last executing test programs: 21.202850969s ago: executing program 3 (id=4283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000600"], 0x48) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="180000003f000b05d25a601037153e3704021680fc0b0900", 0x18}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r6, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) 20.654949344s ago: executing program 4 (id=4285): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000700000000800000"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848480000005e140602000006020e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x65580000}, 0x0) 20.199935536s ago: executing program 2 (id=4286): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x80}, 0x8) socket$kcm(0x2, 0xf, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x10001, @local}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000ac0), 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)="390000001c0281ae0000dc676f978374750a8e360287ffffffffff05210187015419eeae0eed035f2a3448206735ff946fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x48}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e145802000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x40004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={0x0, &(0x7f0000001bc0)=""/1, 0x0, 0x1, 0x1, 0x0, 0x10000}, 0x28) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000020c0)={0xffffffffffffffff, &(0x7f0000000a00)="dbacd008b37d3756c82a597664", &(0x7f0000002000)=""/145}, 0x20) r5 = socket$kcm(0x29, 0x5, 0x0) recvmsg(r5, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000880)=""/76, 0x4c}, {&(0x7f0000001e40)=""/116, 0x74}], 0x2, &(0x7f0000001f00)=""/130, 0x82}, 0x0) 19.933772453s ago: executing program 3 (id=4288): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000600"], 0x48) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="180000003f000b05d25a601037153e3704021680fc0b0900", 0x18}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.787054337s ago: executing program 0 (id=4289): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x80000001, 0x8, 0x7f, 0x51410, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x3, @void, @value, @value=r2}, 0x50) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_procs(r6, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_pid(r9, &(0x7f0000000300)=r8, 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x40005000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 19.738769378s ago: executing program 4 (id=4290): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1, 0x0, 0xf00}, 0x0) 19.430414017s ago: executing program 4 (id=4291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200008c0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x10) close(r1) 19.30611499s ago: executing program 1 (id=4292): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40011) r0 = socket$kcm(0x10, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) recvmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 19.30309002s ago: executing program 3 (id=4293): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0xffffff7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10, 0xc8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81020329080000000000f5000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 19.091096636s ago: executing program 2 (id=4294): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000020000000000000000400000003000000000000001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 18.946418239s ago: executing program 3 (id=4295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000600"], 0x48) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="180000003f000b05d25a601037153e3704021680fc0b0900", 0x18}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r6, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) 18.93871717s ago: executing program 4 (id=4296): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x6}, {0x74, 0x40}, {0x6, 0x0, 0x0, 0x2}]}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x19, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000007000000000000000200000018260000", @ANYRES32=r0, @ANYBLOB="00000000434da0454a9b2db45a030000001838000002000000000000", @ANYRES32=r0, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000f0b0085000000060000001834000003000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="00000000ff03000018300000010000000000000000000000180000000300000000000000080000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x5, 0x63, &(0x7f0000000580)=""/99, 0x41000, 0x41, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000600)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x2, 0xc, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{0x2, 0x5, 0x10, 0x2}, {0x1, 0x4, 0x8, 0xb}, {0x4, 0x5, 0xc, 0xc}, {0x2, 0x2, 0xf, 0x8}], 0x10, 0x8}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r7, 0x83c7466fff36e62f, 0x0, 0x3, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000240)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="344be455dd5abead2dd07088843b4ca381a36adee0212fdc59338d8402b2878bb31552ffcee5a436b4cdb4884197c18659c3fcd24ac642245454fdb0", @ANYRES32=0x0, @ANYRES64=r8], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="dccb6c3782f1d7cbff92dc65acfd38246764627bfb8c247266875e7d6120176f73b3f0bdb384a3d93a186b005b6b0c19ac355cf360f6956e10b674543a2050f33cb087c3171de168d069e0fa28378ca17cf1a5ce149cd74d347710421177f8cdc760c3bb525c468d29d3aeb1dee66a2692da99f698e58a021728ed69c14f26dae0662af3b52fbbff1049", @ANYRES64=r8], 0x20) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)={@cgroup=r9, 0xffffffffffffffff, 0x23, 0x2014, r3, @value=r10, @void, @void, @void, r8}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1d, 0x4, 0x700, 0x116, 0x54448, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000003, 0x3, 0x4}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000006000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000e000000bf09000000000000550901000074f6967d00000000000000180100002020709000000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.847204942s ago: executing program 2 (id=4297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x80000, 0x0, 0x0, 0x11}, 0x80) 18.635704388s ago: executing program 2 (id=4298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000600"], 0x48) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="180000003f000b05d25a601037153e3704021680fc0b0900", 0x18}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r6, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) 18.620440099s ago: executing program 0 (id=4299): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r2 = syz_clone(0x24050000, &(0x7f0000000380)="92c5eddcfb6665bd6ccad93905456dd3832c8621062ea7d377cd07e4bd254a76ebe45e3f2bd071a6b717b625e378ad7e429241acb14f6d2543c25bfad788947a4b80d0821c107e0d4149b6cd39c7bc1475aff9d546d48755479b76e20d5648a940fc98ca4999c0e0181205d6d9aeae83b8905465247c80b3198e4367ec92637199d42c99995823f2984f3bdec6a5f4eb8459", 0x92, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000580)) perf_event_open(0x0, r2, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000800000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x230, &(0x7f0000002500)=""/4106, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x4a) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) 18.430561444s ago: executing program 1 (id=4300): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000700000000800000"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848480000005e140602000006020e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x65580000}, 0x0) 18.077492343s ago: executing program 0 (id=4301): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x2}, 0x0, 0x0, r0, 0x0) 18.032705564s ago: executing program 1 (id=4302): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10e002, 0xac59, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000010000000900000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000000000000000000996bf8edc8e41a88a76a41ddd9684f891b84ef39e20ae07c858932e1b432b242c30e6407d9c37c4e06a097180f91f536ec02fb25df1f0a0d9ebd5ffe2447349532e3a8be2aa6c0a4bc5d731b407464163d118f4ca52d46759fe424d1315a1d3df15680aae2991328cf1e7f5ffba3156e4839152fe2363feee5133f5da77b0d2888e1ab857d03eba64b72db7a8db2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r5}, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f802000000005e140602000000000e00350010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r8 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0xfe, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x30, 0x47, 0x0, 0xffffffff}]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x1, &(0x7f0000000380)=@raw=[@exit], 0x0, 0x200, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r8, @ANYRESDEC=r8, @ANYRESDEC, @ANYRESHEX=r0], 0x50) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 18.027433785s ago: executing program 3 (id=4303): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xffffffff}, 0x4000040) 17.887294128s ago: executing program 2 (id=4304): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000600"], 0x48) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="180000003f000b05d25a601037153e3704021680fc0b0900", 0x18}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.81103186s ago: executing program 0 (id=4305): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000, 0xfffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x9, &(0x7f0000000c40)=r2, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c6, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'team_slave_1\x00', 0x800}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000640)=@ringbuf, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2cb4e, r8}, 0x90) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="aa48eb83256ed386750d1620f01cb87b27265557e4b4b9a65630d8f2e1696f006d5eaf17192981ffb0e81097fe2a52e2c0c0e02bf5d9cda6b596a0c3a46d12f32814b61cb6daaa30b357816f74bedcb578003603c0ada699259a9dc5c279e80d023bc0d2ee14e39c81a77a7bd7b1764d7a2acf9bbec0cf2f87ee7bfcea4acebc8e360242258159d4f23fa639d9cd16c3242bf541d2c9aa8bcb18f277c7245de77f4c1d7bf063bf7cb88830b28f0c", 0xae}, {&(0x7f0000000400)="d165e5c09b4789fc4857adcbf6181309e69794cdbbc265e3838fe6576fbf1b103188be8dd507d8de65356e38d02ae9ba", 0x30}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="e8000000000000000600000005000000a872c9b8ff22d425350d8db30c93969498b466a3b0dac28a12d6381ca76eb4f18ba2c7e8047917e58ab7ce778163504d9aa06e8b775836d6d5af9aa202ed57eff0c5d5c793f323c507904705b510c6334960757c24299a0803cedef27ff433b4854a06fb11ef2eab49f4a5d5707ef1e7531d3f64fffcc20867d6ea68267507b3014b9ed60896e15a569624493aa6ce8a34a0542ba567102842406abc561d815f06ccbe72bce309fbf30be16e4c2d3e86468cd1a7725ee2164ec9cd887d21a1524c10756542bf5d1e8feea3e215b9541a2d00000000000000"], 0xe8}, 0x1fd199118a7686ea) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 17.522028848s ago: executing program 3 (id=4306): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) 17.367039682s ago: executing program 4 (id=4307): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9, 0xf5ff}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000780)="f400090900002c25fe80000000000000dc8b850f238466ccfe817a000000ad6e91fc5181003a000001", 0x29}, {&(0x7f0000001700)='R', 0x1}], 0x2}, 0x40040) 17.167193527s ago: executing program 0 (id=4308): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000400)="b9ff03318944268cb89904f086ddc2f1f362ba0af56885186bdebac07a64164c9441b2629864b19b", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x63000000}, 0x50) 17.125195728s ago: executing program 1 (id=4309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x8, 0x8, 0x40, r0}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x0, 0x1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{0x0}, {0x0, 0xf5ff}], 0x2, &(0x7f0000000740)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @end, @cipso={0x86, 0x6, 0x3}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x48}, 0x840) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000040), 0x3) (async, rerun: 64) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) (async, rerun: 64) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000051100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) 17.101201489s ago: executing program 2 (id=4310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="008700"}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r5 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000040), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x20000, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x0, r5}, 0x18) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x6, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r6, 0x0, 0x1, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1200000001000100ff0f00000400000000080000", @ANYRES32, @ANYBLOB="8a4d164600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ba15d8c40000000000000008000000000400000000000000"], 0x50) 16.979013252s ago: executing program 4 (id=4311): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) close(0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000500)=r2, 0x4) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x7606, r3, 0x4}, 0x38) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848480000005e140602000006020e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x65580000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x0, 0x10000, 0x7, 0x45, 0x1, 0x8, '\x00', 0x0, r2, 0x3, 0x3, 0x5}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r5, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000840), 0x0, 0x0, 0x4c, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r2, 0x20, &(0x7f0000000980)={&(0x7f0000000840)=""/228, 0xe4, 0x0, &(0x7f0000000940)=""/22, 0x16}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0x9, &(0x7f0000000b80)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000be9501000100000018200000", @ANYRES32, @ANYBLOB="0000000001110f808118a5c5d8c829261d"], &(0x7f00000002c0)='GPL\x00', 0x3, 0xc1, &(0x7f0000000640)=""/193, 0x41000, 0xc5a0e3fc7a7f122, '\x00', r6, @cgroup_sockopt=0x9f31ca798d5e6916, r7, 0x8, &(0x7f0000000780)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0xaa, 0x2b1f}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff, @value=r2}, 0x94) 16.970349533s ago: executing program 0 (id=4312): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000700000000800000"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848480000005e140602000006020e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x65580000}, 0x0) 16.833868756s ago: executing program 1 (id=4313): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0xfe, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.159068635s ago: executing program 1 (id=4314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000600"], 0x48) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="180000003f000b05d25a601037153e3704021680fc0b0900", 0x18}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r6, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) 2.074133064s ago: executing program 32 (id=4306): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) 819.782468ms ago: executing program 33 (id=4312): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000700000000800000"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848480000005e140602000006020e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x65580000}, 0x0) 550.008535ms ago: executing program 34 (id=4314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000600"], 0x48) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="180000003f000b05d25a601037153e3704021680fc0b0900", 0x18}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r6, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) 219.968675ms ago: executing program 35 (id=4310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="008700"}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r5 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000040), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x20000, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x0, r5}, 0x18) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x6, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r6, 0x0, 0x1, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1200000001000100ff0f00000400000000080000", @ANYRES32, @ANYBLOB="8a4d164600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ba15d8c40000000000000008000000000400000000000000"], 0x50) 0s ago: executing program 36 (id=4311): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) close(0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000500)=r2, 0x4) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x7606, r3, 