last executing test programs: 4.905058553s ago: executing program 3 (id=2744): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f20000000000000b8"], 0xd0}, 0x480c4) 4.900441784s ago: executing program 2 (id=2746): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0x7, 0x8, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000006000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x10000, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)="2b7314", 0x3}], 0x1}, 0x4044004) sendmsg$inet(r2, 0x0, 0x52cc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x9, 0x8, 0x1000, 0x12220, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) 4.68138461s ago: executing program 3 (id=2748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'ipvlan1\x00', 0x1000}) socket$kcm(0x2, 0x5, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffe8e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback, 0xffffffffffffffff, 0xc, 0x2014, 0x0, @value, @void, @void, @void, r4}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2100000010000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="03ccdabd7311f0b0768754ae299ca4f88b2f8c052ed575ce16cb233445f6c8ea1c3c25e802ed8acd87799e76dc93ea360f6a02f5a648195e7adab3d945cc0d7900739ca7368a6791378810aedeccc37ebe0e614141fd0ceb0ddedc98b2b40a639e71a6", @ANYRES64=r4], 0x20) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}, 0x40000000) perf_event_open(0x0, 0x0, 0xfbffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x25, 0x0, &(0x7f00000007c0), 0x0, 0x702, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x0) close(r1) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424f3db", 0x14}], 0x1}, 0x4000800) 4.584294223s ago: executing program 2 (id=2750): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b', @ANYRES32], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ebffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 4.548043265s ago: executing program 3 (id=2751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x292583, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24009, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x400000, 0x8, 0x0, 0xed7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000180), 0x4) 4.424426779s ago: executing program 2 (id=2753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x292583, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24009, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x400000, 0x8, 0x0, 0xed7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000180), 0x4) 4.287406043s ago: executing program 3 (id=2754): socket$kcm(0x2, 0x3, 0x84) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc801) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000, 0x9}, 0x14208, 0x1, 0x0, 0x0, 0x5, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x5, 0x4, 0x3, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) (async) socket$kcm(0xa, 0x2, 0x73) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x500, 0x5, 0x0, 0x2, 0x0, 0x0, 0x9606, 0x0, 0x80000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='\f\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) 4.233510165s ago: executing program 2 (id=2755): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000055000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000004007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.137744928s ago: executing program 2 (id=2758): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002940)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0001000c00000002000000000000000000008d0000000000002b09e807639f4b16b7a44536c10eaf9c717947e923afa5980e82a81559f046d9f34a75d0b969195b12383fdbddb3b4e9c400a5aa0e8fc8c9ca504a"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) close(r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000001b40)="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", 0x4d9}], 0x2}, 0x8000) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="080000000000000095"], 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'virt_wifi0\x00'}) 4.017565402s ago: executing program 3 (id=2759): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 3.877505226s ago: executing program 3 (id=2762): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec8}, 0x94) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x71, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x109, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x104) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0xa, 0xc, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @mcast1, 0x6}, 0x80, 0x0}, 0x48084) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/155, 0x9b}, 0x40000150) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xab, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2000000, 0xffffffffffffffff, 0x9) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20) 3.814911798s ago: executing program 2 (id=2764): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8, 0x97}, 0xff00) 3.75348795s ago: executing program 4 (id=2765): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x2, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0100000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x300, 0x32, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1b, &(0x7f0000000140)=ANY=[], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="13030000540091"], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x4004004) sendmsg$inet(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x29, 0x2, 0x0) 3.45847621s ago: executing program 4 (id=2769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80208, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$sock(0xffffffffffffffff, 0x0, 0x48811) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x4000000000}, 0x624d, 0x0, 0x80000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(0xffffffffffffffff) 2.526842139s ago: executing program 1 (id=2773): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e0000003e000511d25a8069966394090224fc602f6e35400800018025581d00d1bd000000000000600000000000", 0x8a}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 2.169248601s ago: executing program 1 (id=2774): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='`', 0x1}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000800)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f0000000580)=""/249, 0xf9}], 0x5, &(0x7f0000000700)=""/210, 0xd2}, 0x62) 1.696426216s ago: executing program 0 (id=2775): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="7af2a7ef0a6502fce5d56611b9917b66ee25473235b96b974a51ef75f4acd031debe3ce9ac931b24965d013222fad28d9bf720501ff1b479e853fdf903832028a3360dfe07df0cb6fa8814b2c9edb65fbeab6f8c728a094bf8b5a6067c16dea02b4834d044670cf738582bb6145c9cf57a0fc107e1cfae7693863d748072d77aefcfdabd0a90295ef5a48f82b838d09e7d534045b62ec09188aeadf2afc17d591b06f5597d70577388ec9e5bb80abbaf40ef91affd058037974db831ec526008838c8dc81ad30847860220c32b36d36fe848e3b29faad888413ebd32cbc1294882", 0xe1}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x29014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x100}, 0x200, 0x80000, 0x0, 0x2, 0xffffffff, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc3ffffff) 1.685183076s ago: executing program 1 (id=2776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'ipvlan1\x00', 0x1000}) socket$kcm(0x2, 0x5, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffe8e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback, 0xffffffffffffffff, 0xc, 0x2014, 0x0, @value, @void, @void, @void, r4}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2100000010000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="03ccdabd7311f0b0768754ae299ca4f88b2f8c052ed575ce16cb233445f6c8ea1c3c25e802ed8acd87799e76dc93ea360f6a02f5a648195e7adab3d945cc0d7900739ca7368a6791378810aedeccc37ebe0e614141fd0ceb0ddedc98b2b40a639e71a6", @ANYRES64=r4], 0x20) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}, 0x40000000) perf_event_open(0x0, 0x0, 0xfbffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x25, 0x0, &(0x7f00000007c0), 0x0, 0x702, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x0) close(r1) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424f3db", 0x14}], 0x1}, 0x4000800) 1.507200962s ago: executing program 4 (id=2777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x40002040) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffd}, 0x2008, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd75}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000010) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000680)="b9ff03076003008cb89e08f086dd369d30153ae3990a1aedf5bae2adea4fdf9b14fc250a2f55f45b78fd66b3d0039ddef1ed01d0268e", 0x0, 0xfe6, 0x60004000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.432358515s ago: executing program 1 (id=2778): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x3}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="1d7c41", 0x3}, {&(0x7f0000000300)="bba14e29a7136d55c11824c46a57cdb4eee89d686d68788ad12439be8e3bd8b40ae25f4024d8ac91a18b2224f50176ba56b4945b9282c3ff232a4e0192437916f26e2047237580b72863a49ec0eac9ce7bc44d93efd090eb2bc2dec2a29a0d7bad7fd4efce258e3ff75c2986157f812286855383e9ef0d9a788dc833100ceaa8e98d4cfa60bf93830cecbdd121a6c44386318880381e59a2fd917738ffba08e2628917a8f74e8d9a9aaa0edf277916cd6eea542ac8afa513d328183d9a9f87328e1e1dee2e2fd209bd8b6218a13a9298fed450f59bcd2286316b6ce34292e0e5fa47e4a2ba7fbc473e9b", 0xea}, {&(0x7f0000000400)="91060ee8e659aca7c736e98cc64367d2f8101033db644e3fa19185042e23a4cd77fd9d", 0x23}, {&(0x7f0000000440)="b9bde2af5264a27f0b9f03b4b1364335b83c96595c09ca5906eb8e350f130d3af9847f589c6b4d20eb2f6046e13953eec23aee6d1cae869bb596719cd1d817a3a2dc074027d4fb92c6cc0c8b647b0a5a0f22c52197e9a178797e4dbb3f0b38529a22fdc683f09e5361a7c7f195e518f3f287946f7cd8a17822d3fd898bff2b40c800b387984cc46a693ff26ae3c095a795232e80be05a88badbad26f1195f1", 0x9f}], 0x4, &(0x7f0000000540)="ce53ee73e9f6b294aa52b3397ee672e14f0cdf47ab62f25f8c789a07e46654e6c56e78004f01e5bc8f3a36b0e38f8635c88ee6afa4f56950c1e6991523d6c17ddd405f85f8ba8c22763e57228581636c66e251419ac5ddb945b5e1b5d7478f04a8689bf758371a5e3f4f2c52d00c864b17b25ddd943252d2e78d628c207a04f97843065cb1468b3d988a0b4417db499bc6c9971d7fc70a4d31e1cc3094a3c29794be20cc02dcc7cb5b587327414bb5495d0240f9c0fd1d99c17a4d1973c7789b4ff2bc236007b457", 0xc8}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10100, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4004810) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0xffffffffffffff01) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7, 0x0, 0x2000000}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 1.335561108s ago: executing program 0 (id=2779): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0xb00}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.236169261s ago: executing program 0 (id=2780): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000006c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002100)}, 0x1) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0xb0}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 858.182193ms ago: executing program 4 (id=2781): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="b430feff000000007c800c000400000018010000696c6c250f5fc4fcef0cafec2bc0234a74ae1000000000002020207b1af8ff00000000bfa100000000000007010000f8ffeaffb702000008000000b70300000600000485000000060000006a6af8ff000000004d34feff080000001858000008000000000000000000000018000000ffffffff00000000860e000095000000000000001c9560b2b81f33a9b9aebd21af85ace5e1b1df54f1955e67b3b34a"], &(0x7f0000000500)='syzkaller\x00', 0x6, 0x32, &(0x7f0000000000)=""/50, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x9, 0x5, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=[{0x4, 0x4, 0x7, 0x2}, {0x3, 0x1, 0x7, 0x4}, {0x1, 0x2, 0x8, 0xa}, {0x2, 0x5, 0xb, 0xc}], 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x1}, 0x10, 0x0, r0}, 0x94) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r3, r4, 0x2, 0x3, 0x2}, 0x50) 571.009992ms ago: executing program 0 (id=2782): socket$kcm(0x2, 0x3, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="b408000000000000711138000000000085100000020000006a000000000000009500c2000000000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES16], 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000008000000000000000600000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x40000000}, 0x94) 558.454223ms ago: executing program 4 (id=2783): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) (async) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300, 0x0, 0xc08e}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) (async) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async, rerun: 64) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000002) (rerun: 64) r5 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000640)) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375e", 0xfffffffffffffefc}], 0x1}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async, rerun: 32) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 413.892187ms ago: executing program 1 (id=2784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'ipvlan1\x00', 0x1000}) socket$kcm(0x2, 0x5, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffe8e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback, 0xffffffffffffffff, 0xc, 0x2014, 0x0, @value, @void, @void, @void, r4}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2100000010000000", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="03ccdabd7311f0b0768754ae299ca4f88b2f8c052ed575ce16cb233445f6c8ea1c3c25e802ed8acd87799e76dc93ea360f6a02f5a648195e7adab3d945cc0d7900739ca7368a6791378810aedeccc37ebe0e614141fd0ceb0ddedc98b2b40a639e71a6", @ANYRES64=r4], 0x20) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000066180000001800000002000000080000000100000f0500010002000000050000000a000000000004fc3e8aa199c80f918c14f15b92e91974effe478bf6cc823356d7183e215929ebd079f9d2ebab153f2e"], &(0x7f00000001c0)=""/257, 0x32, 0x101, 0x6}, 0x28) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}, 0x40000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x27, 0xcb, 0x0, &(0x7f0000000600)="2c7535cd3e1382348727360f2e6e465e0eb04fd3bc3db8c6b923ea189b9c5fc141c8710e726d5943bd50b6d9293685808530c12bf2f6932a38885903c705eef3c2c35994488b927adabccc301142b220bed3be93faf610df04ff45ec2e469a04d736d366b361dafddd118998f97968a6be0825a917c80a606eae63131ce5afad36ac69b9c62e0851025a7882b83d5b9c17605f6c79464a2cec9c81232cb9aee47dfea92a9204f82dd64f1394b0a729994134f2528b8ef8f245b907054f9f768ab5d163b2bcb70e5a62b53d", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) socket$kcm(0xa, 0x2, 0x0) close(r1) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424f3db", 0x14}], 0x1}, 0x4000800) 152.191515ms ago: executing program 0 (id=2785): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f41000000000000b8"], 0xd0}, 0x480c4) 151.936905ms ago: executing program 4 (id=2786): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="ffa8", 0x2}, {0x0}], 0x2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}, {&(0x7f0000000080)="be4a53fd61c0af3f3531e3eca194db528132f24488ca713a05762d6900ab33e01793099f2b12a5", 0x27}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x7, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x5, 0x2000, 0x1ff, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001640)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001680)=[{0x1, 0x1, 0x8, 0x9}], 0x10, 0x7}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05eb944cea7ff0a9030000000000000000ba0000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/27], 0x48) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f00000000", 0x22}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRES16=0x0], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe99c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xffff, 0x100000000}, 0x104080, 0x2, 0xfffffffe, 0x0, 0x2, 0x2, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10022) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x11b, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c23003f) 105.106747ms ago: executing program 1 (id=2787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'ipvlan1\x00', 0x1000}) socket$kcm(0x2, 0x5, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffe8e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback, 0xffffffffffffffff, 0xc, 0x2014, 0x0, @value, @void, @void, @void, r4}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2100000010000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="03ccdabd7311f0b0768754ae299ca4f88b2f8c052ed575ce16cb233445f6c8ea1c3c25e802ed8acd87799e76dc93ea360f6a02f5a648195e7adab3d945cc0d7900739ca7368a6791378810aedeccc37ebe0e614141fd0ceb0ddedc98b2b40a639e71a6", @ANYRES64=r4], 0x20) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}, 0x40000000) perf_event_open(&(0x7f00000007c0)={0x4, 0x80, 0x6c, 0x1, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x800}, 0x0, 0x0, 0x2, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xfbffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) close(r1) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424f3db", 0x14}], 0x1}, 0x4000800) 0s ago: executing program 0 (id=2788): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES16=0x0, @ANYRESDEC=0x0], 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x40002040) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffd}, 