7581] delete_channel: no stack [ 215.568858][ T7604] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 215.597284][ T7604] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.450'. [ 216.065481][ T7617] netlink: 'syz.3.453': attribute type 10 has an invalid length. [ 216.087988][ T7617] netlink: 55 bytes leftover after parsing attributes in process `syz.3.453'. [ 219.310648][ T7636] syzkaller0: entered promiscuous mode [ 219.345231][ T7636] syzkaller0: entered allmulticast mode [ 219.531809][ T5793] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 219.532323][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.565116][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.590665][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.602992][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.778949][ T7643] team0: Port device batadv0 removed [ 221.023288][ T7655] netlink: 'syz.1.467': attribute type 21 has an invalid length. [ 221.615291][ T5104] Bluetooth: hci1: command 0x0406 tx timeout [ 224.569912][ T7678] syzkaller0: entered promiscuous mode [ 224.598081][ T7678] syzkaller0: entered allmulticast mode [ 225.195505][ T5104] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 227.254814][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 227.959182][ T7696] netlink: 'syz.3.479': attribute type 21 has an invalid length. [ 228.198536][ T7702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.199116][ T7700] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.481'. [ 228.218395][ T7702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.234920][ T7702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.247468][ T7702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.728499][ T7722] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 228.765591][ T7722] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.776846][ T7727] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.488'. [ 228.788291][ T7727] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 228.807350][ T7722] bond0: (slave team0): Enslaving as an active interface with an up link [ 229.427287][ T7747] team0: Port device team_slave_0 removed [ 229.444049][ T7747] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 229.472779][ T7752] netlink: 'syz.0.494': attribute type 30 has an invalid length. [ 229.489677][ T7748] syzkaller0: left promiscuous mode [ 229.516213][ T7748] syzkaller0: left allmulticast mode [ 229.545987][ T7752] netlink: 132 bytes leftover after parsing attributes in process `syz.0.494'. [ 229.611313][ T7743] netlink: 'syz.1.491': attribute type 30 has an invalid length. [ 229.624454][ T7751] netlink: 'syz.2.492': attribute type 21 has an invalid length. [ 229.649300][ T7758] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.495'. [ 231.705319][ T7784] netlink: 'syz.0.502': attribute type 2 has an invalid length. [ 231.720232][ T7784] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 231.728059][ T7784] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.502'. [ 232.145008][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.509'. [ 232.154400][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.509'. [ 232.389909][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 232.758478][ T7825] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.516'. [ 233.295094][ T7842] netlink: 'syz.2.520': attribute type 2 has an invalid length. [ 233.805256][ T7851] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.523'. [ 233.944651][ T7848] netlink: 'syz.1.522': attribute type 6 has an invalid length. [ 233.973319][ T7848] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.522'. [ 233.997056][ T7854] netlink: 'syz.1.522': attribute type 6 has an invalid length. [ 234.021600][ T7854] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.522'. [ 236.094377][ T7876] tap1: tun_chr_ioctl cmd 1074025677 [ 236.110987][ T7876] tap1: linktype set to 1 [ 236.121025][ T7876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.532'. [ 236.272049][ T7890] netlink: 'syz.0.534': attribute type 21 has an invalid length. [ 236.301443][ T7890] netlink: 132 bytes leftover after parsing attributes in process `syz.0.534'. [ 236.748511][ T7905] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 236.757233][ T7905] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 236.767649][ T7905] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.541'. [ 243.206578][ T7905] netlink: 'syz.0.541': attribute type 10 has an invalid length. [ 243.214575][ T7905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.541'. [ 243.224360][ T7905] dummy0: entered promiscuous mode [ 243.231414][ T7905] bond0: (slave dummy0): Releasing backup interface [ 243.414513][ T7918] netlink: 'syz.2.544': attribute type 10 has an invalid length. [ 243.437895][ T7918] dummy0: left promiscuous mode [ 243.486264][ T7918] team0: Port device dummy0 added [ 243.510604][ T7925] netlink: 'syz.2.544': attribute type 10 has an invalid length. [ 243.614042][ T7925] team0: Port device dummy0 removed [ 243.627077][ T7925] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 243.669216][ T7930] netlink: 'syz.3.546': attribute type 10 has an invalid length. [ 243.678861][ T7930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.546'. [ 243.703653][ T7930] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 243.720662][ T7930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.658251][ T7964] netlink: 'syz.0.556': attribute type 33 has an invalid length. [ 244.667629][ T7964] netlink: 152 bytes leftover after parsing attributes in process `syz.0.556'. [ 245.095338][ T7976] netlink: 'syz.1.554': attribute type 10 has an invalid length. [ 245.209628][ T7976] team0: Port device netdevsim0 added [ 245.236853][ T7980] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.559'. [ 245.390238][ T7980] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 245.603062][ T7959] netlink: 'syz.1.554': attribute type 10 has an invalid length. [ 246.316036][ T7957] netlink: 'syz.1.554': attribute type 10 has an invalid length. [ 246.765994][ T7995] netlink: 'syz.2.563': attribute type 3 has an invalid length. [ 246.852154][ T7995] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 247.011396][ T7995] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.563'. [ 247.607995][ T7957] team0: Port device netdevsim0 removed [ 250.005553][ T7957] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 250.022803][ T7957] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 250.059394][ T7957] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 250.080138][ T7990] netlink: 'syz.0.562': attribute type 11 has an invalid length. [ 250.088076][ T7992] netlink: 'syz.0.562': attribute type 21 has an invalid length. [ 250.105060][ T7992] netlink: 128 bytes leftover after parsing attributes in process `syz.0.562'. [ 250.131497][ T7992] netlink: 'syz.0.562': attribute type 4 has an invalid length. [ 250.146300][ T8001] netlink: 'syz.2.564': attribute type 5 has an invalid length. [ 250.553904][ T8015] veth1_to_bond: entered allmulticast mode [ 251.443828][ T8035] netlink: 'syz.2.573': attribute type 2 has an invalid length. [ 251.500190][ T8035] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 251.512408][ T8035] netlink: 132 bytes leftover after parsing attributes in process `syz.2.573'. [ 252.659872][ T8079] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 252.667850][ T8079] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 252.687970][ T8078] netlink: 'syz.2.583': attribute type 11 has an invalid length. [ 252.850400][ T8078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.583'. [ 254.655401][ T8109] netlink: 'syz.0.594': attribute type 10 has an invalid length. [ 254.671065][ T8109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.594'. [ 256.216380][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.224789][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.487025][ T8146] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 258.494374][ T8146] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 263.371092][ T8152] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.603'. [ 265.100907][ T8173] syzkaller0: entered promiscuous mode [ 265.170892][ T8173] syzkaller0: entered allmulticast mode [ 265.480850][ T8189] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.613'. [ 265.929813][ T8198] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.614'. [ 265.943965][ T8200] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 265.990675][ T8201] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 265.995347][ T8200] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 265.997415][ T8201] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 266.036418][ T8198] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 266.065667][ T8198] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 266.091301][ T8198] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 266.375383][ T8204] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 266.400186][ T8204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.625'. [ 266.415078][ T8204] lo: left allmulticast mode [ 266.449343][ T8204] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 266.476873][ T8204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.513429][ T8204] syz.0.625 (8204) used greatest stack depth: 18728 bytes left [ 269.200089][ T8216] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 269.232820][ T8216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.260668][ T8216] team0: Port device bond0 added [ 269.379523][ T8228] netlink: 'syz.2.622': attribute type 9 has an invalid length. [ 269.423510][ T8228] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.622'. [ 269.945354][ T8254] netlink: 830 bytes leftover after parsing attributes in process `syz.0.633'. [ 272.179208][ T8301] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.647'. [ 272.883074][ T8315] netlink: 38835 bytes leftover after parsing attributes in process `syz.0.649'. [ 273.082768][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 273.094629][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 273.438788][ T8342] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.658'. [ 273.851033][ T8357] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 273.989525][ T8357] netlink: 'syz.3.664': attribute type 3 has an invalid length. [ 274.005102][ T8357] netlink: 104532 bytes leftover after parsing attributes in process `syz.3.664'. [ 274.113740][ T8359] delete_channel: no stack [ 274.286255][ T8366] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.668'. [ 274.572421][ T8374] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.670'. [ 274.763513][ T8379] netlink: 'syz.0.672': attribute type 10 has an invalid length. [ 274.774476][ T8379] netlink: 152 bytes leftover after parsing attributes in process `syz.0.672'. [ 274.803254][ T8379] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 277.242749][ T8450] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.694'. [ 277.385785][ T8453] C: renamed from team_slave_0 [ 277.475227][ T8453] netlink: 'syz.3.695': attribute type 4 has an invalid length. [ 277.627199][ T8453] netlink: 116 bytes leftover after parsing attributes in process `syz.3.695'. [ 277.649818][ T8453] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 277.703710][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 277.965790][ T8468] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 277.974532][ T8468] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.699'. [ 278.304882][ T8482] netlink: 'syz.1.704': attribute type 3 has an invalid length. [ 278.336903][ T8482] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.704'. [ 278.355186][ T8488] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.705'. [ 278.381313][ T8488] netlink: 'syz.0.705': attribute type 3 has an invalid length. [ 278.389370][ T8488] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.705'. [ 278.466063][ T8491] netlink: 'syz.3.706': attribute type 39 has an invalid length. [ 278.578496][ T8491] hsr_slave_1 (unregistering): left promiscuous mode [ 278.692438][ T8495] netlink: 'syz.1.708': attribute type 5 has an invalid length. [ 278.701342][ T8495] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 278.726656][ T8495] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.708'. [ 279.808270][ T8521] netlink: 'syz.1.717': attribute type 10 has an invalid length. [ 279.817641][ T8521] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.717'. [ 283.326114][ T8545] netlink: 'syz.1.722': attribute type 29 has an invalid length. [ 283.336264][ T8545] netlink: 'syz.1.722': attribute type 29 has an invalid length. [ 283.413270][ T8546] netlink: 'syz.1.722': attribute type 29 has an invalid length. [ 283.911617][ T8560] netlink: 'syz.2.725': attribute type 29 has an invalid length. [ 283.955969][ T8555] syzkaller0: entered promiscuous mode [ 283.970774][ T8555] syzkaller0: entered allmulticast mode [ 283.979766][ T8560] netlink: 'syz.2.725': attribute type 29 has an invalid length. [ 284.050438][ T8555] netlink: 'syz.2.725': attribute type 29 has an invalid length. [ 284.080233][ T8555] netlink: 'syz.2.725': attribute type 29 has an invalid length. [ 284.118886][ T8564] netlink: 'syz.1.729': attribute type 21 has an invalid length. [ 284.127152][ T8564] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 284.143796][ T8564] netlink: 16050 bytes leftover after parsing attributes in process `syz.1.729'. [ 284.238783][ T8566] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 284.449437][ T8569] netlink: 104532 bytes leftover after parsing attributes in process `syz.0.730'. [ 287.221038][ T8593] syzkaller0: entered promiscuous mode [ 287.226681][ T8593] syzkaller0: entered allmulticast mode [ 287.694415][ T8612] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 288.513339][ T8612] validate_nla: 2 callbacks suppressed [ 288.513377][ T8612] netlink: 'syz.2.743': attribute type 3 has an invalid length. [ 288.532466][ T8612] netlink: 104532 bytes leftover after parsing attributes in process `syz.2.743'. [ 294.318416][ T8722] netlink: 'syz.0.771': attribute type 9 has an invalid length. [ 294.354392][ T8722] netlink: 'syz.0.771': attribute type 2 has an invalid length. [ 294.382585][ T8722] netlink: 'syz.0.771': attribute type 8 has an invalid length. [ 294.411794][ T8722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.771'. [ 294.655304][ T8730] netlink: 'syz.0.775': attribute type 10 has an invalid length. [ 296.095128][ T8730] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 296.886102][ T8758] netlink: 184 bytes leftover after parsing attributes in process `syz.2.782'. [ 297.467459][ T8769] netlink: 'syz.2.787': attribute type 10 has an invalid length. [ 297.926671][ T8769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.947456][ T8769] team0: Port device bond0 added [ 298.224746][ T8779] wg2: entered promiscuous mode [ 298.229870][ T8779] wg2: entered allmulticast mode [ 298.239283][ T8784] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 298.265656][ T8784] team0: Cannot enslave team device to itself [ 298.934126][ T8789] netlink: 'syz.2.792': attribute type 4 has an invalid length. [ 298.944984][ T8789] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.792'. [ 301.742164][ T8812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.800'. [ 307.319392][ T8842] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.807'. [ 307.328975][ T8844] netlink: 'syz.2.806': attribute type 7 has an invalid length. [ 307.337843][ T8844] netlink: 'syz.2.806': attribute type 6 has an invalid length. [ 308.096527][ T8878] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.817'. [ 309.043555][ T8901] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.823'. [ 309.314814][ T8893] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.823'. [ 309.934365][ T8915] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 309.951961][ T5793] Bluetooth: hci2: ISO packet for unknown connection handle 3848 [ 309.952315][ T8915] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 309.989068][ T8923] netlink: 830 bytes leftover after parsing attributes in process `syz.2.829'. [ 310.288826][ T8929] netlink: 'syz.3.833': attribute type 10 has an invalid length. [ 310.354912][ T8929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.394867][ T8929] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 310.434101][ T8935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.835'. [ 310.507430][ T8935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.835'. [ 310.548324][ T8936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.835'. [ 310.579141][ T8937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.835'. [ 310.723984][ T8929] netlink: 'syz.3.833': attribute type 4 has an invalid length. [ 310.742907][ T8929] netlink: 152 bytes leftover after parsing attributes in process `syz.3.833'. [ 310.885628][ T8929] .þ: renamed from bond0 (while UP) [ 311.011779][ T8950] delete_channel: no stack [ 311.016903][ T8952] delete_channel: no stack [ 311.023163][ T8950] delete_channel: no stack [ 311.028001][ T8952] delete_channel: no stack [ 311.355864][ T8927] .