0x4}, 0x38) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848480000005e140602000006020e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x65580000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x0, 0x10000, 0x7, 0x45, 0x1, 0x8, '\x00', 0x0, r2, 0x3, 0x3, 0x5}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r5, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000840), 0x0, 0x0, 0x4c, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r2, 0x20, &(0x7f0000000980)={&(0x7f0000000840)=""/228, 0xe4, 0x0, &(0x7f0000000940)=""/22, 0x16}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0x9, &(0x7f0000000b80)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000be9501000100000018200000", @ANYRES32, @ANYBLOB="0000000001110f808118a5c5d8c829261d"], &(0x7f00000002c0)='GPL\x00', 0x3, 0xc1, &(0x7f0000000640)=""/193, 0x41000, 0xc5a0e3fc7a7f122, '\x00', r6, @cgroup_sockopt=0x9f31ca798d5e6916, r7, 0x8, &(0x7f0000000780)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0xaa, 0x2b1f}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff, @value=r2}, 0x94) kernel console output (not intermixed with test programs): 536.902681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.925686][T12753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.957283][T12959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2894'. [ 536.975469][T12958] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2894'. [ 537.041163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 537.073501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 537.133934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 537.144616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 537.166731][T12753] device veth0_vlan entered promiscuous mode [ 537.180437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 537.198667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 537.232812][T12753] device veth1_vlan entered promiscuous mode [ 537.311583][T12978] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2899'. [ 537.334683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 537.348238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 537.383482][T12753] device veth0_macvtap entered promiscuous mode [ 537.413504][T12753] device veth1_macvtap entered promiscuous mode [ 537.618682][T12753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.677936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 537.691504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 537.747572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 537.833029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 537.955825][T12753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.033396][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 538.063292][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 538.076370][T12753] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.087196][T12753] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.105397][T12753] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.125295][T12753] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.247487][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.265465][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.284244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 538.320988][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.329438][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.346651][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.618098][T13002] netlink: 'syz.3.2839': attribute type 33 has an invalid length. [ 538.626293][T13002] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2839'. [ 538.937378][T13005] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.2906'. [ 538.971252][T13005] openvswitch: netlink: Flow actions attr not present in new flow. [ 539.720515][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 539.729525][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 539.737461][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 539.747673][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 539.756582][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 539.764089][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 541.852244][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 541.878813][T13032] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2913'. [ 541.917565][T13037] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2913'. [ 541.961764][T13037] bridge_slave_1: default FDB implementation only supports local addresses [ 542.247470][T13050] netlink: 'syz.4.2916': attribute type 29 has an invalid length. [ 542.285006][T13050] netlink: 'syz.4.2916': attribute type 29 has an invalid length. [ 542.542567][T13028] chnl_net:caif_netlink_parms(): no params data found [ 542.764093][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.924655][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.958038][T13076] netlink: 'syz.2.2924': attribute type 1 has an invalid length. [ 542.966524][T13076] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2924'. [ 542.995167][T13076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2924'. [ 543.004856][T13028] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.014851][T13028] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.029102][T13076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2924'. [ 543.050777][T13028] device bridge_slave_0 entered promiscuous mode [ 543.103876][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.131696][T13028] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.145417][T13028] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.154909][T13028] device bridge_slave_1 entered promiscuous mode [ 543.211869][ T4286] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 543.240694][T13081] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.2925'. [ 543.250723][T13081] openvswitch: netlink: Flow actions attr not present in new flow. [ 543.283162][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.929822][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 546.009810][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 546.144450][T13090] netlink: 'syz.1.2928': attribute type 10 has an invalid length. [ 546.271773][T13090] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 546.285177][T13092] device bond0 entered promiscuous mode [ 546.314617][T13092] device bond_slave_1 entered promiscuous mode [ 546.352165][T13092] device dummy0 entered promiscuous mode [ 546.358327][T13092] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 546.368189][T13028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.406626][T13028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.571190][T13028] team0: Port device team_slave_0 added [ 546.578982][T13028] team0: Port device team_slave_1 added [ 546.673598][ T9] tipc: Left network mode [ 546.682349][T13101] netlink: 'syz.4.2931': attribute type 3 has an invalid length. [ 546.719661][T13101] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2931'. [ 546.799713][T13028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.837869][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.940206][T13028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.991571][T13028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.022045][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.079176][T13113] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2935'. [ 547.118714][T13028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.154594][T13113] netlink: zone id is out of range [ 547.181513][T13113] netlink: zone id is out of range [ 547.231055][T13113] netlink: zone id is out of range [ 547.264432][T13113] netlink: zone id is out of range [ 547.288411][T13113] netlink: zone id is out of range [ 547.309177][T13113] netlink: zone id is out of range [ 547.340799][T13113] netlink: zone id is out of range [ 547.390548][T13113] netlink: zone id is out of range [ 547.395806][T13113] netlink: zone id is out of range [ 547.449522][T13028] device hsr_slave_0 entered promiscuous mode [ 547.545826][T13028] device hsr_slave_1 entered promiscuous mode [ 548.089834][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 548.198562][T13143] device pim6reg1 entered promiscuous mode [ 548.641263][T13163] netlink: 'syz.4.2948': attribute type 1 has an invalid length. [ 548.667924][T13165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2948'. [ 548.674277][T13163] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2948'. [ 548.782163][T13163] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2948'. [ 548.827441][T13028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 548.867240][T13028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 548.885101][T13028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 548.927228][T13028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 549.335944][T13028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.399169][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 549.422886][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.478790][T13028] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.764101][ T9] team0: Port device wlan1 removed [ 549.856506][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 549.879361][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 549.914075][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.921355][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.961994][T13191] netlink: 'syz.1.2957': attribute type 33 has an invalid length. [ 550.001173][T13191] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2957'. [ 550.080469][T13192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2956'. [ 550.268853][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 550.507235][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 550.543101][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.590012][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.597169][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.281715][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.304931][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.345365][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.383259][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.410290][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.443703][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.477503][T13028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.519178][T13028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.568038][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 551.591591][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.642402][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.670750][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.705399][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.786548][ T9] device veth1_macvtap left promiscuous mode [ 551.819998][ T9] device veth0_macvtap left promiscuous mode [ 551.826213][ T9] device veth1_vlan left promiscuous mode [ 551.891797][T13248] netlink: 'syz.4.2973': attribute type 29 has an invalid length. [ 552.510535][ T9] team0 (unregistering): Port device team_slave_1 removed [ 552.583616][ T9] team0 (unregistering): Port device team_slave_0 removed [ 552.650915][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.680369][ T9] device bond_slave_1 left promiscuous mode [ 552.746562][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.756205][ T9] device bond_slave_0 left promiscuous mode [ 552.978313][ T9] bond0 (unregistering): Released all slaves [ 553.014429][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.022856][T13248] netlink: 'syz.4.2973': attribute type 29 has an invalid length. [ 553.294118][T13278] netlink: 'syz.3.2983': attribute type 29 has an invalid length. [ 553.348313][T13280] netlink: 'syz.4.2984': attribute type 1 has an invalid length. [ 553.357478][T13280] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2984'. [ 553.437054][T13283] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2984'. [ 554.729650][T13278] netlink: 'syz.3.2983': attribute type 29 has an invalid length. [ 554.739191][T13280] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2984'. [ 554.783399][T13285] netlink: 'syz.1.2985': attribute type 39 has an invalid length. [ 555.013592][T13295] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2988'. [ 555.032455][T13295] bridge_slave_1: default FDB implementation only supports local addresses [ 555.099169][T13294] delete_channel: no stack [ 555.119968][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 555.129814][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 555.152336][T13028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.219895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.232726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.294729][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.315734][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.369130][T13028] device veth0_vlan entered promiscuous mode [ 555.382610][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.400628][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.413645][T13028] device veth1_vlan entered promiscuous mode [ 555.511398][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.561881][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 555.593919][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.616013][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.633025][T13028] device veth0_macvtap entered promiscuous mode [ 555.665836][T13028] device veth1_macvtap entered promiscuous mode [ 555.743059][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.822593][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.897996][T13028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.936810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.953784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.973164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.994046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 556.027830][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.048316][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.078239][T13028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.093978][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 556.129074][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 556.202131][T13028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.329743][T13028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.359457][T13028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.386812][T13028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.414024][T13326] netlink: 'syz.2.3000': attribute type 21 has an invalid length. [ 556.563165][T13333] netlink: 'syz.3.3004': attribute type 8 has an invalid length. [ 556.602170][T13333] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3004'. [ 556.640815][ T4516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.648906][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.698044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.737839][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.781727][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.810457][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 556.841462][T13348] netlink: 'syz.2.3011': attribute type 1 has an invalid length. [ 556.914777][T13348] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3011'. [ 556.972955][T13353] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3011'. [ 557.064619][T13348] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3011'. [ 558.061045][ T4325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.247017][T13380] device bridge_slave_1 left promiscuous mode [ 558.281867][T13380] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.358847][T13380] device bridge_slave_0 left promiscuous mode [ 558.415355][T13380] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.623884][T12754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 558.635136][T12754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 558.647236][T12754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 558.658864][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 558.672953][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 558.691110][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 559.081098][T13407] netlink: 'syz.1.3027': attribute type 1 has an invalid length. [ 559.089396][T13407] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3027'. [ 559.171588][T13408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3027'. [ 559.377958][ T4325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.458717][T13399] device syzkaller0 entered