last executing test programs: 5m2.996670495s ago: executing program 1 (id=17): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB="00008d9c250ed8ff2fc900000000000700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000003790000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000004000000000000000000000000000000000091ef3854520e39b39f8100f09ad5ddd02a3790"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB="12a3e61d158beb2e3faf0bc5c7544589dc4d0cb5d9e2", @ANYRES64=0x0], 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x84) r11 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRESDEC=0x0, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r7, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r13}, &(0x7f0000000280), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb0100180000000000001a8a7d000060000000030000000000000000000003000000000300000002000000ffffff7f0600000000000012030000000a0000000000000c020000000000000000000009020000000c0000000000000c010000000c0000000000000902000000100000000000000a03000000003000"], &(0x7f0000000ec0)=""/136, 0x7b, 0x88, 0x0, 0xebb, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1d, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000011000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000cb00000018260000", @ANYRES32=r0, @ANYBLOB="00000000080000006d740800100000001848000002000000000000bf99000000000000b7020000020000008500000084000000b7000000000000009500"/72], &(0x7f00000007c0)='GPL\x00', 0x7, 0xb6, &(0x7f00000009c0)=""/182, 0x41000, 0x0, '\x00', r12, @fallback=0x1b, r14, 0x8, &(0x7f0000000b40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x5, 0xdf4, 0x1}, 0x10, 0x0, r8, 0x0, &(0x7f0000000bc0)=[r1, r0, r13], &(0x7f0000000c00), 0x10, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES64=r9, @ANYRES64, @ANYRES32=r3], &(0x7f0000001080)=""/182, 0x3d, 0xb6, 0xfffffffe, 0x1}, 0x28) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8, r7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69}, 0x94) 5m2.621961651s ago: executing program 1 (id=21): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8983, &(0x7f0000000080)) 5m2.116500509s ago: executing program 1 (id=25): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x7e3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xc7b, 0x7fffffffffffffff}, 0x11508d, 0x89, 0x0, 0x5, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x3, 0x0, 0x35) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[], 0x0, 0x26}, 0x28) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r2}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x4a0e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x4104, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 5m1.457064029s ago: executing program 1 (id=28): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0xd9, 0x0, 0x7, 0xc013, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x4, 0x81}, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x0, 0xffff0000, 0x9, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffff1}, 0xffffffffffffffff, 0x1020000000000009, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c041, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m59.116678526s ago: executing program 1 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1822a0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x17, &(0x7f0000000580)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="ebbf9abb3229a677a81b3d8b6c089312cbda31d4534cb791fc22ac4972ae9fdad20d583233c736fa1eeb41dc6a8fc6d55e3311e19f26a39de81e2258eb1598468ddc0e67c27cbbed94fb9f6e5b929c9adc292c1e5ff2e282ddfa1c8a5f6792a64eb34eb5217bd5aa020e41d078c3fab1b7bf5d03784d2aecb53095ab8d1ecf9c40e6d731aec67316e7ff91f16ffd768fd995995c68d5ac344df2ef32adbccbff77ec5864f13883f2e9aff54b53e12cee199eeb51eb0a3e5c9778e28c9605e2155114044b9d7224fb39b44928f3c9f13019897c592aa6f2979751441c77a09d", @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7020000faff00008500000086000000181100", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0xfffe) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="0100a64bb1df8d77886200"]) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x0, 0x56}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @generic={0x94, 0x2}]}}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e700"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 4m58.320564988s ago: executing program 1 (id=45): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x2, 0x5, 0x84) write$cgroup_devices(r5, 0x0, 0xfffffeff) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xca5, 0x8, 0x1ff, 0x10000, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x15c050d6, 0xd, &(0x7f0000000600)=""/13, 0x40f00, 0x0, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x1, r7, r8], &(0x7f0000000740)=[{0x1, 0x2, 0xc, 0x8}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10001}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r9, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 4m43.037128468s ago: executing program 32 (id=45): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x2, 0x5, 0x84) write$cgroup_devices(r5, 0x0, 0xfffffeff) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xca5, 0x8, 0x1ff, 0x10000, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x15c050d6, 0xd, &(0x7f0000000600)=""/13, 0x40f00, 0x0, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x1, r7, r8], &(0x7f0000000740)=[{0x1, 0x2, 0xc, 0x8}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10001}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r9, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 2m25.452835212s ago: executing program 4 (id=740): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m25.020343509s ago: executing program 4 (id=743): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fd00400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8902, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8903, &(0x7f00000005c0)) r3 = socket$kcm(0xa, 0x2, 0x88) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="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", 0x54b}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000002d80)={&(0x7f00000000c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/17, 0x11}, {&(0x7f0000002b80)=""/90, 0x5a}], 0x5, &(0x7f0000002c80)=""/203, 0xcb}, 0x10102) 2m24.679930455s ago: executing program 4 (id=748): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f00000000c0), 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'batadv_slave_0\x00', 0x8000}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100), 0x4) 2m24.564916536s ago: executing program 4 (id=750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000661500000000000ace00000085000000d00000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2m24.415898958s ago: executing program 4 (id=752): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = syz_clone(0x800a000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, r2, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x9e7, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r2, 0xffffffffffffffff, r0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x9}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="91104000059deb22082eee918cc9a6b0656092aaf00000008520000004000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x101c06, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c", 0xd}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) socket$kcm(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 2m23.975871605s ago: executing program 4 (id=757): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) (rerun: 32) close(r2) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x20, &(0x7f0000000b80)={&(0x7f0000000a40)=""/199, 0xc7, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x12, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000070e131a5410927f446adf2fb12c000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r3], 0x0, 0xffff0000, 0xae, &(0x7f0000000500)=""/174, 0x41100, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=[{0x1, 0x1, 0x9, 0x2}, {0x5, 0x3, 0xc, 0xa}, {0x5, 0x5, 0x0, 0xc}, {0x5, 0x2, 0xf, 0xa}, {0x4, 0x1, 0x5, 0x9}, {0x0, 0x4, 0xf, 0xb}], 0x10, 0x6ce1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="f09f57a241b85758626c449ba0df15b0e64a42dde5b50b93f4c5ba19466e3dd606b5173bacbfacf453555b29d0cc1b95e3dc92903b48664aef414b4fde7e8cc4cab9c7bb2a58ad5abe71959db61153bf9997a1936b1c597f54a06976d516b400369f38f6b365c58d8a9f", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x6, 0xfc, 0x76, 0x0, 0x0, 0x6, 0x15c08, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x5, 0x8}, 0x2000, 0x4, 0x7, 0x2, 0x6, 0x9, 0xfffe, 0x0, 0x2, 0x0, 0x80000000}, 0x0, 0x9, r1, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) (rerun: 64) 2m8.923054701s ago: executing program 33 (id=757): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) (rerun: 32) close(r2) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x20, &(0x7f0000000b80)={&(0x7f0000000a40)=""/199, 0xc7, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x12, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000070e131a5410927f446adf2fb12c000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r3], 0x0, 0xffff0000, 0xae, &(0x7f0000000500)=""/174, 0x41100, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=[{0x1, 0x1, 0x9, 0x2}, {0x5, 0x3, 0xc, 0xa}, {0x5, 0x5, 0x0, 0xc}, {0x5, 0x2, 0xf, 0xa}, {0x4, 0x1, 0x5, 0x9}, {0x0, 0x4, 0xf, 0xb}], 0x10, 0x6ce1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="f09f57a241b85758626c449ba0df15b0e64a42dde5b50b93f4c5ba19466e3dd606b5173bacbfacf453555b29d0cc1b95e3dc92903b48664aef414b4fde7e8cc4cab9c7bb2a58ad5abe71959db61153bf9997a1936b1c597f54a06976d516b400369f38f6b365c58d8a9f", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x6, 0xfc, 0x76, 0x0, 0x0, 0x6, 0x15c08, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x5, 0x8}, 0x2000, 0x4, 0x7, 0x2, 0x6, 0x9, 0xfffe, 0x0, 0x2, 0x0, 0x80000000}, 0x0, 0x9, r1, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) (rerun: 64) 3.534189705s ago: executing program 5 (id=1312): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104c, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3.19194462s ago: executing program 2 (id=1315): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0xf5b84caad32df7f6, 0x0}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) 1.87993348s ago: executing program 2 (id=1322): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804) 1.87982942s ago: executing program 5 (id=1323): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, 0x24}, 0x94) 1.699953683s ago: executing program 5 (id=1326): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1, 0x6, 0x4, 0x4000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x6}, 0x50) 1.699695123s ago: executing program 2 (id=1327): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x922000000001, 0x106) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f00000002c0)=r4, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r2}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x308) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 1.611244275s ago: executing program 3 (id=1328): socket$kcm(0x2, 0x2, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) 1.492386416s ago: executing program 5 (id=1330): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) 1.25686636s ago: executing program 3 (id=1332): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x7e, &(0x7f00000000c0)=""/126, 0x0, 0x9}, 0x94) 1.055968983s ago: executing program 5 (id=1333): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000002980)=""/4079, 0xfef}, {&(0x7f0000003980)=""/4091, 0xffb}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000500)=""/116, 0x74}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000280)=""/128, 0x80}], 0x8}, 0x20) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 1.055777663s ago: executing program 3 (id=1334): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x1, 0x0, 0x7fffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe2d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 1.055709554s ago: executing program 0 (id=1335): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="852000002e0000002e000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) 1.000966255s ago: executing program 2 (id=1336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x23) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x2400009c}, 0x4004804) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) 919.634175ms ago: executing program 0 (id=1337): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000007}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 844.018337ms ago: executing program 5 (id=1338): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x2101) 761.188628ms ago: executing program 0 (id=1339): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x800000000066e}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140), 0x4) 721.015929ms ago: executing program 3 (id=1340): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x11ffa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x26004041) 536.003271ms ago: executing program 0 (id=1341): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x11c266, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) 535.824431ms ago: executing program 2 (id=1342): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}, {&(0x7f0000002a00)}, {0x0}], 0x3}, 0x800) 531.010272ms ago: executing program 3 (id=1343): r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="2e00000011008188040f80ec59acbc04005e140602000000000e0027001000004556df17f9000200000000000000", 0x2e}], 0x1}, 0x0) 320.740165ms ago: executing program 0 (id=1344): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104905, 0x4, 0x0, 0x4, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 120.026048ms ago: executing program 3 (id=1345): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004840) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 62.084819ms ago: executing program 0 (id=1346): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000002980)=""/4079, 0xfef}, {&(0x7f0000003980)=""/4091, 0xffb}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000500)=""/116, 0x74}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000280)=""/128, 0x80}], 0x8}, 0x20) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 0s ago: executing program 2 (id=1347): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000001500)={'virt_wifi0\x00', @random="f7280200e700"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 78.888861][ T5760] cgroup: Unknown subsys name 'net' [ 