0x2008, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd75}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340), 0x1000000000000283}, 0x40000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000010) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000680)="b9ff03076003008cb89e08f086dd369d30153ae3990a1aedf5bae2adea4fdf9b14fc250a2f55f45b78fd66b3d0039ddef1ed01d0268e", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): aa:aa:3e) already exists on: batadv_slave_0 [ 68.255801][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.267969][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.297805][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.306623][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.317210][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.328998][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.341241][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.350456][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.360291][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.369482][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.379364][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.390255][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.400354][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.410995][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.422634][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.432433][ T4190] device veth0_vlan entered promiscuous mode [ 68.454125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.465869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.476650][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.491054][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.502789][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.515126][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.543877][ T4190] device veth1_vlan entered promiscuous mode [ 68.572159][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.582427][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.591042][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.599766][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.608608][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.621320][ T4203] device veth0_vlan entered promiscuous mode [ 68.708815][ T4190] device veth0_macvtap entered promiscuous mode [ 68.724480][ T4203] device veth1_vlan entered promiscuous mode [ 68.731857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.741295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.751264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.770453][ T4190] device veth1_macvtap entered promiscuous mode [ 68.779736][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.789641][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.816675][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.824729][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.835051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.842986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.845073][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.858607][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.868731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.876756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.906930][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.912950][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.926262][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.934152][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.945000][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.955594][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.965593][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.976847][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.989166][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.009783][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.028750][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.039076][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.050104][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.060112][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.071337][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.082262][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.103097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.111036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.119947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.129601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.138325][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 69.141549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.144437][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 69.144519][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 69.165422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.174070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.182346][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 69.192505][ T4203] device veth0_macvtap entered promiscuous mode [ 69.203642][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.212260][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.222016][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 69.228592][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.229313][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.244865][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.253584][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.287616][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.299408][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.312921][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.323026][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.359098][ T4203] device veth1_macvtap entered promiscuous mode [ 69.369358][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.378312][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.448727][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.469234][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.481261][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.500050][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.510365][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.528263][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.542815][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.558095][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.582977][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.584321][ C1] hrtimer: interrupt took 110442 ns [ 69.612860][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.623172][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.654352][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.662455][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.675507][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.687802][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.711480][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.721436][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.732654][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.743165][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.754610][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.766832][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.778470][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.789948][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.805559][ T4203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.815343][ T4203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.824067][ T4203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.833607][ T4203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.849517][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.859901][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.993289][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.007323][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.038240][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.120062][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.136500][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.185963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.219956][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.253830][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.293173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.139352][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.145933][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.215917][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 71.240548][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 71.251479][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 71.261207][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 71.309079][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 72.941872][ T4369] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.37'. [ 73.623271][ T4388] Zero length message leads to an empty skb [ 74.984586][ T4432] netlink: 'syz.4.63': attribute type 16 has an invalid length. [ 75.064284][ T4432] netlink: 132 bytes leftover after parsing attributes in process `syz.4.63'. [ 75.166430][ T4434] netlink: 'syz.3.65': attribute type 28 has an invalid length. [ 75.260493][ T4439] netlink: 12206 bytes leftover after parsing attributes in process `syz.3.65'. [ 75.552507][ T4448] -1: renamed from syzkaller0 [ 75.911160][ T4464] netlink: 'syz.4.74': attribute type 29 has an invalid length. [ 76.076223][ T4464] netlink: 'syz.4.74': attribute type 29 has an invalid length. [ 76.169178][ T4468] netlink: 'syz.4.74': attribute type 29 has an invalid length. [ 76.331411][ T4490] netlink: 14 bytes leftover after parsing attributes in process `syz.3.85'. [ 76.343914][ T4490] netlink: del zone limit has 4 unknown bytes [ 76.960882][ T4506] netlink: 'syz.0.90': attribute type 16 has an invalid length. [ 76.994348][ T4506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.90'. [ 77.756550][ T4519] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.94'. [ 77.791739][ T4499] syz.3.88 (4499) used greatest stack depth: 19808 bytes left [ 78.395674][ T4536] -1: renamed from syzkaller0 [ 78.586770][ T4542] netlink: 14 bytes leftover after parsing attributes in process `syz.1.105'. [ 78.684436][ T4542] netlink: del zone limit has 4 unknown bytes [ 79.255931][ T4564] netlink: 'syz.0.113': attribute type 16 has an invalid length. [ 79.277850][ T4564] netlink: 132 bytes leftover after parsing attributes in process `syz.0.113'. [ 79.897325][ T4581] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 79.915086][ T4581] netlink: 55 bytes leftover after parsing attributes in process `syz.3.123'. [ 79.929512][ T4585] netlink: 'syz.2.121': attribute type 8 has an invalid length. [ 80.004445][ T4585] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.121'. [ 80.920594][ T4594] netlink: 68 bytes leftover after parsing attributes in process `syz.1.127'. [ 80.971265][ T4597] netlink: 'syz.1.127': attribute type 7 has an invalid length. [ 81.258003][ T4610] netlink: 'syz.0.130': attribute type 29 has an invalid length. [ 81.331415][ T4610] netlink: 'syz.0.130': attribute type 29 has an invalid length. [ 83.001425][ T4663] netlink: 'syz.0.145': attribute type 3 has an invalid length. [ 83.035355][ T4663] netlink: 'syz.0.145': attribute type 181 has an invalid length. [ 83.278699][ T4674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.151'. [ 83.338410][ T4674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.151'. [ 83.364437][ T4674] netlink: 13 bytes leftover after parsing attributes in process `syz.3.151'. [ 84.965550][ T4731] netlink: 'syz.3.172': attribute type 9 has an invalid length. [ 84.994418][ T4731] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.172'. [ 85.986744][ T4760] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 86.016778][ T4760] netlink: 156 bytes leftover after parsing attributes in process `syz.4.182'. [ 86.214929][ T4763] netlink: 'syz.4.182': attribute type 21 has an invalid length. [ 86.496956][ T1108] cfg80211: failed to load regulatory.db [ 88.017809][ T4776] netlink: 14 bytes leftover after parsing attributes in process `syz.3.186'. [ 88.058875][ T4776] netlink: set zone limit has 4 unknown bytes [ 88.882923][ T4821] netlink: 14 bytes leftover after parsing attributes in process `syz.1.201'. [ 88.929294][ T4821] netlink: del zone limit has 4 unknown bytes [ 89.033914][ T4828] netlink: 14 bytes leftover after parsing attributes in process `syz.2.204'. [ 89.206838][ T4828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.279473][ T4828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.329187][ T4828] bond0 (unregistering): Released all slaves [ 89.373130][ T4838] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.207'. [ 90.038180][ T4863] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.218'. [ 90.212106][ T4876] netlink: 'syz.3.222': attribute type 16 has an invalid length. [ 90.244551][ T4876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.222'. [ 90.353950][ T4880] netlink: 14 bytes leftover after parsing attributes in process `syz.1.225'. [ 90.413657][ T4880] netlink: del zone limit has 4 unknown bytes [ 90.550703][ T4893] netlink: 'syz.0.230': attribute type 3 has an invalid length. [ 90.606122][ T4893] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.230'. [ 90.742681][ T4892] delete_channel: no stack [ 91.363483][ T4934] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.244'. [ 91.422352][ T4934] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.244'. [ 91.502560][ T4934] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.244'. [ 91.731457][ T4942] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 92.010864][ T4942] batman_adv: batadv0: Adding interface: netdevsim0 [ 92.052759][ T4942] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.176301][ T4942] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 92.202045][ T4954] netlink: 'syz.2.250': attribute type 16 has an invalid length. [ 92.220971][ T4954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.250'. [ 92.365722][ T4942] syz.0.246 (4942) used greatest stack depth: 19024 bytes left [ 92.394400][ T4956] netlink: 14 bytes leftover after parsing attributes in process `syz.4.251'. [ 92.429243][ T4956] netlink: del zone limit has 4 unknown bytes [ 92.894152][ T4984] netlink: 'syz.4.261': attribute type 21 has an invalid length. [ 92.994659][ T4983] netlink: 'syz.3.260': attribute type 29 has an invalid length. [ 93.022241][ T4984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.261'. [ 93.125124][ T4983] netlink: 'syz.3.260': attribute type 29 has an invalid length. [ 93.155511][ T4987] netlink: 'syz.3.260': attribute type 29 has an invalid length. [ 95.183142][ T5062] device syzkaller0 entered promiscuous mode [ 95.229929][ T5060] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 95.665702][ T5072] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.295'. [ 97.892450][ T5077] netlink: 'syz.1.296': attribute type 10 has an invalid length. [ 97.970064][ T5077] batman_adv: batadv0: Adding interface: netdevsim0 [ 98.010749][ T5077] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.106763][ T5077] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 99.700418][ T5121] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 100.113079][ T5121] batman_adv: batadv0: Adding interface: netdevsim0 [ 100.171985][ T5121] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.327362][ T5121] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 101.051812][ T5159] netlink: 'syz.3.323': attribute type 10 has an invalid length. [ 101.206391][ T5159] batman_adv: batadv0: Adding interface: wlan1 [ 101.304306][ T5159] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.514863][ T5159] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 101.553090][ T5170] netlink: 'syz.4.328': attribute type 10 has an invalid length. [ 101.599024][ T5170] device veth1_macvtap left promiscuous mode [ 102.051309][ T5193] netlink: 'syz.4.333': attribute type 16 has an invalid length. [ 102.073247][ T5193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.333'. [ 102.310473][ T5198] netlink: 'syz.3.334': attribute type 39 has an invalid length. [ 102.490758][ T5207] netlink: 'syz.2.337': attribute type 41 has an invalid length. [ 102.511853][ T5207] netlink: 'syz.2.337': attribute type 4 has an invalid length. [ 102.535076][ T5207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.337'. [ 102.670747][ T5207] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 103.042827][ T5219] device syzkaller0 entered promiscuous mode [ 104.091559][ T5265] netlink: 'syz.1.355': attribute type 16 has an invalid length. [ 104.134404][ T5265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.355'. [ 104.683943][ T5292] netlink: 539 bytes leftover after parsing attributes in process `syz.2.361'. [ 105.146241][ T5320] netlink: 14 bytes leftover after parsing attributes in process `syz.1.370'. [ 105.180544][ T5320] netlink: del zone limit has 4 unknown bytes [ 105.401003][ T5326] netlink: 'syz.1.373': attribute type 9 has an invalid length. [ 105.450734][ T5326] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.373'. [ 105.705734][ T5334] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.375'. [ 105.741163][ T5336] netlink: 'syz.4.377': attribute type 16 has an invalid length. [ 105.749495][ T5336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.377'. [ 106.517957][ T5369] netlink: 'syz.0.388': attribute type 12 has an invalid length. [ 