promiscuous mode [ 559.467312][T13407] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3027'. [ 560.729845][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 561.421746][ T4325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.433548][T13410] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3028'. [ 561.443117][T13413] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3028'. [ 561.460888][T13413] device hsr_slave_0 left promiscuous mode [ 561.467739][T13413] device hsr_slave_1 left promiscuous mode [ 561.517451][T13433] netlink: 'syz.1.3037': attribute type 10 has an invalid length. [ 561.546843][T13433] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3037'. [ 561.615889][ T4325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.662734][T13436] netlink: 'syz.3.3038': attribute type 27 has an invalid length. [ 561.680296][T13436] netlink: 'syz.3.3038': attribute type 4 has an invalid length. [ 561.688148][T13436] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3038'. [ 561.925568][T13442] netlink: 'syz.1.3041': attribute type 10 has an invalid length. [ 561.941275][T13442] team0: Device hsr_slave_0 failed to register rx_handler [ 562.048779][ T4325] tipc: Left network mode [ 562.419328][T13389] chnl_net:caif_netlink_parms(): no params data found [ 562.684076][T13471] netlink: 'syz.0.3049': attribute type 39 has an invalid length. [ 562.734793][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.741167][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.809682][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 563.036252][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.074463][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.104731][T13389] device bridge_slave_0 entered promiscuous mode [ 563.208762][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.219425][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.236686][T13389] device bridge_slave_1 entered promiscuous mode [ 563.368917][T13494] netlink: 'syz.0.3055': attribute type 29 has an invalid length. [ 563.424559][ T4325] device erspan0 left promiscuous mode [ 563.431720][ T4325] GPL: port 1(erspan0) entered disabled state [ 563.501460][T13389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.519455][T13494] netlink: 'syz.0.3055': attribute type 29 has an invalid length. [ 563.551782][T13389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.692010][T13389] team0: Port device team_slave_0 added [ 563.762624][T13389] team0: Port device team_slave_1 added [ 563.911036][T13389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.935738][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.019783][T13389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.064793][T13389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.109808][T13512] netlink: 'syz.2.3061': attribute type 1 has an invalid length. [ 564.117663][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.117696][T13389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.197993][T13519] netlink: 'syz.1.3062': attribute type 27 has an invalid length. [ 564.261394][T13519] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3062'. [ 564.333590][T13520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3061'. [ 564.369403][T13518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3061'. [ 564.401176][T13512] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3061'. [ 564.524640][T13389] device hsr_slave_0 entered promiscuous mode [ 564.541636][T13389] device hsr_slave_1 entered promiscuous mode [ 564.548695][T13523] netlink: 'syz.0.3063': attribute type 10 has an invalid length. [ 564.559391][T13523] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3063'. [ 564.889656][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 565.436808][ T4325] team0: Port device wlan1 removed [ 566.308237][ T4325] device hsr_slave_0 left promiscuous mode [ 566.397921][ T4325] device veth1_vlan left promiscuous mode [ 566.430149][ T4325] device veth0_vlan left promiscuous mode [ 566.975088][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 567.299478][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 567.647568][T13563] netlink: 'syz.1.3075': attribute type 17 has an invalid length. [ 567.655866][T13563] netlink: 'syz.1.3075': attribute type 16 has an invalid length. [ 567.664088][T13563] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3075'. [ 567.673608][T13561] netlink: 'syz.3.3074': attribute type 10 has an invalid length. [ 567.691976][T13561] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3074'. [ 568.121534][T13590] netlink: 'syz.3.3082': attribute type 10 has an invalid length. [ 568.216786][T13590] team0: Device veth1_macvtap failed to register rx_handler [ 568.464362][T13602] netlink: 'syz.2.3086': attribute type 3 has an invalid length. [ 568.506444][T13602] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3086'. [ 568.522186][T13389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 568.567386][T13389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 568.616956][T13389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 568.648119][T13389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 568.854493][T13389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.930763][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 568.939800][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.982213][T13389] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.006121][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 569.025042][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 569.050361][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.057507][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.099222][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 569.118622][T13618] netlink: 'syz.0.3091': attribute type 33 has an invalid length. [ 569.139654][T13618] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3091'. [ 569.174541][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 569.193533][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 569.237281][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.244505][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.299733][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 569.308531][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 569.333741][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 569.370703][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 569.408397][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 569.434358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 569.470962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 569.486944][T13389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 569.533088][T13389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.603553][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 569.620379][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 569.647526][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 569.676448][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 569.710561][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 571.990120][T13639] netlink: 'syz.2.3097': attribute type 10 has an invalid length. [ 572.020278][T13639] net_ratelimit: 137 callbacks suppressed [ 572.020292][T13639] wlan1: mtu less than device minimum [ 572.051011][T13639] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 572.392225][T13674] netlink: 'syz.0.3103': attribute type 27 has an invalid length. [ 572.433200][T13674] netlink: 'syz.0.3103': attribute type 4 has an invalid length. [ 572.455230][T13674] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3103'. [ 572.495855][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 572.507684][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 572.556591][T13389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.742205][T13692] sctp: [Deprecated]: syz.3.3108 (pid 13692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.742205][T13692] Use struct sctp_sack_info instead [ 573.636326][T13738] netlink: 'syz.1.3122': attribute type 29 has an invalid length. [ 573.645061][T13738] netlink: 'syz.1.3122': attribute type 29 has an invalid length. [ 573.700677][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 573.724519][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 573.789666][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 573.820019][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 573.828522][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 573.894030][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 573.912567][T13389] device veth0_vlan entered promiscuous mode [ 573.952388][T13389] device veth1_vlan entered promiscuous mode [ 573.975200][T13745] netlink: 'syz.2.3123': attribute type 21 has an invalid length. [ 573.986717][T13745] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3123'. [ 573.996190][T13745] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3123'. [ 574.017631][T13389] device veth0_macvtap entered promiscuous mode [ 574.046679][T13748] netlink: 'syz.1.3124': attribute type 2 has an invalid length. [ 574.055140][T13748] netlink: 'syz.1.3124': attribute type 8 has an invalid length. [ 574.069350][T13748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3124'. [ 574.085138][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 574.111149][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 574.131936][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 574.166381][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 574.202318][T13389] device veth1_macvtap entered promiscuous mode [ 574.234051][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 574.270577][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 574.314455][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.399740][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.477457][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.508367][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.535556][T13389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.549047][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 574.558227][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 574.578975][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.595067][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.605452][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.620769][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.684908][T13389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.710852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 574.744369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 574.766420][T13389] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.786166][T13389] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.796514][T13389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.830539][T13389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.924099][T13770] netlink: 'syz.1.3134': attribute type 4 has an invalid length. [ 574.953470][T13770] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3134'. [ 575.011540][T13770] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 575.035454][T13773] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3133'. [ 575.173006][T13780] netlink: 'syz.2.3136': attribute type 1 has an invalid length. [ 575.202819][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.234287][T13782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3136'. [ 575.259996][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.280047][T13780] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3136'. [ 575.311489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 575.323788][T13780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3136'. [ 575.344094][T13781] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3135'. [ 575.368639][T13781] bridge_slave_1: default FDB implementation only supports local addresses [ 575.424435][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.436135][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.449789][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 576.158309][T13814] netlink: 'syz.1.3146': attribute type 1 has an invalid length. [ 576.534165][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.683848][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 576.694513][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 576.702990][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 576.728238][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 576.737098][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 576.746216][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 576.780384][T13830] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 576.811385][T13830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.883002][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.012695][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.174056][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.243014][T13846] bridge_slave_1: default FDB implementation only supports local addresses [ 577.457008][T13854] netlink: 'syz.1.3160': attribute type 17 has an invalid length. [ 577.499618][T13854] netlink: 'syz.1.3160': attribute type 16 has an invalid length. [ 577.507573][T13854] __nla_validate_parse: 6 callbacks suppressed [ 577.507584][T13854] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3160'. [ 577.575837][T13857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.587894][T13833] chnl_net:caif_netlink_parms(): no params data found [ 578.040244][T13877] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3166'. [ 578.077289][T13877] netlink: zone id is out of range [ 578.100969][T13877] netlink: zone id is out of range [ 578.120999][T13877] netlink: zone id is out of range [ 578.143319][T13877] netlink: zone id is out of range [ 578.151057][T13833] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.158669][T13833] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.187865][T13833] device bridge_slave_0 entered promiscuous mode [ 578.187922][T13877] netlink: zone id is out of range [ 578.226930][T13877] netlink: zone id is out of range [ 578.242146][T13877] netlink: zone id is out of range [ 578.252515][T13833] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.280240][T13833] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.289149][T13833] device bridge_slave_1 entered promiscuous mode [ 578.299003][T13877] netlink: zone id is out of range [ 578.309921][T13877] netlink: zone id is out of range [ 578.315103][T13877] netlink: zone id is out of range [ 578.383987][T13880] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3167'. [ 578.432078][T13884] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3167'. [ 578.595020][T13882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3167'. [ 578.745211][T13833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.809974][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 578.873789][T13833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.124958][ T56] device erspan0 left promiscuous mode [ 579.148598][ T56] GPL: port 1(erspan0) entered disabled state [ 579.180437][T13833] team0: Port device team_slave_0 added [ 579.190162][T13833] team0: Port device team_slave_1 added [ 579.221138][T13833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.269635][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.369789][T13833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.471669][T13903] validate_nla: 4 callbacks suppressed [ 579.471682][T13903] netlink: 'syz.0.3172': attribute type 10 has an invalid length. [ 579.565657][T13903] team0: Port device hsr_slave_0 added [ 579.581729][T13833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.599528][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.639022][T13833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.668670][T13908] netlink: 'syz.3.3173': attribute type 10 has an invalid length. [ 579.725495][T13908] team0: Device hsr_slave_0 failed to register rx_handler [ 580.166649][T13833] device hsr_slave_0 entered promiscuous mode [ 580.189259][T13833] device hsr_slave_1 entered promiscuous mode [ 580.250224][T13833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.257817][T13833] Cannot create hsr debugfs directory [ 580.326383][T13929] netlink: 'syz.4.3178': attribute type 33 has an invalid length. [ 580.369610][T13929] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3178'. [ 580.456827][T13933] netlink: 'syz.3.3180': attribute type 1 has an invalid length. [ 580.484165][T13933] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3180'. [ 580.889793][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 581.144166][ T56] device hsr_slave_0 