79.019639][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.807005][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.361892][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.382494][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.400405][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.410974][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.420399][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.428895][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.436218][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.436302][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.447907][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.459063][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.459172][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.467517][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.475020][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.482626][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.488374][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.495659][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.503021][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.511721][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.516365][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.540284][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.550135][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.557440][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.565893][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.565951][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.025895][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 83.101056][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 83.123810][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 83.229148][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.237595][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.245505][ T5779] bridge_slave_0: entered allmulticast mode [ 83.252804][ T5779] bridge_slave_0: entered promiscuous mode [ 83.267175][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.274486][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.281775][ T5779] bridge_slave_1: entered allmulticast mode [ 83.288856][ T5779] bridge_slave_1: entered promiscuous mode [ 83.307501][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.408812][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.423204][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.444783][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.453382][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.460547][ T5772] bridge_slave_0: entered allmulticast mode [ 83.468312][ T5772] bridge_slave_0: entered promiscuous mode [ 83.477164][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.484410][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.491608][ T5772] bridge_slave_1: entered allmulticast mode [ 83.499342][ T5772] bridge_slave_1: entered promiscuous mode [ 83.534989][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.542452][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.549629][ T5782] bridge_slave_0: entered allmulticast mode [ 83.556921][ T5782] bridge_slave_0: entered promiscuous mode [ 83.585152][ T5779] team0: Port device team_slave_0 added [ 83.591314][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.600884][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.608392][ T5782] bridge_slave_1: entered allmulticast mode [ 83.616220][ T5782] bridge_slave_1: entered promiscuous mode [ 83.642055][ T5779] team0: Port device team_slave_1 added [ 83.669555][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.698632][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.708822][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.716484][ T5774] bridge_slave_0: entered allmulticast mode [ 83.724786][ T5774] bridge_slave_0: entered promiscuous mode [ 83.745654][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.752836][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.781614][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.805474][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.825948][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.836044][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.843692][ T5774] bridge_slave_1: entered allmulticast mode [ 83.850755][ T5774] bridge_slave_1: entered promiscuous mode [ 83.870124][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.877763][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.903868][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.927845][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.958570][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.004861][ T5782] team0: Port device team_slave_0 added [ 84.013950][ T5782] team0: Port device team_slave_1 added [ 84.025698][ T5772] team0: Port device team_slave_0 added [ 84.041904][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.066135][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.078266][ T5772] team0: Port device team_slave_1 added [ 84.149402][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.159120][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.188379][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.212488][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.219581][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.245718][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.261950][ T5779] hsr_slave_0: entered promiscuous mode [ 84.268534][ T5779] hsr_slave_1: entered promiscuous mode [ 84.279225][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.286331][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.313314][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.327821][ T5774] team0: Port device team_slave_0 added [ 84.351289][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.360950][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.387363][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.400491][ T5774] team0: Port device team_slave_1 added [ 84.507588][ T5782] hsr_slave_0: entered promiscuous mode [ 84.514810][ T5782] hsr_slave_1: entered promiscuous mode [ 84.521058][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.528981][ T5782] Cannot create hsr debugfs directory [ 84.532997][ T5785] Bluetooth: hci0: command tx timeout [ 84.549916][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.557096][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.583664][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.616919][ T5778] Bluetooth: hci1: command tx timeout [ 84.616939][ T5775] Bluetooth: hci3: command tx timeout [ 84.618526][ T5772] hsr_slave_0: entered promiscuous mode [ 84.623000][ T5785] Bluetooth: hci2: command tx timeout [ 84.640415][ T5772] hsr_slave_1: entered promiscuous mode [ 84.646999][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.655418][ T5772] Cannot create hsr debugfs directory [ 84.668868][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.676206][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.709572][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.883208][ T5774] hsr_slave_0: entered promiscuous mode [ 84.889972][ T5774] hsr_slave_1: entered promiscuous mode [ 84.896902][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.905015][ T5774] Cannot create hsr debugfs directory [ 85.156559][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.187137][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.197188][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.229122][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.282485][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.301715][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.314894][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.327337][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.432714][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.445303][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.455871][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.476526][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.608316][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.628831][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.654897][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.667119][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.695853][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.731764][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.758915][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.789682][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.797253][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.814640][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.829115][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.836378][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.850346][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.857541][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.908271][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.926352][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.933699][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.984524][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.027384][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.034878][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.060353][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.067878][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.117700][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.196299][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.271384][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.278632][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.348758][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.356033][ T4181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.400264][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.546347][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.622449][ T5785] Bluetooth: hci0: command tx timeout [ 86.679152][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.692063][ T5785] Bluetooth: hci2: command tx timeout [ 86.697731][ T5785] Bluetooth: hci1: command tx timeout [ 86.702162][ T5778] Bluetooth: hci3: command tx timeout [ 86.737888][ T5779] veth0_vlan: entered promiscuous mode [ 86.776609][ T5779] veth1_vlan: entered promiscuous mode [ 86.870366][ T5782] veth0_vlan: entered promiscuous mode [ 86.915146][ T5779] veth0_macvtap: entered promiscuous mode [ 86.934450][ T5782] veth1_vlan: entered promiscuous mode [ 86.955379][ T5779] veth1_macvtap: entered promiscuous mode [ 87.020153][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.059370][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.091076][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.119320][ T5782] veth0_macvtap: entered promiscuous mode [ 87.146370][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.161190][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.178128][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.187194][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.238951][ T5782] veth1_macvtap: entered promiscuous mode [ 87.265518][ T5772] veth0_vlan: entered promiscuous mode [ 87.330984][ T5772] veth1_vlan: entered promiscuous mode [ 87.350282][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.364564][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.377747][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.390152][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.425763][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.436982][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.449652][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.510530][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.520461][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.529725][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.540393][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.554241][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.578523][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.628746][ T5772] veth0_macvtap: entered promiscuous mode [ 87.685575][ T5772] veth1_macvtap: entered promiscuous mode [ 87.716920][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.740009][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.755113][ T5774] veth0_vlan: entered promiscuous mode [ 87.781419][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.798991][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.809195][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.827071][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.839546][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.910690][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.941987][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.955150][ T5774] veth1_vlan: entered promiscuous mode [ 88.064423][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.076381][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.092755][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.103479][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.116394][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.130093][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.140124][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.149702][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.158872][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.178421][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.187784][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.200185][ T5840] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 88.213011][ T5840] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.279343][ T5774] veth0_macvtap: entered promiscuous mode [ 88.358157][ T5774] veth1_macvtap: entered promiscuous mode [ 88.577044][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.601981][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.613914][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.626069][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.639212][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.651315][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.664721][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.677004][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.692184][ T5778] Bluetooth: hci0: command tx timeout [ 88.702436][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.712755][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.724645][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.734836][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.745588][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.764275][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.772083][ T5778] Bluetooth: hci3: command tx timeout [ 88.777769][ T5785] Bluetooth: hci1: command tx timeout [ 88.778248][ T5778] Bluetooth: hci2: command tx timeout [ 88.818163][ T4181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.837673][ T4181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.919937][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.941338][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.952492][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.961664][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.980616][ T5846] : renamed from veth0_to_bond (while UP) [ 88.991150][ T5848] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 89.000498][ T5848] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 89.042501][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.067922][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.101886][ C0] hrtimer: interrupt took 91792 ns [ 89.711511][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.752838][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.917143][ T5855] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.095855][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.105048][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.140581][ T5857] bridge0: entered allmulticast mode [ 90.253717][ T5862] tun0: tun_chr_ioctl cmd 1074812118 [ 90.289966][ T5859] bridge_slave_1: left allmulticast mode [ 90.296918][ T5859] bridge_slave_1: left promiscuous mode [ 90.305551][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.319701][ T5859] bridge_slave_0: left allmulticast mode [ 90.326960][ T5859] bridge_slave_0: left promiscuous mode [ 90.333669][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.345983][ T5863] Zero length message leads to an empty skb [ 90.499534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.509093][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.782458][ T5778] Bluetooth: hci0: command tx timeout [ 90.852054][ T5778] Bluetooth: hci1: command tx timeout [ 90.857534][ T5778] Bluetooth: hci3: command tx timeout [ 90.863621][ T5775] Bluetooth: hci2: command tx timeout [ 91.080548][ T5870] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11'. [ 91.130331][ T5867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.138099][ T5867] IPv6: NLM_F_CREATE should be set when creating new route [ 91.145639][ T5867] IPv6: NLM_F_CREATE should be set when creating new route [ 91.153137][ T5867] IPv6: NLM_F_CREATE should be set when creating new route [ 91.217836][ T5876] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.719220][ T5883] netlink: 'syz.1.14': attribute type 21 has an invalid length. [ 91.982508][ T5894] netlink: 'syz.0.18': attribute type 21 has an invalid length. [ 92.003153][ T5894] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 92.005304][ T5891] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.24'. [ 92.210444][ T5897] tun0: tun_chr_ioctl cmd 1074812118 [ 92.252861][ T9] cfg80211: failed to load regulatory.db [ 93.710756][ T5929] netlink: 'syz.1.28': attribute type 3 has an invalid length. [ 93.727518][ T5929] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.28'. [ 94.066989][ T5907] syzkaller0: entered promiscuous mode [ 94.092231][ T5907] syzkaller0: entered allmulticast mode [ 95.705891][ T5934] netlink: 'syz.3.30': attribute type 4 has an invalid length. [ 95.723022][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.730912][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.772200][ T5939] bridge0: entered allmulticast mode [ 95.817433][ T5941] bridge_slave_1: left allmulticast mode [ 95.830760][ T5941] bridge_slave_1: left promiscuous mode [ 95.839985][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.856807][ T5941] bridge_slave_0: left allmulticast mode [ 95.864336][ T5941] bridge_slave_0: left promiscuous mode [ 95.870127][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.971237][ T5943] tun0: tun_chr_ioctl cmd 1074812118 [ 96.107429][ T5947] netlink: 22 bytes leftover after parsing attributes in process `syz.3.34'. [ 96.395338][ T5955] netlink: 'syz.2.36': attribute type 20 has an invalid length. [ 96.412281][ T5955] netlink: 'syz.2.36': attribute type 21 has an invalid length. [ 96.420265][ T5955] netlink: 'syz.2.36': attribute type 23 has an invalid length. [ 96.428534][ T5955] netlink: 'syz.2.36': attribute type 25 has an invalid length. [ 96.441064][ T5955] netlink: 'syz.2.36': attribute type 27 has an invalid length. [ 96.449407][ T5955] netlink: 'syz.2.36': attribute type 28 has an invalid length. [ 96.460058][ T5955] netlink: 'syz.2.36': attribute type 29 has an invalid length. [ 96.470275][ T5955] netlink: 'syz.2.36': attribute type 30 has an invalid length. [ 96.939297][ T5968] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.38'. [ 111.497369][ T5987] netlink: 'syz.2.44': attribute type 19 has an invalid length. [ 111.516691][ T5987] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.44'. [ 111.722854][ T5992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.883618][ T5995] netlink: 'syz.0.46': attribute type 2 has an invalid length. [ 111.891436][ T5995] netlink: 'syz.0.46': attribute type 1 has an invalid length. [ 111.901530][ T5995] netlink: 198036 bytes leftover after parsing attributes in process `syz.0.46'. [ 112.638118][ T5999] ±ÿ: renamed from lo (while UP) [ 112.782939][ T6005] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.48'. [ 112.814388][ T6006] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.49'. [ 113.353530][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.364768][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.374340][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.383550][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.391663][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 113.400333][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.630558][ T6013] netlink: 188 bytes leftover after parsing attributes in process `syz.2.51'. [ 114.135195][ T6013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51'. [ 114.347232][ T6021] netlink: 2687 bytes leftover after parsing attributes in process `syz.0.52'. [ 114.810341][ T6011] chnl_net:caif_netlink_parms(): no params data found [ 114.930019][ T6029] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 115.001502][ T6029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.54'. [ 115.034107][ T6029] team0: entered promiscuous mode [ 115.073403][ T6029] team_slave_0: entered promiscuous mode [ 115.128308][ T6029] team_slave_1: entered promiscuous mode [ 115.193898][ T6029] team0: entered allmulticast mode [ 115.224335][ T6029] team_slave_0: entered allmulticast mode [ 115.271832][ T6029] team_slave_1: entered allmulticast mode [ 115.323834][ T6029] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 115.502059][ T5785] Bluetooth: hci4: command tx timeout [ 115.856290][ T6045] syz.0.58[6045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.856458][ T6045] syz.0.58[6045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.085384][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.125247][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.158022][ T6011] bridge_slave_0: entered allmulticast mode [ 116.173931][ T6011] bridge_slave_0: entered promiscuous mode [ 116.193823][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.201168][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.226150][ T6011] bridge_slave_1: entered allmulticast mode [ 116.253545][ T6011] bridge_slave_1: entered promiscuous mode [ 116.370568][ T145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.017355][ T6055] netlink: 'syz.3.60': attribute type 10 has an invalid length. [ 117.118290][ T6055] team0: Port device geneve1 added [ 117.240191][ T6055] syz.3.60 (6055) used greatest stack depth: 20328 bytes left [ 117.579899][ T5785] Bluetooth: hci4: command tx timeout [ 118.970540][ T145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.994171][ T6011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.007245][ T6011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.056524][ T6072] netlink: 2687 bytes leftover after parsing attributes in process `syz.3.63'. [ 119.088045][ T6069] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 119.110339][ T6069] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 119.119879][ T6069] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 119.148926][ T145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.200189][ T6011] team0: Port device team_slave_0 added [ 119.210859][ T6011] team0: Port device team_slave_1 added [ 119.332547][ T145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.362657][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.369671][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.400504][ T6011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.468986][ T6083] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 119.488290][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.495762][ T6083] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.65'. [ 119.511458][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.558137][ T6011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.585045][ T6085] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 119.603172][ T6085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.66'. [ 119.616154][ T6085] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 119.653134][ T5785] Bluetooth: hci4: command tx timeout [ 120.688192][ T6011] hsr_slave_0: entered promiscuous mode [ 120.703329][ T6011] hsr_slave_1: entered promiscuous mode [ 120.711474][ T6011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.789713][ T6011] Cannot create hsr debugfs directory [ 120.915472][ T6101] delete_channel: no stack [ 121.464748][ T6113] netlink: 'syz.3.74': attribute type 10 has an invalid length. [ 121.484696][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.3.74'. [ 121.530863][ T6113] team0: entered promiscuous mode [ 121.555623][ T6113] team_slave_0: entered promiscuous mode [ 121.573907][ T6113] team_slave_1: entered promiscuous mode [ 121.615387][ T6113] geneve1: entered promiscuous mode [ 121.624548][ T6113] team0: entered allmulticast mode [ 121.629825][ T6113] team_slave_0: entered allmulticast mode [ 121.638397][ T6113] team_slave_1: entered allmulticast mode [ 121.669683][ T6113] geneve1: entered allmulticast mode [ 121.676760][ T6113] bridge0: port 3(team0) entered blocking state [ 121.690493][ T6113] bridge0: port 3(team0) entered disabled state [ 121.700701][ T6113] bridge0: port 3(team0) entered blocking state [ 121.707245][ T6113] bridge0: port 3(team0) entered forwarding state [ 121.742582][ T5785] Bluetooth: hci4: command tx timeout [ 122.459918][ T6011] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.501118][ T6011] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.665538][ T6011] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.701587][ T6145] netlink: 'syz.2.79': attribute type 21 has an invalid length. [ 122.716842][ T6145] netlink: 156 bytes leftover after parsing attributes in process `syz.2.79'. [ 122.791991][ T6011] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.992143][ T6146] sit0: entered allmulticast mode [ 123.065938][ T6148] sit0: entered promiscuous mode [ 123.530692][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 123.595559][ T6162] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 123.620517][ T6162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.83'. [ 123.640096][ T6162] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 123.733713][ T145] hsr_slave_0: left promiscuous mode [ 123.776345][ T145] hsr_slave_1: left promiscuous mode [ 123.798474][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.825435][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.845785][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.872037][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.925299][ T145] veth1_macvtap: left promiscuous mode [ 123.931474][ T145] veth0_macvtap: left promiscuous mode [ 123.961435][ T145] veth1_vlan: left promiscuous mode [ 123.967645][ T145] veth0_vlan: left promiscuous mode [ 124.683266][ T145] team0 (unregistering): Port device team_slave_1 removed [ 124.725152][ T145] team0 (unregistering): Port device team_slave_0 removed [ 124.762803][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.809564][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.121328][ T145] bond0 (unregistering): Released all slaves [ 125.269103][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.321366][ T6011] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.348327][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.355520][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.397446][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.404783][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.079632][ T6198] netlink: 56 bytes leftover after parsing attributes in process `syz.2.86'. [ 126.111232][ T6198] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 126.188905][ T6011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.278296][ T6199] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 126.675282][ T6199] veth0_vlan: left promiscuous mode [ 126.731998][ T6199] veth0_vlan: entered promiscuous mode [ 126.869963][ T6199] team0: Device veth0_vlan failed to register rx_handler [ 126.950344][ T6199] syz.0.93 (6199) used greatest stack depth: 17896 bytes left [ 127.323039][ T6233] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 127.643660][ T6241] FAULT_INJECTION: forcing a failure. [ 127.643660][ T6241] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.676496][ T6241] CPU: 1 PID: 6241 Comm: syz.3.98 Not tainted syzkaller #0 [ 127.683783][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.693866][ T6241] Call Trace: [ 127.697170][ T6241] [ 127.700201][ T6241] dump_stack_lvl+0x18c/0x250 [ 127.704916][ T6241] ? show_regs_print_info+0x20/0x20 [ 127.710145][ T6241] ? load_image+0x420/0x420 [ 127.714668][ T6241] ? __might_fault+0xaa/0x120 [ 127.719447][ T6241] ? __lock_acquire+0x7d80/0x7d80 [ 127.724584][ T6241] should_fail_ex+0x394/0x4c0 [ 127.729285][ T6241] _copy_from_user+0x2f/0xe0 [ 127.733984][ T6241] __sys_bpf+0x23e/0x890 [ 127.738475][ T6241] ? bpf_link_show_fdinfo+0x390/0x390 [ 127.743962][ T6241] ? lock_chain_count+0x20/0x20 [ 127.748855][ T6241] __x64_sys_bpf+0x7c/0x90 [ 127.753286][ T6241] do_syscall_64+0x55/0xb0 [ 127.757719][ T6241] ? clear_bhb_loop+0x40/0x90 [ 127.762406][ T6241] ? clear_bhb_loop+0x40/0x90 [ 127.767098][ T6241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.773007][ T6241] RIP: 0033:0x7ff37939de99 [ 127.777443][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.797167][ T6241] RSP: 002b:00007ff37a31b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.805711][ T6241] RAX: ffffffffffffffda RBX: 00007ff379625fa0 RCX: 00007ff37939de99 [ 127.813700][ T6241] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 127.821686][ T6241] RBP: 00007ff37a31b090 R08: 0000000000000000 R09: 0000000000000000 [ 127.829669][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.837658][ T6241] R13: 00007ff379626038 R14: 00007ff379625fa0 R15: 00007ffd9c2189e8 [ 127.845747][ T6241] [ 127.914808][ T6011] veth0_vlan: entered promiscuous mode [ 127.970845][ T6011] veth1_vlan: entered promiscuous mode [ 128.102731][ T6011] veth0_macvtap: entered promiscuous mode [ 128.155982][ T6011] veth1_macvtap: entered promiscuous mode [ 128.274717][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.311846][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.323369][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.370709][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.391326][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.402311][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.415212][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.500071][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.520511][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.531464][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.542358][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.571857][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.591865][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.643677][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.655455][ T6269] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 128.828324][ T6269] veth0_vlan: left promiscuous mode [ 128.863998][ T6269] veth0_vlan: entered promiscuous mode [ 128.903053][ T6269] team0: Device veth0_vlan failed to register rx_handler [ 129.019964][ T6011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.038437][ T6011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.061897][ T6011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.070656][ T6011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.320095][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.348953][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.354697][ T6290] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 129.374314][ T6290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.107'. [ 129.494312][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.520030][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.146102][ T6311] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.47'. [ 130.277934][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 130.684967][ T6324] syzkaller0: entered promiscuous mode [ 130.691001][ T6324] syzkaller0: entered allmulticast mode [ 130.902171][ T6330] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 130.910732][ T6330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.117'. [ 131.299959][ T6332] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 132.078655][ T6332] veth0_vlan: left promiscuous mode [ 132.096354][ T6332] veth0_vlan: entered promiscuous mode [ 132.148978][ T6332] team0: Device veth0_vlan failed to register rx_handler [ 132.254142][ T6358] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.121'. [ 133.353105][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.359908][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.904198][ T6411] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.132'. [ 135.666852][ T6427] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.135'. [ 135.742182][ T6427] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.135'. [ 135.930836][ T6427] netlink: 'syz.0.135': attribute type 10 has an invalid length. [ 135.951951][ T6427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.135'. [ 136.068620][ T6427] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 136.225433][ T6427] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.401438][ T6427] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 136.443540][ T6422] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.135'. [ 136.474499][ T6461] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.135'. [ 137.112274][ T6505] @ÿ: renamed from bond_slave_0 (while UP) [ 137.244623][ T6512] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.143'. [ 137.285641][ T6512] netlink: 'syz.0.143': attribute type 7 has an invalid length. [ 137.323589][ T6512] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.143'. [ 137.513358][ T6517] syz.2.145 uses obsolete (PF_INET,SOCK_PACKET) [ 137.750093][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 138.119686][ T6539] netlink: 128 bytes leftover after parsing attributes in process `syz.3.150'. [ 138.176956][ T6539] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 139.487685][ T6575] netlink: 15974 bytes leftover after parsing attributes in process `syz.3.158'. [ 139.816566][ T6578] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.159'. [ 140.675322][ T6608] netlink: 'syz.0.167': attribute type 10 has an invalid length. [ 140.724840][ T6605] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.166'. [ 140.751420][ T6605] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 140.758840][ T6608] netlink: 40 bytes leftover after parsing attributes in process `syz.0.167'. [ 140.793806][ T6608] team0: entered promiscuous mode [ 140.818230][ T6608] team_slave_0: entered promiscuous mode [ 140.838019][ T6608] team_slave_1: entered promiscuous mode [ 140.881665][ T6608] team0: entered allmulticast mode [ 140.906261][ T6608] team_slave_0: entered allmulticast mode [ 140.922009][ T6608] team_slave_1: entered allmulticast mode [ 140.938753][ T6608] bridge0: port 3(team0) entered blocking state [ 140.960073][ T6608] bridge0: port 3(team0) entered disabled state [ 141.003231][ T6608] bridge0: port 3(team0) entered blocking state [ 141.009768][ T6608] bridge0: port 3(team0) entered forwarding state [ 144.219245][ T6647] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.176'. [ 144.232108][ T6645] netlink: 'syz.3.175': attribute type 10 has an invalid length. [ 144.241156][ T6645] veth0_vlan: left promiscuous mode [ 144.247863][ T6645] veth0_vlan: entered promiscuous mode [ 144.256217][ T6645] team0: Device veth0_vlan failed to register rx_handler [ 144.675500][ T6668] netlink: 'syz.2.180': attribute type 21 has an invalid length. [ 145.410115][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.184'. [ 145.467222][ T6690] netlink: 152 bytes leftover after parsing attributes in process `syz.4.184'. [ 145.524743][ T6690] delete_channel: no stack [ 146.192891][ T6711] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.189'. [ 146.223138][ T6711] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.189'. [ 146.726087][ T6729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.195'. [ 147.093521][ T6747] netlink: 'syz.3.200': attribute type 21 has an invalid length. [ 147.139339][ T6747] netlink: 152 bytes leftover after parsing attributes in process `syz.3.200'. [ 147.398169][ T6764] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.203'. [ 147.472152][ T6764] tc_dump_action: action bad kind [ 151.945701][ T6853] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 (while UP) [ 152.485697][ T6865] syzkaller0: entered promiscuous mode [ 152.778107][ T6848] delete_channel: no stack [ 153.240022][ T6888] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.228'. [ 154.124920][ T6914] netlink: 'syz.3.233': attribute type 10 has an invalid length. [ 154.151104][ T6914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.233'. [ 154.362644][ T6919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.235'. [ 155.424791][ T6939] netlink: 'syz.2.241': attribute type 3 has an invalid length. [ 155.559418][ T6939] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.241'. [ 156.698680][ T6962] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.248'. [ 156.751700][ T6962] openvswitch: netlink: IP tunnel dst address not specified [ 157.891957][ T6977] netlink: 132 bytes leftover after parsing attributes in process `syz.0.250'. [ 157.944613][ T6979] netlink: 'syz.0.250': attribute type 19 has an invalid length. [ 157.959372][ T6979] netlink: 55 bytes leftover after parsing attributes in process `syz.0.250'. [ 158.382946][ T6995] netlink: 'syz.0.254': attribute type 46 has an invalid length. [ 158.442885][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.254'. [ 158.540711][ T7000] netlink: 'syz.2.255': attribute type 29 has an invalid length. [ 158.550275][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 158.599177][ T7000] netlink: 'syz.2.255': attribute type 3 has an invalid length. [ 158.616331][ T7006] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 158.649162][ T7000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.255'. [ 159.651578][ T7046] netlink: 'syz.3.266': attribute type 12 has an invalid length. [ 159.719492][ T7046] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.266'. [ 160.068876][ T7061] pim6reg1: entered promiscuous mode [ 160.087789][ T7061] pim6reg1: entered allmulticast mode [ 161.978394][ T7116] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.284'. [ 165.870015][ T7224] netlink: 'syz.3.308': attribute type 2 has an invalid length. [ 166.290366][ T7240] netlink: 'syz.4.314': attribute type 1 has an invalid length. [ 166.332319][ T7240] netlink: 'syz.4.314': attribute type 3 has an invalid length. [ 166.353485][ T7240] netlink: 132 bytes leftover after parsing attributes in process `syz.4.314'. [ 166.858851][ T7244] netlink: 'syz.4.314': attribute type 10 has an invalid length. [ 166.868988][ T7244] netlink: 168 bytes leftover after parsing attributes in process `syz.4.314'. [ 167.152394][ T7261] netlink: 'syz.0.317': attribute type 27 has an invalid length. [ 167.893511][ T7272] syzkaller0: entered promiscuous mode [ 167.899306][ T7272] syzkaller0: entered allmulticast mode [ 167.919732][ T7284] netlink: 'syz.0.322': attribute type 21 has an invalid length. [ 167.929322][ T7284] netlink: 'syz.0.322': attribute type 6 has an invalid length. [ 167.970143][ T7284] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.322'. [ 170.470769][ T7315] netlink: 128 bytes leftover after parsing attributes in process `syz.4.329'. [ 170.503323][ T7315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.723852][ T7338] netlink: 'syz.2.335': attribute type 21 has an invalid length. [ 171.767982][ T7338] netlink: 156 bytes leftover after parsing attributes in process `syz.2.335'. [ 172.023667][ T7340] netlink: 'syz.4.336': attribute type 10 has an invalid length. [ 172.057860][ T7340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.336'. [ 172.170289][ T7340] batman_adv: batadv0: Adding interface: virt_wifi0 [ 172.202055][ T7340] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.275816][ T7340] batman_adv: batadv0: Interface activated: virt_wifi0 [ 172.563746][ T7363] netlink: 'syz.0.342': attribute type 10 has an invalid length. [ 172.605388][ T7363] netlink: 55 bytes leftover after parsing attributes in process `syz.0.342'. [ 173.315698][ T7375] netlink: 16390 bytes leftover after parsing attributes in process `syz.4.345'. [ 173.332761][ T7371] netlink: 16390 bytes leftover after parsing attributes in process `syz.4.345'. [ 173.693003][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 173.910635][ T7388] netlink: 'syz.2.348': attribute type 64 has an invalid length. [ 174.436412][ T7404] netlink: 188 bytes leftover after parsing attributes in process `syz.3.354'. [ 174.678629][ T7402] syzkaller0: entered promiscuous mode [ 174.696597][ T7402] syzkaller0: entered allmulticast mode [ 177.300572][ T7427] IPv6: Can't replace route, no match found [ 178.689871][ T7458] netlink: 'syz.2.370': attribute type 58 has an invalid length. [ 178.728776][ T7458] netlink: 144 bytes leftover after parsing attributes in process `syz.2.370'. [ 179.528160][ T7462] netlink: 'syz.0.371': attribute type 4 has an invalid length. [ 179.542015][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 179.969048][ T7479] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 179.977393][ T7479] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.376'. [ 180.003989][ T7480] netlink: 13822 bytes leftover after parsing attributes in process `syz.2.375'. [ 180.029769][ T7481] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.374'. [ 183.673227][ T7516] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.380'. [ 184.603322][ T7526] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.386'. [ 184.633316][ T7526] netlink: del zone limit has 8 unknown bytes [ 185.685148][ T7512] netlink: 64 bytes leftover after parsing attributes in process `syz.2.380'. [ 185.713343][ T7516] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.380'. [ 185.939580][ T7532] netlink: 128 bytes leftover after parsing attributes in process `syz.3.387'. [ 186.036691][ T7532] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 186.356788][ T7546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.391'. [ 186.372603][ T7546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.391'. [ 186.383766][ T7546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.391'. [ 186.554134][ T5785] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 187.740376][ T7584] netlink: 60 bytes leftover after parsing attributes in process `syz.3.405'. [ 191.249426][ T7615] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 191.547941][ T7624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.417'. [ 191.802491][ T7625] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 191.827890][ T7625] netlink: 'syz.0.417': attribute type 3 has an invalid length. [ 191.900868][ T7625] netlink: 132 bytes leftover after parsing attributes in process `syz.0.417'. [ 192.382974][ T7632] netlink: 'syz.2.419': attribute type 21 has an invalid length. [ 192.720257][ T7634] syzkaller0: entered promiscuous mode [ 192.754529][ T7634] syzkaller0: entered allmulticast mode [ 192.884670][ T7634] netlink: 'syz.3.420': attribute type 10 has an invalid length. [ 192.910811][ T7634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.420'. [ 194.541153][ T7666] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 194.626906][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.638853][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.147882][ T7666] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 196.258422][ T7667] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 196.282830][ T7668] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 196.306611][ T7669] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 196.505942][ T7681] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.431'. [ 198.514292][ T7735] netlink: 'syz.3.444': attribute type 10 has an invalid length. [ 198.546432][ T7731] netlink: 'syz.3.444': attribute type 3 has an invalid length. [ 198.602092][ T7731] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.444'. [ 198.682449][ T7735] mac80211_hwsim hwsim3 ..ãc¤±: entered promiscuous mode [ 198.710151][ T7735] mac80211_hwsim hwsim3 ..ãc¤±: entered allmulticast mode [ 198.761471][ T7735] team0: Port device ..