106.555175][ T5369] netlink: 132 bytes leftover after parsing attributes in process `syz.0.388'. [ 106.570930][ T5372] netlink: 209848 bytes leftover after parsing attributes in process `syz.0.388'. [ 106.667453][ T5374] netlink: del zone limit has 4 unknown bytes [ 107.983361][ T5426] __nla_validate_parse: 2 callbacks suppressed [ 107.983377][ T5426] netlink: 14 bytes leftover after parsing attributes in process `syz.4.409'. [ 108.017184][ T5426] netlink: del zone limit has 4 unknown bytes [ 108.046733][ T5429] device pim6reg1 entered promiscuous mode [ 108.433089][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.441320][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.549714][ T5449] device bridge_slave_1 left promiscuous mode [ 108.579824][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.737723][ T5449] device bridge_slave_0 left promiscuous mode [ 108.755389][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.957506][ T5455] netlink: 184 bytes leftover after parsing attributes in process `syz.1.419'. [ 109.277688][ T5486] netlink: 14 bytes leftover after parsing attributes in process `syz.2.433'. [ 109.316281][ T5486] netlink: del zone limit has 4 unknown bytes [ 109.804902][ T5497] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 110.164920][ T5505] netlink: 10 bytes leftover after parsing attributes in process `syz.1.439'. [ 110.351821][ T5513] netlink: 'syz.1.442': attribute type 16 has an invalid length. [ 110.404541][ T5513] netlink: 132 bytes leftover after parsing attributes in process `syz.1.442'. [ 110.565178][ T5527] netlink: 14 bytes leftover after parsing attributes in process `syz.1.448'. [ 110.581701][ T5527] netlink: del zone limit has 4 unknown bytes [ 111.569990][ T5572] netlink: 'syz.2.463': attribute type 16 has an invalid length. [ 111.584311][ T5572] netlink: 132 bytes leftover after parsing attributes in process `syz.2.463'. [ 111.724705][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 112.156454][ T5581] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 112.172151][ T5581] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.466'. [ 112.426561][ T5591] netlink: 14 bytes leftover after parsing attributes in process `syz.0.469'. [ 112.521603][ T5591] netlink: del zone limit has 4 unknown bytes [ 113.634074][ T5625] pim6reg: tun_chr_ioctl cmd 1074025677 [ 113.675283][ T5625] pim6reg: linktype set to 778 [ 114.383661][ T5651] netlink: 'syz.2.491': attribute type 10 has an invalid length. [ 114.444018][ T5651] device hsr0 entered promiscuous mode [ 114.790517][ T5671] device wlan1 entered promiscuous mode [ 114.822414][ T5671] netlink: 'syz.4.497': attribute type 2 has an invalid length. [ 114.842810][ T5671] netlink: 14 bytes leftover after parsing attributes in process `syz.4.497'. [ 114.883500][ T5671] netlink: 'syz.4.497': attribute type 10 has an invalid length. [ 114.933555][ T5671] device hsr0 entered promiscuous mode [ 114.997739][ T5671] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.090451][ T5671] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 115.151143][ T5671] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 115.213384][ T5671] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 115.590822][ T5708] netlink: 'syz.4.510': attribute type 10 has an invalid length. [ 116.062139][ T5710] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 116.155891][ T5710] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.509'. [ 119.793296][ T5754] netlink: 14 bytes leftover after parsing attributes in process `syz.3.525'. [ 119.809391][ T5754] netlink: del zone limit has 4 unknown bytes [ 119.817109][ T5752] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.526'. [ 119.835060][ T5743] delete_channel: no stack [ 120.172212][ T5762] netlink: 'syz.3.529': attribute type 16 has an invalid length. [ 120.241474][ T5762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.529'. [ 120.705757][ T5783] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.537'. [ 122.405510][ T5828] netlink: 14 bytes leftover after parsing attributes in process `syz.1.556'. [ 122.524399][ T5828] netlink: del zone limit has 4 unknown bytes [ 122.841794][ T5841] netlink: 'syz.3.562': attribute type 16 has an invalid length. [ 122.867744][ T5841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.562'. [ 124.232236][ T5902] netlink: 14 bytes leftover after parsing attributes in process `syz.1.585'. [ 124.285255][ T5902] netlink: del zone limit has 4 unknown bytes [ 124.423617][ T5908] netlink: 'syz.1.588': attribute type 16 has an invalid length. [ 124.467557][ T5908] netlink: 132 bytes leftover after parsing attributes in process `syz.1.588'. [ 124.823284][ T5915] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.591'. [ 125.910163][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz.2.610'. [ 126.252558][ T5975] netlink: 14 bytes leftover after parsing attributes in process `syz.2.614'. [ 126.261763][ T5975] netlink: del zone limit has 4 unknown bytes [ 126.392291][ T5980] netlink: 'syz.2.617': attribute type 16 has an invalid length. [ 126.414127][ T5980] netlink: 132 bytes leftover after parsing attributes in process `syz.2.617'. [ 126.558196][ T5989] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.621'. [ 127.689767][ T6036] netlink: 'syz.3.640': attribute type 33 has an invalid length. [ 127.698721][ T6036] netlink: 152 bytes leftover after parsing attributes in process `syz.3.640'. [ 127.709363][ T6036] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 127.831243][ T6040] netlink: 'syz.3.643': attribute type 16 has an invalid length. [ 127.869692][ T6040] netlink: 132 bytes leftover after parsing attributes in process `syz.3.643'. [ 128.007002][ T6051] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.645'. [ 128.662776][ T6077] netlink: 'syz.0.659': attribute type 21 has an invalid length. [ 128.687759][ T6077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.659'. [ 128.699937][ T6076] netlink: 'syz.0.659': attribute type 21 has an invalid length. [ 128.720499][ T6077] netlink: 'syz.0.659': attribute type 3 has an invalid length. [ 128.742852][ T6077] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.659'. [ 128.763672][ T6076] netlink: 132 bytes leftover after parsing attributes in process `syz.0.659'. [ 129.148319][ T6091] cgroup: fork rejected by pids controller in /syz0 [ 129.532390][ T6108] netlink: 'syz.2.671': attribute type 16 has an invalid length. [ 130.448645][ T6135] netlink: del zone limit has 4 unknown bytes [ 130.857584][ T6141] chnl_net:caif_netlink_parms(): no params data found [ 130.902735][ T6159] netlink: 'syz.1.690': attribute type 28 has an invalid length. [ 130.910971][ T6159] netlink: 'syz.1.690': attribute type 3 has an invalid length. [ 130.921342][ T6159] __nla_validate_parse: 3 callbacks suppressed [ 130.921353][ T6159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.690'. [ 131.282597][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.381480][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.428133][ T6141] device bridge_slave_0 entered promiscuous mode [ 131.484767][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.508237][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.545541][ T6141] device bridge_slave_1 entered promiscuous mode [ 131.620239][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.706598][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.798253][ T6141] team0: Port device team_slave_0 added [ 131.822043][ T6141] team0: Port device team_slave_1 added [ 131.879237][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.890167][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.963846][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.977332][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.984967][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.014861][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.163914][ T6141] device hsr_slave_0 entered promiscuous mode [ 132.222595][ T6141] device hsr_slave_1 entered promiscuous mode [ 132.261031][ T6141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.308797][ T6141] Cannot create hsr debugfs directory [ 132.328904][ T6191] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 132.330513][ T6195] netlink: 'syz.2.702': attribute type 10 has an invalid length. [ 132.345625][ T6191] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.703'. [ 132.366855][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.392007][ T6195] device bridge_slave_1 left promiscuous mode [ 132.400379][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.578893][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.585266][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.655513][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 132.737924][ T6200] netlink: 14 bytes leftover after parsing attributes in process `syz.4.707'. [ 132.775553][ T6200] netlink: del zone limit has 4 unknown bytes [ 132.902836][ T6141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.984009][ T6202] netlink: 'syz.3.708': attribute type 27 has an invalid length. [ 133.002989][ T6202] netlink: 'syz.3.708': attribute type 4 has an invalid length. [ 133.044991][ T6202] netlink: 152 bytes leftover after parsing attributes in process `syz.3.708'. [ 133.198163][ T6141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.546606][ T6141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.641855][ T6141] batman_adv: batadv0: Removing interface: netdevsim0 [ 133.690288][ T6141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.845544][ T6246] validate_nla: 1 callbacks suppressed [ 133.845556][ T6246] netlink: 'syz.1.724': attribute type 16 has an invalid length. [ 133.864885][ T6246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.724'. [ 134.001763][ T6141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.065790][ T6141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.075788][ T6141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.088487][ T6258] netlink: 'syz.4.730': attribute type 9 has an invalid length. [ 134.099192][ T6259] netlink: 14 bytes leftover after parsing attributes in process `syz.2.732'. [ 134.115304][ T6141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.132736][ T6259] netlink: del zone limit has 4 unknown bytes [ 134.139370][ T6258] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.730'. [ 134.689945][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.728364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.744068][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 134.750803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.772140][ T6141] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.807472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.825157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.851446][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.858682][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.941103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.958409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.975480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.020757][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.027894][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.068717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.086126][ T6300] netlink: 'syz.4.748': attribute type 16 has an invalid length. [ 135.093970][ T6300] netlink: 132 bytes leftover after parsing attributes in process `syz.4.748'. [ 135.114714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.146507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.177459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.205258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.235888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.300902][ T6141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.358631][ T6141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.405468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.430230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.448071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.484762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.500659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.552859][ T6323] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.752'. [ 135.594100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.698231][ T6331] netlink: 14 bytes leftover after parsing attributes in process `syz.2.755'. [ 135.747546][ T6331] netlink: del zone limit has 4 unknown bytes [ 135.888934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.941405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.957077][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.104989][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.114132][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.168221][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.190095][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.241630][ T6141] device veth0_vlan entered promiscuous mode [ 136.256118][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.280065][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.319382][ T6141] device veth1_vlan entered promiscuous mode [ 136.328858][ T6349] netlink: 'syz.3.762': attribute type 1 has an invalid length. [ 136.372362][ T6349] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.762'. [ 136.412644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.436465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.465184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.473938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.502090][ T6141] device veth0_macvtap entered promiscuous mode [ 136.521706][ T6357] netlink: 'syz.2.767': attribute type 21 has an invalid length. [ 136.542134][ T6141] device veth1_macvtap entered promiscuous mode [ 136.567168][ T6355] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.766'. [ 136.596623][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.620391][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.656923][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.681715][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.692139][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.704028][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.719636][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.730852][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.741613][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.753954][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.764631][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.789241][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.814389][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 136.824908][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.851233][ T6358] netlink: 14 bytes leftover after parsing attributes in process `syz.2.767'. [ 136.910022][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.931900][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.013986][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.033890][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.044421][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.061264][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.071306][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.111173][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.129385][ T6372] netlink: 'syz.4.774': attribute type 16 has an invalid length. [ 137.150840][ T6372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.774'. [ 137.168611][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.184690][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.211987][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.239937][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.281976][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.346908][ T6141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.376615][ T6381] netlink: 'syz.4.775': attribute type 9 has an invalid length. [ 137.393177][ T6141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.404304][ T6381] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.775'. [ 137.407070][ T6141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.428883][ T6141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.457155][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.473319][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.721976][ T6398] netlink: 14 bytes leftover after parsing attributes in process `syz.1.782'. [ 137.764972][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.805029][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.812615][ T6398] netlink: del zone limit has 4 unknown bytes [ 137.841507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.900383][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.933085][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.983031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.691958][ T6428] syz.4.792 (6428) used greatest stack depth: 17328 bytes left [ 138.894967][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 139.023327][ T6448] netlink: 'syz.4.800': attribute type 16 has an invalid length. [ 139.063131][ T6448] netlink: 132 bytes leftover after parsing attributes in process `syz.4.800'. [ 139.645937][ T6484] netlink: 14 bytes leftover after parsing attributes in process `syz.3.812'. [ 139.681179][ T6484] netlink: del zone limit has 4 unknown bytes [ 139.885677][ T6490] netlink: 148 bytes leftover after parsing attributes in process `syz.4.817'. [ 140.209107][ T6510] delete_channel: no stack [ 140.390505][ T6523] netlink: 'syz.4.830': attribute type 16 has an invalid length. [ 140.407372][ T6523] netlink: 132 bytes leftover after parsing attributes in process `syz.4.830'. [ 140.451783][ T6522] netlink: 'syz.1.826': attribute type 2 has an invalid length. [ 140.577573][ T6513] delete_channel: no stack [ 140.636721][ T6529] device lo entered promiscuous mode [ 141.093397][ T6551] netlink: 'syz.0.838': attribute type 21 has an invalid length. [ 141.116606][ T6551] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 141.637488][ T6557] device syzkaller0 entered promiscuous mode [ 141.901314][ T6578] __nla_validate_parse: 2 callbacks suppressed [ 141.901329][ T6578] netlink: 14 bytes leftover after parsing attributes in process `syz.4.848'. [ 141.962560][ T6578] netlink: del zone limit has 4 unknown bytes [ 142.240202][ T6597] netlink: 'syz.2.857': attribute type 21 has an invalid length. [ 142.679945][ T6614] netlink: 'syz.2.862': attribute type 16 has an invalid length. [ 142.713301][ T6614] netlink: 132 bytes leftover after parsing attributes in process `syz.2.862'. [ 142.778923][ T6618] netlink: set zone limit has 8 unknown bytes [ 143.026533][ T6624] netlink: 'syz.2.867': attribute type 3 has an invalid length. [ 143.057128][ T6624] netlink: 'syz.2.867': attribute type 6 has an invalid length. [ 143.082888][ T6624] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.867'. [ 143.637039][ T6648] netlink: 14 bytes leftover after parsing attributes in process `syz.4.877'. [ 143.709749][ T6648] netlink: del zone limit has 4 unknown bytes [ 143.906586][ T6657] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 143.963460][ T6657] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.880'. [ 143.993714][ T6659] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.881'. [ 144.284035][ T6671] device syzkaller0 entered promiscuous mode [ 144.357122][ T6681] validate_nla: 1 callbacks suppressed [ 144.357136][ T6681] netlink: 'syz.2.889': attribute type 16 has an invalid length. [ 144.396820][ T6681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.889'. [ 144.743331][ T6691] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 144.768771][ T6691] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.894'. [ 144.873897][ T6710] netlink: 14 bytes leftover after parsing attributes in process `syz.3.900'. [ 144.885674][ T6710] netlink: del zone limit has 4 unknown bytes [ 145.394470][ T6736] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.911'. [ 145.740682][ T6743] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 145.923823][ T6751] netlink: 'syz.2.918': attribute type 16 has an invalid length. [ 146.483971][ T6768] netlink: del zone limit has 4 unknown bytes [ 146.702379][ T6778] netlink: 'syz.4.928': attribute type 1 has an invalid length. [ 147.096675][ T6789] __nla_validate_parse: 5 callbacks suppressed [ 147.096731][ T6789] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.932'. [ 147.318771][ T6800] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.935'. [ 147.866088][ T6799] netlink: 138908 bytes leftover after parsing attributes in process `syz.1.937'. [ 148.175968][ T6815] netlink: 'syz.1.942': attribute type 1 has an invalid length. [ 148.206388][ T6815] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.942'. [ 148.317885][ T6828] netlink: 'syz.3.946': attribute type 16 has an invalid length. [ 148.368235][ T6828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.946'. [ 148.741757][ T6844] netlink: 'syz.3.952': attribute type 3 has an invalid length. [ 148.759839][ T6844] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.952'. [ 149.663596][ T6865] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 149.723093][ T6865] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.960'. [ 149.910081][ T6873] netlink: 'syz.3.963': attribute type 3 has an invalid length. [ 149.941842][ T6873] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.963'. [ 149.981127][ T6879] netlink: 'syz.0.965': attribute type 3 has an invalid length. [ 150.013237][ T6879] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.965'. [ 150.096739][ T6885] netlink: 'syz.3.967': attribute type 16 has an invalid length. [ 150.136307][ T6885] netlink: 132 bytes leftover after parsing attributes in process `syz.3.967'. [ 150.542214][ T6907] netlink: del zone limit has 4 unknown bytes [ 150.803890][ T6915] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 151.740519][ T6929] netlink: 'syz.1.980': attribute type 3 has an invalid length. [ 153.104062][ T6971] __nla_validate_parse: 4 callbacks suppressed [ 153.104079][ T6971] netlink: 14 bytes leftover after parsing attributes in process `syz.1.997'. [ 153.180364][ T6971] netlink: del zone limit has 4 unknown bytes [ 153.533100][ T6981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1002'. [ 153.599370][ T6981] IPv6: Can't replace route, no match found [ 153.659986][ T6981] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 154.126313][ T7004] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1021'. [ 154.194838][ T7004] netlink: del zone limit has 4 unknown bytes [ 154.236243][ T7007] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 154.268941][ T7007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1012'. [ 154.302862][ T7007] device ipvlan1 entered promiscuous mode [ 154.371999][ T7007] bridge0: port 2(ipvlan1) entered blocking state [ 154.393664][ T7007] bridge0: port 2(ipvlan1) entered disabled state [ 154.429360][ T7007] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 155.132220][ T7027] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1022'. [ 155.247534][ T7039] netlink: 'syz.1.1026': attribute type 16 has an invalid length. [ 155.313607][ T7039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1026'. [ 155.339153][ T7042] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1018'. [ 156.297622][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 156.319687][ T7080] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1040'. [ 156.414891][ T7080] netlink: del zone limit has 4 unknown bytes [ 156.732690][ T7088] netlink: 'syz.0.1043': attribute type 10 has an invalid length. [ 156.814671][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1043'. [ 156.855978][ T7088] device ipvlan1 entered promiscuous mode [ 156.890654][ T7088] bridge0: port 3(ipvlan1) entered blocking state [ 156.925736][ T7088] bridge0: port 3(ipvlan1) entered disabled state [ 156.969019][ T7088] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 157.629017][ T5171] wlan1: Trigger new scan to find an IBSS to join [ 158.073599][ T7123] netlink: 'syz.4.1056': attribute type 16 has an invalid length. [ 158.119104][ T7123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1056'. [ 158.946129][ T7159] netlink: 'syz.2.1070': attribute type 39 has an invalid length. [ 159.286279][ T7159] device hsr_slave_1 left promiscuous mode [ 159.859805][ T7172] netlink: 'syz.1.1076': attribute type 10 has an invalid length. [ 159.941496][ T7172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1076'. [ 159.996464][ T7172] device ipvlan1 entered promiscuous mode [ 160.065473][ T7172] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 160.397169][ T7198] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 160.498278][ T7198] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 160.580305][ T7198] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 161.085459][ T7222] netlink: 'syz.4.1095': attribute type 10 has an invalid length. [ 161.143418][ T7222] device geneve0 entered promiscuous mode [ 161.327920][ T7222] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 161.561838][ T7247] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1102'. [ 161.603196][ T7247] netlink: del zone limit has 4 unknown bytes [ 162.163152][ T7268] netlink: 'syz.3.1110': attribute type 10 has an invalid length. [ 162.190773][ T7268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1110'. [ 162.319264][ T7272] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 162.355324][ T7272] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1112'. [ 162.403483][ T7274] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 162.478023][ T7274] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1112'. [ 162.579639][ T144] wlan1: Trigger new scan to find an IBSS to join [ 163.182655][ T7303] netlink: 'syz.2.1123': attribute type 16 has an invalid length. [ 163.224223][ T7303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1123'. [ 163.407898][ T7314] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1128'. [ 163.559242][ T7314] netlink: del zone limit has 4 unknown bytes [ 163.676354][ T5171] wlan1: Creating new IBSS network, BSSID 5e:79:fc:5c:d9:67 [ 163.773586][ T7322] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 163.825214][ T7322] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1133'. [ 164.612896][ T7359] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 164.690046][ T7359] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1148'. [ 164.792823][ T7369] netlink: 'syz.0.1151': attribute type 16 has an invalid length. [ 164.815727][ T7369] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1151'. [ 164.972762][ T7374] netlink: 'syz.3.1156': attribute type 10 has an invalid length. [ 165.014504][ T7374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1156'. [ 165.092971][ T7383] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1158'. [ 165.144304][ T7383] netlink: del zone limit has 4 unknown bytes [ 166.289325][ T7416] netlink: 'syz.3.1173': attribute type 39 has an invalid length. [ 166.338919][ T7422] netlink: 'syz.4.1175': attribute type 16 has an invalid length. [ 166.354281][ T7422] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1175'. [ 166.374484][ T7421] netlink: 'syz.2.1176': attribute type 9 has an invalid length. [ 166.420630][ T7421] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1176'. [ 166.515350][ T7416] device hsr_slave_1 left promiscuous mode [ 166.597463][ T7421] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 166.659750][ T7421] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.1176'. [ 166.940139][ T7449] netlink: del zone limit has 4 unknown bytes [ 167.399983][ T7466] netlink: 'syz.1.1192': attribute type 4 has an invalid length. [ 167.425964][ T7466] netlink: 'syz.1.1192': attribute type 3 has an invalid length. [ 167.572221][ T7473] netlink: 'syz.3.1198': attribute type 3 has an invalid length. [ 167.592630][ T7474] netlink: 'syz.3.1198': attribute type 3 has an invalid length. [ 167.617605][ T7473] netlink: 'syz.3.1198': attribute type 3 has an invalid length. [ 167.910788][ T7497] netlink: 'syz.0.1204': attribute type 16 has an invalid length. [ 168.499700][ T7522] __nla_validate_parse: 6 callbacks suppressed [ 168.499715][ T7522] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1212'. [ 168.515832][ T7522] netlink: del zone limit has 4 unknown bytes [ 168.588136][ T7523] device lo left promiscuous mode [ 168.626996][ T7523] Q±6ã`Ò˜: renamed from lo [ 168.734366][ T7527] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1214'. [ 168.827786][ T7535] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1217'. [ 168.851981][ T7535] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.1217'. [ 169.004615][ T7543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1221'. [ 169.387775][ T7566] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.1230'. [ 169.497742][ T7576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1234'. [ 169.531854][ T7578] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1235'. [ 169.653388][ T7585] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1239'. [ 169.662736][ T7585] netlink: del zone limit has 4 unknown bytes [ 170.427955][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 170.690320][ T7634] device syzkaller0 entered promiscuous mode [ 170.937043][ T7652] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.997342][ T7652] device lo entered promiscuous mode [ 171.068571][ T7660] netlink: del zone limit has 4 unknown bytes [ 171.243527][ T7661] team0: Port device team_slave_0 removed [ 171.263389][ T7661] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 171.685073][ T7685] validate_nla: 4 callbacks suppressed [ 171.685089][ T7685] netlink: 'syz.3.1274': attribute type 3 has an invalid length. [ 172.676594][ T7725] netlink: 'syz.0.1293': attribute type 16 has an invalid length. [ 172.902895][ T7738] netlink: del zone limit has 4 unknown bytes [ 173.341525][ T7757] netlink: 'syz.2.1307': attribute type 10 has an invalid length. [ 173.445524][ T7757] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.529954][ T7757] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.575269][ T7757] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.656381][ T7757] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.800678][ T7757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.820776][ T7757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.840049][ T7757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.850988][ T7757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.949013][ T7757] team0: Port device geneve1 added [ 174.450067][ T7806] netlink: 'syz.4.1321': attribute type 11 has an invalid length. [ 174.478188][ T7806] __nla_validate_parse: 9 callbacks suppressed [ 174.478203][ T7806] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1321'. [ 174.542115][ T7802] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.1321'. [ 174.692369][ T7818] netlink: 'syz.4.1327': attribute type 16 has an invalid length. [ 174.717475][ T7818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1327'. [ 175.082411][ T7834] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1332'. [ 175.114462][ T7834] netlink: del zone limit has 4 unknown bytes [ 175.321917][ T7838] netlink: 3939 bytes leftover after parsing attributes in process `syz.2.1334'. [ 176.652956][ T7887] netlink: 'syz.1.1352': attribute type 3 has an invalid length. [ 176.727589][ T7887] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1352'. [ 177.007939][ T7906] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1360'. [ 177.044884][ T7906] netlink: del zone limit has 4 unknown bytes [ 177.152836][ T7913] netlink: 'syz.3.1363': attribute type 2 has an invalid length. [ 177.206395][ T7913] netlink: 'syz.3.1363': attribute type 1 has an invalid length. [ 177.255713][ T7913] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1363'. [ 179.191567][ T7989] IPv6: pim6reg1: Disabled Multicast RS [ 179.576034][ T8005] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1394'. [ 179.605545][ T8005] netlink: del zone limit has 4 unknown bytes [ 180.250112][ T8018] device syzkaller0 entered promiscuous mode [ 181.431198][ T8069] delete_channel: no stack [ 181.912082][ T8095] netlink: 'syz.2.1429': attribute type 16 has an invalid length. [ 181.922534][ T8095] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1429'. [ 182.079608][ T8105] netlink: 'syz.3.1430': attribute type 2 has an invalid length. [ 182.106813][ T8105] netlink: 'syz.3.1430': attribute type 8 has an invalid length. [ 182.120485][ T8105] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1430'. [ 182.144302][ T8104] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1433'. [ 182.179637][ T8104] netlink: 'syz.0.1433': attribute type 9 has an invalid length. [ 182.204482][ T8104] netlink: 56815 bytes leftover after parsing attributes in process `syz.0.1433'. [ 182.413488][ T8117] netlink: 'syz.1.1438': attribute type 10 has an invalid length. [ 182.470903][ T8117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1438'. [ 182.533125][ T8117] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 183.081479][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.125957][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.201277][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.214598][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.960388][ T8170] netlink: 'syz.4.1457': attribute type 1 has an invalid length. [ 183.979154][ T8170] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1457'. [ 184.460249][ T8218] sctp: [Deprecated]: syz.4.1464 (pid 8218) Use of int in max_burst socket option deprecated. [ 184.460249][ T8218] Use struct sctp_assoc_value instead [ 184.634077][ T8228] syz.3.1468 uses obsolete (PF_INET,SOCK_PACKET) [ 184.919702][ T8245] netlink: 'syz.0.1473': attribute type 10 has an invalid length. [ 184.952761][ T8245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1473'. [ 184.998874][ T8245] bridge0: port 3(ipvlan1) entered blocking state [ 185.029150][ T8245] bridge0: port 3(ipvlan1) entered disabled state [ 185.063621][ T8248] netlink: 'syz.4.1474': attribute type 1 has an invalid length. [ 185.074670][ T8245] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 185.083348][ T8248] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1474'. [ 185.277089][ T8252] netlink: 'syz.0.1475': attribute type 3 has an invalid length. [ 185.291338][ T8251] netlink: 'syz.0.1475': attribute type 3 has an invalid length. [ 185.308456][ T8252] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1475'. [ 185.324390][ T8251] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1475'. [ 185.434916][ T8262] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1479'. [ 185.502676][ T8262] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1479'. [ 185.570377][ T8262] netlink: 'syz.2.1479': attribute type 41 has an invalid length. [ 185.627306][ T8262] netlink: 'syz.2.1479': attribute type 4 has an invalid length. [ 185.674771][ T8262] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1479'. [ 185.854432][ T8185] Bluetooth: hci2: command 0x0406 tx timeout [ 185.854799][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 185.861098][ T8185] Bluetooth: hci4: command 0x0406 tx timeout [ 185.911997][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 185.933337][ T8282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1485'. [ 186.121789][ T8290] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 186.143548][ T8290] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1488'. [ 186.312505][ T8301] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1494'. [ 186.366549][ T8299] delete_channel: no stack [ 186.379197][ T8299] delete_channel: no stack [ 186.384013][ T8301] netlink: del zone limit has 4 unknown bytes [ 187.209927][ T8327] netlink: 'syz.2.1504': attribute type 10 has an invalid length. [ 187.255925][ T8327] bridge0: port 2(ipvlan1) entered blocking state [ 187.295275][ T8327] bridge0: port 2(ipvlan1) entered disabled state [ 187.350189][ T8327] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 187.449913][ T8335] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 187.977274][ T8360] netlink: 'syz.3.1513': attribute type 16 has an invalid length. [ 188.334974][ T8365] netlink: 'syz.3.1515': attribute type 7 has an invalid length. [ 188.383644][ T8365] netlink: 'syz.3.1515': attribute type 1 has an invalid length. [ 188.543652][ T8381] netlink: 'syz.2.1522': attribute type 1 has an invalid length. [ 188.634351][ T8383] netlink: del zone limit has 4 unknown bytes [ 189.330200][ T8425] netlink: 'syz.4.1535': attribute type 10 has an invalid length. [ 189.350689][ T8424] netlink: 'syz.3.1537': attribute type 1 has an invalid length. [ 189.391724][ T8425] device ipvlan1 entered promiscuous mode [ 189.515453][ T8425] bridge0: port 3(ipvlan1) entered blocking state [ 189.530573][ T8425] bridge0: port 3(ipvlan1) entered disabled state [ 189.623057][ T8425] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 189.806706][ T8426] device syzkaller0 entered promiscuous mode [ 190.240164][ T8447] pimreg: tun_chr_ioctl cmd 2147767507 [ 190.320267][ T8449] __nla_validate_parse: 8 callbacks suppressed [ 190.320279][ T8449] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1545'. [ 190.370027][ T8458] netlink: 'syz.2.1546': attribute type 16 has an invalid length. [ 190.404254][ T8449] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 190.411665][ T8458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1546'. [ 190.443125][ T8449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.550355][ T8460] pim6reg: tun_chr_ioctl cmd 1074025677 [ 190.644668][ T8460] pim6reg: linktype set to 778 [ 190.843559][ T8477] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 190.872269][ T8477] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1555'. [ 191.123891][ T8492] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1560'. [ 191.175088][ T8492] netlink: del zone limit has 4 unknown bytes [ 191.672347][ T8518] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1568'. [ 191.755308][ T8519] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1568'. [ 191.838883][ T8529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1571'. [ 191.871555][ T8529] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 191.936129][ T8537] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1572'. [ 192.092191][ T8547] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1577'. [ 192.744570][ T8577] validate_nla: 7 callbacks suppressed [ 192.744616][ T8577] netlink: 'syz.0.1589': attribute type 1 has an invalid length. [ 192.766593][ T8577] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1589'. [ 192.792728][ T8584] netlink: del zone limit has 4 unknown bytes [ 193.212243][ T8610] device sit0 entered promiscuous mode [ 193.373749][ T8617] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 193.619926][ T8631] netlink: 'syz.3.1613': attribute type 10 has an invalid length. [ 193.729329][ T8635] netlink: 'syz.2.1615': attribute type 16 has an invalid length. [ 193.737966][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 193.897870][ T8643] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 194.020228][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.027631][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.117987][ T8649] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 194.413795][ T8673] netlink: del zone limit has 4 unknown bytes [ 194.725620][ T8677] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 194.782980][ T8686] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 195.952688][ T8717] delete_channel: no stack [ 196.010176][ T8717] delete_channel: no stack [ 196.072806][ T8725] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 196.111061][ T8725] __nla_validate_parse: 11 callbacks suppressed [ 196.111091][ T8725] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1650'. [ 196.549012][ T8737] netlink: 'syz.4.1655': attribute type 16 has an invalid length. [ 196.570827][ T8737] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1655'. [ 197.416177][ T8757] delete_channel: no stack [ 197.486297][ T8757] delete_channel: no stack [ 197.961604][ T8770] syzkaller0: tun_chr_ioctl cmd 1074025694 [ 200.154969][ T8830] netlink: 'syz.0.1689': attribute type 16 has an invalid length. [ 200.176479][ T8830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1689'. [ 200.198673][ T8831] netlink: 'syz.3.1688': attribute type 3 has an invalid length. [ 200.229614][ T8831] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1688'. [ 200.294298][ T8831] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1688'. [ 200.938122][ T8855] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1697'. [ 201.000809][ T8855] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 201.806575][ T8901] netlink: 'syz.1.1715': attribute type 16 has an invalid length. [ 201.842273][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1715'. [ 202.122574][ T8906] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1717'. [ 202.374058][ T8914] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1720'. [ 202.451218][ T8914] netlink: del zone limit has 4 unknown bytes [ 202.703685][ T8930] netlink: 'syz.3.1726': attribute type 29 has an invalid length. [ 202.826444][ T8930] netlink: 'syz.3.1726': attribute type 29 has an invalid length. [ 203.034386][ T8933] netlink: 'syz.3.1726': attribute type 29 has an invalid length. [ 203.103914][ T8937] netlink: 'syz.3.1726': attribute type 29 has an invalid length. [ 203.169466][ T8952] netlink: 'syz.1.1734': attribute type 11 has an invalid length. [ 203.202968][ T8952] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1734'. [ 203.254839][ T8952] netlink: 'syz.1.1734': attribute type 10 has an invalid length. [ 203.317988][ T8952] device geneve0 entered promiscuous mode [ 203.403951][ T8952] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 203.624801][ T8968] netlink: 'syz.1.1740': attribute type 1 has an invalid length. [ 203.653238][ T8968] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1740'. [ 204.220719][ T8993] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1750'. [ 205.282200][ T9015] validate_nla: 1 callbacks suppressed [ 205.282247][ T9015] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 205.389660][ T9015] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1756'. [ 205.547977][ T9027] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1761'. [ 205.563628][ T9027] netlink: del zone limit has 4 unknown bytes [ 205.604027][ T9032] netlink: 'syz.1.1763': attribute type 16 has an invalid length. [ 205.628769][ T9032] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1763'. [ 205.692240][ T9032] netlink: 'syz.1.1763': attribute type 10 has an invalid length. [ 205.717641][ T9032] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1763'. [ 205.750415][ T9037] raw_sendmsg: syz.1.1763 forgot to set AF_INET. Fix it! [ 205.771755][ T9032] netlink: 'syz.1.1763': attribute type 10 has an invalid length. [ 205.986047][ T9048] TCP: TCP_TX_DELAY enabled [ 206.211527][ T9059] netlink: 'syz.4.1774': attribute type 1 has an invalid length. [ 206.286533][ T9066] delete_channel: no stack [ 206.291044][ T9066] delete_channel: no stack [ 206.943117][ T9097] netlink: 'syz.0.1788': attribute type 16 has an invalid length. [ 206.964286][ T9097] __nla_validate_parse: 1 callbacks suppressed [ 206.964299][ T9097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1788'. [ 207.011251][ T9096] netlink: 'syz.4.1790': attribute type 1 has an invalid length. [ 207.063546][ T9096] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1790'. [ 207.153074][ T9104] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1793'. [ 207.269083][ T9111] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1796'. [ 207.278951][ T9111] netlink: del zone limit has 4 unknown bytes [ 207.736956][ T9132] netlink: 'syz.2.1804': attribute type 12 has an invalid length. [ 207.764494][ T9132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1804'. [ 207.912862][ T9137] netlink: 'syz.0.1806': attribute type 1 has an invalid length. [ 207.962464][ T9137] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1806'. [ 208.829468][ T9183] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 208.876822][ T9183] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1823'. [ 209.080044][ T9190] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1828'. [ 209.099509][ T9193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1826'. [ 209.134734][ T9197] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1830'. [ 209.186291][ T9197] netlink: del zone limit has 4 unknown bytes [ 210.089146][ T9234] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.932454][ T9267] validate_nla: 3 callbacks suppressed [ 210.932469][ T9267] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 211.647180][ T9299] netlink: 'syz.4.1867': attribute type 16 has an invalid length. [ 211.842805][ T9312] netlink: 'syz.4.1871': attribute type 1 has an invalid length. [ 211.886149][ T9315] netlink: del zone limit has 4 unknown bytes [ 212.543208][ T9342] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 212.673379][ T9342] __nla_validate_parse: 10 callbacks suppressed [ 212.673396][ T9342] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1886'. [ 213.406115][ T9371] netlink: 'syz.1.1895': attribute type 10 has an invalid length. [ 213.855230][ T9386] netlink: 'syz.4.1902': attribute type 1 has an invalid length. [ 213.895076][ T9386] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1902'. [ 213.969365][ T9396] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1907'. [ 213.989291][ T9396] netlink: del zone limit has 4 unknown bytes [ 214.671525][ T9428] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 214.764277][ T9428] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1918'. [ 215.422834][ T9450] netlink: 'syz.3.1926': attribute type 19 has an invalid length. [ 215.474035][ T9450] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1926'. [ 215.583280][ T9464] netlink: 'syz.4.1932': attribute type 16 has an invalid length. [ 215.626266][ T9464] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1932'. [ 215.645124][ T9464] netlink: 'syz.4.1932': attribute type 10 has an invalid length. [ 215.656783][ T9464] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1932'. [ 215.712935][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.720602][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.816364][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.823832][ T9470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.832390][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.839544][ T9470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.947774][ T9470] team0: Port device bridge0 added [ 216.852873][ T9477] validate_nla: 1 callbacks suppressed [ 216.852907][ T9477] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 216.870543][ T9477] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1936'. [ 219.015897][ T9493] netlink: 'syz.1.1937': attribute type 2 has an invalid length. [ 219.039223][ T9500] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1946'. [ 219.048442][ T9500] netlink: del zone limit has 4 unknown bytes [ 219.088499][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1937'. [ 219.143203][ T9504] netlink: 'syz.2.1947': attribute type 1 has an invalid length. [ 219.166912][ T9504] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1947'. [ 219.419991][ T9518] netlink: 'syz.0.1950': attribute type 16 has an invalid length. [ 219.431829][ T9518] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1950'. [ 219.479086][ T9518] netlink: 'syz.0.1950': attribute type 10 has an invalid length. [ 219.496112][ T9518] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1950'. [ 219.523719][ T9518] netlink: 'syz.0.1950': attribute type 10 has an invalid length. [ 219.543134][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.551891][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.684595][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.692117][ T9518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.701591][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.709078][ T9518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.810496][ T9518] team0: Port device bridge0 added [ 219.837908][ T9531] netlink: 'syz.1.1956': attribute type 10 has an invalid length. [ 219.855032][ T9531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1956'. [ 219.901492][ T9531] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 220.156804][ T9544] netlink: 'syz.4.1963': attribute type 1 has an invalid length. [ 220.195249][ T9544] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1963'. [ 221.033509][ T9585] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 221.099521][ T9585] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1980'. [ 221.149762][ T9591] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1983'. [ 221.238426][ T9591] netlink: del zone limit has 4 unknown bytes [ 221.840616][ T9620] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 221.877192][ T9620] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1996'. [ 222.711814][ T9667] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 222.808863][ T9673] netlink: del zone limit has 4 unknown bytes [ 223.180243][ T9691] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 223.762419][ T9707] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 223.791437][ T9709] netlink: 'syz.3.2032': attribute type 10 has an invalid length. [ 224.390283][ T9740] netlink: 'syz.4.2046': attribute type 1 has an invalid length. [ 224.465123][ T9740] __nla_validate_parse: 5 callbacks suppressed [ 224.465156][ T9740] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2046'. [ 224.606190][ T9754] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2052'. [ 224.642085][ T9754] netlink: del zone limit has 4 unknown bytes [ 224.736817][ T9757] netlink: 'syz.2.2053': attribute type 10 has an invalid length. [ 224.865890][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 224.921627][ T9757] team0: Device wg1 is of different type [ 225.022716][ T9756] delete_channel: no stack [ 225.701830][ T9794] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 225.754408][ T9794] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2065'. [ 226.518413][ T4701] device hsr_slave_0 left promiscuous mode [ 226.549892][ T4701] device hsr_slave_1 left promiscuous mode [ 226.591892][ T9840] netlink: 'syz.2.2085': attribute type 1 has an invalid length. [ 226.602378][ T4701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.631446][ T4701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.643206][ T9840] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2085'. [ 226.667533][ T4701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.684250][ T9849] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2087'. [ 226.728106][ T4701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.733704][ T9843] netlink: 'syz.3.2086': attribute type 27 has an invalid length. [ 226.746119][ T9849] netlink: del zone limit has 4 unknown bytes [ 226.750783][ T9843] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2086'. [ 226.763665][ T4701] device bridge_slave_1 left promiscuous mode [ 226.789966][ T4701] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.827892][ T4701] device bridge_slave_0 left promiscuous mode [ 226.838344][ T4701] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.919478][ T4701] device veth1_macvtap left promiscuous mode [ 226.930591][ T4701] device veth0_macvtap left promiscuous mode [ 226.950139][ T4701] device veth1_vlan left promiscuous mode [ 226.985264][ T4701] device veth0_vlan left promiscuous mode [ 227.513826][ T4701] team0 (unregistering): Port device team_slave_1 removed [ 227.535897][ T4701] team0 (unregistering): Port device team_slave_0 removed [ 227.551801][ T4701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.568473][ T4701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.659747][ T4701] bond0 (unregistering): Released all slaves [ 227.724637][ T9878] netlink: 'syz.3.2100': attribute type 10 has an invalid length. [ 227.741391][ T9878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2100'. [ 228.009836][ T9892] netlink: 'syz.1.2105': attribute type 21 has an invalid length. [ 228.073438][ T9899] device lo entered promiscuous mode [ 228.313817][ T9913] netlink: 'syz.3.2114': attribute type 1 has an invalid length. [ 228.349793][ T9913] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2114'. [ 228.605467][ T9930] netlink: 'syz.1.2121': attribute type 10 has an invalid length. [ 228.614875][ T9932] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2122'. [ 228.648843][ T9932] netlink: del zone limit has 4 unknown bytes [ 228.701843][ T9930] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.748756][ T9930] bond0: (slave team0): Enslaving as an active interface with an up link [ 229.097023][ T9952] netlink: 'syz.1.2129': attribute type 10 has an invalid length. [ 229.132738][ T9951] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 229.173543][ T9951] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2130'. [ 229.352422][ T9952] team0: Device wg1 is of different type [ 229.498461][ T9949] delete_channel: no stack [ 229.524664][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 229.596942][ T9963] netlink: 'syz.0.2134': attribute type 10 has an invalid length. [ 229.641833][ T9963] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 229.768883][ T9970] netlink: 'syz.1.2138': attribute type 10 has an invalid length. [ 229.907618][ T9970] team0: Device hsr_slave_0 failed to register rx_handler [ 230.158258][ T9995] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2146'. [ 230.317231][T10001] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 230.402808][T10001] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2148'. [ 230.708777][T10025] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2158'. [ 230.774323][T10025] netlink: del zone limit has 4 unknown bytes [ 230.846966][T10026] netlink: 'syz.4.2159': attribute type 39 has an invalid length. [ 231.289016][T10041] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2166'. [ 232.385155][T10084] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2183'. [ 232.934369][T10107] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2193'. [ 232.964676][T10107] netlink: del zone limit has 4 unknown bytes [ 233.520824][T10129] validate_nla: 3 callbacks suppressed [ 233.520858][T10129] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 233.545291][T10129] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2200'. [ 234.045167][T10151] netlink: 'syz.4.2208': attribute type 1 has an invalid length. [ 234.091222][T10151] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2208'. [ 234.171198][T10155] FAULT_INJECTION: forcing a failure. [ 234.171198][T10155] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 234.199123][T10163] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2213'. [ 234.260332][T10155] CPU: 1 PID: 10155 Comm: syz.3.2210 Not tainted syzkaller #0 [ 234.267843][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.277969][T10155] Call Trace: [ 234.281270][T10155] [ 234.284219][T10155] dump_stack_lvl+0x188/0x250 [ 234.288963][T10155] ? show_regs_print_info+0x20/0x20 [ 234.294189][T10155] ? load_image+0x400/0x400 [ 234.298719][T10155] ? __lock_acquire+0x7d10/0x7d10 [ 234.303772][T10155] ? vfs_write+0x8b2/0xd60 [ 234.308216][T10155] should_fail+0x38c/0x4c0 [ 234.312667][T10155] _copy_from_user+0x2e/0x170 [ 234.317378][T10155] __sys_bpf+0x26d/0x6f0 [ 234.321658][T10155] ? bpf_link_show_fdinfo+0x380/0x380 [ 234.327071][T10155] ? vtime_user_exit+0x2c8/0x3e0 [ 234.332052][T10155] __x64_sys_bpf+0x78/0x90 [ 234.336501][T10155] do_syscall_64+0x4c/0xa0 [ 234.340953][T10155] ? clear_bhb_loop+0x30/0x80 [ 234.345657][T10155] ? clear_bhb_loop+0x30/0x80 [ 234.350373][T10155] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.356307][T10155] RIP: 0033:0x7fa489c2ae59 [ 234.360746][T10155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.380384][T10155] RSP: 002b:00007fa487e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.388829][T10155] RAX: ffffffffffffffda RBX: 00007fa489ea3fa0 RCX: 00007fa489c2ae59 [ 234.396826][T10155] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 234.404810][T10155] RBP: 00007fa487e84090 R08: 0000000000000000 R09: 0000000000000000 [ 234.412808][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.420800][T10155] R13: 00007fa489ea4038 R14: 00007fa489ea3fa0 R15: 00007fff1a6f7848 [ 234.428808][T10155] [ 234.463484][T10163] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 234.520559][T10166] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 234.539584][T10166] __nla_validate_parse: 1 callbacks suppressed [ 234.539623][T10166] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2215'. [ 234.693013][T10172] netlink: 'syz.4.2214': attribute type 9 has an invalid length. [ 234.751947][T10172] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2214'. [ 234.911111][T10168] netlink: 'syz.4.2214': attribute type 9 has an invalid length. [ 234.932415][T10168] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2214'. [ 235.088197][T10190] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2224'. [ 235.102073][T10184] FAULT_INJECTION: forcing a failure. [ 235.102073][T10184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.144040][T10184] CPU: 0 PID: 10184 Comm: syz.2.2222 Not tainted syzkaller #0 [ 235.151538][T10184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 235.161606][T10184] Call Trace: [ 235.164891][T10184] [ 235.167830][T10184] dump_stack_lvl+0x188/0x250 [ 235.172523][T10184] ? show_regs_print_info+0x20/0x20 [ 235.177732][T10184] ? load_image+0x400/0x400 [ 235.182254][T10184] ? __lock_acquire+0x7d10/0x7d10 [ 235.187303][T10184] should_fail+0x38c/0x4c0 [ 235.191732][T10184] _copy_from_user+0x2e/0x170 [ 235.196418][T10184] __copy_msghdr_from_user+0xc9/0x630 [ 235.201792][T10184] ? verify_lock_unused+0x140/0x140 [ 235.207001][T10184] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 235.212321][T10184] ___sys_sendmsg+0x19a/0x2e0 [ 235.217010][T10184] ? __sys_sendmsg+0x2a0/0x2a0 [ 235.221787][T10184] ? trace_event_raw_event_lock+0x270/0x270 [ 235.227705][T10184] ? vfs_write+0x8b2/0xd60 [ 235.232154][T10184] __se_sys_sendmsg+0x1af/0x290 [ 235.237010][T10184] ? __x64_sys_sendmsg+0x80/0x80 [ 235.241950][T10184] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 235.247952][T10184] ? lockdep_hardirqs_on+0x94/0x140 [ 235.253167][T10184] do_syscall_64+0x4c/0xa0 [ 235.257594][T10184] ? clear_bhb_loop+0x30/0x80 [ 235.262272][T10184] ? clear_bhb_loop+0x30/0x80 [ 235.266955][T10184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.272859][T10184] RIP: 0033:0x7f38760fce59 [ 235.277286][T10184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.296897][T10184] RSP: 002b:00007f3874356028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.305315][T10184] RAX: ffffffffffffffda RBX: 00007f3876375fa0 RCX: 00007f38760fce59 [ 235.313294][T10184] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 000000000000000a [ 235.321267][T10184] RBP: 00007f3874356090 R08: 0000000000000000 R09: 0000000000000000 [ 235.329243][T10184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.337225][T10184] R13: 00007f3876376038 R14: 00007f3876375fa0 R15: 00007ffcebae1038 [ 235.345231][T10184] [ 235.604730][T10200] netlink: 'syz.0.2227': attribute type 10 has an invalid length. [ 235.693328][T10200] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 235.899781][T10209] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 235.919081][T10209] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2231'. [ 236.000446][T10215] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2232'. [ 236.032802][T10215] netlink: del zone limit has 4 unknown bytes [ 236.159786][T10223] netlink: 'syz.1.2237': attribute type 1 has an invalid length. [ 236.169052][T10221] FAULT_INJECTION: forcing a failure. [ 236.169052][T10221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.224381][T10221] CPU: 1 PID: 10221 Comm: syz.3.2236 Not tainted syzkaller #0 [ 236.231893][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 236.241967][T10221] Call Trace: [ 236.245277][T10221] [ 236.248244][T10221] dump_stack_lvl+0x188/0x250 [ 236.252968][T10221] ? show_regs_print_info+0x20/0x20 [ 236.258208][T10221] ? load_image+0x400/0x400 [ 236.262766][T10221] ? __lock_acquire+0x7d10/0x7d10 [ 236.267840][T10221] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 236.273731][T10221] should_fail+0x38c/0x4c0 [ 236.278199][T10221] _copy_from_user+0x2e/0x170 [ 236.282909][T10221] __copy_msghdr_from_user+0xc9/0x630 [ 236.288311][T10221] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 236.294072][T10221] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 236.299436][T10221] ___sys_sendmsg+0x19a/0x2e0 [ 236.304172][T10221] ? __sys_sendmsg+0x2a0/0x2a0 [ 236.309054][T10221] __se_sys_sendmsg+0x1af/0x290 [ 236.313947][T10221] ? __x64_sys_sendmsg+0x80/0x80 [ 236.318923][T10221] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 236.324974][T10221] ? lockdep_hardirqs_on+0x94/0x140 [ 236.330232][T10221] do_syscall_64+0x4c/0xa0 [ 236.334669][T10221] ? clear_bhb_loop+0x30/0x80 [ 236.339370][T10221] ? clear_bhb_loop+0x30/0x80 [ 236.344080][T10221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.350092][T10221] RIP: 0033:0x7fa489c2ae59 [ 236.354537][T10221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.374161][T10221] RSP: 002b:00007fa487e84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.382689][T10221] RAX: ffffffffffffffda RBX: 00007fa489ea3fa0 RCX: 00007fa489c2ae59 [ 236.390678][T10221] RDX: 7e8166965e22236a RSI: 0000200000007940 RDI: 0000000000000007 [ 236.398678][T10221] RBP: 00007fa487e84090 R08: 0000000000000000 R09: 0000000000000000 [ 236.406682][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.414759][T10221] R13: 00007fa489ea4038 R14: 00007fa489ea3fa0 R15: 00007fff1a6f7848 [ 236.422922][T10221] [ 236.782011][T10247] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 236.792135][T10247] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2246'. [ 237.054119][T10261] netlink: 'syz.3.2250': attribute type 21 has an invalid length. [ 237.115375][T10261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2250'. [ 237.318137][T10269] FAULT_INJECTION: forcing a failure. [ 237.318137][T10269] name failslab, interval 1, probability 0, space 0, times 1 [ 237.362326][T10269] CPU: 1 PID: 10269 Comm: syz.0.2254 Not tainted syzkaller #0 [ 237.369915][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 237.380027][T10269] Call Trace: [ 237.383327][T10269] [ 237.386271][T10269] dump_stack_lvl+0x188/0x250 [ 237.390970][T10269] ? show_regs_print_info+0x20/0x20 [ 237.396192][T10269] ? load_image+0x400/0x400 [ 237.400722][T10269] ? __might_sleep+0xf0/0xf0 [ 237.405404][T10269] ? __lock_acquire+0x7d10/0x7d10 [ 237.410455][T10269] should_fail+0x38c/0x4c0 [ 237.414908][T10269] should_failslab+0x5/0x20 [ 237.419434][T10269] slab_pre_alloc_hook+0x51/0xc0 [ 237.424396][T10269] __kmalloc+0x6b/0x330 [ 237.428667][T10269] ? bpf_test_init+0xf8/0x1b0 [ 237.433380][T10269] ? __lock_acquire+0x7d10/0x7d10 [ 237.438442][T10269] bpf_test_init+0xf8/0x1b0 [ 237.442983][T10269] bpf_prog_test_run_skb+0x181/0x10b0 [ 237.448381][T10269] ? __fget_files+0x40f/0x480 [ 237.453104][T10269] ? cpu_online+0x60/0x60 [ 237.457455][T10269] bpf_prog_test_run+0x31e/0x390 [ 237.462415][T10269] __sys_bpf+0x5a5/0x6f0 [ 237.466676][T10269] ? bpf_link_show_fdinfo+0x380/0x380 [ 237.472068][T10269] ? rcu_nmi_exit+0x6f/0xf0 [ 237.476601][T10269] ? vtime_user_exit+0x2c8/0x3e0 [ 237.481565][T10269] __x64_sys_bpf+0x78/0x90 [ 237.486006][T10269] do_syscall_64+0x4c/0xa0 [ 237.490439][T10269] ? clear_bhb_loop+0x30/0x80 [ 237.495136][T10269] ? clear_bhb_loop+0x30/0x80 [ 237.499851][T10269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.505766][T10269] RIP: 0033:0x7f9fb45a9e59 [ 237.510231][T10269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.529849][T10269] RSP: 002b:00007f9fb2803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.538285][T10269] RAX: ffffffffffffffda RBX: 00007f9fb4822fa0 RCX: 00007f9fb45a9e59 [ 237.546281][T10269] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 237.554274][T10269] RBP: 00007f9fb2803090 R08: 0000000000000000 R09: 0000000000000000 [ 237.562264][T10269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.570253][T10269] R13: 00007f9fb4823038 R14: 00007f9fb4822fa0 R15: 00007ffcc7164f38 [ 237.578274][T10269] [ 237.847231][T10281] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2259'. [ 237.883101][T10284] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2260'. [ 238.999798][T10303] FAULT_INJECTION: forcing a failure. [ 238.999798][T10303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.030533][T10307] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 239.121310][T10303] CPU: 0 PID: 10303 Comm: syz.1.2265 Not tainted syzkaller #0 [ 239.128835][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.138922][T10303] Call Trace: [ 239.142212][T10303] [ 239.145155][T10303] dump_stack_lvl+0x188/0x250 [ 239.149874][T10303] ? show_regs_print_info+0x20/0x20 [ 239.155100][T10303] ? load_image+0x400/0x400 [ 239.159621][T10303] ? __lock_acquire+0x7d10/0x7d10 [ 239.164784][T10303] should_fail+0x38c/0x4c0 [ 239.169226][T10303] _copy_from_user+0x2e/0x170 [ 239.173918][T10303] iovec_from_user+0x142/0x370 [ 239.178712][T10303] __import_iovec+0x70/0x490 [ 239.183340][T10303] import_iovec+0x6f/0xa0 [ 239.187729][T10303] ___sys_sendmsg+0x1fd/0x2e0 [ 239.192447][T10303] ? __sys_sendmsg+0x2a0/0x2a0 [ 239.197252][T10303] ? ktime_get_real_ts64+0x440/0x440 [ 239.202590][T10303] __se_sys_sendmsg+0x1af/0x290 [ 239.207465][T10303] ? __x64_sys_sendmsg+0x80/0x80 [ 239.212419][T10303] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 239.218437][T10303] ? lockdep_hardirqs_on+0x94/0x140 [ 239.223673][T10303] do_syscall_64+0x4c/0xa0 [ 239.228116][T10303] ? clear_bhb_loop+0x30/0x80 [ 239.232826][T10303] ? clear_bhb_loop+0x30/0x80 [ 239.237532][T10303] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.243455][T10303] RIP: 0033:0x7f1dc9081e59 [ 239.247907][T10303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.267539][T10303] RSP: 002b:00007f1dc72db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.275975][T10303] RAX: ffffffffffffffda RBX: 00007f1dc92fafa0 RCX: 00007f1dc9081e59 [ 239.283970][T10303] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 000000000000000a [ 239.291970][T10303] RBP: 00007f1dc72db090 R08: 0000000000000000 R09: 0000000000000000 [ 239.299972][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.307962][T10303] R13: 00007f1dc92fb038 R14: 00007f1dc92fafa0 R15: 00007ffff99ea658 [ 239.315958][T10303] [ 239.629718][T10328] validate_nla: 3 callbacks suppressed [ 239.629751][T10328] netlink: 'syz.0.2275': attribute type 1 has an invalid length. [ 239.681231][T10336] __nla_validate_parse: 1 callbacks suppressed [ 239.681246][T10336] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2277'. [ 239.693123][T10328] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2275'. [ 239.710968][T10336] netlink: del zone limit has 4 unknown bytes [ 240.106387][T10363] FAULT_INJECTION: forcing a failure. [ 240.106387][T10363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.135456][T10363] CPU: 1 PID: 10363 Comm: syz.0.2287 Not tainted syzkaller #0 [ 240.142953][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.153024][T10363] Call Trace: [ 240.156314][T10363] [ 240.159267][T10363] dump_stack_lvl+0x188/0x250 [ 240.163984][T10363] ? show_regs_print_info+0x20/0x20 [ 240.169206][T10363] ? load_image+0x400/0x400 [ 240.173726][T10363] ? __lock_acquire+0x7d10/0x7d10 [ 240.178779][T10363] should_fail+0x38c/0x4c0 [ 240.183239][T10363] _copy_from_user+0x2e/0x170 [ 240.187939][T10363] __copy_msghdr_from_user+0x48a/0x630 [ 240.193448][T10363] ? verify_lock_unused+0x140/0x140 [ 240.198667][T10363] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 240.203992][T10363] ___sys_sendmsg+0x19a/0x2e0 [ 240.208692][T10363] ? __sys_sendmsg+0x2a0/0x2a0 [ 240.213580][T10363] ? vfs_write+0x8b2/0xd60 [ 240.218024][T10363] __se_sys_sendmsg+0x1af/0x290 [ 240.222906][T10363] ? __x64_sys_sendmsg+0x80/0x80 [ 240.227858][T10363] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 240.233867][T10363] ? lockdep_hardirqs_on+0x94/0x140 [ 240.239078][T10363] do_syscall_64+0x4c/0xa0 [ 240.243498][T10363] ? clear_bhb_loop+0x30/0x80 [ 240.248188][T10363] ? clear_bhb_loop+0x30/0x80 [ 240.252883][T10363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.258781][T10363] RIP: 0033:0x7f9fb45a9e59 [ 240.263256][T10363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.282900][T10363] RSP: 002b:00007f9fb27e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.291341][T10363] RAX: ffffffffffffffda RBX: 00007f9fb4823090 RCX: 00007f9fb45a9e59 [ 240.299336][T10363] RDX: 7e8166965e22236a RSI: 0000200000007940 RDI: 0000000000000007 [ 240.307313][T10363] RBP: 00007f9fb27e2090 R08: 0000000000000000 R09: 0000000000000000 [ 240.315289][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.323263][T10363] R13: 00007f9fb4823128 R14: 00007f9fb4823090 R15: 