left promiscuous mode [ 581.226579][ T56] device veth1_vlan left promiscuous mode [ 581.244275][ T56] device veth0_vlan left promiscuous mode [ 582.602034][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.611001][ T56] device bond_slave_1 left promiscuous mode [ 582.646054][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.656310][ T56] device bond_slave_0 left promiscuous mode [ 582.866336][ T56] bond0 (unregistering): Released all slaves [ 582.903438][T13985] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3193'. [ 582.969625][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 583.177297][T13833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 583.240060][T13833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 583.297230][T14006] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3202'. [ 583.341916][T13833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 583.380356][T13833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 583.668540][T13833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.741725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 583.760418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 583.808626][T13833] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.858720][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 583.868213][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 583.882886][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.890091][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.933304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 583.942069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.951494][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.962728][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.969895][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.985338][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 583.996942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 584.020726][T14030] device bridge_slave_1 left promiscuous mode [ 584.027324][T14030] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.104288][T14030] device bridge_slave_0 left promiscuous mode [ 584.121529][T14030] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.400188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 584.409066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 584.435249][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 584.448235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 584.458208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 584.471593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 584.503134][T13833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.530743][T13833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 584.564042][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 584.590479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 584.623969][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 584.753721][T14056] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3215'. [ 584.906651][T14064] netlink: 'syz.0.3217': attribute type 4 has an invalid length. [ 584.930202][T14064] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3217'. [ 584.953891][T14062] netlink: 'syz.3.3218': attribute type 1 has an invalid length. [ 584.988621][T14062] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3218'. [ 585.050098][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 585.094510][T14062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3218'. [ 585.197749][T14064] net_ratelimit: 137 callbacks suppressed [ 585.197782][T14064] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 585.246541][T14066] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3218'. [ 585.604293][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.616999][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.636548][T13833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.686150][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 585.710594][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 585.803443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 585.820452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 585.861275][T13833] device veth0_vlan entered promiscuous mode [ 585.879652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 585.923311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 585.958304][T13833] device veth1_vlan entered promiscuous mode [ 585.996544][T14089] netlink: 'syz.4.3225': attribute type 1 has an invalid length. [ 586.027428][T14089] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3225'. [ 586.072025][T14097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3225'. [ 586.115312][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 586.145702][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 586.174687][T14089] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3225'. [ 586.191808][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 586.237410][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 586.292104][T13833] device veth0_macvtap entered promiscuous mode [ 586.305852][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 586.327173][T13833] device veth1_macvtap entered promiscuous mode [ 586.359015][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.387015][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.437904][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.462197][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.472508][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.520367][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.551191][T13833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.591750][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 586.619180][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 586.633817][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.655113][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.667239][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.707365][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.719626][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.753464][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.781025][T13833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.801559][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 586.850534][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 586.871862][T13833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.889713][T13833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.933548][T13833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.967369][T13833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.007581][T14123] bridge_slave_1: default FDB implementation only supports local addresses [ 587.131159][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.159385][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.169727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 587.191501][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.200360][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.208741][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 587.862302][T14157] netlink: 'syz.4.3245': attribute type 2 has an invalid length. [ 587.899856][T14159] netlink: 'syz.4.3245': attribute type 2 has an invalid length. [ 588.241945][T14171] netlink: 'syz.4.3250': attribute type 10 has an invalid length. [ 589.023658][T14172] FAULT_INJECTION: forcing a failure. [ 589.023658][T14172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.049846][T14172] CPU: 0 PID: 14172 Comm: syz.3.3247 Not tainted syzkaller #0 [ 589.057457][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.067572][T14172] Call Trace: [ 589.070909][T14172] [ 589.073897][T14172] dump_stack_lvl+0x188/0x24e [ 589.078640][T14172] ? show_regs_print_info+0x12/0x12 [ 589.083888][T14172] ? load_image+0x400/0x400 [ 589.088437][T14172] ? __lock_acquire+0x7d10/0x7d10 [ 589.093523][T14172] should_fail_ex+0x399/0x4d0 [ 589.098246][T14172] _copy_from_user+0x2c/0x170 [ 589.102972][T14172] ___sys_sendmsg+0x1c3/0x360 [ 589.107705][T14172] ? __sys_sendmsg+0x290/0x290 [ 589.112558][T14172] ? __lock_acquire+0x7d10/0x7d10 [ 589.117694][T14172] __se_sys_sendmsg+0x1bb/0x2a0 [ 589.122589][T14172] ? __x64_sys_sendmsg+0x80/0x80 [ 589.127596][T14172] ? lockdep_hardirqs_on+0x94/0x140 [ 589.132851][T14172] do_syscall_64+0x4c/0xa0 [ 589.137310][T14172] ? clear_bhb_loop+0x60/0xb0 [ 589.142027][T14172] ? clear_bhb_loop+0x60/0xb0 [ 589.146742][T14172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.152663][T14172] RIP: 0033:0x7f5c12d9cdd9 [ 589.157130][T14172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.176764][T14172] RSP: 002b:00007f5c10fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.185206][T14172] RAX: ffffffffffffffda RBX: 00007f5c13016180 RCX: 00007f5c12d9cdd9 [ 589.193203][T14172] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000005 [ 589.201250][T14172] RBP: 00007f5c10fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 589.209244][T14172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.217237][T14172] R13: 00007f5c13016218 R14: 00007f5c13016180 R15: 00007ffd54821138 [ 589.225274][T14172] [ 589.235999][T14171] team0: Device hsr_slave_0 failed to register rx_handler [ 589.360918][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 589.369261][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 589.380279][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 589.388052][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 589.395860][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 589.403188][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 589.913242][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.997491][T14189] __nla_validate_parse: 6 callbacks suppressed [ 589.997524][T14189] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3257'. [ 590.272157][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.440625][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.556481][T14224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3265'. [ 590.631109][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.671794][T14226] netlink: 'syz.2.3266': attribute type 10 has an invalid length. [ 590.721733][T14226] team0: Device hsr_slave_0 failed to register rx_handler [ 590.832479][T14224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3265'. [ 591.018553][T14178] chnl_net:caif_netlink_parms(): no params data found [ 591.390872][ T46] tipc: Left network mode [ 591.447482][T14178] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.451541][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 591.475235][T14178] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.502504][T14178] device bridge_slave_0 entered promiscuous mode [ 591.706263][T14178] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.734065][T14178] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.763681][T14178] device bridge_slave_1 entered promiscuous mode [ 591.798691][T14261] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3276'. [ 592.045908][T14178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.088162][T14178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.344706][T14178] team0: Port device team_slave_0 added [ 592.478023][T14178] team0: Port device team_slave_1 added [ 592.594404][T14178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.606633][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.705019][T14178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.745964][T14284] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3282'. [ 592.965735][T14178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.977560][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.058381][T14178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.128149][T14300] netlink: 'syz.4.3286': attribute type 10 has an invalid length. [ 593.163038][T14300] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3286'. [ 593.204412][T14300] device bond0 entered promiscuous mode [ 593.215340][T14300] device bond_slave_0 entered promiscuous mode [ 593.231618][T14300] device bond_slave_1 entered promiscuous mode [ 593.238202][T14300] bridge0: port 3(bond0) entered blocking state [ 593.254822][T14300] bridge0: port 3(bond0) entered disabled state [ 593.268304][T14300] bridge0: port 3(bond0) entered blocking state [ 593.274698][T14300] bridge0: port 3(bond0) entered forwarding state [ 593.335175][T14304] netlink: 'syz.2.3287': attribute type 10 has an invalid length. [ 593.404515][T14304] team0: Device veth1_macvtap failed to register rx_handler [ 593.489011][T14178] device hsr_slave_0 entered promiscuous mode [ 593.497619][T14178] device hsr_slave_1 entered promiscuous mode [ 593.521383][T14178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.529857][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 593.550747][T14178] Cannot create hsr debugfs directory [ 593.759337][T14316] netlink: 'syz.0.3291': attribute type 39 has an invalid length. [ 594.295901][T14343] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3298'. [ 594.340425][ T46] device hsr_slave_0 left promiscuous mode [ 594.376962][ T46] device veth1_vlan left promiscuous mode [ 594.382991][ T46] device veth0_vlan left promiscuous mode [ 594.644422][ T46] team0 (unregistering): Port device geneve1 removed [ 594.960532][ T46] team0 (unregistering): Port device team_slave_1 removed [ 595.000075][ T46] team0 (unregistering): Port device team_slave_0 removed [ 595.035548][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.045249][ T46] device bond_slave_1 left promiscuous mode [ 595.236640][ T46] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 595.246526][ T46] device dummy0 left promiscuous mode [ 595.285812][ T46] bond0 (unregistering): Released all slaves [ 595.316411][T14346] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3299'. [ 595.335591][T14349] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 595.343558][T14349] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3298'. [ 595.374310][T14356] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3300'. [ 595.609914][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 595.758558][T14178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 595.782566][T14178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 595.840455][T14178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 595.883673][T14178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 596.070030][T14382] netlink: 'syz.0.3307': attribute type 10 has an invalid length. [ 596.237151][T14382] team0: Device veth1_macvtap failed to register rx_handler [ 596.447309][T14395] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3311'. [ 596.553749][T14396] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3312'. [ 596.615162][T14393] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 596.624209][T14393] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3312'. [ 596.689323][T14396] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3312'. [ 596.708908][T14178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.745110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 596.765534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 596.786887][T14178] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.815536][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 596.852192][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 596.880184][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.887355][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.919316][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 596.983442][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.007269][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.039341][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.046545][ T4516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.096039][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.155416][T14406] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3314'. [ 597.196121][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.232151][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 597.267911][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 597.288033][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 597.381489][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 597.447643][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 597.550371][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 597.597095][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 597.690026][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 598.125268][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 598.150883][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.184650][T14178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 