ãc¤± added [ 198.895466][ T7738] delete_channel: no stack [ 199.465950][ T7760] raw_sendmsg: syz.3.454 forgot to set AF_INET. Fix it! [ 199.717602][ T7766] FAULT_INJECTION: forcing a failure. [ 199.717602][ T7766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.766621][ T7766] CPU: 1 PID: 7766 Comm: syz.2.456 Not tainted syzkaller #0 [ 199.773999][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.784199][ T7766] Call Trace: [ 199.787521][ T7766] [ 199.790488][ T7766] dump_stack_lvl+0x18c/0x250 [ 199.795228][ T7766] ? show_regs_print_info+0x20/0x20 [ 199.800487][ T7766] ? load_image+0x420/0x420 [ 199.805051][ T7766] ? __might_fault+0xaa/0x120 [ 199.809875][ T7766] ? __lock_acquire+0x7d80/0x7d80 [ 199.814950][ T7766] should_fail_ex+0x394/0x4c0 [ 199.818521][ T7771] delete_channel: no stack [ 199.819839][ T7766] _copy_from_user+0x2f/0xe0 [ 199.828913][ T7766] ___sys_sendmsg+0x1c7/0x360 [ 199.833647][ T7766] ? get_pid_task+0x20/0x1e0 [ 199.838559][ T7766] ? __sys_sendmsg+0x2b0/0x2b0 [ 199.843930][ T7766] ? __lock_acquire+0x7d80/0x7d80 [ 199.849151][ T7766] __se_sys_sendmsg+0x1d0/0x2c0 [ 199.854156][ T7766] ? __x64_sys_sendmsg+0x80/0x80 [ 199.859171][ T7766] ? lockdep_hardirqs_on+0x98/0x150 [ 199.864429][ T7766] do_syscall_64+0x55/0xb0 [ 199.869201][ T7766] ? clear_bhb_loop+0x40/0x90 [ 199.874024][ T7766] ? clear_bhb_loop+0x40/0x90 [ 199.878764][ T7766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.884714][ T7766] RIP: 0033:0x7f404bb9de99 [ 199.889177][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.909356][ T7766] RSP: 002b:00007f404cb41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.917828][ T7766] RAX: ffffffffffffffda RBX: 00007f404be25fa0 RCX: 00007f404bb9de99 [ 199.926103][ T7766] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000006 [ 199.934130][ T7766] RBP: 00007f404cb41090 R08: 0000000000000000 R09: 0000000000000000 [ 199.942151][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.950171][ T7766] R13: 00007f404be26038 R14: 00007f404be25fa0 R15: 00007ffd8cb53ef8 [ 199.958216][ T7766] [ 200.048179][ T7760] netlink: 173716 bytes leftover after parsing attributes in process `syz.3.454'. [ 200.408103][ T7775] syzkaller0: entered promiscuous mode [ 200.452000][ T7775] syzkaller0: entered allmulticast mode [ 202.120212][ T7812] FAULT_INJECTION: forcing a failure. [ 202.120212][ T7812] name failslab, interval 1, probability 0, space 0, times 1 [ 202.145156][ T7812] CPU: 0 PID: 7812 Comm: syz.2.468 Not tainted syzkaller #0 [ 202.152530][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.162644][ T7812] Call Trace: [ 202.165966][ T7812] [ 202.168938][ T7812] dump_stack_lvl+0x18c/0x250 [ 202.173675][ T7812] ? show_regs_print_info+0x20/0x20 [ 202.179097][ T7812] ? load_image+0x420/0x420 [ 202.183753][ T7812] ? __might_sleep+0xe0/0xe0 [ 202.188404][ T7812] ? __lock_acquire+0x7d80/0x7d80 [ 202.193494][ T7812] should_fail_ex+0x394/0x4c0 [ 202.198240][ T7812] should_failslab+0x9/0x20 [ 202.202790][ T7812] slab_pre_alloc_hook+0x59/0x300 [ 202.207872][ T7812] ? __lock_acquire+0x7d80/0x7d80 [ 202.212953][ T7812] kmem_cache_alloc_node+0x5e/0x310 [ 202.218289][ T7812] ? __alloc_skb+0x103/0x2c0 [ 202.222936][ T7812] __alloc_skb+0x103/0x2c0 [ 202.227408][ T7812] netlink_sendmsg+0x66a/0xbf0 [ 202.232343][ T7812] ? netlink_getsockopt+0x590/0x590 [ 202.237659][ T7812] ? apparmor_socket_sendmsg+0x8e/0x330 [ 202.243285][ T7812] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 202.248679][ T7812] ? security_socket_sendmsg+0x80/0xa0 [ 202.254196][ T7812] ? netlink_getsockopt+0x590/0x590 [ 202.259443][ T7812] ____sys_sendmsg+0x61b/0x980 [ 202.264266][ T7812] ? __asan_memset+0x22/0x40 [ 202.268898][ T7812] ? __sys_sendmsg_sock+0x30/0x30 [ 202.273972][ T7812] ? __import_iovec+0x5f2/0x850 [ 202.278983][ T7812] ? import_iovec+0x73/0xa0 [ 202.283555][ T7812] ___sys_sendmsg+0x2a6/0x360 [ 202.288390][ T7812] ? get_pid_task+0x20/0x1e0 [ 202.293296][ T7812] ? __sys_sendmsg+0x2b0/0x2b0 [ 202.298152][ T7812] ? __lock_acquire+0x7d80/0x7d80 [ 202.303257][ T7812] __se_sys_sendmsg+0x1d0/0x2c0 [ 202.308164][ T7812] ? __x64_sys_sendmsg+0x80/0x80 [ 202.313177][ T7812] ? lockdep_hardirqs_on+0x98/0x150 [ 202.319399][ T7812] do_syscall_64+0x55/0xb0 [ 202.323885][ T7812] ? clear_bhb_loop+0x40/0x90 [ 202.328612][ T7812] ? clear_bhb_loop+0x40/0x90 [ 202.333423][ T7812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.339362][ T7812] RIP: 0033:0x7f404bb9de99 [ 202.343906][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.363905][ T7812] RSP: 002b:00007f404cb41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.372365][ T7812] RAX: ffffffffffffffda RBX: 00007f404be25fa0 RCX: 00007f404bb9de99 [ 202.380399][ T7812] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000006 [ 202.388681][ T7812] RBP: 00007f404cb41090 R08: 0000000000000000 R09: 0000000000000000 [ 202.396804][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.404823][ T7812] R13: 00007f404be26038 R14: 00007f404be25fa0 R15: 00007ffd8cb53ef8 [ 202.413040][ T7812] [ 204.049242][ T7792] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.464'. [ 204.058979][ T7799] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.464'. [ 204.364685][ T7837] netlink: 'syz.3.473': attribute type 6 has an invalid length. [ 204.387115][ T7837] netlink: 164 bytes leftover after parsing attributes in process `syz.3.473'. [ 204.909494][ T7846] sctp: [Deprecated]: syz.2.478 (pid 7846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.909494][ T7846] Use struct sctp_sack_info instead [ 205.217295][ T7856] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.482'. [ 205.231576][ T7856] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.482'. [ 205.247479][ T7856] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.482'. [ 205.779339][ T7882] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.489'. [ 205.950667][ T7886] FAULT_INJECTION: forcing a failure. [ 205.950667][ T7886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.964347][ T7886] CPU: 1 PID: 7886 Comm: syz.3.491 Not tainted syzkaller #0 [ 205.971699][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 205.981799][ T7886] Call Trace: [ 205.985124][ T7886] [ 205.988092][ T7886] dump_stack_lvl+0x18c/0x250 [ 205.992838][ T7886] ? show_regs_print_info+0x20/0x20 [ 205.998177][ T7886] ? load_image+0x420/0x420 [ 206.002837][ T7886] ? __might_fault+0xaa/0x120 [ 206.007672][ T7886] ? __lock_acquire+0x7d80/0x7d80 [ 206.012763][ T7886] should_fail_ex+0x394/0x4c0 [ 206.017531][ T7886] _copy_from_iter+0x1cd/0x1290 [ 206.022441][ T7886] ? rcu_is_watching+0x15/0xb0 [ 206.027268][ T7886] ? copyout_mc+0x70/0x70 [ 206.031735][ T7886] ? __virt_addr_valid+0x10c/0x380 [ 206.036893][ T7886] ? __virt_addr_valid+0x10c/0x380 [ 206.042060][ T7886] ? __virt_addr_valid+0x10c/0x380 [ 206.047405][ T7886] ? __check_object_size+0x4fc/0xa40 [ 206.052756][ T7886] netlink_sendmsg+0x76b/0xbf0 [ 206.057587][ T7886] ? netlink_getsockopt+0x590/0x590 [ 206.062854][ T7886] ? apparmor_socket_sendmsg+0x8e/0x330 [ 206.068549][ T7886] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 206.073886][ T7886] ? security_socket_sendmsg+0x80/0xa0 [ 206.079387][ T7886] ? netlink_getsockopt+0x590/0x590 [ 206.084783][ T7886] ____sys_sendmsg+0x61b/0x980 [ 206.089835][ T7886] ? __asan_memset+0x22/0x40 [ 206.094531][ T7886] ? __sys_sendmsg_sock+0x30/0x30 [ 206.099582][ T7886] ? __import_iovec+0x5f2/0x850 [ 206.104545][ T7886] ? import_iovec+0x73/0xa0 [ 206.109081][ T7886] ___sys_sendmsg+0x2a6/0x360 [ 206.113799][ T7886] ? get_pid_task+0x20/0x1e0 [ 206.118412][ T7886] ? __sys_sendmsg+0x2b0/0x2b0 [ 206.123311][ T7886] ? __lock_acquire+0x7d80/0x7d80 [ 206.128459][ T7886] __se_sys_sendmsg+0x1d0/0x2c0 [ 206.133338][ T7886] ? __x64_sys_sendmsg+0x80/0x80 [ 206.138402][ T7886] ? lockdep_hardirqs_on+0x98/0x150 [ 206.143725][ T7886] do_syscall_64+0x55/0xb0 [ 206.148447][ T7886] ? clear_bhb_loop+0x40/0x90 [ 206.153269][ T7886] ? clear_bhb_loop+0x40/0x90 [ 206.158299][ T7886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.164244][ T7886] RIP: 0033:0x7ff37939de99 [ 206.168693][ T7886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.188803][ T7886] RSP: 002b:00007ff37a31b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.197542][ T7886] RAX: ffffffffffffffda RBX: 00007ff379625fa0 RCX: 00007ff37939de99 [ 206.205641][ T7886] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000006 [ 206.213905][ T7886] RBP: 00007ff37a31b090 R08: 0000000000000000 R09: 0000000000000000 [ 206.222779][ T7886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.230971][ T7886] R13: 00007ff379626038 R14: 00007ff379625fa0 R15: 00007ffd9c2189e8 [ 206.239364][ T7886] [ 206.935740][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 206.935767][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 206.942568][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 207.194353][ T7925] syzkaller0: entered promiscuous mode [ 207.539043][ T7934] FAULT_INJECTION: forcing a failure. [ 207.539043][ T7934] name failslab, interval 1, probability 0, space 0, times 0 [ 207.576548][ T7934] CPU: 1 PID: 7934 Comm: syz.3.504 Not tainted syzkaller #0 [ 207.583943][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.594030][ T7934] Call Trace: [ 207.597420][ T7934] [ 207.600371][ T7934] dump_stack_lvl+0x18c/0x250 [ 207.605085][ T7934] ? show_regs_print_info+0x20/0x20 [ 207.610312][ T7934] ? load_image+0x420/0x420 [ 207.614942][ T7934] ? perf_trace_lock+0xfc/0x3b0 [ 207.619906][ T7934] ? verify_lock_unused+0x140/0x140 [ 207.625212][ T7934] ? perf_trace_lock+0xfc/0x3b0 [ 207.630185][ T7934] should_fail_ex+0x394/0x4c0 [ 207.634888][ T7934] should_failslab+0x9/0x20 [ 207.639433][ T7934] slab_pre_alloc_hook+0x59/0x300 [ 207.644663][ T7934] kmem_cache_alloc+0x5a/0x2c0 [ 207.649558][ T7934] ? skb_clone+0x1eb/0x370 [ 207.654186][ T7934] skb_clone+0x1eb/0x370 [ 207.658451][ T7934] __netlink_deliver_tap+0x411/0x7f0 [ 207.663767][ T7934] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.669008][ T7934] netlink_deliver_tap+0x19c/0x1b0 [ 207.674171][ T7934] netlink_unicast+0x77b/0x930 [ 207.679070][ T7934] netlink_sendmsg+0x8d0/0xbf0 [ 207.683877][ T7934] ? netlink_getsockopt+0x590/0x590 [ 207.689215][ T7934] ? apparmor_socket_sendmsg+0x8e/0x330 [ 207.694791][ T7934] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.700183][ T7934] ? security_socket_sendmsg+0x80/0xa0 [ 207.705677][ T7934] ? netlink_getsockopt+0x590/0x590 [ 207.710939][ T7934] ____sys_sendmsg+0x61b/0x980 [ 207.715992][ T7934] ? __asan_memset+0x22/0x40 [ 207.720689][ T7934] ? __sys_sendmsg_sock+0x30/0x30 [ 207.726008][ T7934] ? __import_iovec+0x5f2/0x850 [ 207.730978][ T7934] ? import_iovec+0x73/0xa0 [ 207.735506][ T7934] ___sys_sendmsg+0x2a6/0x360 [ 207.740210][ T7934] ? __sys_sendmsg+0x2b0/0x2b0 [ 207.745057][ T7934] ? __lock_acquire+0x7d80/0x7d80 [ 207.750147][ T7934] __se_sys_sendmsg+0x1d0/0x2c0 [ 207.755040][ T7934] ? __x64_sys_sendmsg+0x80/0x80 [ 207.760134][ T7934] ? lockdep_hardirqs_on+0x98/0x150 [ 207.765368][ T7934] do_syscall_64+0x55/0xb0 [ 207.770154][ T7934] ? clear_bhb_loop+0x40/0x90 [ 207.774939][ T7934] ? clear_bhb_loop+0x40/0x90 [ 207.779634][ T7934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.785550][ T7934] RIP: 0033:0x7ff37939de99 [ 207.790016][ T7934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.809736][ T7934] RSP: 002b:00007ff37a31b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.818260][ T7934] RAX: ffffffffffffffda RBX: 00007ff379625fa0 RCX: 00007ff37939de99 [ 207.826332][ T7934] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000006 [ 207.834406][ T7934] RBP: 00007ff37a31b090 R08: 0000000000000000 R09: 0000000000000000 [ 207.842400][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.850419][ T7934] R13: 00007ff379626038 R14: 00007ff379625fa0 R15: 00007ffd9c2189e8 [ 207.858513][ T7934] [ 208.021222][ T7943] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.506'. [ 208.564085][ T7958] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 208.572046][ T7958] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.511'. [ 209.567710][ T7972] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.514'. [ 209.654040][ T7976] FAULT_INJECTION: forcing a failure. [ 209.654040][ T7976] name failslab, interval 1, probability 0, space 0, times 0 [ 209.667079][ T7976] CPU: 1 PID: 7976 Comm: syz.3.515 Not tainted syzkaller #0 [ 209.674419][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 209.684621][ T7976] Call Trace: [ 209.687944][ T7976] [ 209.690922][ T7976] dump_stack_lvl+0x18c/0x250 [ 209.695676][ T7976] ? show_regs_print_info+0x20/0x20 [ 209.700941][ T7976] ? load_image+0x420/0x420 [ 209.705515][ T7976] ? skb_network_protocol+0x529/0x790 [ 209.710951][ T7976] should_fail_ex+0x394/0x4c0 [ 209.715684][ T7976] should_failslab+0x9/0x20 [ 209.720331][ T7976] slab_pre_alloc_hook+0x59/0x300 [ 209.725507][ T7976] kmem_cache_alloc+0x5a/0x2c0 [ 209.730547][ T7976] ? skb_clone+0x1eb/0x370 [ 209.734988][ T7976] skb_clone+0x1eb/0x370 [ 209.739234][ T7976] ? dev_queue_xmit_nit+0x204/0xba0 [ 209.744441][ T7976] dev_queue_xmit_nit+0x23f/0xba0 [ 209.749470][ T7976] ? dev_queue_xmit_nit+0x2d/0xba0 [ 209.754614][ T7976] dev_hard_start_xmit+0x150/0x790 [ 209.759953][ T7976] ? __dev_queue_xmit+0x275/0x3630 [ 209.765280][ T7976] __dev_queue_xmit+0x198c/0x3630 [ 209.770436][ T7976] ? __dev_queue_xmit+0x275/0x3630 [ 209.775922][ T7976] ? netdev_core_pick_tx+0x370/0x370 [ 209.781261][ T7976] ? ref_tracker_alloc+0x347/0x4b0 [ 209.786418][ T7976] ? __copy_skb_header+0xa3/0x4a0 [ 209.791562][ T7976] ? __asan_memcpy+0x40/0x70 [ 209.796179][ T7976] ? __skb_clone+0x5c/0x6c0 [ 209.800725][ T7976] ? __skb_clone+0x446/0x6c0 [ 209.805384][ T7976] ? skb_clone+0x21f/0x370 [ 209.809816][ T7976] __netlink_deliver_tap+0x579/0x7f0 [ 209.815137][ T7976] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.820795][ T7976] netlink_deliver_tap+0x19c/0x1b0 [ 209.826056][ T7976] netlink_unicast+0x77b/0x930 [ 209.830865][ T7976] netlink_sendmsg+0x8d0/0xbf0 [ 209.835658][ T7976] ? netlink_getsockopt+0x590/0x590 [ 209.840879][ T7976] ? apparmor_socket_sendmsg+0x8e/0x330 [ 209.846439][ T7976] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 209.851741][ T7976] ? security_socket_sendmsg+0x80/0xa0 [ 209.857343][ T7976] ? netlink_getsockopt+0x590/0x590 [ 209.862587][ T7976] ____sys_sendmsg+0x61b/0x980 [ 209.867407][ T7976] ? __asan_memset+0x22/0x40 [ 209.872027][ T7976] ? __sys_sendmsg_sock+0x30/0x30 [ 209.877072][ T7976] ? __import_iovec+0x5f2/0x850 [ 209.881954][ T7976] ? import_iovec+0x73/0xa0 [ 209.886487][ T7976] ___sys_sendmsg+0x2a6/0x360 [ 209.891186][ T7976] ? get_pid_task+0x20/0x1e0 [ 209.895800][ T7976] ? __sys_sendmsg+0x2b0/0x2b0 [ 209.900610][ T7976] ? __lock_acquire+0x7d80/0x7d80 [ 209.905676][ T7976] __se_sys_sendmsg+0x1d0/0x2c0 [ 209.910554][ T7976] ? __x64_sys_sendmsg+0x80/0x80 [ 209.915540][ T7976] ? lockdep_hardirqs_on+0x98/0x150 [ 209.920759][ T7976] do_syscall_64+0x55/0xb0 [ 209.925201][ T7976] ? clear_bhb_loop+0x40/0x90 [ 209.929890][ T7976] ? clear_bhb_loop+0x40/0x90 [ 209.934594][ T7976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.940511][ T7976] RIP: 0033:0x7ff37939de99 [ 209.944951][ T7976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.964658][ T7976] RSP: 002b:00007ff37a31b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.973450][ T7976] RAX: ffffffffffffffda RBX: 00007ff379625fa0 RCX: 00007ff37939de99 [ 209.981465][ T7976] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000006 [ 209.989455][ T7976] RBP: 00007ff37a31b090 R08: 0000000000000000 R09: 0000000000000000 [ 209.997790][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.005798][ T7976] R13: 00007ff379626038 R14: 00007ff379625fa0 R15: 00007ffd9c2189e8 [ 210.014497][ T7976] [ 210.518502][ T7991] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 210.605084][ T7991] wg1: entered promiscuous mode [ 210.610212][ T7991] wg1: entered allmulticast mode [ 210.631147][ T7991] team0: Device wg1 is of different type [ 210.933814][ T8009] FAULT_INJECTION: forcing a failure. [ 210.933814][ T8009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.000724][ T8009] CPU: 1 PID: 8009 Comm: syz.4.525 Not tainted syzkaller #0 [ 211.008193][ T8009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 211.018378][ T8009] Call Trace: [ 211.021700][ T8009] [ 211.024665][ T8009] dump_stack_lvl+0x18c/0x250 [ 211.029414][ T8009] ? show_regs_print_info+0x20/0x20 [ 211.034676][ T8009] ? load_image+0x420/0x420 [ 211.039325][ T8009] ? __lock_acquire+0x7d80/0x7d80 [ 211.044478][ T8009] ? snprintf+0xe9/0x140 [ 211.048816][ T8009] should_fail_ex+0x394/0x4c0 [ 211.053661][ T8009] _copy_to_user+0x2f/0xa0 [ 211.058117][ T8009] simple_read_from_buffer+0xe7/0x150 [ 211.063554][ T8009] proc_fail_nth_read+0x1e8/0x260 [ 211.068810][ T8009] ? proc_fault_inject_write+0x360/0x360 [ 211.074587][ T8009] ? fsnotify_perm+0x271/0x5e0 [ 211.079397][ T8009] ? proc_fault_inject_write+0x360/0x360 [ 211.085174][ T8009] vfs_read+0x298/0x990 [ 211.089385][ T8009] ? kernel_read+0x1e0/0x1e0 [ 211.094209][ T8009] ? __fget_files+0x28/0x460 [ 211.098845][ T8009] ? __fget_files+0x3fc/0x460 [ 211.103585][ T8009] ? __fdget_pos+0x2a3/0x330 [ 211.108222][ T8009] ? ksys_read+0x74/0x260 [ 211.112589][ T8009] ksys_read+0x151/0x260 [ 211.116944][ T8009] ? vfs_write+0x9a0/0x9a0 [ 211.121388][ T8009] ? lockdep_hardirqs_on+0x98/0x150 [ 211.126704][ T8009] do_syscall_64+0x55/0xb0 [ 211.131159][ T8009] ? clear_bhb_loop+0x40/0x90 [ 211.135877][ T8009] ? clear_bhb_loop+0x40/0x90 [ 211.140578][ T8009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.146581][ T8009] RIP: 0033:0x7fcb3b95e6ce [ 211.151015][ T8009] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.170745][ T8009] RSP: 002b:00007fcb3c82cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.179613][ T8009] RAX: ffffffffffffffda RBX: 00007fcb3c82d6c0 RCX: 00007fcb3b95e6ce [ 211.187863][ T8009] RDX: 000000000000000f RSI: 00007fcb3c82d0a0 RDI: 0000000000000007 [ 211.195853][ T8009] RBP: 00007fcb3c82d090 R08: 0000000000000000 R09: 0000000000000000 [ 211.203842][ T8009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.211912][ T8009] R13: 00007fcb3bc26038 R14: 00007fcb3bc25fa0 R15: 00007ffe7afbcbd8 [ 211.220007][ T8009] [ 211.900079][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.979488][ T8016] bridge_slave_0 (unregistering): left allmulticast mode [ 212.005225][ T8016] bridge_slave_0 (unregistering): left promiscuous mode [ 212.015051][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.126775][ T8051] syzkaller0: entered promiscuous mode [ 213.132612][ T8051] syzkaller0: entered allmulticast mode [ 213.905527][ T8073] netlink: 60 bytes leftover after parsing attributes in process `syz.3.541'. [ 216.232365][ T8073] netlink: 60 bytes leftover after parsing attributes in process `syz.3.541'. [ 216.270485][ T8081] netlink: 'syz.2.542': attribute type 21 has an invalid length. [ 216.300623][ T8081] netlink: 164 bytes leftover after parsing attributes in process `syz.2.542'. [ 216.432903][ T8088] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.545'. [ 216.546355][ T8093] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.546'. [ 216.564204][ T8093] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 217.484810][ T8123] netlink: 'syz.3.554': attribute type 10 has an invalid length. [ 218.032268][ T8133] netlink: 'syz.4.556': attribute type 21 has an invalid length. [ 218.051121][ T8133] netlink: 156 bytes leftover after parsing attributes in process `syz.4.556'. [ 218.611439][ T8138] sit0: entered allmulticast mode [ 218.843273][ T8149] sit0: entered promiscuous mode [ 219.297790][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 219.422760][ T8156] netlink: 'syz.4.563': attribute type 41 has an invalid length. [ 219.459962][ T8156] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.563'. [ 219.888987][ T8173] netlink: 156 bytes leftover after parsing attributes in process `syz.4.568'. [ 219.915863][ T8173] netlink: 'syz.4.568': attribute type 2 has an invalid length. [ 219.930801][ T8173] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.568'. [ 219.936541][ T8168] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.565'. [ 219.966426][ T8167] netlink: 'syz.3.565': attribute type 10 has an invalid length. [ 219.980661][ T8167] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 219.999339][ T8167] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.037700][ T8167] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 222.094815][ T8220] __nla_validate_parse: 4 callbacks suppressed [ 222.094835][ T8220] netlink: 60 bytes leftover after parsing attributes in process `syz.3.579'. [ 224.667172][ T8220] netlink: 60 bytes leftover after parsing attributes in process `syz.3.579'. [ 224.681029][ T8225] netlink: 'syz.0.580': attribute type 30 has an invalid length. [ 224.823946][ T8223] netlink: 60 bytes leftover after parsing attributes in process `syz.3.579'. [ 225.736588][ T8258] Dead loop on virtual device ip6_vti0, fix it urgently! [ 225.871318][ T8262] netlink: 128 bytes leftover after parsing attributes in process `syz.4.590'. [ 225.901295][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.103453][ T8268] netlink: 'syz.4.592': attribute type 21 has an invalid length. [ 226.132114][ T8268] netlink: 'syz.4.592': attribute type 20 has an invalid length. [ 226.254308][ T8270] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.593'. [ 226.484589][ T8275] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.595'. [ 226.493356][ T8276] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.594'. [ 226.849176][ T8290] netlink: 'syz.3.599': attribute type 10 has an invalid length. [ 226.977243][ T8290] bridge0: port 3(team0) entered disabled state [ 226.984145][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.009823][ T8298] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.601'. [ 227.123410][ T8290] bridge0: port 3(team0) entered blocking state [ 227.129937][ T8290] bridge0: port 3(team0) entered forwarding state [ 227.136794][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.144088][ T8290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.166761][ T8290] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 228.349689][ T8319] sit0: left promiscuous mode [ 228.841373][ T8322] veth1_vlan: entered allmulticast mode [ 229.387380][ T8348] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 229.410832][ T8352] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.616'. [ 229.431597][ T8348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.615'. [ 230.154718][ T8367] netlink: 'syz.2.622': attribute type 4 has an invalid length. [ 230.162662][ T8367] netlink: 168 bytes leftover after parsing attributes in process `syz.2.622'. [ 230.638115][ T8387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.628'. [ 231.180264][ T8400] sctp: [Deprecated]: syz.3.632 (pid 8400) Use of int in maxseg socket option. [ 231.180264][ T8400] Use struct sctp_assoc_value instead [ 232.160986][ T8432] netlink: 'syz.0.641': attribute type 21 has an invalid length. [ 232.181870][ T8432] netlink: 'syz.0.641': attribute type 15 has an invalid length. [ 232.388305][ T8440] netlink: 'syz.4.645': attribute type 3 has an invalid length. [ 232.404184][ T8440] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.645'. [ 233.145884][ T8467] netlink: 'syz.0.650': attribute type 1 has an invalid length. [ 233.187422][ T8467] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.650'. [ 233.262998][ T8472] netlink: 'syz.2.653': attribute type 10 has an invalid length. [ 233.285891][ T8472] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.653'. [ 233.630123][ T8476] netlink: 'syz.4.655': attribute type 10 has an invalid length. [ 233.662477][ T8476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.655'. [ 233.887358][ T8482] netlink: 196 bytes leftover after parsing attributes in process `syz.0.656'. [ 234.639634][ T8511] netlink: 'syz.4.664': attribute type 3 has an invalid length. [ 234.669584][ T8511] netlink: 132 bytes leftover after parsing attributes in process `syz.4.664'. [ 234.885640][ T8521] netlink: 627 bytes leftover after parsing attributes in process `syz.2.667'. [ 234.909082][ T8526] netlink: 'syz.0.669': attribute type 21 has an invalid length. [ 234.959139][ T8526] netlink: 164 bytes leftover after parsing attributes in process `syz.0.669'. [ 235.250021][ T8537] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.673'. [ 235.271089][ T8537] -1: renamed from syzkaller0 [ 236.177041][ T8542] syzkaller0: entered promiscuous mode [ 236.243376][ T8542] syzkaller0: entered allmulticast mode [ 236.318514][ T8556] netlink: 'syz.0.675': attribute type 4 has an invalid length. [ 236.347351][ T8556] netlink: 156 bytes leftover after parsing attributes in process `syz.0.675'. [ 236.382309][ T8556] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 237.657040][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 240.531345][ T8602] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.690'. [ 240.570913][ T8607] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 240.642998][ T8607] netlink: 156 bytes leftover after parsing attributes in process `syz.0.692'. [ 242.797236][ T8640] netlink: 'syz.2.703': attribute type 2 has an invalid length. [ 245.240672][ T8669] netlink: 'syz.3.709': attribute type 2 has an invalid length. [ 245.264735][ T8669] netlink: 'syz.3.709': attribute type 11 has an invalid length. [ 245.287927][ T8669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.709'. [ 247.087988][ T8739] tap0: tun_chr_ioctl cmd 2147767507 [ 247.197488][ T8738] TCP: TCP_TX_DELAY enabled [ 247.962276][ T8753] netlink: 'syz.0.728': attribute type 10 has an invalid length. [ 248.144504][ T8753] bridge0: port 3(team0) entered disabled state [ 248.151630][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.159812][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.236675][ T8753] bridge0: port 3(team0) entered blocking state [ 248.243267][ T8753] bridge0: port 3(team0) entered forwarding state [ 248.250307][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.257841][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.265632][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.273066][ T8753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.306998][ T8753] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 249.183783][ T8781] syz.4.736[8781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.184300][ T8781] syz.4.736[8781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.361140][ T8784] delete_channel: no stack [ 249.546124][ T8793] syz.0.739[8793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.546416][ T8793] syz.0.739[8793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.592636][ T8791] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.740'. [ 249.766121][ T8793] netlink: 'syz.0.739': attribute type 21 has an invalid length. [ 249.801782][ T8793] netlink: 132 bytes leftover after parsing attributes in process `syz.0.739'. [ 249.824854][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.739'. [ 250.039848][ T8804] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.745'. [ 250.345291][ T8815] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.749'. [ 250.721214][ T8827] netlink: 188 bytes leftover after parsing attributes in process `syz.2.754'. [ 251.270080][ T8846] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 251.303000][ T8846] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.760'. [ 252.459731][ T8857] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.765'. [ 252.546817][ T8859] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.762'. [ 252.603040][ T8859] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 252.981687][ T8872] netlink: 60 bytes leftover after parsing attributes in process `syz.2.768'. [ 254.069819][ T8888] netlink: 'syz.3.776': attribute type 39 has an invalid length. [ 254.437366][ T8907] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 254.677070][ T8909] __nla_validate_parse: 6 callbacks suppressed [ 254.677125][ T8909] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.782'. [ 254.690768][ T8904] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 255.220057][ T8935] netlink: 'syz.0.789': attribute type 13 has an invalid length. [ 255.228544][ T8935] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.789'. [ 256.057334][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.065486][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.149904][ T8961] netlink: 'syz.3.795': attribute type 3 has an invalid length. [ 258.164129][ T8961] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.795'. [ 258.179001][ T8961] syzkaller0: entered promiscuous mode [ 258.187566][ T8961] syzkaller0: entered allmulticast mode [ 260.045838][ T8999] netlink: 'syz.2.809': attribute type 29 has an invalid length. [ 260.247439][ T8997] syzkaller0: entered promiscuous mode [ 260.256679][ T8997] syzkaller0: entered allmulticast mode [ 260.289731][ T8999] netlink: 'syz.2.809': attribute type 29 has an invalid length. [ 260.312186][ T9002] netlink: 'syz.2.809': attribute type 21 has an invalid length. [ 260.320691][ T9002] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.350327][ T9002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.357747][ T9002] IPv6: NLM_F_CREATE should be set when creating new route [ 260.365239][ T9002] IPv6: NLM_F_CREATE should be set when creating new route [ 260.372632][ T9002] IPv6: NLM_F_CREATE should be set when creating new route [ 263.218996][ T9009] netlink: 'syz.0.811': attribute type 10 has an invalid length. [ 263.228875][ T9009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.811'. [ 263.418475][ T9025] netlink: 'syz.3.815': attribute type 10 has an invalid length. [ 263.491419][ T9025] netlink: 'syz.3.815': attribute type 3 has an invalid length. [ 263.509552][ T9025] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 263.533337][ T9025] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.815'. [ 263.560998][ T9027] netlink: 'syz.2.816': attribute type 4 has an invalid length. [ 263.570691][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 264.496159][ T9046] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.822'. [ 264.523409][ T9046] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 264.554676][ T9046] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 264.587234][ T9047] netlink: 'syz.2.822': attribute type 17 has an invalid length. [ 264.602017][ T9047] netlink: 152 bytes leftover after parsing attributes in process `syz.2.822'. [ 264.656142][ T9047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.334622][ T9062] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.827'. [ 265.407248][ T9065] netlink: 'syz.0.827': attribute type 15 has an invalid length. [ 265.421230][ T9065] netlink: 'syz.0.827': attribute type 7 has an invalid length. [ 265.612767][ T9070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.828'. [ 265.891128][ T9056] delete_channel: no stack [ 266.436072][ T6469] tipc: Subscription rejected, illegal request [ 266.812201][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.823193][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.832779][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.846552][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.892010][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 266.900084][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.031877][ T5775] Bluetooth: hci0: command tx timeout [ 269.450358][ T9099] netlink: 'syz.2.837': attribute type 21 has an invalid length. [ 269.458505][ T9099] netlink: 168 bytes leftover after parsing attributes in process `syz.2.837'. [ 269.739345][ T9093] chnl_net:caif_netlink_parms(): no params data found [ 269.990202][ T9093] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.004453][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.012410][ T9093] bridge_slave_0: entered allmulticast mode [ 270.020205][ T9093] bridge_slave_0: entered promiscuous mode [ 270.036371][ T9124] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.843'. [ 270.046611][ T9117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.841'. [ 270.069653][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.081087][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.095099][ T9093] bridge_slave_1: entered allmulticast mode [ 270.112977][ T9093] bridge_slave_1: entered promiscuous mode [ 270.121684][ T9125] netlink: 'syz.2.841': attribute type 10 has an invalid length. [ 270.147735][ T9125] netlink: 55 bytes leftover after parsing attributes in process `syz.2.841'. [ 270.362695][ T9131] netlink: 10 bytes leftover after parsing attributes in process `syz.3.845'. [ 270.404299][ T9127] netlink: 'syz.0.844': attribute type 29 has an invalid length. [ 270.556494][ T9127] netlink: 'syz.0.844': attribute type 29 has an invalid length. [ 270.580369][ T9093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.597441][ T9093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.676216][ T9093] team0: Port device team_slave_0 added [ 270.695349][ T9093] team0: Port device team_slave_1 added [ 270.761620][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.805366][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.876138][ T9093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.904430][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.929925][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.989705][ T9093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.085425][ T9093] hsr_slave_0: entered promiscuous mode [ 271.092406][ T5775] Bluetooth: hci0: command tx timeout [ 271.112871][ T9093] hsr_slave_1: entered promiscuous mode [ 271.114025][ T9143] netlink: 'syz.2.849': attribute type 29 has an invalid length. [ 271.132255][ T9093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.140054][ T9093] Cannot create hsr debugfs directory [ 271.195589][ T9143] netlink: 'syz.2.849': attribute type 29 has an invalid length. [ 271.228782][ T9141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.463684][ T9153] netlink: 'syz.3.851': attribute type 21 has an invalid length. [ 271.752957][ T9155] netlink: 68 bytes leftover after parsing attributes in process `syz.2.853'. [ 272.018256][ T9093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.096697][ T9093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.227295][ T9093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.264359][ T9093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.488678][ T9174] netlink: 'syz.2.858': attribute type 21 has an invalid length. [ 272.554645][ T9172] netlink: 128 bytes leftover after parsing attributes in process `syz.3.859'. [ 272.570450][ T9172] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 272.651004][ T9093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.726684][ T9093] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.803506][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.810826][ T4181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.901081][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.908387][ T4181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.172463][ T5775] Bluetooth: hci0: command tx timeout [ 273.990968][ T9093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.090698][ T9093] veth0_vlan: entered promiscuous mode [ 275.158329][ T9093] veth1_vlan: entered promiscuous mode [ 275.253075][ T5775] Bluetooth: hci0: command tx timeout [ 275.328606][ T9093] veth0_macvtap: entered promiscuous mode [ 275.753672][ T9093] veth1_macvtap: entered promiscuous mode [ 276.342548][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.391664][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.432576][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.451174][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.471699][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.495577][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.538952][ T9093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.615785][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.663627][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.690284][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.714377][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.737997][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.784570][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.806721][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.821854][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.837868][ T9093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.860825][ T9093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.870489][ T9093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.880267][ T9093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.890184][ T9093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.142528][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.150524][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.319998][ T6460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.362673][ T6460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.495983][ T9233] netlink: 'syz.3.870': attribute type 19 has an invalid length. [ 277.544748][ T9233] netlink: 172 bytes leftover after parsing attributes in process `syz.3.870'. [ 278.056538][ T9245] netlink: 'syz.0.871': attribute type 10 has an invalid length. [ 278.133301][ T9235] netlink: 'syz.0.871': attribute type 3 has an invalid length. [ 278.149652][ T9245] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 278.183821][ T9245] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 278.186760][ T9235] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.871'. [ 278.205953][ T9245] team0: Port device wlan1 added [ 278.227850][ T9247] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.873'. [ 278.292097][ T9247] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.873'. [ 278.345728][ T9247] netlink: 'syz.2.873': attribute type 1 has an invalid length. [ 278.372772][ T9247] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.873'. [ 278.626552][ T9251] netlink: 'syz.3.875': attribute type 13 has an invalid length. [ 278.630805][ T9253] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.876'. [ 278.675561][ T9251] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.875'. [ 280.484799][ T9270] netlink: 132 bytes leftover after parsing attributes in process `syz.3.879'. [ 280.673201][ T9272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.879'. [ 280.721112][ T9272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.879'. [ 281.186892][ T9290] netlink: 'syz.2.885': attribute type 3 has an invalid length. [ 281.372800][ T9285] netlink: 'syz.2.885': attribute type 10 has an invalid length. [ 281.669266][ T9285] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 281.687237][ T9285] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 281.758773][ T9285] team0: Port device wlan1 added [ 283.327981][ T9315] __nla_validate_parse: 2 callbacks suppressed [ 283.328018][ T9315] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.895'. [ 283.558203][ T9316] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.895'. [ 284.375970][ T9335] netlink: 'syz.0.900': attribute type 29 has an invalid length. [ 285.233527][ T9335] netlink: 'syz.0.900': attribute type 29 has an invalid length. [ 285.646846][ T9351] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 285.667907][ T9351] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 285.702255][ T9351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.904'. [ 288.648468][ T9354] netlink: 'syz.2.904': attribute type 10 has an invalid length. [ 288.656680][ T9354] netlink: 168 bytes leftover after parsing attributes in process `syz.2.904'. [ 288.670103][ T9353] netlink: 'syz.5.905': attribute type 21 has an invalid length. [ 288.692716][ T9353] netlink: 156 bytes leftover after parsing attributes in process `syz.5.905'. [ 288.810163][ T9361] sit0: entered allmulticast mode [ 288.844598][ T9363] sit0: entered promiscuous mode [ 289.174421][ T9381] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.912'. [ 289.190823][ T9381] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 289.505747][ T9385] netlink: 'syz.5.913': attribute type 10 has an invalid length. [ 289.542161][ T9385] netlink: 2 bytes leftover after parsing attributes in process `syz.5.913'. [ 289.599646][ T9385] batadv_slave_1: entered promiscuous mode [ 289.708954][ T9385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.911108][ T9385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.887088][ T9401] netlink: 'syz.5.917': attribute type 1 has an invalid length. [ 290.922285][ T9401] netlink: 'syz.5.917': attribute type 3 has an invalid length. [ 290.941383][ T9401] netlink: 132 bytes leftover after parsing attributes in process `syz.5.917'. [ 291.031459][ T9401] netlink: 'syz.5.917': attribute type 10 has an invalid length. [ 291.047263][ T9401] netlink: 168 bytes leftover after parsing attributes in process `syz.5.917'. [ 291.237870][ T9408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.920'. [ 291.255621][ T9408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.920'. [ 291.350526][ T9412] netlink: 60 bytes leftover after parsing attributes in process `syz.3.920'. [ 291.994468][ T9412] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 292.022400][ T9412] netlink: 'syz.3.920': attribute type 4 has an invalid length. [ 292.053923][ T9412] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.920'. [ 292.580160][ T9434] netlink: 'syz.3.928': attribute type 153 has an invalid length. [ 292.654053][ T9434] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 293.198489][ T9445] netlink: 'syz.2.932': attribute type 9 has an invalid length. [ 293.844563][ T9461] syzkaller0: entered promiscuous mode [ 293.850136][ T9461] syzkaller0: entered allmulticast mode [ 296.604474][ T9477] netlink: 'syz.2.939': attribute type 17 has an invalid length. [ 296.613134][ T9477] netlink: 'syz.2.939': attribute type 16 has an invalid length. [ 296.621113][ T9477] __nla_validate_parse: 6 callbacks suppressed [ 296.621129][ T9477] netlink: 152 bytes leftover after parsing attributes in process `syz.2.939'. [ 297.741936][ T9486] netlink: 'syz.2.941': attribute type 10 has an invalid length. [ 297.767606][ T9486] netlink: 2 bytes leftover after parsing attributes in process `syz.2.941'. [ 297.802140][ T9486] batadv_slave_1: entered promiscuous mode [ 297.808508][ T9486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.816978][ T9486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.245115][ T9521] netlink: 'syz.2.951': attribute type 21 has an invalid length. [ 301.277224][ T9521] netlink: 164 bytes leftover after parsing attributes in process `syz.2.951'. [ 301.315967][ T9522] netlink: 'syz.2.951': attribute type 19 has an invalid length. [ 303.334394][ T9549] netlink: 'syz.2.958': attribute type 27 has an invalid length. [ 303.362064][ T9549] netlink: 164 bytes leftover after parsing attributes in process `syz.2.958'. [ 303.551165][ T9551] netlink: 132 bytes leftover after parsing attributes in process `syz.5.959'. [ 303.837253][ T9555] delete_channel: no stack [ 305.452679][ T9578] syzkaller0: entered promiscuous mode [ 305.468659][ T9578] syzkaller0: entered allmulticast mode [ 307.073980][ T9592] mac80211_hwsim hwsim5 ..ãc¤±: renamed from wlan1 (while UP) [ 308.126810][ T9602] sit0: entered allmulticast mode [ 308.234830][ T9604] sit0: entered promiscuous mode [ 308.450076][ T9603] netlink: 160 bytes leftover after parsing attributes in process `syz.5.973'. [ 311.218234][ T9625] netlink: 'syz.2.976': attribute type 4 has an invalid length. [ 311.262531][ T9625] netlink: 152 bytes leftover after parsing attributes in process `syz.2.976'. [ 311.292228][ T9625] .`: renamed from bond0 (while UP) [ 311.744962][ T9629] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.978'. [ 313.150577][ T6460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.918197][ T6460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.806828][ T6460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.080606][ T9655] netlink: 'syz.5.986': attribute type 39 has an invalid length. [ 315.363748][ T9656] sit0: entered allmulticast mode [ 317.506838][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.513353][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.882269][ T9659] sit0: entered promiscuous mode [ 318.950826][ T6460] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.913898][ T9719] sit0: entered promiscuous mode [ 320.966683][ T9720] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.998'. [ 323.159832][ T9765] netlink: 'syz.2.1007': attribute type 3 has an invalid length. [ 323.222514][ T9767] netlink: 'syz.2.1007': attribute type 3 has an invalid length. [ 323.242453][ T9765] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1007'. [ 323.279392][ T9767] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1007'. [ 323.837570][ T6460] hsr_slave_0: left promiscuous mode [ 323.962131][ T6460] hsr_slave_1: left promiscuous mode [ 324.037832][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.048172][ T6460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.059087][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.073556][ T6460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.103723][ T6460] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 324.110867][ T6460] batman_adv: batadv0: Removing interface: virt_wifi0 [ 324.140094][ T6460] bridge_slave_1: left allmulticast mode [ 324.166344][ T6460] bridge_slave_1: left promiscuous mode [ 324.182685][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.274736][ T6460] bridge_slave_0: left allmulticast mode [ 324.280475][ T6460] bridge_slave_0: left promiscuous mode [ 324.314763][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.436042][ T6460] veth1_macvtap: left promiscuous mode [ 324.442214][ T6460] veth0_macvtap: left promiscuous mode [ 324.461097][ T6460] veth1_vlan: left promiscuous mode [ 326.200989][ T6460] team0 (unregistering): Port device team_slave_1 removed [ 326.280265][ T6460] team0 (unregistering): Port device team_slave_0 removed [ 326.355641][ T6460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.434032][ T6460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.019959][ T6460] bond0 (unregistering): Released all slaves [ 327.776386][ T9820] netlink: 'syz.3.1020': attribute type 39 has an invalid length. [ 329.609142][ T9840] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1023'. [ 330.082579][ T9859] syzkaller0: entered promiscuous mode [ 330.088165][ T9859] syzkaller0: entered allmulticast mode [ 330.534957][ T9870] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1028'. [ 330.738409][ T9877] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 330.757959][ T9876] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 334.522266][ T9940] netlink: 'syz.2.1032': attribute type 9 has an invalid length. [ 334.552119][ T9940] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1032'. [ 335.494078][ T9947] netlink: 'syz.2.1032': attribute type 9 has an invalid length. [ 335.542845][ T9947] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1032'. [ 336.617083][ T9990] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 337.039812][T10006] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1045'. [ 337.185581][T10014] netlink: 'syz.2.1046': attribute type 10 has an invalid length. [ 337.288915][T10014] team0: left promiscuous mode [ 337.315214][T10014] team_slave_0: left promiscuous mode [ 337.336285][T10012] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1047'. [ 337.352632][T10014] team_slave_1: left promiscuous mode [ 337.373296][T10014] mac80211_hwsim hwsim5 ..ãc¤±: left promiscuous mode [ 337.415677][T10014] team0: left allmulticast mode [ 337.420691][T10014] team_slave_0: left allmulticast mode [ 337.452137][T10014] team_slave_1: left allmulticast mode [ 337.458027][T10014] mac80211_hwsim hwsim5 ..ãc¤±: left allmulticast mode [ 337.543597][T10014] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.579856][T10014] .