þ: entered promiscuous mode [ 311.361179][ T8927] bond_slave_0: entered promiscuous mode [ 311.367194][ T8927] bond_slave_1: entered promiscuous mode [ 311.374137][ T8927] dummy0: entered promiscuous mode [ 311.379655][ T8927] team0: entered promiscuous mode [ 311.385164][ T8927] team_slave_1: entered promiscuous mode [ 311.391429][ T8927] batadv0: entered promiscuous mode [ 311.397550][ T8951] netlink: 'syz.1.839': attribute type 10 has an invalid length. [ 311.868877][ T8962] netlink: 'syz.3.840': attribute type 21 has an invalid length. [ 311.896566][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.247017][ T8987] __nla_validate_parse: 3 callbacks suppressed [ 313.247035][ T8987] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.849'. [ 313.315080][ T8987] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.849'. [ 316.474118][ T9044] netlink: 183836 bytes leftover after parsing attributes in process `syz.1.865'. [ 316.496014][ T9044] openvswitch: netlink: Key type 29 is not supported [ 316.579732][ T9051] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.868'. [ 316.776574][ T9063] netlink: 'syz.1.871': attribute type 10 has an invalid length. [ 316.875505][ T9063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.871'. [ 317.165604][ T9086] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.878'. [ 317.401825][ T9092] netlink: set zone limit has 8 unknown bytes [ 317.563647][ T9098] netlink: 'syz.0.883': attribute type 29 has an invalid length. [ 317.584434][ T9098] netlink: 'syz.0.883': attribute type 29 has an invalid length. [ 317.602729][ T9098] netlink: 'syz.0.883': attribute type 29 has an invalid length. [ 317.656635][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.670451][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.006967][ T9122] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 318.016387][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 318.038944][ T9122] netlink: 'syz.1.891': attribute type 21 has an invalid length. [ 318.055101][ T9122] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.891'. [ 318.073584][ T9124] netlink: 'syz.2.890': attribute type 10 has an invalid length. [ 318.096106][ T9124] netlink: 2 bytes leftover after parsing attributes in process `syz.2.890'. [ 318.106054][ T9124] bond0: entered promiscuous mode [ 318.111779][ T9124] bond_slave_0: entered promiscuous mode [ 318.117916][ T9124] bond_slave_1: entered promiscuous mode [ 318.126522][ T9124] dummy0: entered promiscuous mode [ 318.154091][ T9124] team0: Port device bond0 removed [ 318.159695][ T9124] bridge0: port 3(bond0) entered blocking state [ 318.173659][ T9124] bridge0: port 3(bond0) entered disabled state [ 318.190123][ T9124] bond0: entered allmulticast mode [ 318.195418][ T9124] bond_slave_0: entered allmulticast mode [ 318.210316][ T9124] bond_slave_1: entered allmulticast mode [ 318.216222][ T9124] dummy0: entered allmulticast mode [ 318.339302][ T9132] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.893'. [ 318.353662][ T9131] delete_channel: no stack [ 318.971572][ T9158] netlink: 'syz.2.902': attribute type 10 has an invalid length. [ 318.979871][ T9158] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 318.996829][ T9158] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 319.046453][ T9158] netlink: 'syz.2.902': attribute type 10 has an invalid length. [ 319.101124][ T9158] team0: Port device netdevsim0 removed [ 319.192443][ T9158] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 319.236792][ T9158] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 319.268882][ T9158] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 319.580423][ T9167] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.901'. [ 319.780063][ T9160] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.901'. [ 321.854718][ T9172] netlink: 'syz.2.905': attribute type 33 has an invalid length. [ 321.862830][ T9172] netlink: 164 bytes leftover after parsing attributes in process `syz.2.905'. [ 322.335237][ T9197] netlink: 60 bytes leftover after parsing attributes in process `syz.2.911'. [ 322.704646][ T9208] netlink: 'syz.3.914': attribute type 10 has an invalid length. [ 322.733144][ T9208] .þ: (slave batadv0): Releasing backup interface [ 322.821024][ T9208] batadv0: left promiscuous mode [ 322.896187][ T9208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.911631][ T9208] batadv0: entered promiscuous mode [ 322.925159][ T9208] team0: Port device batadv0 added [ 322.973993][ T9210] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.915'. [ 323.051473][ T9210] openvswitch: netlink: Key type 29 is not supported [ 323.167219][ T9220] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.917'. [ 323.919536][ T9231] IPv6: Can't replace route, no match found [ 324.099687][ T9233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.923'. [ 324.424311][ T9233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.540657][ T9245] netlink: 822 bytes leftover after parsing attributes in process `syz.0.927'. [ 324.558897][ T9245] netlink: 822 bytes leftover after parsing attributes in process `syz.0.927'. [ 324.569699][ T9245] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 326.316143][ T9295] netlink: 'syz.1.941': attribute type 11 has an invalid length. [ 326.360172][ T9295] netlink: 136 bytes leftover after parsing attributes in process `syz.1.941'. [ 327.119934][ T9312] netlink: 56 bytes leftover after parsing attributes in process `syz.1.946'. [ 327.132769][ T9312] vcan0: entered promiscuous mode [ 329.433542][ T9357] netlink: 'syz.0.961': attribute type 30 has an invalid length. [ 329.576742][ T9357] syzkaller0: entered promiscuous mode [ 329.598760][ T9357] syzkaller0: entered allmulticast mode [ 329.819172][ T9362] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 329.840936][ T9362] netlink: 55 bytes leftover after parsing attributes in process `syz.2.962'. [ 329.860571][ T9360] netlink: 763 bytes leftover after parsing attributes in process `syz.2.962'. [ 333.075553][ T9394] netlink: 'syz.3.973': attribute type 29 has an invalid length. [ 333.113422][ T9394] netlink: 'syz.3.973': attribute type 29 has an invalid length. [ 334.133432][ T9421] syzkaller0: entered allmulticast mode [ 334.209830][ T9408] netlink: 156 bytes leftover after parsing attributes in process `syz.1.977'. [ 334.219506][ T9416] netlink: 830 bytes leftover after parsing attributes in process `syz.3.975'. [ 334.231984][ T9416] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 335.385544][ T9451] netlink: 'syz.3.988': attribute type 21 has an invalid length. [ 335.420631][ T9451] netlink: 'syz.3.988': attribute type 6 has an invalid length. [ 335.430513][ T9451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.988'. [ 336.236479][ T9467] syzkaller0: entered promiscuous mode [ 336.261625][ T9467] syzkaller0: entered allmulticast mode [ 336.761544][ T9474] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.992'. [ 340.915713][ T9468] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.992'. [ 341.559532][ T9501] netlink: 'syz.0.1002': attribute type 10 has an invalid length. [ 341.705079][ T9501] bond0: (slave netdevsim0): Releasing backup interface [ 341.729591][ T9501] team0: Port device netdevsim0 added [ 341.765064][ T9506] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 341.780278][ T9506] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.801698][ T9506] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.820050][ T9506] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.829002][ T9506] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.864020][ T9506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.900083][ T9506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.919739][ T9506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.937897][ T9506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.965855][ T9506] team0: Port device geneve1 added [ 342.520801][ T9516] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1006'. [ 342.638526][ T9516] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1006'. [ 342.652677][ T9515] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1006'. [ 342.668302][ T9518] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1006'. [ 342.879274][ T9523] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 342.927119][ T9523] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.1005'. [ 343.730717][ T9537] netlink: 'syz.2.1010': attribute type 33 has an invalid length. [ 343.800093][ T9537] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1010'. [ 343.829946][ T9537] `: renamed from team0 [ 344.043728][ T9547] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1014'. [ 344.085151][ T9547] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 344.168648][ T9547] syzkaller0: entered allmulticast mode [ 344.226691][ T9555] netlink: 'syz.0.1017': attribute type 9 has an invalid length. [ 344.265029][ T9556] netlink: 'syz.2.1016': attribute type 21 has an invalid length. [ 344.296934][ T9555] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1017'. [ 344.726183][ T9554] netlink: 'syz.0.1017': attribute type 9 has an invalid length. [ 344.770385][ T9554] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1017'. [ 344.947202][ T9553] delete_channel: no stack [ 345.351099][ T9571] netlink: 'syz.0.1020': attribute type 21 has an invalid length. [ 345.379465][ T9577] syzkaller0: left allmulticast mode [ 345.626330][ T9584] netlink: 'syz.0.1025': attribute type 4 has an invalid length. [ 346.160176][ T9587] __nla_validate_parse: 2 callbacks suppressed [ 346.160195][ T9587] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1023'. [ 346.190222][ T9590] netlink: 'syz.2.1026': attribute type 21 has an invalid length. [ 346.199474][ T9590] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1026'. [ 346.911442][ T9608] netlink: 'syz.3.1032': attribute type 3 has an invalid length. [ 346.972805][ T9608] netlink: 'syz.3.1032': attribute type 8 has an invalid length. [ 346.985141][ T9608] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.1032'. [ 347.877983][ T9614] netlink: 'syz.2.1033': attribute type 1 has an invalid length. [ 348.096189][ T9614] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.1033'. [ 349.627839][ T9611] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 350.102026][ T9627] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1037'. [ 351.212599][ T9655] netlink: 'syz.0.1045': attribute type 1 has an invalid length. [ 351.222724][ T9655] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.1045'. [ 353.796716][ T9692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.799665][ T9694] netlink: 'syz.2.1057': attribute type 29 has an invalid length. [ 353.826638][ T9688] netlink: 'syz.1.1063': attribute type 10 has an invalid length. [ 353.834959][ T9688] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1063'. [ 353.852264][ T9688] bridge0: port 4(dummy0) entered blocking state [ 353.858850][ T9688] bridge0: port 4(dummy0) entered forwarding state [ 353.881934][ T9694] netlink: 'syz.2.1057': attribute type 29 has an invalid length. [ 354.101547][ T9692] netlink: 'syz.2.1057': attribute type 29 has an invalid length. [ 354.129382][ T9692] netlink: 'syz.2.1057': attribute type 29 has an invalid length. [ 354.194792][ T9694] netlink: 'syz.2.1057': attribute type 29 has an invalid length. [ 354.528210][ T5791] cgroup: fork rejected by pids controller in /syz1 [ 354.598973][ T9713] netlink: 174904 bytes leftover after parsing attributes in process `syz.2.1061'. [ 355.285866][ T9717] bridge_slave_1: left allmulticast mode [ 355.291820][ T9717] bridge_slave_1: left promiscuous mode [ 355.298033][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.341195][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.810590][ T1305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.102446][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.111967][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.121243][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.130134][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.138904][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.148253][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.335809][ T1305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.446219][ T1305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.469906][ T9737] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1072'. [ 356.533470][ T1305] bond0: (slave netdevsim0): Releasing backup interface [ 356.549779][ T1305] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 356.575895][ T1305] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 356.605357][ T1305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.588230][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 358.211830][ T5793] Bluetooth: hci3: command tx timeout [ 358.356980][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.383138][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.407086][ T9732] bridge_slave_0: entered allmulticast mode [ 358.423291][ T9732] bridge_slave_0: entered promiscuous mode [ 358.434041][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.441869][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.449253][ T9732] bridge_slave_1: entered allmulticast mode [ 358.461588][ T9732] bridge_slave_1: entered promiscuous mode [ 358.639256][ T9769] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1080'. [ 358.702289][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.734460][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.809573][ T9732] team0: Port device team_slave_0 added [ 358.822753][ T9775] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1082'. [ 358.836076][ T9732] team0: Port device team_slave_1 added [ 358.978363][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.990524][ T9780] netlink: 'syz.3.1084': attribute type 30 has an invalid length. [ 358.998706][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.034724][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.076039][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.085406][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.129850][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.402612][ T9732] hsr_slave_0: entered promiscuous mode [ 359.437050][ T9732] hsr_slave_1: entered promiscuous mode [ 359.448175][ T9732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.455924][ T9732] Cannot create hsr debugfs directory [ 359.479060][ T9796] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1088'. [ 360.292592][ T5793] Bluetooth: hci3: command tx timeout [ 360.604752][ T1305] hsr_slave_0: left promiscuous mode [ 360.641405][ T1305] hsr_slave_1: left promiscuous mode [ 360.655482][ T1305] bridge0: port 4(dummy0) entered disabled state [ 360.671985][ T1305] bond0: left allmulticast mode [ 360.677261][ T1305] bridge0: port 3(bond0) entered disabled state [ 360.689234][ T1305] bridge_slave_1: left allmulticast mode [ 360.695321][ T1305] bridge_slave_1: left promiscuous mode [ 360.701500][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.711830][ T1305] bridge_slave_0: left allmulticast mode [ 360.717547][ T1305] bridge_slave_0: left promiscuous mode [ 360.726168][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.785899][ T1305] veth1_macvtap: left promiscuous mode [ 360.792315][ T1305] veth0_macvtap: left promiscuous mode [ 362.370283][ T5793] Bluetooth: hci3: command tx timeout [ 363.284954][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 363.329349][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 363.376505][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.885148][ T1305] bond0 (unregistering): Released all slaves [ 364.181130][ T9852] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1102'. [ 364.223684][ T9850] sit0: entered allmulticast mode [ 364.387161][ T9854] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1103'. [ 364.402606][ T9854] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1103'. [ 364.415124][ T9854] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1103'. [ 364.463111][ T5793] Bluetooth: hci3: command tx timeout [ 364.519184][ T9732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.533039][ T9732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.544430][ T9732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.626390][ T9732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.993863][ T9873] bond0: left allmulticast mode [ 366.998792][ T9873] bond_slave_0: left allmulticast mode [ 367.004694][ T9873] bond_slave_1: left allmulticast mode [ 367.010448][ T9873] dummy0: left allmulticast mode [ 367.015425][ T9873] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 367.024051][ T9873] bridge0: port 3(bond0) entered disabled state [ 367.034167][ T9873] bridge_slave_1: left allmulticast mode [ 367.040138][ T9873] bridge_slave_1: left promiscuous mode [ 367.045899][ T9873] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.055397][ T9873] bridge_slave_0: left allmulticast mode [ 367.061342][ T9873] bridge_slave_0: left promiscuous mode [ 367.067079][ T9873] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.177096][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.220120][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.256680][ T9304] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.264792][ T9304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.295381][ T9304] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.302647][ T9304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.367986][ T9879] netlink: 'syz.3.1109': attribute type 21 has an invalid length. [ 367.377434][ T9879] netlink: 'syz.3.1109': attribute type 1 has an invalid length. [ 367.386162][ T9879] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.1109'. [ 367.693964][ T9875] syzkaller0: entered promiscuous mode [ 367.699735][ T9875] syzkaller0: entered allmulticast mode [ 368.236160][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.343254][ T9732] veth0_vlan: entered promiscuous mode [ 368.388232][ T9732] veth1_vlan: entered promiscuous mode [ 368.518353][ T9732] veth0_macvtap: entered promiscuous mode [ 368.561750][ T9732] veth1_macvtap: entered promiscuous mode [ 368.585171][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.601006][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.637298][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.678429][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.712762][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.737670][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.791072][ T9732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.811321][ T9732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.822732][ T9732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.833454][ T9732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.982243][ T9906] netlink: 'syz.3.1115': attribute type 1 has an invalid length. [ 368.997004][ T9906] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1115'. [ 369.403217][ T9912] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 369.475035][ T9304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.519652][ T9304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.636026][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.665123][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.735860][ T9914] netlink: 123072 bytes leftover after parsing attributes in process `syz.0.1117'. [ 369.759002][ T9914] netlink: 'syz.0.1117': attribute type 1 has an invalid length. [ 369.772993][ T9914] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1117'. [ 369.785103][ T9914] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1117'. [ 370.514073][ T9919] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1118'. [ 370.547635][ T9919] netlink: 'syz.2.1118': attribute type 3 has an invalid length. [ 370.578922][ T9919] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1118'. [ 371.805179][ T9941] netlink: 'syz.2.1121': attribute type 39 has an invalid length. [ 373.155539][ T9961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.614705][ T9972] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1131'. [ 374.729645][T10021] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1143'. [ 375.281468][T10034] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1150'. [ 375.304645][T10034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1150'. [ 375.359085][T10036] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1151'. [ 375.410211][T10036] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 375.622803][T10046] netlink: 'syz.0.1155': attribute type 10 has an invalid length. [ 375.647089][T10046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1155'. [ 377.539477][T10085] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1167'. [ 377.819455][ T5788] cgroup: fork rejected by pids controller in /syz2 [ 378.639868][T10107] netlink: 'syz.0.1172': attribute type 2 has an invalid length. [ 378.670235][T10107] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1172'. [ 379.098365][T10116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1175'. [ 379.116729][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.123741][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.344969][T10116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1175'. [ 379.367986][T10114] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1175'. [ 379.594697][ T1305] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.779374][ T1305] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.895274][ T1305] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.101005][ T1305] bond0: (slave netdevsim0): Releasing backup interface [ 380.121687][ T1305] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 380.147354][ T1305] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.199813][T10129] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1180'. [ 380.744114][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.766886][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.776132][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.805439][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.814046][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 380.822607][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.422219][T10155] netlink: 'syz.3.1186': attribute type 10 has an invalid length. [ 381.484995][T10155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1186'. [ 381.707209][T10155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.344794][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.361934][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.377317][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.399258][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.418059][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 383.432549][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 384.687327][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 384.711867][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 384.723609][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 384.734928][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 384.751860][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 384.759636][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.131202][ T1305] hsr_slave_0: left promiscuous mode [ 385.162637][ T1305] hsr_slave_1: left promiscuous mode [ 385.292609][ T1305] veth1_macvtap: left promiscuous mode [ 385.298341][ T1305] veth0_macvtap: left promiscuous mode [ 385.501084][ T1305] ` (unregistering): Port device geneve1 removed [ 385.822583][ T1305] ` (unregistering): Port device team_slave_1 removed [ 385.871106][ T1305] ` (unregistering): Port device team_slave_0 removed [ 386.006605][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.026041][ T1305] bond_slave_1 (unregistering): left promiscuous mode [ 386.177168][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.204342][ T1305] bond_slave_0 (unregistering): left promiscuous mode [ 386.581367][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.603398][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.620621][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.646212][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.654508][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 386.671323][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.893852][ T1305] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 386.906168][ T1305] dummy0 (unregistering): left promiscuous mode [ 387.867398][ T1305] bond0 (unregistering): Released all slaves [ 387.911477][T10240] netlink: 'syz.1.1210': attribute type 39 has an invalid length. [ 388.139068][T10239] delete_channel: no stack [ 389.695321][T10279] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1219'. [ 390.339624][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 390.352203][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 390.364059][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 390.375362][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 390.385464][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 390.393450][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.723940][T10300] netlink: 'syz.3.1224': attribute type 21 has an invalid length. [ 393.217633][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.228797][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.240508][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.261190][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.279477][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 393.287112][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.359168][T10332] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 393.428818][T10332] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1232'. [ 393.473793][T10331] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 393.483676][T10331] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1232'. [ 395.260973][T10359] : entered promiscuous mode [ 395.281932][T10359] : entered allmulticast mode [ 395.561650][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.572031][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.580630][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.589554][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.597772][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 395.605660][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.494972][T10393] netlink: 'syz.3.1251': attribute type 9 has an invalid length. [ 398.533816][T10393] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1251'. [ 398.606328][T10394] netlink: 'syz.3.1251': attribute type 9 has an invalid length. [ 398.630339][T10394] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1251'. [ 398.654234][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.664535][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.673202][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.699876][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.708827][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 398.719152][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.681803][T10421] netlink: 'syz.3.1267': attribute type 19 has an invalid length. [ 400.775859][T10421] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1267'. [ 401.148148][T10422] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 401.292234][T10422] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1258'. [ 401.832214][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.844968][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.854093][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.862803][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.870976][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 401.879256][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 403.697355][T10452] bridge_slave_1: left allmulticast mode [ 403.726947][T10452] bridge_slave_1: left promiscuous mode [ 403.750018][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.242365][T10452] bridge_slave_0: left allmulticast mode [ 404.267388][T10452] bridge_slave_0: left promiscuous mode [ 