598.209699][T14427] tun0: tun_chr_ioctl cmd 1074025675 [ 598.215116][T14427] tun0: persist enabled [ 598.253464][T14425] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3321'. [ 598.353130][T14425] bridge_slave_1: default FDB implementation only supports local addresses [ 598.368548][T14431] tun0: tun_chr_ioctl cmd 1074025675 [ 598.389718][T14431] tun0: persist enabled [ 599.252134][T14454] netlink: 'syz.4.3327': attribute type 10 has an invalid length. [ 599.310397][T14454] team0: Device hsr_slave_0 failed to register rx_handler [ 599.715696][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 599.734513][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 599.755116][T14467] netlink: 'syz.2.3329': attribute type 2 has an invalid length. [ 599.774012][T14178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.783290][T14469] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3329'. [ 599.906943][T14479] FAULT_INJECTION: forcing a failure. [ 599.906943][T14479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.934126][T14479] CPU: 0 PID: 14479 Comm: syz.3.3332 Not tainted syzkaller #0 [ 599.941660][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 599.951846][T14479] Call Trace: [ 599.955176][T14479] [ 599.958147][T14479] dump_stack_lvl+0x188/0x24e [ 599.962919][T14479] ? show_regs_print_info+0x12/0x12 [ 599.968176][T14479] ? load_image+0x400/0x400 [ 599.972739][T14479] ? __lock_acquire+0x7d10/0x7d10 [ 599.977829][T14479] should_fail_ex+0x399/0x4d0 [ 599.982556][T14479] _copy_from_user+0x2c/0x170 [ 599.987296][T14479] __copy_msghdr+0x3b7/0x580 [ 599.991972][T14479] ___sys_sendmsg+0x210/0x360 [ 599.996704][T14479] ? __sys_sendmsg+0x290/0x290 [ 600.001516][T14479] ? __lock_acquire+0x7d10/0x7d10 [ 600.006593][T14479] __se_sys_sendmsg+0x1bb/0x2a0 [ 600.011480][T14479] ? ct_nmi_exit+0x145/0x1c0 [ 600.016094][T14479] ? __x64_sys_sendmsg+0x80/0x80 [ 600.021072][T14479] ? lockdep_hardirqs_on+0x94/0x140 [ 600.026295][T14479] do_syscall_64+0x4c/0xa0 [ 600.030735][T14479] ? clear_bhb_loop+0x60/0xb0 [ 600.035430][T14479] ? clear_bhb_loop+0x60/0xb0 [ 600.040125][T14479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.046039][T14479] RIP: 0033:0x7f5c12d9cdd9 [ 600.050493][T14479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.070125][T14479] RSP: 002b:00007f5c10fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.078572][T14479] RAX: ffffffffffffffda RBX: 00007f5c13016180 RCX: 00007f5c12d9cdd9 [ 600.086563][T14479] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000005 [ 600.094553][T14479] RBP: 00007f5c10fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 600.102536][T14479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.110527][T14479] R13: 00007f5c13016218 R14: 00007f5c13016180 R15: 00007ffd54821138 [ 600.118550][T14479] [ 600.231837][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 600.248161][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 600.398796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 600.419457][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 600.478569][T14178] device veth0_vlan entered promiscuous mode [ 600.521047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 600.578498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 600.626771][T14178] device veth1_vlan entered promiscuous mode [ 601.192409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 601.202060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 601.236667][T14490] __nla_validate_parse: 1 callbacks suppressed [ 601.236700][T14490] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3337'. [ 601.441852][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 601.498336][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 601.521954][T14178] device veth0_macvtap entered promiscuous mode [ 601.539811][T14178] device veth1_macvtap entered promiscuous mode [ 601.610916][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.657603][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.709625][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.740495][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.779708][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.812193][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.857523][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.918806][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.998044][T14178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.033966][T14505] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3341'. [ 602.065824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 602.087947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 602.110143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 602.153378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 602.208529][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.305365][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.343232][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.426488][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.481067][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.527230][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.582005][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.632979][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.722766][T14178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.772510][T14523] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3346'. [ 602.815477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 602.836502][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 602.888648][T14178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.904196][T14178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.927710][T14178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.944634][T14178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.971655][T14526] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3348'. [ 603.000099][T14528] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3349'. [ 603.153545][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.167526][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.219132][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 603.279817][ T4495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.290147][ T4495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.300134][T14535] netlink: 'syz.3.3353': attribute type 33 has an invalid length. [ 603.309157][T14535] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3353'. [ 603.335325][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 603.782951][T14547] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3355'. [ 603.876265][T14551] netlink: 'syz.4.3357': attribute type 21 has an invalid length. [ 603.899984][T14551] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3357'. [ 603.909094][T14551] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3357'. [ 603.966669][T14558] netlink: 'syz.2.3360': attribute type 27 has an invalid length. [ 603.975751][T14558] netlink: 'syz.2.3360': attribute type 4 has an invalid length. [ 603.984362][T14558] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3360'. [ 604.161095][T14563] sctp: [Deprecated]: syz.4.3364 (pid 14563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.161095][T14563] Use struct sctp_sack_info instead [ 604.823192][T14593] netlink: 'syz.0.3376': attribute type 29 has an invalid length. [ 604.850633][T14593] netlink: 'syz.0.3376': attribute type 29 has an invalid length. [ 605.585402][T14623] device wg2 entered promiscuous mode [ 605.616580][T14628] bridge0: port 3(bond0) entered disabled state [ 605.648776][T14628] device bridge_slave_1 left promiscuous mode [ 605.707548][T14628] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.755400][T14628] device bridge_slave_0 left promiscuous mode [ 605.779497][T14628] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.884766][T14636] __nla_validate_parse: 7 callbacks suppressed [ 606.884781][T14636] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3394'. [ 607.348955][T14653] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3398'. [ 607.369413][T14667] netlink: 'syz.1.3402': attribute type 10 has an invalid length. [ 607.401058][T14667] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3402'. [ 607.420381][T14667] device bond0 entered promiscuous mode [ 607.430559][T14667] device bond_slave_0 entered promiscuous mode [ 607.456061][T14667] device bond_slave_1 entered promiscuous mode [ 607.470374][T14667] bridge0: port 3(bond0) entered blocking state [ 607.515265][T14667] bridge0: port 3(bond0) entered disabled state [ 607.555505][T14667] bridge0: port 3(bond0) entered blocking state [ 607.561917][T14667] bridge0: port 3(bond0) entered forwarding state [ 607.586422][T14675] netlink: 'syz.3.3405': attribute type 39 has an invalid length. [ 607.707037][T14675] device hsr_slave_1 left promiscuous mode [ 608.022666][T14693] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3410'. [ 608.369826][T14699] netlink: 'syz.4.3414': attribute type 4 has an invalid length. [ 608.392454][T14699] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3414'. [ 608.582029][T14699] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 608.692946][T14709] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3417'. [ 608.885186][T14713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.983384][T14715] netlink: 'syz.2.3420': attribute type 1 has an invalid length. [ 609.004799][T14719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3420'. [ 609.019849][T14715] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3420'. [ 609.038003][T14719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3420'. [ 609.815384][T14741] netlink: 'syz.2.3430': attribute type 13 has an invalid length. [ 609.955678][T14741] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3430'. [ 610.008348][T14741] erspan0: refused to change device tx_queue_len [ 610.038588][T14741] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 610.503460][T14764] netlink: 'syz.1.3439': attribute type 1 has an invalid length. [ 610.618393][T14768] netlink: 'syz.3.3440': attribute type 10 has an invalid length. [ 610.642630][T14768] team0: Device hsr_slave_0 failed to register rx_handler [ 611.433623][T14789] netlink: 'syz.0.3448': attribute type 17 has an invalid length. [ 611.462237][T14789] netlink: 'syz.0.3448': attribute type 16 has an invalid length. [ 611.916237][T14800] __nla_validate_parse: 6 callbacks suppressed [ 611.916271][T14800] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3455'. [ 611.970626][T14802] netlink: 'syz.2.3456': attribute type 10 has an invalid length. [ 611.980966][T14802] team0: Device hsr_slave_0 failed to register rx_handler [ 612.550682][T14821] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3464'. [ 614.703457][T14836] FAULT_INJECTION: forcing a failure. [ 614.703457][T14836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.742030][T14836] CPU: 0 PID: 14836 Comm: syz.2.3459 Not tainted syzkaller #0 [ 614.749552][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.759631][T14836] Call Trace: [ 614.762936][T14836] [ 614.765898][T14836] dump_stack_lvl+0x188/0x24e [ 614.770620][T14836] ? show_regs_print_info+0x12/0x12 [ 614.775875][T14836] ? load_image+0x400/0x400 [ 614.780418][T14836] ? __lock_acquire+0x7d10/0x7d10 [ 614.785484][T14836] should_fail_ex+0x399/0x4d0 [ 614.790197][T14836] _copy_from_user+0x2c/0x170 [ 614.794937][T14836] iovec_from_user+0x143/0x360 [ 614.799768][T14836] __import_iovec+0x6d/0x500 [ 614.804388][T14836] ? __might_fault+0xc2/0x120 [ 614.809145][T14836] import_iovec+0x6f/0xa0 [ 614.813529][T14836] ___sys_sendmsg+0x252/0x360 [ 614.818258][T14836] ? __sys_sendmsg+0x290/0x290 [ 614.823086][T14836] ? __lock_acquire+0x7d10/0x7d10 [ 614.828164][T14836] __se_sys_sendmsg+0x1bb/0x2a0 [ 614.833050][T14836] ? __x64_sys_sendmsg+0x80/0x80 [ 614.838036][T14836] ? lockdep_hardirqs_on+0x94/0x140 [ 614.843267][T14836] do_syscall_64+0x4c/0xa0 [ 614.847719][T14836] ? clear_bhb_loop+0x60/0xb0 [ 614.852450][T14836] ? clear_bhb_loop+0x60/0xb0 [ 614.857178][T14836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 614.863116][T14836] RIP: 0033:0x7f8844f9cdd9 [ 614.867552][T14836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.887200][T14836] RSP: 002b:00007f8845e8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.895658][T14836] RAX: ffffffffffffffda RBX: 00007f8845216180 RCX: 00007f8844f9cdd9 [ 614.903660][T14836] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000005 [ 614.911661][T14836] RBP: 00007f8845e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 614.919664][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.927662][T14836] R13: 00007f8845216218 R14: 00007f8845216180 R15: 00007fffc613bb98 [ 614.935696][T14836] [ 614.977274][T14839] netlink: 'syz.3.3469': attribute type 10 has an invalid length. [ 615.080237][T14839] team0: Device hsr_slave_0 failed to register rx_handler [ 615.339266][T14846] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3470'. [ 615.466133][T14854] bridge0: port 3(bond0) entered disabled state [ 615.570695][T14854] device bridge_slave_1 left promiscuous mode [ 615.591872][T14854] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.635637][T14854] device bridge_slave_0 left promiscuous mode [ 615.647344][T14854] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.853982][T14867] TCP: TCP_TX_DELAY enabled [ 616.126288][T14872] netlink: 'syz.0.3483': attribute type 10 has an invalid length. [ 616.504210][T14887] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3489'. [ 617.093283][T14910] netlink: 'syz.3.3498': attribute type 10 has an invalid length. [ 617.133714][T14910] team0: Device hsr_slave_0 failed to register rx_handler [ 617.785081][T14927] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3505'. [ 618.003242][T14934] netlink: 'syz.2.3508': attribute type 10 has an invalid length. [ 618.041695][T14934] team0: Device veth1_macvtap failed to register rx_handler [ 618.096831][T14936] netlink: 'syz.0.3509': attribute type 10 has an invalid length. [ 618.110572][T14936] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3509'. [ 618.147462][T14936] device bond0 entered promiscuous mode [ 618.177090][T14936] device bond_slave_0 entered promiscuous mode [ 618.224115][T14936] device bond_slave_1 entered promiscuous mode [ 618.261531][T14946] netlink: 'syz.3.3512': attribute type 16 has an invalid length. [ 618.277680][T14946] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3512'. [ 618.460992][T14949] netlink: 'syz.1.3513': attribute type 39 has an invalid length. [ 618.563571][T14949] device hsr_slave_1 left promiscuous mode [ 620.383276][T14998] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3527'. [ 620.724605][T15013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3530'. [ 620.725172][T15009] netlink: 'syz.0.3530': attribute type 1 has an invalid length. [ 620.807790][T15013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3530'. [ 620.844829][T15018] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3533'. [ 620.860272][T15009] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3530'. [ 621.208880][T15028] netlink: 'syz.1.3537': attribute type 17 has an invalid length. [ 621.247414][T15028] netlink: 'syz.1.3537': attribute type 16 has an invalid length. [ 621.269871][T15028] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3537'. [ 621.582212][T15041] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3543'. [ 621.708447][T15040] can: request_module (can-proto-5) failed. [ 622.261770][T15068] netlink: 'syz.2.3554': attribute type 33 has an invalid length. [ 624.051273][T15104] __nla_validate_parse: 2 callbacks suppressed [ 624.051307][T15104] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3565'. [ 624.110659][T15111] netlink: 'syz.2.3566': attribute type 21 has an invalid length. [ 624.155865][T15111] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3566'. [ 624.174437][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.180881][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.365722][T15116] netlink: 'syz.3.3569': attribute type 27 has an invalid length. [ 624.374041][T15116] netlink: 'syz.3.3569': attribute type 4 has an invalid length. [ 624.388804][T15116] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3569'. [ 624.466410][T15111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.509925][T15111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.598643][T15111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.632485][T15111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.446998][T15135] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3579'. [ 625.589962][T15141] netlink: 