`: (slave team0): Enslaving as an active interface with an up link [ 337.594715][T10012] netlink: 8454 bytes leftover after parsing attributes in process `syz.0.1047'. [ 339.342635][T10064] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.1057'. [ 340.033997][T10074] netlink: 'syz.2.1060': attribute type 13 has an invalid length. [ 340.061854][T10074] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1060'. [ 340.095824][T10074] erspan0: refused to change device tx_queue_len [ 341.156794][T10091] netlink: 'syz.2.1066': attribute type 3 has an invalid length. [ 342.085685][T10099] syzkaller0: entered promiscuous mode [ 342.135136][T10099] syzkaller0: entered allmulticast mode [ 342.157780][T10105] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1070'. [ 343.082975][T10117] netlink: 'syz.0.1073': attribute type 9 has an invalid length. [ 343.090942][T10117] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1073'. [ 344.835191][T10124] netlink: 'syz.0.1073': attribute type 9 has an invalid length. [ 344.872297][T10124] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1073'. [ 348.097745][T10177] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1083'. [ 348.624686][T10192] netlink: 'syz.0.1085': attribute type 9 has an invalid length. [ 348.691668][T10192] netlink: 207364 bytes leftover after parsing attributes in process `syz.0.1085'. [ 348.934026][T10195] netlink: 'syz.0.1085': attribute type 9 has an invalid length. [ 348.952196][T10195] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1085'. [ 350.101857][T10216] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1089'. [ 350.596409][T10232] syzkaller0: entered promiscuous mode [ 350.611238][T10232] syzkaller0: entered allmulticast mode [ 350.818521][T10242] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1095'. [ 352.102415][T10288] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1107'. [ 354.157976][T10267] netlink: 'syz.0.1100': attribute type 10 has an invalid length. [ 354.166850][T10267] syz_tun: entered promiscuous mode [ 354.189721][T10267] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 354.213349][T10293] netlink: 'syz.3.1107': attribute type 15 has an invalid length. [ 354.227272][T10293] netlink: 'syz.3.1107': attribute type 7 has an invalid length. [ 354.271528][T10300] netlink: 64923 bytes leftover after parsing attributes in process `syz.2.1108'. [ 354.651123][T10322] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1112'. [ 355.664539][T10328] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1113'. [ 355.704165][T10328] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 356.501028][T10345] netlink: 'syz.3.1116': attribute type 2 has an invalid length. [ 356.582052][T10345] netlink: 'syz.3.1116': attribute type 8 has an invalid length. [ 356.648096][T10345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1116'. [ 360.918163][T10385] netlink: 'syz.5.1121': attribute type 10 has an invalid length. [ 360.951932][T10385] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1121'. [ 365.451055][T10480] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1146'. [ 368.251014][ T5775] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 370.533229][T10580] netlink: 'syz.5.1175': attribute type 5 has an invalid length. [ 370.956214][T10583] netlink: 'syz.3.1178': attribute type 29 has an invalid length. [ 371.142257][T10583] netlink: 'syz.3.1178': attribute type 16 has an invalid length. [ 371.150180][T10583] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1178'. [ 371.484726][T10593] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1181'. [ 371.494122][T10593] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1181'. [ 371.505110][T10593] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1181'. [ 372.837930][T10622] netlink: 'syz.5.1192': attribute type 10 has an invalid length. [ 373.819993][ T5775] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 374.534554][T10686] syzkaller0: entered promiscuous mode [ 374.540142][T10686] syzkaller0: entered allmulticast mode [ 374.551826][T10688] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1222'. [ 378.970345][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.976872][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.435372][T10707] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1227'. [ 380.451382][T10707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.605114][T10730] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1237'. [ 380.679834][T10730] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1237'. [ 380.759220][T10733] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1237'. [ 380.833483][T10730] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1237'. [ 383.056351][T10774] syzkaller0: entered promiscuous mode [ 383.074850][T10774] syzkaller0: entered allmulticast mode [ 386.622839][T10821] syzkaller0: entered promiscuous mode [ 386.632066][T10821] syzkaller0: entered allmulticast mode [ 386.756318][T10836] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1281'. [ 389.650912][T10868] netlink: 'syz.5.1295': attribute type 10 has an invalid length. [ 390.597033][T10868] bond0: (slave veth1_to_batadv): Enslaving as an active interface with an up link [ 391.253695][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 393.143391][T10934] netlink: 2759 bytes leftover after parsing attributes in process `syz.3.1324'. [ 393.620304][ T5775] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 393.620343][ T5775] Bluetooth: unknown link type 131 [ 393.633932][ T5775] Bluetooth: hci1: connection err: -111 [ 394.142449][T10961] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1336'. [ 394.474799][T10973] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1343'. [ 394.523567][T10976] netlink: 'syz.2.1342': attribute type 4 has an invalid length. [ 394.557840][T10976] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1342'. [ 394.683302][T10976] ..ãc¤±: mtu less than device minimum [ 394.710245][T10976] team0: Device ..ãc¤± failed to change mtu [ 394.941971][ T29] INFO: task syz.4.757:8838 blocked for more than 143 seconds. [ 394.989351][ T29] Not tainted syzkaller #0 [ 394.999290][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.018679][ T29] task:syz.4.757 state:D stack:26248 pid:8838 ppid:6011 flags:0x00004002 [ 395.037397][ T29] Call Trace: [ 395.055553][ T29] [ 395.066950][ T29] __schedule+0x15ae/0x4660 [ 395.085231][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 395.104129][ T29] ? asan.module_dtor+0x20/0x20 [ 395.118853][ T29] ? trace_contention_end+0x39/0xe0 [ 395.131801][ T29] ? task_work_cancel+0xa5/0x220 [ 395.144095][ T29] ? task_work_cancel_func+0x210/0x210 [ 395.156633][ T29] schedule+0xbd/0x170 [ 395.161009][ T29] ? _free_event+0x10d/0xfb0 [ 395.166667][ T29] _free_event+0x176/0xfb0 [ 395.171394][ T29] perf_event_release_kernel+0x7c8/0x850 [ 395.178067][ T29] ? __might_sleep+0xe0/0xe0 [ 395.183241][ T29] ? calc_timer_values+0x400/0x400 [ 395.194530][ T29] ? perf_mmap+0x15e0/0x15e0 [ 395.199513][ T29] perf_release+0x3b/0x40 [ 395.206143][ T29] __fput+0x221/0x940 [ 395.210742][ T29] task_work_run+0x1d4/0x260 [ 395.220391][ T29] ? task_work_cancel+0x220/0x220 [ 395.227542][ T29] do_exit+0x986/0x2530 [ 395.241599][ T29] ? put_task_struct+0xc0/0xc0 [ 395.254290][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 395.290948][ T29] ? get_signal+0x100e/0x1390 [ 395.295958][ T29] ? lock_chain_count+0x20/0x20 [ 395.301255][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 395.309042][ T29] do_group_exit+0x22d/0x2f0 [ 395.314229][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 395.319678][ T29] get_signal+0x12a6/0x1390 [ 395.324621][ T29] arch_do_signal_or_restart+0xc2/0x7b0 [ 395.330421][ T29] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 395.339554][ T29] ? get_sigframe_size+0x20/0x20 [ 395.349449][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 395.356862][ T29] exit_to_user_mode_loop+0x70/0x110 [ 395.366897][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 395.376536][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 395.387778][ T29] do_syscall_64+0x61/0xb0 [ 395.392971][ T29] ? clear_bhb_loop+0x40/0x90 [ 395.397952][ T29] ? clear_bhb_loop+0x40/0x90 [ 395.408170][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.417217][ T29] RIP: 0033:0x7fcb3b99de99 [ 395.427739][ T29] RSP: 002b:00007fcb3c82d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 395.438491][ T29] RAX: 0000000000000024 RBX: 00007fcb3bc25fa0 RCX: 00007fcb3b99de99 [ 395.451563][ T29] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 395.466609][ T29] RBP: 00007fcb3ba33eaf R08: 0000000000000002 R09: 0000000000000000 [ 395.477011][ T29] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 395.495316][ T29] R13: 00007fcb3bc26038 R14: 00007fcb3bc25fa0 R15: 00007ffe7afbcbd8 [ 395.505120][ T29] [ 395.508453][ T29] [ 395.508453][ T29] Showing all locks held in the system: [ 395.517200][ T29] 1 lock held by rcu_tasks_trace/15: [ 395.523046][ T29] #0: ffffffff8d132ad0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xb11/0xdf0 [ 395.537037][ T29] 1 lock held by khungtaskd/29: [ 395.542333][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 395.553201][ T29] 2 locks held by getty/5528: [ 395.558199][ T29] #0: ffff88803100a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 395.577544][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 395.591088][ T29] 2 locks held by kworker/0:3/5762: [ 395.600820][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 395.620873][ T29] #1: ffffc900044cfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 395.638893][ T29] 3 locks held by kworker/0:5/5817: [ 395.646817][ T29] 1 lock held by syz.2.1327/10950: [ 395.656898][ T29] 2 locks held by syz.3.1345/10979: [ 395.665643][ T29] #0: ffffffff8d187ee8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 395.679763][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 395.696456][ T29] [ 395.698960][ T29] ============================================= [ 395.698960][ T29] [ 395.731567][ T29] NMI backtrace for cpu 1 [ 395.735968][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 395.743209][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.753303][ T29] Call Trace: [ 395.756626][ T29] [ 395.759591][ T29] dump_stack_lvl+0x18c/0x250 [ 395.764319][ T29] ? __wake_up_klogd+0xd9/0x100 [ 395.769210][ T29] ? show_regs_print_info+0x20/0x20 [ 395.774456][ T29] ? load_image+0x420/0x420 [ 395.779018][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 395.784009][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 395.790207][ T29] ? load_image+0x420/0x420 [ 395.794838][ T29] ? wq_watchdog_touch+0xef/0x170 [ 395.800093][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 395.806251][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 395.812371][ T29] watchdog+0xf59/0xfa0 [ 395.816594][ T29] ? watchdog+0x1e1/0xfa0 [ 395.821153][ T29] kthread+0x2fa/0x390 [ 395.825351][ T29] ? hungtask_pm_notify+0x50/0x50 [ 395.830519][ T29] ? kthread_blkcg+0xd0/0xd0 [ 395.835289][ T29] ret_from_fork+0x48/0x80 [ 395.839761][ T29] ? kthread_blkcg+0xd0/0xd0 [ 395.844509][ T29] ret_from_fork_asm+0x11/0x20 [ 395.849355][ T29] [ 395.853739][ T29] Sending NMI from CPU 1 to CPUs 0: [ 395.859028][ C0] NMI backtrace for cpu 0 [ 395.859040][ C0] CPU: 0 PID: 6465 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 395.859056][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.859064][ C0] Workqueue: events_unbound toggle_allocation_gate [ 395.859092][ C0] RIP: 0010:walk_to_pmd+0x107/0x240 [ 395.859138][ C0] Code: 74 08 4c 89 ff e8 c9 c2 15 00 49 8b 2f 48 89 ee 48 83 e6 9f 31 ff e8 18 4f bd ff 48 83 e5 9f 0f 84 e3 00 00 00 e8 c9 4a bd ff <43> 80 3c 2c 00 74 08 4c 89 ff e8 9a c2 15 00 4d 8b 37 48 b8 00 f0 [ 395.859150][ C0] RSP: 0018:ffffc90005107770 EFLAGS: 00000293 [ 395.859162][ C0] RAX: ffffffff81c99aa7 RBX: 00002aaaaaaab000 RCX: ffff888069f03c00 [ 395.859174][ C0] RDX: 0000000000000000 RSI: 0000000017c65007 RDI: 0000000000000000 [ 395.859183][ C0] RBP: 0000000017c65007 R08: ffffea0000077a07 R09: 1ffffd400000ef40 [ 395.859193][ C0] R10: dffffc0000000000 R11: fffff9400000ef41 R12: 1ffff11002f8c8aa [ 395.859203][ C0] R13: dffffc0000000000 R14: ffff888017c68000 R15: ffff888017c64550 [ 395.859214][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 395.859226][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.859236][ C0] CR2: 00007ff3795eb158 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 395.859250][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300 [ 395.859260][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 395.859269][ C0] Call Trace: [ 395.859276][ C0] [ 395.859283][ C0] ? kmem_cache_alloc_lru+0x59/0x2b0 [ 395.859305][ C0] __get_locked_pte+0x27/0xc0 [ 395.859325][ C0] ? kmem_cache_alloc_lru+0x59/0x2b0 [ 395.859344][ C0] __text_poke+0x2a4/0xb40 [ 395.859360][ C0] ? kmem_cache_alloc+0x66/0x2c0 [ 395.859380][ C0] ? __text_poke+0xb40/0xb40 [ 395.859396][ C0] ? text_poke+0xc0/0xc0 [ 395.859409][ C0] ? __mutex_trylock_common+0x160/0x270 [ 395.859424][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 395.859444][ C0] text_poke_bp_batch+0x7b3/0x980 [ 395.859463][ C0] ? kmem_cache_alloc_bulk+0x12b/0x5a0 [ 395.859482][ C0] ? text_poke_loc_init+0x7c0/0x7c0 [ 395.859497][ C0] ? text_poke_queue+0x134/0x190 [ 395.859517][ C0] ? arch_jump_label_transform_queue+0xd9/0x100 [ 395.859539][ C0] ? __jump_label_update+0x39a/0x3c0 [ 395.859560][ C0] text_poke_finish+0x30/0x50 [ 395.859575][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 395.859595][ C0] static_key_enable_cpuslocked+0x123/0x240 [ 395.859614][ C0] static_key_enable+0x1a/0x20 [ 395.859630][ C0] ? process_scheduled_works+0x975/0x1600 [ 395.859648][ C0] toggle_allocation_gate+0xa8/0x260 [ 395.859668][ C0] ? show_object+0x70/0x70 [ 395.859686][ C0] ? read_lock_is_recursive+0x20/0x20 [ 395.859706][ C0] ? process_scheduled_works+0x975/0x1600 [ 395.859722][ C0] ? process_scheduled_works+0x975/0x1600 [ 395.859740][ C0] process_scheduled_works+0xa60/0x1600 [ 395.859771][ C0] ? worker_attach_to_pool+0x370/0x370 [ 395.859791][ C0] ? assign_work+0x3cc/0x5d0 [ 395.859810][ C0] worker_thread+0xa5e/0xfe0 [ 395.859839][ C0] kthread+0x2fa/0x390 [ 395.859853][ C0] ? pr_cont_work+0x550/0x550 [ 395.859869][ C0] ? kthread_blkcg+0xd0/0xd0 [ 395.859884][ C0] ret_from_fork+0x48/0x80 [ 395.859900][ C0] ? kthread_blkcg+0xd0/0xd0 [ 395.859914][ C0] ret_from_fork_asm+0x11/0x20 [ 395.859940][ C0] [ 395.882416][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 395.882431][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 395.882450][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.882461][ T29] Call Trace: [ 395.882468][ T29] [ 395.882475][ T29] dump_stack_lvl+0x18c/0x250 [ 395.882510][ T29] ? show_regs_print_info+0x20/0x20 [ 395.882536][ T29] ? load_image+0x420/0x420 [ 395.882571][ T29] panic+0x2ca/0x720 [ 395.882596][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 395.882616][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 395.882639][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 395.882664][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 395.882690][ T29] watchdog+0xf98/0xfa0 [ 395.882713][ T29] ? watchdog+0x1e1/0xfa0 [ 395.882741][ T29] kthread+0x2fa/0x390 [ 395.882757][ T29] ? hungtask_pm_notify+0x50/0x50 [ 395.882780][ T29] ? kthread_blkcg+0xd0/0xd0 [ 395.882797][ T29] ret_from_fork+0x48/0x80 [ 395.882816][ T29] ? kthread_blkcg+0xd0/0xd0 [ 395.882834][ T29] ret_from_fork_asm+0x11/0x20 [ 395.882868][ T29] [ 395.889078][ T29] Kernel Offset: disabled [ 396.301752][ T29] Rebooting in 86400 seconds..