00007ffcc7164f38 [ 240.331256][T10363] [ 240.349874][T10366] netlink: 'syz.3.2289': attribute type 10 has an invalid length. [ 240.393444][T10366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2289'. [ 240.923963][T10380] netlink: 'syz.1.2294': attribute type 1 has an invalid length. [ 240.949426][T10380] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2294'. [ 240.989076][T10387] FAULT_INJECTION: forcing a failure. [ 240.989076][T10387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.006512][T10387] CPU: 1 PID: 10387 Comm: syz.2.2296 Not tainted syzkaller #0 [ 241.013999][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 241.024066][T10387] Call Trace: [ 241.027363][T10387] [ 241.030308][T10387] dump_stack_lvl+0x188/0x250 [ 241.035003][T10387] ? show_regs_print_info+0x20/0x20 [ 241.040221][T10387] ? load_image+0x400/0x400 [ 241.044770][T10387] ? __lock_acquire+0x7d10/0x7d10 [ 241.049835][T10387] should_fail+0x38c/0x4c0 [ 241.054282][T10387] _copy_from_user+0x2e/0x170 [ 241.058980][T10387] bpf_test_init+0x136/0x1b0 [ 241.063604][T10387] bpf_prog_test_run_skb+0x181/0x10b0 [ 241.069011][T10387] ? __fget_files+0x40f/0x480 [ 241.073718][T10387] ? cpu_online+0x60/0x60 [ 241.078076][T10387] bpf_prog_test_run+0x31e/0x390 [ 241.083043][T10387] __sys_bpf+0x5a5/0x6f0 [ 241.087301][T10387] ? bpf_link_show_fdinfo+0x380/0x380 [ 241.092691][T10387] ? rcu_nmi_exit+0x6f/0xf0 [ 241.097232][T10387] ? vtime_user_exit+0x2c8/0x3e0 [ 241.102208][T10387] __x64_sys_bpf+0x78/0x90 [ 241.106660][T10387] do_syscall_64+0x4c/0xa0 [ 241.111096][T10387] ? clear_bhb_loop+0x30/0x80 [ 241.115801][T10387] ? clear_bhb_loop+0x30/0x80 [ 241.120498][T10387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.126414][T10387] RIP: 0033:0x7f38760fce59 [ 241.130844][T10387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.150468][T10387] RSP: 002b:00007f3874356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.158926][T10387] RAX: ffffffffffffffda RBX: 00007f3876375fa0 RCX: 00007f38760fce59 [ 241.166925][T10387] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 241.175036][T10387] RBP: 00007f3874356090 R08: 0000000000000000 R09: 0000000000000000 [ 241.183027][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.191026][T10387] R13: 00007f3876376038 R14: 00007f3876375fa0 R15: 00007ffcebae1038 [ 241.199030][T10387] [ 241.336242][T10392] netlink: 'syz.0.2298': attribute type 1 has an invalid length. [ 241.377794][T10392] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2298'. [ 241.708922][T10411] netlink: 183836 bytes leftover after parsing attributes in process `syz.2.2307'. [ 242.254048][T10420] netlink: 'syz.1.2311': attribute type 1 has an invalid length. [ 242.288816][T10420] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2311'. [ 242.660794][T10443] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2318'. [ 242.780285][T10443] netlink: del zone limit has 4 unknown bytes [ 243.141443][T10461] netlink: 'syz.3.2327': attribute type 1 has an invalid length. [ 243.181797][T10461] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2327'. [ 243.203231][T10465] netlink: 'syz.1.2326': attribute type 17 has an invalid length. [ 243.228336][T10465] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2326'. [ 243.280172][T10465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.537228][T10473] FAULT_INJECTION: forcing a failure. [ 243.537228][T10473] name failslab, interval 1, probability 0, space 0, times 0 [ 243.601836][T10473] CPU: 0 PID: 10473 Comm: syz.3.2329 Not tainted syzkaller #0 [ 243.609348][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.619422][T10473] Call Trace: [ 243.622717][T10473] [ 243.625665][T10473] dump_stack_lvl+0x188/0x250 [ 243.630371][T10473] ? show_regs_print_info+0x20/0x20 [ 243.635595][T10473] ? load_image+0x400/0x400 [ 243.640129][T10473] ? __might_sleep+0xf0/0xf0 [ 243.644759][T10473] ? __lock_acquire+0x7d10/0x7d10 [ 243.649831][T10473] should_fail+0x38c/0x4c0 [ 243.654286][T10473] should_failslab+0x5/0x20 [ 243.658816][T10473] slab_pre_alloc_hook+0x51/0xc0 [ 243.663812][T10473] __kmalloc+0x6b/0x330 [ 243.667999][T10473] ? sock_kmalloc+0x92/0xf0 [ 243.672548][T10473] sock_kmalloc+0x92/0xf0 [ 243.676910][T10473] ____sys_sendmsg+0x1bb/0x8f0 [ 243.681711][T10473] ? __sys_sendmsg_sock+0x30/0x30 [ 243.686776][T10473] ? import_iovec+0x6f/0xa0 [ 243.691300][T10473] ___sys_sendmsg+0x236/0x2e0 [ 243.695997][T10473] ? __sys_sendmsg+0x2a0/0x2a0 [ 243.700788][T10473] ? trace_event_raw_event_lock+0x270/0x270 [ 243.706690][T10473] ? vfs_write+0x8b2/0xd60 [ 243.711156][T10473] __se_sys_sendmsg+0x1af/0x290 [ 243.716031][T10473] ? __x64_sys_sendmsg+0x80/0x80 [ 243.720975][T10473] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 243.726985][T10473] ? lockdep_hardirqs_on+0x94/0x140 [ 243.732203][T10473] do_syscall_64+0x4c/0xa0 [ 243.736631][T10473] ? clear_bhb_loop+0x30/0x80 [ 243.741346][T10473] ? clear_bhb_loop+0x30/0x80 [ 243.746034][T10473] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.751936][T10473] RIP: 0033:0x7fa489c2ae59 [ 243.756355][T10473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.775968][T10473] RSP: 002b:00007fa487e84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.784391][T10473] RAX: ffffffffffffffda RBX: 00007fa489ea3fa0 RCX: 00007fa489c2ae59 [ 243.792370][T10473] RDX: 7e8166965e22236a RSI: 0000200000007940 RDI: 0000000000000007 [ 243.800348][T10473] RBP: 00007fa487e84090 R08: 0000000000000000 R09: 0000000000000000 [ 243.808333][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.816337][T10473] R13: 00007fa489ea4038 R14: 00007fa489ea3fa0 R15: 00007fff1a6f7848 [ 243.824335][T10473] [ 244.471248][T10502] FAULT_INJECTION: forcing a failure. [ 244.471248][T10502] name failslab, interval 1, probability 0, space 0, times 0 [ 244.563225][T10502] CPU: 1 PID: 10502 Comm: syz.1.2338 Not tainted syzkaller #0 [ 244.570743][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.580819][T10502] Call Trace: [ 244.584126][T10502] [ 244.587077][T10502] dump_stack_lvl+0x188/0x250 [ 244.591786][T10502] ? show_regs_print_info+0x20/0x20 [ 244.597015][T10502] ? load_image+0x400/0x400 [ 244.601544][T10502] ? __lock_acquire+0x7d10/0x7d10 [ 244.606598][T10502] should_fail+0x38c/0x4c0 [ 244.611048][T10502] should_failslab+0x5/0x20 [ 244.615574][T10502] slab_pre_alloc_hook+0x51/0xc0 [ 244.620540][T10502] __kmalloc+0x6b/0x330 [ 244.624710][T10502] ? sk_prot_alloc+0xe7/0x210 [ 244.629409][T10502] sk_prot_alloc+0xe7/0x210 [ 244.633932][T10502] ? sk_alloc+0x1d/0x310 [ 244.638202][T10502] sk_alloc+0x2f/0x310 [ 244.642310][T10502] bpf_prog_test_run_skb+0x240/0x10b0 [ 244.647732][T10502] ? __fget_files+0x40f/0x480 [ 244.652452][T10502] ? cpu_online+0x60/0x60 [ 244.656835][T10502] bpf_prog_test_run+0x31e/0x390 [ 244.661792][T10502] __sys_bpf+0x5a5/0x6f0 [ 244.666077][T10502] ? bpf_link_show_fdinfo+0x380/0x380 [ 244.671480][T10502] ? vtime_user_exit+0x2c8/0x3e0 [ 244.676447][T10502] __x64_sys_bpf+0x78/0x90 [ 244.680878][T10502] do_syscall_64+0x4c/0xa0 [ 244.685311][T10502] ? clear_bhb_loop+0x30/0x80 [ 244.690004][T10502] ? clear_bhb_loop+0x30/0x80 [ 244.694698][T10502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.700609][T10502] RIP: 0033:0x7f1dc9081e59 [ 244.705038][T10502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.724659][T10502] RSP: 002b:00007f1dc72db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.733075][T10502] RAX: ffffffffffffffda RBX: 00007f1dc92fafa0 RCX: 00007f1dc9081e59 [ 244.741073][T10502] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 244.749048][T10502] RBP: 00007f1dc72db090 R08: 0000000000000000 R09: 0000000000000000 [ 244.757026][T10502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.765001][T10502] R13: 00007f1dc92fb038 R14: 00007f1dc92fafa0 R15: 00007ffff99ea658 [ 244.772986][T10502] [ 245.199675][T10506] netlink: 'syz.2.2339': attribute type 1 has an invalid length. [ 245.289925][T10506] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2339'. [ 246.301299][T10548] netlink: 'syz.1.2358': attribute type 3 has an invalid length. [ 246.347328][T10548] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2358'. [ 246.562058][T10561] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2361'. [ 246.610878][T10561] netlink: del zone limit has 4 unknown bytes [ 246.723886][T10559] netlink: 'syz.0.2360': attribute type 1 has an invalid length. [ 246.779019][T10559] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2360'. [ 246.965604][T10573] netlink: 'syz.3.2366': attribute type 10 has an invalid length. [ 246.980154][T10573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2366'. [ 247.256595][T10592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2374'. [ 247.395353][T10596] netlink: 'syz.2.2377': attribute type 3 has an invalid length. [ 247.437389][T10596] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2377'. [ 247.553882][T10605] netlink: 'syz.0.2378': attribute type 1 has an invalid length. [ 247.578313][T10607] FAULT_INJECTION: forcing a failure. [ 247.578313][T10607] name failslab, interval 1, probability 0, space 0, times 0 [ 247.619919][T10605] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2378'. [ 247.619971][T10607] CPU: 0 PID: 10607 Comm: syz.1.2380 Not tainted syzkaller #0 [ 247.636737][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.646811][T10607] Call Trace: [ 247.650102][T10607] [ 247.653164][T10607] dump_stack_lvl+0x188/0x250 [ 247.657865][T10607] ? show_regs_print_info+0x20/0x20 [ 247.663092][T10607] ? load_image+0x400/0x400 [ 247.667623][T10607] ? __might_sleep+0xf0/0xf0 [ 247.672285][T10607] ? __lock_acquire+0x7d10/0x7d10 [ 247.677351][T10607] should_fail+0x38c/0x4c0 [ 247.681791][T10607] should_failslab+0x5/0x20 [ 247.686313][T10607] slab_pre_alloc_hook+0x51/0xc0 [ 247.691276][T10607] kmem_cache_alloc_trace+0x47/0x2a0 [ 247.696584][T10607] ? apparmor_sk_alloc_security+0x74/0x100 [ 247.702427][T10607] apparmor_sk_alloc_security+0x74/0x100 [ 247.708175][T10607] security_sk_alloc+0x6a/0xa0 [ 247.712976][T10607] sk_prot_alloc+0x101/0x210 [ 247.717601][T10607] ? sk_alloc+0x1d/0x310 [ 247.721875][T10607] sk_alloc+0x2f/0x310 [ 247.725981][T10607] bpf_prog_test_run_skb+0x240/0x10b0 [ 247.731373][T10607] ? __fget_files+0x40f/0x480 [ 247.736074][T10607] ? cpu_online+0x60/0x60 [ 247.740426][T10607] bpf_prog_test_run+0x31e/0x390 [ 247.745394][T10607] __sys_bpf+0x5a5/0x6f0 [ 247.749677][T10607] ? bpf_link_show_fdinfo+0x380/0x380 [ 247.755082][T10607] ? vtime_user_exit+0x2c8/0x3e0 [ 247.760042][T10607] __x64_sys_bpf+0x78/0x90 [ 247.764481][T10607] do_syscall_64+0x4c/0xa0 [ 247.768941][T10607] ? clear_bhb_loop+0x30/0x80 [ 247.773634][T10607] ? clear_bhb_loop+0x30/0x80 [ 247.778334][T10607] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.784264][T10607] RIP: 0033:0x7f1dc9081e59 [ 247.788703][T10607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.808342][T10607] RSP: 002b:00007f1dc72db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.816780][T10607] RAX: ffffffffffffffda RBX: 00007f1dc92fafa0 RCX: 00007f1dc9081e59 [ 247.824771][T10607] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 247.832758][T10607] RBP: 00007f1dc72db090 R08: 0000000000000000 R09: 0000000000000000 [ 247.840742][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.848731][T10607] R13: 00007f1dc92fb038 R14: 00007f1dc92fafa0 R15: 00007ffff99ea658 [ 247.856744][T10607] [ 247.932182][T10610] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2381'. [ 248.655860][T10646] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 248.694921][T10646] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2395'. [ 248.822033][T10653] netlink: del zone limit has 4 unknown bytes [ 249.210310][T10670] netlink: 'syz.0.2404': attribute type 10 has an invalid length. [ 249.261764][T10670] bridge0: port 3(ipvlan1) entered blocking state [ 249.296834][T10670] bridge0: port 3(ipvlan1) entered disabled state [ 249.313891][T10670] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 249.499003][T10682] netlink: 'syz.4.2407': attribute type 1 has an invalid length. [ 250.387353][T10734] netlink: 'syz.0.2427': attribute type 1 has an invalid length. [ 250.411998][T10739] netlink: 'syz.4.2429': attribute type 27 has an invalid length. [ 250.435200][T10734] __nla_validate_parse: 4 callbacks suppressed [ 250.435232][T10734] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2427'. [ 250.525376][T10739] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2429'. [ 250.668109][T10748] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2433'. [ 250.733337][T10748] netlink: del zone limit has 4 unknown bytes [ 250.755041][T10745] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.950590][T10754] netlink: 'syz.0.2435': attribute type 3 has an invalid length. [ 251.024473][T10754] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2435'. [ 251.167005][T10761] netlink: 'syz.1.2438': attribute type 46 has an invalid length. [ 251.238943][T10761] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2438'. [ 251.322959][T10766] netlink: 'syz.2.2440': attribute type 10 has an invalid length. [ 251.340349][T10766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2440'. [ 251.376070][T10768] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2441'. [ 251.588982][T10775] netlink: 'syz.2.2445': attribute type 1 has an invalid length. [ 251.612598][T10775] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2445'. [ 251.838812][T10784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2448'. [ 251.990575][T10784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2448'. [ 252.304538][T10813] netlink: 'syz.2.2458': attribute type 1 has an invalid length. [ 252.611960][T10822] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 252.928737][T10842] netlink: del zone limit has 4 unknown bytes [ 252.947584][T10844] netlink: 'syz.2.2470': attribute type 1 has an invalid length. [ 253.255707][T10847] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 253.343152][T10858] netlink: 'syz.3.2476': attribute type 10 has an invalid length. [ 254.053197][T10871] netlink: 'syz.1.2480': attribute type 1 has an invalid length. [ 255.458703][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.469919][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.620752][ T9] wlan1: Trigger new scan to find an IBSS to join [ 255.891288][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 257.261035][T10926] validate_nla: 1 callbacks suppressed [ 257.261049][T10926] netlink: 'syz.4.2500': attribute type 1 has an invalid length. [ 257.308039][T10926] __nla_validate_parse: 9 callbacks suppressed [ 257.308055][T10926] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2500'. [ 257.501017][T10941] netlink: 'syz.3.2506': attribute type 3 has an invalid length. [ 257.543785][T10941] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2506'. [ 257.554697][ T8185] Bluetooth: hci1: command 0x0406 tx timeout [ 257.606486][T10947] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2507'. [ 257.628985][T10947] netlink: del zone limit has 4 unknown bytes [ 257.878976][T10954] netlink: 'syz.3.2510': attribute type 10 has an invalid length. [ 257.908048][T10954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2510'. [ 257.973676][T10961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2512'. [ 258.114710][T10965] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2512'. [ 258.181430][T10973] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 258.211397][T10973] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2516'. [ 258.853340][T11002] netlink: 'syz.3.2528': attribute type 10 has an invalid length. [ 258.912289][T11002] netlink: 'syz.3.2528': attribute type 19 has an invalid length. [ 258.947822][T11002] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2528'. [ 258.995634][T11008] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 259.003604][T11008] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2531'. [ 259.544907][T11010] netlink: 'syz.0.2532': attribute type 29 has an invalid length. [ 259.645908][T11010] netlink: 'syz.0.2532': attribute type 29 has an invalid length. [ 259.757950][T11041] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2544'. [ 259.784714][T11041] netlink: del zone limit has 4 unknown bytes [ 259.866076][T11048] bond0: (slave dummy0): Error: Slave device does not support XDP [ 259.892854][T11050] netlink: 'syz.4.2547': attribute type 1 has an invalid length. [ 260.576449][ T154] wlan1: Trigger new scan to find an IBSS to join [ 261.588379][T11109] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 261.668774][ T155] wlan1: Creating new IBSS network, BSSID aa:09:24:0d:6f:f3 [ 262.447188][T11143] __nla_validate_parse: 7 callbacks suppressed [ 262.447207][T11143] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2583'. [ 263.079933][T11160] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2588'. [ 263.114273][T11160] netlink: del zone limit has 4 unknown bytes [ 263.122101][T11161] validate_nla: 5 callbacks suppressed [ 263.122142][T11161] netlink: 'syz.1.2589': attribute type 10 has an invalid length. [ 263.136287][T11155] netlink: 'syz.2.2587': attribute type 1 has an invalid length. [ 263.136333][T11155] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2587'. [ 263.185200][T11161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2589'. [ 263.206383][T11161] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 