'syz.1.3582': attribute type 21 has an invalid length. [ 625.645193][T15147] netlink: 'syz.3.3584': attribute type 10 has an invalid length. [ 625.662417][T15147] team0: Device hsr_slave_0 failed to register rx_handler [ 625.687997][T15149] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3581'. [ 626.019819][T15163] netlink: 'syz.0.3589': attribute type 39 has an invalid length. [ 626.538469][T15179] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3596'. [ 627.057015][T15190] netlink: 'syz.1.3600': attribute type 10 has an invalid length. [ 627.761988][T15190] team0: Device veth1_macvtap failed to register rx_handler [ 627.850443][T15196] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3601'. [ 627.874061][T15201] netlink: 'syz.2.3604': attribute type 39 has an invalid length. [ 628.154313][T15201] device hsr_slave_1 left promiscuous mode [ 628.239276][T15215] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3609'. [ 628.294713][T15206] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3606'. [ 629.145978][T15237] netlink: 'syz.0.3616': attribute type 10 has an invalid length. [ 629.645233][T15250] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3622'. [ 630.088189][T15260] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 630.106840][T15268] netlink: 'syz.1.3629': attribute type 10 has an invalid length. [ 630.166572][T15268] team0: Device hsr_slave_0 failed to register rx_handler [ 630.188257][T15260] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3624'. [ 630.262357][T15271] netlink: 'syz.0.3631': attribute type 17 has an invalid length. [ 630.279921][T15271] netlink: 'syz.0.3631': attribute type 16 has an invalid length. [ 630.288052][T15271] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3631'. [ 630.306856][T15264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3624'. [ 630.319644][T15260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3624'. [ 630.527308][T15276] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3633'. [ 630.549753][T15276] bridge_slave_1: default FDB implementation only supports local addresses [ 630.635694][T15281] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3635'. [ 630.908476][T15290] netlink: 'syz.1.3638': attribute type 33 has an invalid length. [ 630.937140][T15290] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3638'. [ 631.307275][T15301] netlink: 'syz.3.3645': attribute type 10 has an invalid length. [ 631.352957][T15301] team0: Device hsr_slave_0 failed to register rx_handler [ 631.555324][T15308] netlink: 'syz.2.3646': attribute type 1 has an invalid length. [ 631.576997][T15311] sctp: [Deprecated]: syz.4.3647 (pid 15311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.576997][T15311] Use struct sctp_sack_info instead [ 631.636200][T15308] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3646'. [ 631.692004][T15313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3646'. [ 631.735049][T15315] netlink: 'syz.3.3648': attribute type 28 has an invalid length. [ 632.830705][T15341] netlink: 'syz.0.3658': attribute type 10 has an invalid length. [ 633.240439][T15347] netlink: 'syz.0.3661': attribute type 10 has an invalid length. [ 633.515402][T15359] netlink: 'syz.0.3665': attribute type 28 has an invalid length. [ 633.898308][T15378] sctp: [Deprecated]: syz.3.3669 (pid 15378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.898308][T15378] Use struct sctp_sack_info instead [ 633.922922][T15377] netlink: 'syz.1.3671': attribute type 10 has an invalid length. [ 633.974022][T15377] team0: Device hsr_slave_0 failed to register rx_handler [ 634.286681][T15386] FAULT_INJECTION: forcing a failure. [ 634.286681][T15386] name failslab, interval 1, probability 0, space 0, times 0 [ 634.305047][T15386] CPU: 1 PID: 15386 Comm: syz.2.3675 Not tainted syzkaller #0 [ 634.312571][T15386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.322663][T15386] Call Trace: [ 634.325973][T15386] [ 634.328970][T15386] dump_stack_lvl+0x188/0x24e [ 634.333705][T15386] ? show_regs_print_info+0x12/0x12 [ 634.338959][T15386] ? load_image+0x400/0x400 [ 634.343512][T15386] ? __lock_acquire+0x7d10/0x7d10 [ 634.348581][T15386] should_fail_ex+0x399/0x4d0 [ 634.353303][T15386] should_failslab+0x5/0x20 [ 634.357862][T15386] slab_pre_alloc_hook+0x59/0x310 [ 634.362927][T15386] ? bpf_test_init+0x9f/0x140 [ 634.367675][T15386] __kmem_cache_alloc_node+0x4f/0x260 [ 634.373096][T15386] ? bpf_test_init+0x9f/0x140 [ 634.377833][T15386] __kmalloc+0xa0/0x240 [ 634.382061][T15386] bpf_test_init+0x9f/0x140 [ 634.386634][T15386] bpf_prog_test_run_xdp+0x484/0xf10 [ 634.391972][T15386] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 634.398182][T15386] ? lockdep_hardirqs_on+0x94/0x140 [ 634.403429][T15386] ? dev_put+0x80/0x80 [ 634.407559][T15386] ? dev_put+0x80/0x80 [ 634.411682][T15386] bpf_prog_test_run+0x31e/0x390 [ 634.416671][T15386] __sys_bpf+0x62b/0x780 [ 634.420968][T15386] ? bpf_link_show_fdinfo+0x380/0x380 [ 634.426405][T15386] ? lock_chain_count+0x20/0x20 [ 634.431303][T15386] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.437336][T15386] __x64_sys_bpf+0x78/0x90 [ 634.441796][T15386] do_syscall_64+0x4c/0xa0 [ 634.446247][T15386] ? clear_bhb_loop+0x60/0xb0 [ 634.450964][T15386] ? clear_bhb_loop+0x60/0xb0 [ 634.455683][T15386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.461610][T15386] RIP: 0033:0x7f8844f9cdd9 [ 634.466064][T15386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.485718][T15386] RSP: 002b:00007f8845ecc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 634.494181][T15386] RAX: ffffffffffffffda RBX: 00007f8845215fa0 RCX: 00007f8844f9cdd9 [ 634.502196][T15386] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 634.510239][T15386] RBP: 00007f8845ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 634.518253][T15386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.526266][T15386] R13: 00007f8845216038 R14: 00007f8845215fa0 R15: 00007fffc613bb98 [ 634.534304][T15386] [ 634.892403][T15395] netlink: 'syz.2.3676': attribute type 10 has an invalid length. [ 634.954490][T15395] team0: Device hsr_slave_0 failed to register rx_handler [ 635.078921][T15400] __nla_validate_parse: 4 callbacks suppressed [ 635.078958][T15400] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3680'. [ 635.227400][T15407] netlink: 'syz.3.3682': attribute type 16 has an invalid length. [ 635.258451][T15407] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3682'. [ 635.289348][T15406] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3679'. [ 635.450450][T15409] netlink: 'syz.0.3683': attribute type 2 has an invalid length. [ 635.500742][T15409] netlink: 175020 bytes leftover after parsing attributes in process `syz.0.3683'. [ 635.551601][T15409] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3683'. [ 635.610002][T15409] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 635.689240][T15409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 635.742458][T15414] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3685'. [ 635.849174][T15414] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 636.069020][T15425] team0: Device veth1_macvtap failed to register rx_handler [ 636.137372][T15431] sctp: [Deprecated]: syz.1.3689 (pid 15431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.137372][T15431] Use struct sctp_sack_info instead [ 636.383998][T15436] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3694'. [ 636.588989][T15442] validate_nla: 3 callbacks suppressed [ 636.589029][T15442] netlink: 'syz.0.3697': attribute type 1 has an invalid length. [ 636.619712][T15442] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3697'. [ 636.675783][T15442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3697'. [ 636.732314][T15442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3697'. [ 637.374481][T15456] netlink: 'syz.0.3700': attribute type 10 has an invalid length. [ 637.394916][T15460] netlink: 'syz.0.3700': attribute type 10 has an invalid length. [ 639.235142][T15526] netlink: 'syz.4.3728': attribute type 17 has an invalid length. [ 639.345506][T15526] netlink: 'syz.4.3728': attribute type 16 has an invalid length. [ 639.452691][T15533] netlink: 'syz.2.3729': attribute type 1 has an invalid length. [ 639.497582][T15537] netlink: 'syz.1.3731': attribute type 19 has an invalid length. [ 639.817684][T15546] FAULT_INJECTION: forcing a failure. [ 639.817684][T15546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.854398][T15546] CPU: 1 PID: 15546 Comm: syz.3.3735 Not tainted syzkaller #0 [ 639.862031][T15546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.872134][T15546] Call Trace: [ 639.875454][T15546] [ 639.878427][T15546] dump_stack_lvl+0x188/0x24e [ 639.883211][T15546] ? show_regs_print_info+0x12/0x12 [ 639.888471][T15546] ? load_image+0x400/0x400 [ 639.893034][T15546] ? __might_fault+0xa6/0x120 [ 639.897774][T15546] should_fail_ex+0x399/0x4d0 [ 639.902505][T15546] copyin+0x1b/0x120 [ 639.906446][T15546] _copy_from_iter+0x447/0x1130 [ 639.911363][T15546] ? copyout_mc+0x110/0x110 [ 639.915923][T15546] ? __virt_addr_valid+0x188/0x540 [ 639.921093][T15546] ? __virt_addr_valid+0x188/0x540 [ 639.926263][T15546] ? __virt_addr_valid+0x465/0x540 [ 639.931431][T15546] ? __check_object_size+0x500/0xa40 [ 639.936773][T15546] netlink_sendmsg+0x755/0xbd0 [ 639.941610][T15546] ? netlink_getsockopt+0x550/0x550 [ 639.946878][T15546] ? aa_sock_msg_perm+0x94/0x150 [ 639.951879][T15546] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 639.957213][T15546] ? security_socket_sendmsg+0x7c/0xa0 [ 639.962734][T15546] ? netlink_getsockopt+0x550/0x550 [ 639.967987][T15546] ____sys_sendmsg+0x5be/0x970 [ 639.972799][T15546] ? __sys_sendmsg_sock+0x30/0x30 [ 639.977857][T15546] ? __import_iovec+0x315/0x500 [ 639.982741][T15546] ? import_iovec+0x6f/0xa0 [ 639.987275][T15546] ___sys_sendmsg+0x2a2/0x360 [ 639.991992][T15546] ? __sys_sendmsg+0x290/0x290 [ 639.996807][T15546] ? rcu_is_watching+0x11/0xa0 [ 640.001633][T15546] __se_sys_sendmsg+0x1bb/0x2a0 [ 640.006521][T15546] ? __x64_sys_sendmsg+0x80/0x80 [ 640.011517][T15546] ? lockdep_hardirqs_on+0x94/0x140 [ 640.016749][T15546] do_syscall_64+0x4c/0xa0 [ 640.021197][T15546] ? clear_bhb_loop+0x60/0xb0 [ 640.025905][T15546] ? clear_bhb_loop+0x60/0xb0 [ 640.030618][T15546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.036548][T15546] RIP: 0033:0x7f5c12d9cdd9 [ 640.041004][T15546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.060636][T15546] RSP: 002b:00007f5c10ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.069072][T15546] RAX: ffffffffffffffda RBX: 00007f5c13015fa0 RCX: 00007f5c12d9cdd9 [ 640.077071][T15546] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 640.085070][T15546] RBP: 00007f5c10ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 640.093068][T15546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.101066][T15546] R13: 00007f5c13016038 R14: 00007f5c13015fa0 R15: 00007ffd54821138 [ 640.109078][T15546] [ 640.139172][T15550] netlink: 'syz.0.3737': attribute type 10 has an invalid length. [ 640.638556][T15565] __nla_validate_parse: 8 callbacks suppressed [ 640.638926][T15565] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3741'. [ 640.687478][T15566] netlink: 'syz.2.3743': attribute type 1 has an invalid length. [ 640.710633][T15568] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3743'. [ 640.753178][T15566] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3743'. [ 640.800562][T15568] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3743'. [ 641.038545][T15585] netlink: 'syz.2.3750': attribute type 10 has an invalid length. [ 641.070819][T15585] team0: Device hsr_slave_0 failed to register rx_handler [ 641.527942][T15602] device wlan1 entered promiscuous mode [ 641.605599][T15602] validate_nla: 1 callbacks suppressed [ 641.605636][T15602] netlink: 'syz.0.3757': attribute type 3 has an invalid length. [ 641.642836][T15602] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.3757'. [ 641.669445][T15607] sctp: [Deprecated]: syz.1.3759 (pid 15607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 641.669445][T15607] Use struct sctp_sack_info instead [ 641.968630][T15623] netlink: 'syz.2.3766': attribute type 10 has an invalid length. [ 641.997547][T15623] team0: Device hsr_slave_0 failed to register rx_handler [ 642.613313][T15636] netlink: 'syz.4.3771': attribute type 4 has an invalid length. [ 642.685681][T15636] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3771'. [ 642.791960][T15641] netlink: 'syz.0.3773': attribute type 4 has an invalid length. [ 642.841513][T15641] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3773'. [ 642.904535][T15641] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 643.394256][T15650] device wlan1 entered promiscuous mode [ 643.445519][T15650] netlink: 'syz.3.3776': attribute type 3 has an invalid length. [ 643.459088][T15650] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.3776'. [ 643.607070][T15659] netlink: 'syz.4.3780': attribute type 10 has an invalid length. [ 643.629794][T15659] team0: Device hsr_slave_0 failed to register rx_handler [ 643.815534][T15666] netlink: 'syz.3.3782': attribute type 39 has an invalid length. [ 643.928203][T15670] netlink: 'syz.4.3785': attribute type 1 has an invalid length. [ 644.010571][T15670] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3785'. [ 644.031559][T15674] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3785'. [ 644.099419][T15680] netlink: 'syz.1.3788': attribute type 10 has an invalid length. [ 644.142000][T15680] team0: Device veth1_macvtap failed to register rx_handler [ 644.267008][T15685] netlink: 'syz.2.3790': attribute type 10 has an invalid length. [ 644.277793][T15685] device bond0 entered promiscuous mode [ 644.283822][T15685] device bond_slave_0 entered promiscuous mode [ 644.290639][T15685] device bond_slave_1 entered promiscuous mode [ 644.297808][T15685] bridge0: port 3(bond0) entered blocking state [ 644.314564][T15685] bridge0: port 3(bond0) entered disabled state [ 644.355325][T15685] bridge0: port 3(bond0) entered blocking state [ 644.361864][T15685] bridge0: port 3(bond0) entered forwarding state [ 644.507154][T15691] device wlan1 entered promiscuous mode [ 644.516869][T15695] team0: Device hsr_slave_0 failed to register rx_handler [ 645.868018][T15751] __nla_validate_parse: 3 callbacks suppressed [ 645.868057][T15751] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3816'. [ 646.436670][T15773] team0: Device hsr_slave_0 failed to register rx_handler [ 646.833234][ T4810] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 647.046502][T15778] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3826'. [ 647.368718][T15796] validate_nla: 5 callbacks suppressed [ 647.368739][T15796] netlink: 'syz.3.3835': attribute type 17 has an invalid length. [ 647.389339][T15796] netlink: 'syz.3.3835': attribute type 16 has an invalid length. [ 647.398358][T15796] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3835'. [ 647.438771][T15799] netlink: 'syz.0.3836': attribute type 3 has an invalid length. [ 647.469724][T15799] netlink: 137972 bytes leftover after parsing attributes in process `syz.0.3836'. [ 647.553545][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 647.637686][T15806] netlink: 'syz.2.3837': attribute type 33 has an invalid length. [ 647.706018][T15806] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3837'. [ 648.035359][T15827] netlink: 'syz.2.3843': attribute type 1 has an invalid length. [ 648.059870][T15827] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3843'. [ 648.112909][T15827] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3843'. [ 648.183490][T15830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3843'. [ 648.276730][T15834] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3847'. [ 648.287954][T15836] FAULT_INJECTION: forcing a failure. [ 648.287954][T15836] name failslab, interval 1, probability 0, space 0, times 0 [ 648.321351][T15836] CPU: 0 PID: 15836 Comm: syz.1.3848 Not tainted syzkaller #0 [ 648.328875][T15836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.338961][T15836] Call Trace: [ 648.342305][T15836] [ 648.345282][T15836] dump_stack_lvl+0x188/0x24e [ 648.350009][T15836] ? irqentry_enter+0x33/0x50 [ 648.354729][T15836] ? show_regs_print_info+0x12/0x12 [ 648.359979][T15836] ? load_image+0x400/0x400 [ 648.364526][T15836] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 648.370568][T15836] ? lock_chain_count+0x20/0x20 [ 648.375467][T15836] should_fail_ex+0x399/0x4d0 [ 648.380193][T15836] should_failslab+0x5/0x20 [ 648.384723][T15836] slab_pre_alloc_hook+0x59/0x310 [ 648.389777][T15836] kmem_cache_alloc+0x56/0x2f0 [ 