404.342475][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.575588][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.586256][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.594965][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.608700][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.616882][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 404.627362][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.888194][T10476] sctp: [Deprecated]: syz.1.1274 (pid 10476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.888194][T10476] Use struct sctp_sack_info instead [ 405.126678][T10483] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1275'. [ 406.432258][T10489] syz.0.1276[10489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.432522][T10489] syz.0.1276[10489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.477626][T10490] netlink: 'syz.3.1278': attribute type 1 has an invalid length. [ 406.540968][T10490] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1278'. [ 406.560353][T10492] netlink: 'syz.3.1278': attribute type 21 has an invalid length. [ 406.580143][T10492] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1278'. [ 406.589276][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 406.634880][T10490] netlink: 'syz.3.1278': attribute type 2 has an invalid length. [ 406.644248][T10490] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1278'. [ 406.751155][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.761011][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.769269][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.778284][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.787401][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 406.805682][T10500] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 406.814004][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.820849][T10500] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1288'. [ 407.227665][T10518] netlink: 'syz.1.1286': attribute type 3 has an invalid length. [ 407.247814][T10518] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1286'. [ 407.260710][T10515] netlink: 'syz.0.1284': attribute type 2 has an invalid length. [ 407.268600][T10515] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1284'. [ 407.314507][T10518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1286'. [ 409.133956][T10543] netlink: 'syz.0.1292': attribute type 11 has an invalid length. [ 409.234433][T10543] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1292'. [ 409.448419][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.460335][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.470647][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.479006][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.487116][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.495396][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.091801][T10568] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 411.185786][T10568] .3ãc¤±: mtu less than device minimum [ 411.202816][T10568] .þ: (slave .3ãc¤±): Error -22 calling dev_set_mtu [ 411.213303][T10562] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 411.221649][T10562] .3ãc¤±: mtu less than device minimum [ 411.227214][T10562] .þ: (slave .3ãc¤±): Error -22 calling dev_set_mtu [ 411.931321][T10582] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1305'. [ 411.946944][T10582] ksmbd: Unknown IPC event: 0, ignore. [ 412.252332][T10594] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1304'. [ 412.408455][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.418472][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.427074][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.435939][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.445083][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 412.453088][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.561339][T10620] netlink: 'syz.0.1312': attribute type 29 has an invalid length. [ 414.582818][T10620] netlink: 'syz.0.1312': attribute type 29 has an invalid length. [ 414.604203][T10620] netlink: 'syz.0.1312': attribute type 29 has an invalid length. [ 414.614406][T10620] netlink: 'syz.0.1312': attribute type 29 has an invalid length. [ 414.722157][T10620] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1312'. [ 414.760457][T10625] netlink: 'syz.0.1312': attribute type 29 has an invalid length. [ 415.059829][T10628] FAULT_INJECTION: forcing a failure. [ 415.059829][T10628] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 415.093506][T10628] CPU: 0 PID: 10628 Comm: syz.0.1316 Not tainted syzkaller #0 [ 415.101134][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 415.111230][T10628] Call Trace: [ 415.114561][T10628] [ 415.117524][T10628] dump_stack_lvl+0x16c/0x230 [ 415.122250][T10628] ? show_regs_print_info+0x20/0x20 [ 415.127489][T10628] ? load_image+0x3b0/0x3b0 [ 415.132030][T10628] ? __might_fault+0xaa/0x120 [ 415.136741][T10628] ? __lock_acquire+0x7c80/0x7c80 [ 415.141814][T10628] should_fail_ex+0x39d/0x4d0 [ 415.146554][T10628] strncpy_from_user+0x36/0x2e0 [ 415.151463][T10628] getname_flags+0xf6/0x500 [ 415.156030][T10628] do_sys_openat2+0xcb/0x1c0 [ 415.160681][T10628] ? do_sys_open+0xe0/0xe0 [ 415.165169][T10628] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 415.171205][T10628] ? lock_chain_count+0x20/0x20 [ 415.176147][T10628] __x64_sys_openat+0x139/0x160 [ 415.181050][T10628] do_syscall_64+0x55/0xb0 [ 415.185502][T10628] ? clear_bhb_loop+0x40/0x90 [ 415.190233][T10628] ? clear_bhb_loop+0x40/0x90 [ 415.194626][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.194949][T10628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.204143][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.207999][T10628] RIP: 0033:0x7fbee518f749 [ 415.217292][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.219350][T10628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.228282][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.246103][T10628] RSP: 002b:00007fbee33f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 415.246145][T10628] RAX: ffffffffffffffda RBX: 00007fbee53e5fa0 RCX: 00007fbee518f749 [ 415.246159][T10628] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 415.246173][T10628] RBP: 00007fbee33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 415.246184][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.246195][T10628] R13: 00007fbee53e6038 R14: 00007fbee53e5fa0 R15: 00007ffee34e5818 [ 415.246225][T10628] [ 415.393588][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 415.427573][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.982032][T10646] netlink: 'syz.0.1322': attribute type 10 has an invalid length. [ 416.006164][T10647] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1320'. [ 416.432379][T10656] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1323'. [ 417.914993][T10659] netlink: 'syz.1.1325': attribute type 29 has an invalid length. [ 417.947419][T10659] netlink: 'syz.1.1325': attribute type 29 has an invalid length. [ 417.969840][T10659] netlink: 'syz.1.1325': attribute type 29 has an invalid length. [ 418.001644][T10659] netlink: 'syz.1.1325': attribute type 29 has an invalid length. [ 418.037717][T10659] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1325'. [ 418.369419][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.381041][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.400694][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.411036][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.419340][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 418.428739][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.468080][T10673] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1329'. [ 418.510382][T10673] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1329'. [ 418.864607][T10677] netlink: 126332 bytes leftover after parsing attributes in process `syz.0.1330'. [ 420.764751][T10687] validate_nla: 5 callbacks suppressed [ 420.764770][T10687] netlink: 'syz.1.1333': attribute type 25 has an invalid length. [ 420.780430][T10687] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1333'. [ 420.850656][T10687] netlink: 'syz.1.1333': attribute type 11 has an invalid length. [ 420.858650][T10687] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1333'. [ 420.899434][T10690] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1334'. [ 421.513373][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.523416][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.542379][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.552476][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.563114][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 421.570890][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.861690][T10707] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1335'. [ 423.952307][T10721] netlink: 'syz.3.1341': attribute type 29 has an invalid length. [ 423.995078][T10721] netlink: 'syz.3.1341': attribute type 29 has an invalid length. [ 424.042377][T10722] netlink: 'syz.3.1341': attribute type 29 has an invalid length. [ 424.062420][T10721] netlink: 'syz.3.1341': attribute type 29 has an