263.272576][T11165] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2591'. [ 263.296457][T11165] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2591'. [ 263.354709][T11165] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2591'. [ 263.509957][T11175] netlink: 'syz.0.2595': attribute type 29 has an invalid length. [ 263.554298][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2595'. [ 263.837571][T11175] netlink: 'syz.0.2595': attribute type 29 has an invalid length. [ 263.868293][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2595'. [ 264.093144][T11199] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2601'. [ 264.192590][T11199] netlink: 'syz.0.2601': attribute type 3 has an invalid length. [ 264.240998][T11206] netlink: 'syz.0.2601': attribute type 9 has an invalid length. [ 264.338442][T11203] netlink: 'syz.4.2603': attribute type 1 has an invalid length. [ 264.393097][T11202] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.395366][T11199] netlink: 'syz.0.2601': attribute type 9 has an invalid length. [ 265.303087][T11246] netlink: 'syz.4.2619': attribute type 1 has an invalid length. [ 265.406899][T11254] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 265.636251][T11265] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 266.182615][T11290] netlink: del zone limit has 4 unknown bytes [ 266.392880][T11295] bridge0: port 3(ipvlan1) entered blocking state [ 266.444441][T11295] bridge0: port 3(ipvlan1) entered disabled state [ 266.472856][T11295] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 267.606320][T11349] __nla_validate_parse: 20 callbacks suppressed [ 267.606334][T11349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2659'. [ 267.623803][T11349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2659'. [ 267.652930][T11350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2659'. [ 267.813332][T11359] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2662'. [ 267.891039][T11361] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2663'. [ 268.555549][T11396] validate_nla: 11 callbacks suppressed [ 268.555591][T11396] netlink: 'syz.0.2678': attribute type 1 has an invalid length. [ 268.582151][T11401] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2679'. [ 268.599321][T11401] netlink: del zone limit has 4 unknown bytes [ 268.624687][T11396] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2678'. [ 268.993495][T11414] netlink: 'syz.0.2684': attribute type 10 has an invalid length. [ 269.050630][T11414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2684'. [ 269.104372][T11414] bridge0: port 3(ipvlan1) entered blocking state [ 269.135504][T11414] bridge0: port 3(ipvlan1) entered disabled state [ 269.225027][T11414] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 269.293906][T11416] netlink: 'syz.4.2685': attribute type 10 has an invalid length. [ 269.379095][T11416] team0: Device wg1 is of different type [ 269.902724][T11446] netlink: 'syz.1.2695': attribute type 1 has an invalid length. [ 269.999876][T11446] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2695'. [ 270.801850][T11484] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 270.865748][T11484] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2708'. [ 271.020541][T11467] device syzkaller0 left promiscuous mode [ 271.778810][T11525] netlink: 'syz.1.2722': attribute type 1 has an invalid length. [ 272.133378][T11542] netlink: 'syz.2.2727': attribute type 29 has an invalid length. [ 272.149669][T11544] netlink: del zone limit has 4 unknown bytes [ 272.175126][T11542] netlink: 'syz.2.2727': attribute type 29 has an invalid length. [ 272.225614][T11549] netlink: 'syz.2.2727': attribute type 29 has an invalid length. [ 272.271586][T11542] netlink: 'syz.2.2727': attribute type 4 has an invalid length. [ 273.113141][T11576] __nla_validate_parse: 4 callbacks suppressed [ 273.113275][T11576] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2738'. [ 273.201442][T11574] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2737'. [ 273.512106][T11597] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2746'. [ 273.925187][T11615] validate_nla: 4 callbacks suppressed [ 273.925233][T11615] netlink: 'syz.1.2752': attribute type 1 has an invalid length. [ 273.990569][T11615] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2752'. [ 277.163749][T11667] chnl_net:caif_netlink_parms(): no params data found [ 277.705097][ T8179] Bluetooth: hci5: command 0x0409 tx timeout [ 277.826263][T11667] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.852099][T11667] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.975234][T11667] device bridge_slave_0 entered promiscuous mode [ 278.030402][T11667] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.083903][T11667] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.157320][T11667] device bridge_slave_1 entered promiscuous mode [ 278.265561][T11710] netlink: 'syz.4.2786': attribute type 10 has an invalid length. [ 278.471015][T11710] device veth0_vlan left promiscuous mode [ 278.494405][ C0] ------------[ cut here ]------------ [ 278.500238][ C0] WARNING: CPU: 0 PID: 1108 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 278.509660][ C0] Modules linked in: [ 278.513579][ C0] CPU: 0 PID: 1108 Comm: kworker/0:2 Not tainted syzkaller #0 [ 278.521195][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.531322][ C0] Workqueue: events iterate_cleanup_work [ 278.537013][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 278.543196][ C0] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 278.562837][ C0] RSP: 0018:ffffc900000072f8 EFLAGS: 00010246 [ 278.568980][ C0] RAX: ffffffff81a0b710 RBX: 0000000000000008 RCX: ffff8880213ed940 [ 278.576991][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.585189][ C0] RBP: 0000000000000000 R08: ffffffff8f0ed008 R09: ffffffff8f0ed018 [ 278.593185][ C0] R10: ffffffff8f0ed010 R11: ffffffff8f0ed003 R12: ffff8880213ef0c8 [ 278.601212][ C0] R13: dffffc0000000000 R14: ffffc90000007360 R15: 0000000000000000 [ 278.609239][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 278.618222][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.624853][ C0] CR2: 00007f1dc6e78000 CR3: 0000000075206000 CR4: 00000000003506f0 [ 278.632843][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.640983][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 278.649005][ C0] Call Trace: [ 278.652294][ C0] [ 278.655184][ C0] bpf_probe_read_user+0x26/0x70 [ 278.660151][ C0] bpf_prog_f6c3d2100ad96f09+0x3d/0xad8 [ 278.665746][ C0] bpf_prog_run_clear_cb+0x108/0x1a0 [ 278.671074][ C0] run_filter+0x12a/0x220 [ 278.675462][ C0] packet_rcv+0x388/0x1210 [ 278.679904][ C0] ? packet_sock_destruct+0x160/0x160 [ 278.685317][ C0] dev_queue_xmit_nit+0x4ad/0xb00 [ 278.690375][ C0] dev_hard_start_xmit+0x13e/0x7e0 [ 278.695546][ C0] __dev_queue_xmit+0x1a9b/0x2f80 [ 278.700604][ C0] ? ndisc_send_skb+0xc2a/0x1500 [ 278.705590][ C0] ? dev_queue_xmit+0x20/0x20 [ 278.710290][ C0] ? mark_lock+0x94/0x320 [ 278.714667][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 278.720679][ C0] ? lock_chain_count+0x20/0x20 [ 278.725584][ C0] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 278.731413][ C0] ? ip6_finish_output2+0xcb6/0x1510 [ 278.736881][ C0] ? ip6_finish_output2+0xe80/0x1510 [ 278.742194][ C0] ip6_finish_output2+0x1051/0x1510 [ 278.747443][ C0] ? nf_hook+0x360/0x360 [ 278.751714][ C0] ndisc_send_skb+0xc2a/0x1500 [ 278.756545][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 278.761520][ C0] ? rcu_lock_release+0x20/0x20 [ 278.766460][ C0] ? ndisc_send_rs+0x544/0x730 [ 278.771257][ C0] addrconf_rs_timer+0x2d1/0x630 [ 278.776238][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 278.782328][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 278.788451][ C0] call_timer_fn+0x17b/0x540 [ 278.793072][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 278.799182][ C0] ? __run_timers+0x800/0x800 [ 278.803887][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 278.809131][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 278.814373][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 278.820470][ C0] __run_timers+0x53e/0x800 [ 278.825046][ C0] ? detach_timer+0x2b0/0x2b0 [ 278.829739][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 278.835785][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 278.840651][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 278.845987][ C0] run_timer_softirq+0x63/0xf0 [ 278.850769][ C0] handle_softirqs+0x339/0x830 [ 278.855576][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 278.860447][ C0] ? do_softirq+0x210/0x210 [ 278.865005][ C0] __irq_exit_rcu+0x13b/0x230 [ 278.869703][ C0] ? irq_exit_rcu+0x20/0x20 [ 278.874266][ C0] irq_exit_rcu+0x5/0x20 [ 278.878526][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 278.884219][ C0] [ 278.887264][ C0] [ 278.890206][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 278.896237][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 278.902338][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 30 c0 10 0c 48 89 de 5b e9 57 50 44 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d c4 26 89 7e 65 8b 15 c5 26 89 7e 81 e2 00 [ 278.921996][ C0] RSP: 0018:ffffc900047cfac0 EFLAGS: 00000202 [ 278.928114][ C0] RAX: ffffffff882539c5 RBX: ffff88802ba001c8 RCX: ffff8880213ed940 [ 278.936140][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 278.944173][ C0] RBP: 1ffff11005740039 R08: ffffc900047cf8a7 R09: 1ffff920008f9f14 [ 278.952172][ C0] R10: dffffc0000000000 R11: fffff520008f9f15 R12: dffffc0000000000 [ 278.960189][ C0] R13: 0000000000000001 R14: ffffc900047cfb60 R15: ffffffff88253cc0 [ 278.968228][ C0] ? nf_ct_iterate_cleanup+0x3c0/0x3c0 [ 278.973738][ C0] ? nf_ct_iterate_cleanup+0xc5/0x3c0 [ 278.979179][ C0] nf_ct_iterate_cleanup+0x37c/0x3c0 [ 278.984510][ C0] ? masq_inet_event+0x1c0/0x1c0 [ 278.989464][ C0] nf_ct_iterate_cleanup_net+0x11d/0x190 [ 278.995145][ C0] ? __nf_ct_unconfirmed_destroy+0x260/0x260 [ 279.001141][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 279.007167][ C0] ? masq_inet_event+0x1c0/0x1c0 [ 279.012130][ C0] ? read_lock_is_recursive+0x10/0x10 [ 279.017560][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 279.023484][ C0] ? _raw_spin_unlock+0x40/0x40 [ 279.028394][ C0] iterate_cleanup_work+0x66/0x120 [ 279.033536][ C0] process_one_work+0x85f/0x1010 [ 279.038543][ C0] ? worker_detach_from_pool+0x240/0x240 [ 279.044230][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 279.049546][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 279.054621][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 279.060215][ C0] ? wq_worker_running+0x97/0x170 [ 279.065298][ C0] worker_thread+0xaa6/0x1290 [ 279.070003][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 279.075257][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 279.081192][ C0] kthread+0x436/0x520 [ 279.085311][ C0] ? rcu_lock_release+0x20/0x20 [ 279.090198][ C0] ? kthread_blkcg+0xd0/0xd0 [ 279.094848][ C0] ret_from_fork+0x1f/0x30 [ 279.099305][ C0] [ 279.102352][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 279.109640][ C0] CPU: 0 PID: 1108 Comm: kworker/0:2 Not tainted syzkaller #0 [ 279.117125][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 279.127203][ C0] Workqueue: events iterate_cleanup_work [ 279.132871][ C0] Call Trace: [ 279.136161][ C0] [ 279.139019][ C0] dump_stack_lvl+0x188/0x250 [ 279.143722][ C0] ? show_regs_print_info+0x20/0x20 [ 279.148963][ C0] ? load_image+0x400/0x400 [ 279.153535][ C0] panic+0x2e5/0x810 [ 279.157451][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 279.161982][ C0] ? ret_from_fork+0x1f/0x30 [ 279.166602][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 279.172166][ C0] __warn+0x248/0x2b0 [ 279.176173][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 279.181741][ C0] report_bug+0x1b7/0x2e0 [ 279.186092][ C0] handle_bug+0x3a/0x70 [ 279.190262][ C0] exc_invalid_op+0x16/0x40 [ 279.194787][ C0] asm_exc_invalid_op+0x16/0x20 [ 279.199661][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 279.205840][ C0] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 279.225463][ C0] RSP: 0018:ffffc900000072f8 EFLAGS: 00010246 [ 279.231550][ C0] RAX: ffffffff81a0b710 RBX: 0000000000000008 RCX: ffff8880213ed940 [ 279.239540][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.247530][ C0] RBP: 0000000000000000 R08: ffffffff8f0ed008 R09: ffffffff8f0ed018 [ 279.255519][ C0] R10: ffffffff8f0ed010 R11: ffffffff8f0ed003 R12: ffff8880213ef0c8 [ 279.263499][ C0] R13: dffffc0000000000 R14: ffffc90000007360 R15: 0000000000000000 [ 279.271494][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 279.277057][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 279.282623][ C0] bpf_probe_read_user+0x26/0x70 [ 279.287580][ C0] bpf_prog_f6c3d2100ad96f09+0x3d/0xad8 [ 279.293138][ C0] bpf_prog_run_clear_cb+0x108/0x1a0 [ 279.298447][ C0] run_filter+0x12a/0x220 [ 279.302804][ C0] packet_rcv+0x388/0x1210 [ 279.307243][ C0] ? packet_sock_destruct+0x160/0x160 [ 279.312636][ C0] dev_queue_xmit_nit+0x4ad/0xb00 [ 279.317685][ C0] dev_hard_start_xmit+0x13e/0x7e0 [ 279.322861][ C0] __dev_queue_xmit+0x1a9b/0x2f80 [ 279.327925][ C0] ? ndisc_send_skb+0xc2a/0x1500 [ 279.332890][ C0] ? dev_queue_xmit+0x20/0x20 [ 279.337580][ C0] ? mark_lock+0x94/0x320 [ 279.341929][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 279.347927][ C0] ? lock_chain_count+0x20/0x20 [ 279.352801][ C0] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 279.358627][ C0] ? ip6_finish_output2+0xcb6/0x1510 [ 279.363938][ C0] ? ip6_finish_output2+0xe80/0x1510 [ 279.369243][ C0] ip6_finish_output2+0x1051/0x1510 [ 279.374461][ C0] ? nf_hook+0x360/0x360 [ 279.378740][ C0] ndisc_send_skb+0xc2a/0x1500 [ 279.383539][ C0] ? ndisc_alloc_skb+0x420/0x420 [ 279.388500][ C0] ? rcu_lock_release+0x20/0x20 [ 279.393387][ C0] ? ndisc_send_rs+0x544/0x730 [ 279.398188][ C0] addrconf_rs_timer+0x2d1/0x630 [ 279.403177][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 279.409271][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 279.415354][ C0] call_timer_fn+0x17b/0x540 [ 279.419962][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 279.426043][ C0] ? __run_timers+0x800/0x800 [ 279.430745][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 279.435966][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 279.441288][ C0] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 279.447394][ C0] __run_timers+0x53e/0x800 [ 279.451930][ C0] ? detach_timer+0x2b0/0x2b0 [ 279.456629][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 279.462639][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 279.467514][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 279.472817][ C0] run_timer_softirq+0x63/0xf0 [ 279.477598][ C0] handle_softirqs+0x339/0x830 [ 279.482383][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 279.487249][ C0] ? do_softirq+0x210/0x210 [ 279.491776][ C0] __irq_exit_rcu+0x13b/0x230 [ 279.496464][ C0] ? irq_exit_rcu+0x20/0x20 [ 279.501005][ C0] irq_exit_rcu+0x5/0x20 [ 279.505264][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 279.510919][ C0] [ 279.513866][ C0] [ 279.516810][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 279.522809][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 279.528903][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 30 c0 10 0c 48 89 de 5b e9 57 50 44 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d c4 26 89 7e 65 8b 15 c5 26 89 7e 81 e2 00 [ 279.548537][ C0] RSP: 0018:ffffc900047cfac0 EFLAGS: 00000202 [ 279.554635][ C0] RAX: ffffffff882539c5 RBX: ffff88802ba001c8 RCX: ffff8880213ed940 [ 279.562640][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 279.570640][ C0] RBP: 1ffff11005740039 R08: ffffc900047cf8a7 R09: 1ffff920008f9f14 [ 279.578630][ C0] R10: dffffc0000000000 R11: fffff520008f9f15 R12: dffffc0000000000 [ 279.586625][ C0] R13: 0000000000000001 R14: ffffc900047cfb60 R15: ffffffff88253cc0 [ 279.594617][ C0] ? nf_ct_iterate_cleanup+0x3c0/0x3c0 [ 279.600106][ C0] ? nf_ct_iterate_cleanup+0xc5/0x3c0 [ 279.605497][ C0] nf_ct_iterate_cleanup+0x37c/0x3c0 [ 279.610800][ C0] ? masq_inet_event+0x1c0/0x1c0 [ 279.615836][ C0] nf_ct_iterate_cleanup_net+0x11d/0x190 [ 279.621486][ C0] ? __nf_ct_unconfirmed_destroy+0x260/0x260 [ 279.627476][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 279.633470][ C0] ? masq_inet_event+0x1c0/0x1c0 [ 279.638425][ C0] ? read_lock_is_recursive+0x10/0x10 [ 279.643822][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 279.649726][ C0] ? _raw_spin_unlock+0x40/0x40 [ 279.654594][ C0] iterate_cleanup_work+0x66/0x120 [ 279.659740][ C0] process_one_work+0x85f/0x1010 [ 279.664722][ C0] ? worker_detach_from_pool+0x240/0x240 [ 279.670386][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 279.675708][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 279.680750][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 279.686429][ C0] ? wq_worker_running+0x97/0x170 [ 279.691465][ C0] worker_thread+0xaa6/0x1290 [ 279.696233][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 279.701477][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 279.707397][ C0] kthread+0x436/0x520 [ 279.711475][ C0] ? rcu_lock_release+0x20/0x20 [ 279.716340][ C0] ? kthread_blkcg+0xd0/0xd0 [ 279.720940][ C0] ret_from_fork+0x1f/0x30 [ 279.725388][ C0] [ 279.728724][ C0] Kernel Offset: disabled [ 279.733203][ C0] Rebooting in 86400 seconds..