648.394576][T15836] ? skb_clone+0x1e7/0x370 [ 648.399078][T15836] skb_clone+0x1e7/0x370 [ 648.403366][T15836] __netlink_deliver_tap+0x3ed/0x800 [ 648.408695][T15836] ? netlink_deliver_tap+0x2e/0x1b0 [ 648.413937][T15836] netlink_deliver_tap+0x19c/0x1b0 [ 648.419100][T15836] netlink_unicast+0x728/0x8d0 [ 648.423917][T15836] netlink_sendmsg+0x8ad/0xbd0 [ 648.428756][T15836] ? netlink_getsockopt+0x550/0x550 [ 648.434034][T15836] ? aa_sock_msg_perm+0x94/0x150 [ 648.439002][T15836] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 648.444306][T15836] ? security_socket_sendmsg+0x7c/0xa0 [ 648.449803][T15836] ? netlink_getsockopt+0x550/0x550 [ 648.455049][T15836] ____sys_sendmsg+0x5be/0x970 [ 648.459868][T15836] ? __sys_sendmsg_sock+0x30/0x30 [ 648.464940][T15836] ? ___sys_sendmsg+0x287/0x360 [ 648.469855][T15836] ___sys_sendmsg+0x2a2/0x360 [ 648.474566][T15836] ? __sys_sendmsg+0x290/0x290 [ 648.479402][T15836] ? ktime_get_real_ts64+0x440/0x440 [ 648.484745][T15836] __se_sys_sendmsg+0x1bb/0x2a0 [ 648.489638][T15836] ? __x64_sys_sendmsg+0x80/0x80 [ 648.494653][T15836] ? lockdep_hardirqs_on+0x94/0x140 [ 648.499884][T15836] do_syscall_64+0x4c/0xa0 [ 648.504333][T15836] ? clear_bhb_loop+0x60/0xb0 [ 648.509036][T15836] ? clear_bhb_loop+0x60/0xb0 [ 648.513740][T15836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.519664][T15836] RIP: 0033:0x7f4e3f59cdd9 [ 648.524102][T15836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.543749][T15836] RSP: 002b:00007f4e40440028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.552211][T15836] RAX: ffffffffffffffda RBX: 00007f4e3f815fa0 RCX: 00007f4e3f59cdd9 [ 648.560225][T15836] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 648.568237][T15836] RBP: 00007f4e40440090 R08: 0000000000000000 R09: 0000000000000000 [ 648.576238][T15836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.584255][T15836] R13: 00007f4e3f816038 R14: 00007f4e3f815fa0 R15: 00007ffdae188568 [ 648.592271][T15836] [ 648.698588][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.749831][T15836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.866014][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.900038][T15836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.434865][T15847] netlink: 'syz.4.3852': attribute type 10 has an invalid length. [ 649.447489][T15847] team0: Device hsr_slave_0 failed to register rx_handler [ 650.314232][T15884] netlink: 'syz.2.3866': attribute type 10 has an invalid length. [ 650.386575][T15884] team0: Device hsr_slave_0 failed to register rx_handler [ 650.395317][T15882] netlink: 'syz.1.3865': attribute type 1 has an invalid length. [ 650.561862][T15891] netlink: 'syz.2.3870': attribute type 4 has an invalid length. [ 650.872824][T15891] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 650.920078][T15895] __nla_validate_parse: 6 callbacks suppressed [ 650.920130][T15895] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3871'. [ 650.967039][T15901] netlink: 'syz.0.3874': attribute type 39 has an invalid length. [ 651.202643][T15903] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.3875'. [ 651.293764][T15908] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3876'. [ 651.316585][T15913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3876'. [ 651.376168][T15911] team0: Device veth1_macvtap failed to register rx_handler [ 651.406814][T15908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3876'. [ 651.516818][T15916] team0: Device hsr_slave_0 failed to register rx_handler [ 651.701577][T15918] device syzkaller0 entered promiscuous mode [ 651.850126][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 654.146155][T15941] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3888'. [ 654.155703][T15936] validate_nla: 7 callbacks suppressed [ 654.155717][T15936] netlink: 'syz.0.3887': attribute type 29 has an invalid length. [ 654.169954][T15947] netlink: 'syz.3.3891': attribute type 10 has an invalid length. [ 654.178191][T15947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3891'. [ 654.189860][T15947] device ipvlan1 entered promiscuous mode [ 654.212380][T15947] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 654.448575][T15958] netlink: 'syz.4.3894': attribute type 10 has an invalid length. [ 654.461067][T15958] team0: Device hsr_slave_0 failed to register rx_handler [ 654.830515][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3897'. [ 655.512193][T15977] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3902'. [ 655.538934][T15978] bridge0: port 3(bond0) entered disabled state [ 655.609121][T15978] device bridge_slave_1 left promiscuous mode [ 655.670199][T15978] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.774814][T15978] device bridge_slave_0 left promiscuous mode [ 655.818544][T15978] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.216975][T15980] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3903'. [ 656.263782][T15997] netlink: 'syz.4.3909': attribute type 10 has an invalid length. [ 656.299408][T15997] team0: Device hsr_slave_0 failed to register rx_handler [ 656.517207][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'. [ 656.535101][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 656.547603][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 656.560695][T16001] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3911'. [ 656.625845][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 656.666465][T16001] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3911'. [ 656.724305][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 656.735431][T16001] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3911'. [ 656.829889][T16011] netlink: 'syz.4.3915': attribute type 17 has an invalid length. [ 656.837802][T16011] netlink: 'syz.4.3915': attribute type 16 has an invalid length. [ 656.880249][T16011] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3915'. [ 656.959159][T16014] netlink: 'syz.2.3917': attribute type 10 has an invalid length. [ 656.970847][T16014] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 657.448227][T16016] delete_channel: no stack [ 657.998659][T16032] bridge_slave_1: default FDB implementation only supports local addresses [ 658.752247][T16065] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 659.835426][T16091] sctp: [Deprecated]: syz.1.3943 (pid 16091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.835426][T16091] Use struct sctp_sack_info instead [ 660.447249][T16102] netlink: 'syz.3.3951': attribute type 29 has an invalid length. [ 660.517694][T16102] netlink: 'syz.3.3951': attribute type 29 has an invalid length. [ 660.817237][T16114] netlink: 'syz.4.3957': attribute type 4 has an invalid length. [ 660.847888][T16114] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 661.095735][T16125] netlink: 'syz.2.3962': attribute type 10 has an invalid length. [ 661.174781][T16125] team0: Port device macvlan0 added [ 661.416248][T16137] __nla_validate_parse: 12 callbacks suppressed [ 661.416269][T16137] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3966'. [ 661.473299][T16134] netlink: 'syz.0.3965': attribute type 1 has an invalid length. [ 661.482333][T16134] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3965'. [ 661.516366][T16138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3965'. [ 661.593891][T16134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3965'. [ 662.170038][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 662.435464][T16157] netlink: 'syz.2.3971': attribute type 10 has an invalid length. [ 662.549404][T16157] team0: Device veth1_macvtap failed to register rx_handler [ 662.987887][T16172] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3978'. [ 663.264994][T16177] netlink: 'syz.0.3981': attribute type 10 has an invalid length. [ 663.295777][T16174] netlink: 'syz.1.3979': attribute type 16 has an invalid length. [ 663.309142][T16174] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3979'. [ 663.693570][T16189] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3985'. [ 664.143399][T16203] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3990'. [ 664.208647][T16204] netlink: 'syz.2.3990': attribute type 11 has an invalid length. [ 664.217279][T16204] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3990'. [ 664.390490][T16213] netlink: 'syz.1.3993': attribute type 3 has an invalid length. [ 664.407868][T16213] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3993'. [ 664.633301][T16221] team0: Device hsr_slave_0 failed to register rx_handler [ 665.827772][T16260] validate_nla: 3 callbacks suppressed [ 665.827791][T16260] netlink: 'syz.3.4011': attribute type 10 has an invalid length. [ 665.873963][T16260] team0: Device hsr_slave_0 failed to register rx_handler [ 666.186087][T16267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.237951][T16267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.319350][T16267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.359756][T16267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.811259][T16279] __nla_validate_parse: 3 callbacks suppressed [ 666.811357][T16279] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4019'. [ 666.855029][T16279] bridge_slave_1: default FDB implementation only supports local addresses [ 667.065804][T16292] __sock_release: fasync list not empty! [ 667.345820][T16303] netlink: 'syz.0.4029': attribute type 1 has an invalid length. [ 667.367133][T16303] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4029'. [ 667.551578][T16303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4029'. [ 667.623735][T16311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4029'. [ 668.694710][T16334] netlink: 'syz.1.4041': attribute type 10 has an invalid length. [ 668.812262][T16342] netlink: 'syz.4.4044': attribute type 10 has an invalid length. [ 668.824562][T16341] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4045'. [ 668.844879][T16342] team0: Device hsr_slave_0 failed to register rx_handler [ 668.926938][T16341] netlink: 129160 bytes leftover after parsing attributes in process `syz.0.4045'. [ 668.957966][T16346] sctp: [Deprecated]: syz.2.4046 (pid 16346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.957966][T16346] Use struct sctp_sack_info instead [ 670.589903][T16380] netlink: 'syz.3.4060': attribute type 13 has an invalid length. [ 670.602159][T16380] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4060'. [ 670.670881][T16380] erspan0: refused to change device tx_queue_len [ 670.712083][T16382] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4061'. [ 670.859026][T16387] netlink: 'syz.0.4065': attribute type 10 has an invalid length. [ 670.899854][T16387] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4065'. [ 670.924911][T16389] netlink: 'syz.1.4064': attribute type 1 has an invalid length. [ 670.952066][T16389] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4064'. [ 671.369846][T16402] netlink: 'syz.3.4070': attribute type 10 has an invalid length. [ 671.403652][T16402] team0: Device hsr_slave_0 failed to register rx_handler [ 671.508040][T16412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.532522][T16412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.596078][T16412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.604678][T16412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.758493][T16418] netlink: 'syz.3.4075': attribute type 21 has an invalid length. [ 671.981424][T16426] netlink: 'syz.2.4078': attribute type 10 has an invalid length. [ 672.018805][T16426] team0: Device veth1_macvtap failed to register rx_handler [ 672.667934][T16450] netlink: 'syz.4.4085': attribute type 10 has an invalid length. [ 672.682584][T16450] team0: Device hsr_slave_0 failed to register rx_handler [ 673.105026][T16460] netlink: 'syz.1.4088': attribute type 21 has an invalid length. [ 673.113268][T16460] __nla_validate_parse: 3 callbacks suppressed [ 673.113284][T16460] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4088'. [ 673.344863][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4086'. [ 673.807972][T16475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4092'. [ 674.204313][T16482] netlink: 'syz.3.4096': attribute type 17 has an invalid length. [ 674.254562][T16482] netlink: 'syz.3.4096': attribute type 16 has an invalid length. [ 674.274996][T16482] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4096'. [ 674.717624][T16495] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4101'. [ 674.810060][T16497] netlink: 'syz.4.4100': attribute type 10 has an invalid length. [ 674.818053][T16496] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4101'. [ 674.861880][T16497] team0: Device hsr_slave_0 failed to register rx_handler [ 674.967302][T16502] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4103'. [ 675.231064][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4105'. [ 675.868308][T16521] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4110'. [ 675.910513][T16521] bridge_slave_1: default FDB implementation only supports local addresses [ 675.948626][T16532] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4112'. [ 676.287430][T16538] validate_nla: 1 callbacks suppressed [ 676.287447][T16538] netlink: 'syz.3.4116': attribute type 10 has an invalid length. [ 676.400562][T16538] team0: Device hsr_slave_0 failed to register rx_handler [ 677.176411][T16570] sctp: [Deprecated]: syz.3.4129 (pid 16570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 677.176411][T16570] Use struct sctp_sack_info instead [ 677.340536][T16576] netlink: 'syz.1.4132': attribute type 10 has an invalid length. [ 677.391917][T16576] team0: Device hsr_slave_0 failed to register rx_handler [ 678.009594][T16591] netlink: 'syz.0.4138': attribute type 1 has an invalid length. [ 678.130953][T16595] __nla_validate_parse: 6 callbacks suppressed [ 678.131050][T16595] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4140'. [ 678.167775][T16591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4138'. [ 678.675020][T16613] netlink: 'syz.0.4147': attribute type 10 has an invalid length. [ 678.744765][T16615] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4149'. [ 678.773803][T16619] netlink: 'syz.3.4150': attribute type 10 has an invalid length. [ 678.799668][T16619] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4150'. [ 678.831916][T16619] device bond0 entered promiscuous mode [ 678.837561][T16619] device bond_slave_0 entered promiscuous mode [ 678.871243][T16619] device bond_slave_1 entered promiscuous mode [ 678.926493][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'. [ 679.595521][T16632] netlink: 'syz.2.4154': attribute type 1 has an invalid length. [ 679.632702][T16634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4154'. [ 679.725671][T16632] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4154'. [ 679.804960][T16634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4154'. [ 679.820049][T16635] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4155'. [ 679.970327][T16639] netlink: 'syz.3.4156': attribute type 1 has an invalid length. [ 679.978475][T16639] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4156'. [ 680.497209][T16655] netlink: 'syz.2.4164': attribute type 2 has an invalid length. [ 680.512748][T16655] netlink: 'syz.2.4164': attribute type 8 has an invalid length. [ 680.708767][T16661] device wg2 left promiscuous mode [ 680.798857][T16664] device wg2 entered promiscuous mode [ 680.822689][T16663] netlink: 'syz.0.4166': attribute type 12 has an invalid length. [ 681.729984][T16688] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.376656][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 682.447596][T16703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.569629][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 682.926031][T16725] validate_nla: 4 callbacks suppressed [ 682.926065][T16725] netlink: 'syz.3.4187': attribute type 10 has an invalid length. [ 683.330369][T16743] netlink: 'syz.2.4195': attribute type 10 has an invalid length. [ 683.362970][T16743] team0: Device hsr_slave_0 failed to register rx_handler [ 683.397550][T16739] __nla_validate_parse: 16 callbacks suppressed [ 683.397725][T16739] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4193'. [ 683.481630][T16745] device syzkaller0 entered promiscuous mode [ 683.497188][T16750] netlink: 'syz.1.4197': attribute type 17 has an invalid length. [ 683.507521][T16750] netlink: 'syz.1.4197': attribute type 16 has an invalid length. [ 683.517374][T16750] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4197'. [ 683.528060][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 683.643964][T16752] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4199'. [ 