invalid length. [ 424.081198][T10721] netlink: 'syz.3.1341': attribute type 29 has an invalid length. [ 424.181542][T10727] netlink: 'syz.0.1342': attribute type 10 has an invalid length. [ 424.190943][T10729] FAULT_INJECTION: forcing a failure. [ 424.190943][T10729] name failslab, interval 1, probability 0, space 0, times 1 [ 424.227834][T10729] CPU: 0 PID: 10729 Comm: syz.1.1343 Not tainted syzkaller #0 [ 424.235378][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.245475][T10729] Call Trace: [ 424.248785][T10729] [ 424.251749][T10729] dump_stack_lvl+0x16c/0x230 [ 424.256556][T10729] ? show_regs_print_info+0x20/0x20 [ 424.261815][T10729] ? load_image+0x3b0/0x3b0 [ 424.266372][T10729] ? __might_sleep+0xe0/0xe0 [ 424.271100][T10729] ? __lock_acquire+0x7c80/0x7c80 [ 424.276161][T10729] ? prepend_path+0x4b/0x960 [ 424.280809][T10729] should_fail_ex+0x39d/0x4d0 [ 424.285550][T10729] should_failslab+0x9/0x20 [ 424.290204][T10729] slab_pre_alloc_hook+0x59/0x310 [ 424.295280][T10729] ? __asan_memcpy+0x40/0x70 [ 424.300009][T10729] ? tomoyo_encode+0x28b/0x540 [ 424.304827][T10729] ? tomoyo_encode+0x28b/0x540 [ 424.309648][T10729] __kmem_cache_alloc_node+0x53/0x260 [ 424.315165][T10729] ? prepend_path+0x4b/0x960 [ 424.319800][T10729] ? tomoyo_encode+0x28b/0x540 [ 424.324619][T10729] __kmalloc+0xa4/0x240 [ 424.328867][T10729] tomoyo_encode+0x28b/0x540 [ 424.333521][T10729] tomoyo_realpath_from_path+0x592/0x5d0 [ 424.339216][T10729] tomoyo_check_open_permission+0x1c3/0x3c0 [ 424.345155][T10729] ? tomoyo_check_open_permission+0x16e/0x3c0 [ 424.351263][T10729] ? tomoyo_check_path_number_acl+0x280/0x280 [ 424.357474][T10729] ? __asan_memset+0x22/0x40 [ 424.362129][T10729] ? __rwlock_init+0x150/0x150 [ 424.366941][T10729] ? tomoyo_file_open+0xed/0x180 [ 424.367092][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.371903][T10729] security_file_open+0x62/0xa0 [ 424.371952][T10729] do_dentry_open+0x380/0x1500 [ 424.371992][T10729] path_openat+0x274b/0x3190 [ 424.385654][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.388713][T10729] ? do_filp_open+0x3d0/0x3d0 [ 424.394520][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.400493][T10729] do_filp_open+0x1c5/0x3d0 [ 424.400534][T10729] ? vfs_tmpfile+0x490/0x490 [ 424.408130][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.412259][T10729] ? _raw_spin_unlock+0x28/0x40 [ 424.417661][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 424.421375][T10729] ? alloc_fd+0x58f/0x630 [ 424.421415][T10729] do_sys_openat2+0x12c/0x1c0 [ 424.421441][T10729] ? do_sys_open+0xe0/0xe0 [ 424.421463][T10729] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 424.421490][T10729] ? lock_chain_count+0x20/0x20 [ 424.421518][T10729] __x64_sys_openat+0x139/0x160 [ 424.421549][T10729] do_syscall_64+0x55/0xb0 [ 424.421572][T10729] ? clear_bhb_loop+0x40/0x90 [ 424.430716][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 424.433355][T10729] ? clear_bhb_loop+0x40/0x90 [ 424.490689][T10729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.496635][T10729] RIP: 0033:0x7fa81258f749 [ 424.501180][T10729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.520931][T10729] RSP: 002b:00007fa813415038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 424.529396][T10729] RAX: ffffffffffffffda RBX: 00007fa8127e5fa0 RCX: 00007fa81258f749 [ 424.537410][T10729] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 424.545433][T10729] RBP: 00007fa813415090 R08: 0000000000000000 R09: 0000000000000000 [ 424.553460][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.561509][T10729] R13: 00007fa8127e6038 R14: 00007fa8127e5fa0 R15: 00007fffbf78d468 [ 424.569540][T10729] [ 424.577225][T10729] ERROR: Out of memory at tomoyo_realpath_from_path. [ 424.870864][T10745] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1345'. [ 427.777420][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.788251][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.797263][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.808089][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.816708][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 427.825897][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 428.012055][T10777] FAULT_INJECTION: forcing a failure. [ 428.012055][T10777] name failslab, interval 1, probability 0, space 0, times 0 [ 428.024965][T10777] CPU: 1 PID: 10777 Comm: syz.0.1355 Not tainted syzkaller #0 [ 428.032489][T10777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 428.042588][T10777] Call Trace: [ 428.045905][T10777] [ 428.048870][T10777] dump_stack_lvl+0x16c/0x230 [ 428.053604][T10777] ? show_regs_print_info+0x20/0x20 [ 428.058850][T10777] ? load_image+0x3b0/0x3b0 [ 428.063397][T10777] ? __might_sleep+0xe0/0xe0 [ 428.068053][T10777] ? __lock_acquire+0x7c80/0x7c80 [ 428.073112][T10777] should_fail_ex+0x39d/0x4d0 [ 428.077884][T10777] should_failslab+0x9/0x20 [ 428.082415][T10777] slab_pre_alloc_hook+0x59/0x310 [ 428.087465][T10777] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.093299][T10777] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.099038][T10777] __kmem_cache_alloc_node+0x53/0x260 [ 428.104439][T10777] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.110182][T10777] __kmalloc+0xa4/0x240 [ 428.114360][T10777] tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.120140][T10777] tomoyo_path_perm+0x20f/0x4b0 [ 428.125067][T10777] ? tomoyo_path_perm+0x1df/0x4b0 [ 428.130115][T10777] ? tomoyo_path_permission+0x380/0x380 [ 428.135703][T10777] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 428.141879][T10777] ? ima_file_check+0xc6/0x100 [ 428.146766][T10777] ? ima_bprm_check+0x1f0/0x1f0 [ 428.151748][T10777] security_file_truncate+0x62/0x90 [ 428.157082][T10777] path_openat+0x2902/0x3190 [ 428.161719][T10777] ? do_filp_open+0x3d0/0x3d0 [ 428.166425][T10777] do_filp_open+0x1c5/0x3d0 [ 428.170949][T10777] ? vfs_tmpfile+0x490/0x490 [ 428.175577][T10777] ? _raw_spin_unlock+0x28/0x40 [ 428.180526][T10777] ? alloc_fd+0x58f/0x630 [ 428.184906][T10777] do_sys_openat2+0x12c/0x1c0 [ 428.189619][T10777] ? do_sys_open+0xe0/0xe0 [ 428.194059][T10777] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 428.200054][T10777] ? lock_chain_count+0x20/0x20 [ 428.204924][T10777] __x64_sys_openat+0x139/0x160 [ 428.209979][T10777] do_syscall_64+0x55/0xb0 [ 428.214409][T10777] ? clear_bhb_loop+0x40/0x90 [ 428.219112][T10777] ? clear_bhb_loop+0x40/0x90 [ 428.223836][T10777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.229741][T10777] RIP: 0033:0x7fbee518f749 [ 428.234172][T10777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.253899][T10777] RSP: 002b:00007fbee33f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 428.262334][T10777] RAX: ffffffffffffffda RBX: 00007fbee53e5fa0 RCX: 00007fbee518f749 [ 428.270405][T10777] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 428.278486][T10777] RBP: 00007fbee33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.286468][T10777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.294446][T10777] R13: 00007fbee53e6038 R14: 00007fbee53e5fa0 R15: 00007ffee34e5818 [ 428.302448][T10777] [ 428.308334][T10777] ERROR: Out of memory at tomoyo_realpath_from_path. [ 430.946250][T10792] netlink: 'syz.0.1359': attribute type 10 has an invalid length. [ 430.980126][T10792] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1359'. [ 430.989609][T10792] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 431.306625][T10812] FAULT_INJECTION: forcing a failure. [ 431.306625][T10812] name failslab, interval 1, probability 0, space 0, times 0 [ 431.350073][T10812] CPU: 1 PID: 10812 Comm: syz.1.1366 Not tainted syzkaller #0 [ 431.357625][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.367765][T10812] Call Trace: [ 431.371084][T10812] [ 431.374059][T10812] dump_stack_lvl+0x16c/0x230 [ 431.378808][T10812] ? show_regs_print_info+0x20/0x20 [ 431.384072][T10812] ? load_image+0x3b0/0x3b0 [ 431.388633][T10812] ? __might_sleep+0xe0/0xe0 [ 431.393283][T10812] ? __lock_acquire+0x7c80/0x7c80 [ 431.398411][T10812] should_fail_ex+0x39d/0x4d0 [ 431.403153][T10812] should_failslab+0x9/0x20 [ 431.407716][T10812] slab_pre_alloc_hook+0x59/0x310 [ 431.412806][T10812] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.418589][T10812] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.424461][T10812] __kmem_cache_alloc_node+0x53/0x260 [ 431.429894][T10812] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.435669][T10812] __kmalloc+0xa4/0x240 [ 431.439887][T10812] tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.445593][T10812] tomoyo_path_perm+0x20f/0x4b0 [ 431.450502][T10812] ? tomoyo_path_perm+0x1df/0x4b0 [ 431.455582][T10812] ? tomoyo_path_permission+0x380/0x380 [ 431.461217][T10812] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 431.467515][T10812] ? ima_file_check+0xc6/0x100 [ 431.472336][T10812] ? ima_bprm_check+0x1f0/0x1f0 [ 431.477249][T10812] security_file_truncate+0x62/0x90 [ 431.482522][T10812] path_openat+0x2902/0x3190 [ 431.487194][T10812] ? do_filp_open+0x3d0/0x3d0 [ 431.491922][T10812] do_filp_open+0x1c5/0x3d0 [ 431.496445][T10812] ? vfs_tmpfile+0x490/0x490 [ 431.501078][T10812] ? _raw_spin_unlock+0x28/0x40 [ 431.505943][T10812] ? alloc_fd+0x58f/0x630 [ 431.510296][T10812] do_sys_openat2+0x12c/0x1c0 [ 431.515014][T10812] ? do_sys_open+0xe0/0xe0 [ 431.519445][T10812] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 431.525438][T10812] ? lock_chain_count+0x20/0x20 [ 431.530316][T10812] __x64_sys_openat+0x139/0x160 [ 431.535221][T10812] do_syscall_64+0x55/0xb0 [ 431.539675][T10812] ? clear_bhb_loop+0x40/0x90 [ 431.544416][T10812] ? clear_bhb_loop+0x40/0x90 [ 431.549112][T10812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.555027][T10812] RIP: 0033:0x7fa81258f749 [ 431.559546][T10812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.579173][T10812] RSP: 002b:00007fa813415038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.587611][T10812] RAX: ffffffffffffffda RBX: 00007fa8127e5fa0 RCX: 00007fa81258f749 [ 431.595858][T10812] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 431.603847][T10812] RBP: 00007fa813415090 R08: 0000000000000000 R09: 0000000000000000 [ 431.611833][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.619815][T10812] R13: 00007fa8127e6038 R14: 00007fa8127e5fa0 R15: 00007fffbf78d468 [ 431.628121][T10812] [ 431.636461][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 431.646884][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 431.656564][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 431.666396][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 431.676607][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 431.679847][T10812] ERROR: Out of memory at tomoyo_realpath_from_path. [ 431.685193][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.932536][T10821] netlink: 'syz.1.1368': attribute type 29 has an invalid length. [ 431.948709][T10821] netlink: 'syz.1.1368': attribute type 29 has an invalid length. [ 431.980948][T10821] netlink: 'syz.1.1368': attribute type 29 has an invalid length. [ 432.038226][T10821] netlink: 'syz.1.1368': attribute type 29 has an invalid length. [ 432.134211][T10821] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1368'. [ 434.807252][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.819574][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.831002][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.851311][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.859367][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 434.870469][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.954914][T10846] FAULT_INJECTION: forcing a failure. [ 434.954914][T10846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.012629][T10846] CPU: 1 PID: 10846 Comm: syz.3.1376 Not tainted syzkaller #0 [ 435.020619][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.030728][T10846] Call Trace: [ 435.034048][T10846] [ 435.037013][T10846] dump_stack_lvl+0x16c/0x230 [ 435.041744][T10846] ? show_regs_print_info+0x20/0x20 [ 435.046995][T10846] ? load_image+0x3b0/0x3b0 [ 435.051552][T10846] ? __lock_acquire+0x7c80/0x7c80 [ 435.056616][T10846] ? snprintf+0xdb/0x120 [ 435.060905][T10846] should_fail_ex+0x39d/0x4d0 [ 435.065640][T10846] _copy_to_user+0x2f/0xa0 [ 435.070111][T10846] simple_read_from_buffer+0xe7/0x150 [ 435.075522][T10846] proc_fail_nth_read+0x1e3/0x250 [ 435.080569][T10846] ? proc_fault_inject_write+0x340/0x340 [ 435.086222][T10846] ? fsnotify_perm+0x271/0x5e0 [ 435.091134][T10846] ? proc_fault_inject_write+0x340/0x340 [ 435.096807][T10846] vfs_read+0x27e/0x920 [ 435.101184][T10846] ? kernel_read+0x1e0/0x1e0 [ 435.105818][T10846] ? __fget_files+0x28/0x4d0 [ 435.110433][T10846] ? __fget_files+0x44a/0x4d0 [ 435.115134][T10846] ? __fdget_pos+0x2a3/0x330 [ 435.119765][T10846] ? ksys_read+0x75/0x250 [ 435.124133][T10846] ksys_read+0x147/0x250 [ 435.128410][T10846] ? vfs_write+0x940/0x940 [ 435.132856][T10846] ? lockdep_hardirqs_on+0x98/0x150 [ 435.138071][T10846] do_syscall_64+0x55/0xb0 [ 435.142501][T10846] ? clear_bhb_loop+0x40/0x90 [ 435.147190][T10846] ? clear_bhb_loop+0x40/0x90 [ 435.151881][T10846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.157785][T10846] RIP: 0033:0x7fb9bb58e15c [ 435.162215][T10846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 435.181929][T10846] RSP: 002b:00007fb9bc3c0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.190444][T10846] RAX: ffffffffffffffda RBX: 00007fb9bb7e5fa0 RCX: 00007fb9bb58e15c [ 435.198426][T10846] RDX: 000000000000000f RSI: 00007fb9bc3c00a0 RDI: 0000000000000003 [ 435.206493][T10846] RBP: 00007fb9bc3c0090 R08: 0000000000000000 R09: 0000000000000000 [ 435.214559][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.222540][T10846] R13: 00007fb9bb7e6038 R14: 00007fb9bb7e5fa0 R15: 00007ffda94e8908 [ 435.230627][T10846] SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=1177 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 436.633367][ T1305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.717153][ T1305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.818715][ T1305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.910943][ T1305] team0: Port device netdevsim0 removed [ 436.918235][ T1305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.022507][ T1305] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.079076][ T1305] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.186137][ T1305] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.245748][ T1305] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.349608][ T1305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.429190][ T1305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.498849][ T1305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.546036][ T1305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.062150][ T1305] hsr_slave_0: left promiscuous mode [ 439.068134][ T1305] hsr_slave_1: left promiscuous mode [ 439.077060][ T1305] hsr_slave_0: left promiscuous mode [ 439.086238][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.096978][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.107707][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.115202][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.122941][ T1305] bridge_slave_1: left allmulticast mode [ 439.128720][ T1305] bridge_slave_1: left promiscuous mode [ 439.134673][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.143938][ T1305] bridge_slave_0: left allmulticast mode [ 439.149736][ T1305] bridge_slave_0: left promiscuous mode [ 439.155626][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.168902][ T1305] hsr_slave_0: left promiscuous mode [ 439.175064][ T1305] hsr_slave_1: left promiscuous mode [ 439.181426][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.188869][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.197791][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.205644][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.237795][ T1305] veth1_macvtap: left promiscuous mode [ 439.243413][ T1305] veth0_macvtap: left promiscuous mode [ 439.250862][ T1305] veth1_macvtap: left promiscuous mode [ 439.256375][ T1305] veth0_macvtap: left promiscuous mode [ 439.273741][ T1305] veth1_macvtap: left promiscuous mode [ 439.279272][ T1305] veth0_macvtap: left promiscuous mode [ 439.285393][ T1305] veth1_vlan: left promiscuous mode [ 439.291031][ T1305] veth0_vlan: left promiscuous mode [ 440.027996][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 440.077463][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 440.122525][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.168611][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.507317][ T1305] team0 (unregistering): Port device bond0 removed [ 440.539526][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.546086][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.653990][ T1305] bond0 (unregistering): Released all slaves [ 441.059738][ T1305] team_slave_1 (unregistering): left promiscuous mode [ 441.072433][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 441.161377][ T1305] .þ (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.169871][ T1305] bond_slave_1 (unregistering): left promiscuous mode [ 441.213769][ T1305] .þ (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.222499][ T1305] bond_slave_0 (unregistering): left promiscuous mode [ 441.423257][ T1305] batadv0 (unregistering): left promiscuous mode [ 441.433709][ T1305] team0 (unregistering): Port device batadv0 removed [ 441.467411][ T1305] .þ (unregistering): (slave dummy0): Releasing backup interface [ 441.477013][ T1305] dummy0 (unregistering): left promiscuous mode [ 441.599501][ T1305] .þ (unregistering): (slave team0): Releasing backup interface [ 441.607993][ T1305] team0 (unregistering): left promiscuous mode [ 441.747259][ T1305] .þ (unregistering): Released all slaves [ 442.302847][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 442.349813][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 442.394060][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.442039][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.912318][ T1305] bond0 (unregistering): Released all slaves