684.620559][T16784] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4210'. [ 684.962004][T16791] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4213'. [ 685.540075][T16808] netlink: 'syz.2.4219': attribute type 27 has an invalid length. [ 685.569677][T16808] netlink: 'syz.2.4219': attribute type 4 has an invalid length. [ 685.577582][T16808] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4219'. [ 685.619005][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.625445][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.800457][T16790] netlink: 'syz.0.4211': attribute type 46 has an invalid length. [ 685.808376][T16790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4211'. [ 685.928142][T16816] netlink: 'syz.2.4223': attribute type 10 has an invalid length. [ 685.950822][T16816] team0: Device hsr_slave_0 failed to register rx_handler [ 686.690946][T16829] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4225'. [ 687.997526][T16856] netlink: 'syz.3.4235': attribute type 3 has an invalid length. [ 688.021757][T16856] netlink: 'syz.3.4235': attribute type 1 has an invalid length. [ 688.032640][T16855] netlink: 'syz.4.4236': attribute type 10 has an invalid length. [ 688.044776][T16856] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.4235'. [ 688.061818][T16855] team0: Device hsr_slave_0 failed to register rx_handler [ 688.068556][T16853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4234'. [ 688.535719][T16864] __nla_validate_parse: 1 callbacks suppressed [ 688.536014][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4239'. [ 689.074021][T16869] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4241'. [ 689.541762][T16881] netlink: 'syz.0.4242': attribute type 3 has an invalid length. [ 689.590402][T16881] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4242'. [ 689.618267][T16883] netlink: 'syz.3.4248': attribute type 29 has an invalid length. [ 689.665280][T16883] netlink: 'syz.3.4248': attribute type 29 has an invalid length. [ 690.994511][T16907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4256'. [ 691.031362][T16909] netlink: 'syz.0.4257': attribute type 10 has an invalid length. [ 691.075424][T16909] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4257'. [ 691.532641][T16914] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4258'. [ 692.113256][T16922] netlink: 'syz.1.4261': attribute type 1 has an invalid length. [ 692.185649][T16925] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4261'. [ 692.252650][T16927] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4261'. [ 692.315104][T16922] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.4261'. [ 692.382824][T16928] netlink: 'syz.0.4263': attribute type 10 has an invalid length. [ 692.513109][T16931] netlink: 'syz.4.4265': attribute type 9 has an invalid length. [ 692.549817][T16931] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4265'. [ 693.476911][T16950] validate_nla: 4 callbacks suppressed [ 693.476931][T16950] netlink: 'syz.0.4272': attribute type 3 has an invalid length. [ 693.524250][T16950] netlink: 'syz.0.4272': attribute type 1 has an invalid length. [ 693.689717][T16950] __nla_validate_parse: 4 callbacks suppressed [ 693.689737][T16950] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.4272'. [ 693.699672][T16952] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4271'. [ 694.912892][T16966] netlink: 'syz.4.4276': attribute type 10 has an invalid length. [ 694.990321][T16966] team0: Device hsr_slave_0 failed to register rx_handler [ 695.543820][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4282'. [ 695.967591][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4283'. [ 696.499998][T16992] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4285'. [ 696.745673][T16995] netlink: 'syz.2.4286': attribute type 10 has an invalid length. [ 696.765022][T16995] team0: Device veth1_macvtap failed to register rx_handler [ 697.156702][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4288'. [ 698.315885][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4295'. [ 698.439310][T17034] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4300'. [ 698.502231][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4298'. [ 698.896415][T17043] netlink: 'syz.1.4302': attribute type 29 has an invalid length. [ 698.920877][T17042] netlink: 'syz.3.4303': attribute type 27 has an invalid length. [ 698.928775][T17042] netlink: 'syz.3.4303': attribute type 4 has an invalid length. [ 699.000489][T17042] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4303'. [ 699.039616][T17043] netlink: 'syz.1.4302': attribute type 29 has an invalid length. [ 699.125084][T17047] netlink: 'syz.0.4305': attribute type 19 has an invalid length. [ 699.162058][T17047] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.4305'. [ 699.230641][T17043] netlink: 'syz.1.4302': attribute type 10 has an invalid length. [ 699.372093][T17043] team0: Port device wlan1 added [ 699.894363][T17063] device syzkaller0 entered promiscuous mode [ 700.258135][T17068] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4312'. [ 700.656577][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4314'. [ 713.289710][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 715.160053][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 715.169387][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 715.179822][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 715.188797][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 715.199620][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 715.207151][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 715.501958][T17077] chnl_net:caif_netlink_parms(): no params data found [ 715.625803][T17077] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.636879][T17077] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.645901][T17077] device bridge_slave_0 entered promiscuous mode [ 715.660689][T17077] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.667964][T17077] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.681806][T17077] device bridge_slave_1 entered promiscuous mode [ 715.727434][T17077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.744600][T17077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.787850][T17077] team0: Port device team_slave_0 added [ 715.798888][T17077] team0: Port device team_slave_1 added [ 715.839433][T17077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.848396][T17077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.892477][T17077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.926529][T17077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.959671][T17077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.052551][T17077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.289718][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 717.544699][ T4277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 717.554433][ T4277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 717.566844][ T4277] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 717.576455][T12754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 717.584893][T12754] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 717.592570][T12754] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 717.981020][T12754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 717.994918][T12754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 718.003922][T12754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 718.018394][ T4277] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 718.027015][ T4277] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 718.035212][ T4277] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 718.135799][ T4277] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 718.145242][ T4277] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 718.157780][ T4277] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 718.167154][ T4277] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 718.183894][ T4277] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 718.191664][ T4277] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 718.281099][ T4286] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 718.299141][ T4286] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 718.307916][ T4286] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 718.320783][ T4286] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 718.328684][ T4286] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 718.341651][ T4286] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 719.369770][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 719.609777][ T4277] Bluetooth: hci6: command 0x0409 tx timeout [ 720.089799][ T4277] Bluetooth: hci7: command 0x0409 tx timeout [ 720.250015][ T4277] Bluetooth: hci8: command 0x0409 tx timeout [ 720.409737][ T4277] Bluetooth: hci9: command 0x0409 tx timeout [ 721.453712][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 721.689650][ T4277] Bluetooth: hci6: command 0x041b tx timeout [ 722.169820][ T4277] Bluetooth: hci7: command 0x041b tx timeout [ 722.329642][ T4277] Bluetooth: hci8: command 0x041b tx timeout [ 722.489707][ T4277] Bluetooth: hci9: command 0x041b tx timeout [ 723.529748][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 723.769654][ T4277] Bluetooth: hci6: command 0x040f tx timeout [ 724.249680][ T4277] Bluetooth: hci7: command 0x040f tx timeout [ 724.409672][ T4277] Bluetooth: hci8: command 0x040f tx timeout [ 724.569839][ T4277] Bluetooth: hci9: command 0x040f tx timeout [ 725.849616][ T4277] Bluetooth: hci6: command 0x0419 tx timeout [ 726.329609][ T4277] Bluetooth: hci7: command 0x0419 tx timeout [ 726.489637][ T4277] Bluetooth: hci8: command 0x0419 tx timeout [ 726.571522][ T4318] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2634 jiffies s: 67777 root: 0x1/. [ 726.593854][ T4318] rcu: blocking rcu_node structures (internal RCU debug): [ 726.603316][ T4318] Sending NMI from CPU 1 to CPUs 0: [ 726.608596][ C0] NMI backtrace for cpu 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 726.608607][ C0] CPU: 0 PID: 17052 Comm: syz.3.4306 Not tainted syzkaller #0 [ 726.608624][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.608634][ C0] RIP: 0010:kasan_record_aux_stack_noalloc+0x0/0x10 [ 726.608657][ C0] Code: 1e 48 01 c8 74 19 8b 48 08 89 48 0c 0f b6 f3 bf 00 08 00 00 48 89 c3 e8 4e dc ff ff 89 43 08 5b 41 5e 41 5f c3 0f 1f 44 00 00 <31> f6 e9 39 ff ff ff 66 0f 1f 84 00 00 00 00 00 48 63 87 bc 00 00 [ 726.608671][ C0] RSP: 0018:ffffc90000007620 EFLAGS: 00000046 [ 726.608686][ C0] RAX: ffffffff818ecb91 RBX: ffff8880b8e3b9f0 RCX: 0000000000000100 [ 726.608698][ C0] RDX: ffff888065bb8000 RSI: 0000000000000000 RDI: ffff8880b8e3b9f0 [ 726.608710][ C0] RBP: 0000000000000000 R08: ffff8880b8e3b9fb R09: 1ffff110171c773f [ 726.608722][ C0] R10: dffffc0000000000 R11: ffffed10171c7740 R12: 0000000000000000 [ 726.608733][ C0] R13: dffffc0000000001 R14: 0000000000000000 R15: ffff8880b8e3b9f8 [ 726.608745][ C0] FS: 00007f5c10ff66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 726.608760][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 726.608771][ C0] CR2: 00007fc17dc7bff8 CR3: 000000005794d000 CR4: 00000000003506f0 [ 726.608786][ C0] DR0: 00000000000000d4 DR1: 0000200000000300 DR2: 0000000000000000 [ 726.608797][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 726.608807][ C0] Call Trace: [ 726.608812][ C0] [ 726.608817][ C0] irq_work_queue_on+0x10f/0x260 [ 726.608847][ C0] rcu_read_unlock_special+0x3c9/0x510 [ 726.608869][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 726.608886][ C0] ? __cant_sleep+0x220/0x220 [ 726.608907][ C0] __rcu_read_unlock+0x78/0xd0 [ 726.608922][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 726.608945][ C0] trace_call_bpf+0x5bb/0x6b0 [ 726.608969][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 726.608994][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 726.609020][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 726.609035][ C0] ? sched_clock_cpu+0x6e/0x260 [ 726.609064][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 726.609112][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 726.609139][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 726.609163][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 726.609190][ C0] ? __irq_exit_rcu+0x147/0x230 [ 726.609207][ C0] ? irq_exit_rcu+0x20/0x20 [ 726.609226][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 726.609249][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 726.609276][ C0] trace_hardirqs_on+0x24/0x40 [ 726.609298][ C0] asm_sysvec_irq_work+0x16/0x20 [ 726.609321][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 726.609341][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 726.609355][ C0] RSP: 0018:ffffc90000007ac0 EFLAGS: 00000206 [ 726.609369][ C0] RAX: 16d452f0412acb00 RBX: 1ffff92000000f60 RCX: 16d452f0412acb00 [ 726.609382][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf1320 [ 726.609395][ C0] RBP: ffffc90000007bb0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 726.609408][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246 [ 726.609421][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 726.609447][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 726.609473][ C0] __rcu_read_unlock+0x78/0xd0 [ 726.609490][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 726.609520][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 726.609543][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 726.609574][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 726.609608][ C0] __hrtimer_run_queues+0x54a/0xd50 [ 726.609636][ C0] ? hw_scan_work+0xf50/0xf50 [ 726.609667][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 726.609686][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 726.609715][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 726.609738][ C0] handle_softirqs+0x2a1/0x930 [ 726.609759][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 726.609779][ C0] ? do_softirq+0x210/0x210 [ 726.609801][ C0] __irq_exit_rcu+0x13b/0x230 [ 726.609818][ C0] ? irq_exit_rcu+0x20/0x20 [ 726.609841][ C0] irq_exit_rcu+0x5/0x20 [ 726.609856][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 726.609877][ C0] [ 726.609881][ C0] [ 726.609887][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 726.609910][ C0] RIP: 0010:__might_sleep+0x0/0xd0 [ 726.609927][ C0] Code: 00 00 00 00 fc ff df e9 80 fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 95 fe ff ff 48 89 df e8 29 f3 78 00 e9 88 fe ff ff 0f 1f 40 00 <55> 41 57 41 56 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 1d [ 726.609942][ C0] RSP: 0018:ffffc90004387b70 EFLAGS: 00000246 [ 726.609956][ C0] RAX: ffffffff81c0ac9e RBX: ffff888065bb8000 RCX: 0000000000000002 [ 726.609969][ C0] RDX: ffff888065bb8000 RSI: 000000000000000e RDI: ffffffff8aded120 [ 726.609981][ C0] RBP: 000000000000000e R08: ffffea0005007b87 R09: 1ffffd4000a00f70 [ 726.609994][ C0] R10: dffffc0000000000 R11: fffff94000a00f71 R12: dffffc0000000000 [ 726.610007][ C0] R13: 1ffff92000870f90 R14: ffffffff8aded120 R15: 0000000000000000 [ 726.610024][ C0] ? __might_fault+0x4e/0x120 [ 726.610046][ C0] __might_fault+0x6d/0x120 [ 726.610073][ C0] _copy_from_user+0x27/0x170 [ 726.610098][ C0] generic_map_update_batch+0x4a1/0x810 [ 726.610131][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 726.610155][ C0] ? __fdget+0x17c/0x200 [ 726.610181][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 726.610201][ C0] bpf_map_do_batch+0x466/0x600 [ 726.610231][ C0] __sys_bpf+0x6f7/0x780 [ 726.610256][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 726.610290][ C0] ? lock_chain_count+0x20/0x20 [ 726.610314][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 726.610344][ C0] __x64_sys_bpf+0x78/0x90 [ 726.610379][ C0] do_syscall_64+0x4c/0xa0 [ 726.610402][ C0] ? clear_bhb_loop+0x60/0xb0 [ 726.610423][ C0] ? clear_bhb_loop+0x60/0xb0 [ 726.610446][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.610466][ C0] RIP: 0033:0x7f5c12d9cdd9 [ 726.610480][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.610494][ C0] RSP: 002b:00007f5c10ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 726.610509][ C0] RAX: ffffffffffffffda RBX: 00007f5c13015fa0 RCX: 00007f5c12d9cdd9 [ 726.610521][ C0] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 726.610532][ C0] RBP: 00007f5c12e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 726.610542][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.610552][ C0] R13: 00007f5c13016038 R14: 00007f5c13015fa0 R15: 00007ffd54821138 [ 726.610573][ C0] [ 726.649888][ T4277] Bluetooth: hci9: command 0x0419 tx timeout