last executing test programs: 1.739654649s ago: executing program 2 (id=6576): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x985, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$kcm(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001480)={@cgroup=r0, r1, 0x2f, 0x10, 0x4}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x7}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000007c0)={0x1, 0x80, 0xf6, 0x2, 0x80, 0x9, 0x0, 0xfff, 0x4024, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x2, @perf_config_ext={0x10001, 0x8}, 0x0, 0xe, 0x28, 0x9, 0xa, 0x8, 0xc, 0x0, 0x10001, 0x0, 0x400}) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.529732594s ago: executing program 4 (id=6579): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'bridge_slave_1\x00', @random="010000201000"}) 1.439901836s ago: executing program 3 (id=6580): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x10081, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffc1, 0xa5}, 0x0, 0x10, 0x4, 0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x2000000}, 0x200000, 0x10, &(0x7f0000001300), 0x143}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x36, 0x0, &(0x7f0000000380)="52540012345652540012345786dd600000000000bb400000000000000000200000000000000100000000000000000000ffff00000001", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) 1.439398506s ago: executing program 1 (id=6581): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x74802, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xfffffffffffffffc}, 0x0, 0xca, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x2c00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000efffffff000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000a40)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x80, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 1.439026656s ago: executing program 4 (id=6582): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x705, 0x10}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000400)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x40880) 1.427168686s ago: executing program 2 (id=6583): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f00000047c0)={&(0x7f0000000640)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=[{0x10, 0xff, 0x7ff}], 0x10}, 0x4000) 1.394393147s ago: executing program 0 (id=6584): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x100301, 0x0, 0x7ff, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4145, 0xed8d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00K'], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.25501457s ago: executing program 2 (id=6585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8004745a, 0x0) 1.125482633s ago: executing program 4 (id=6586): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x104, 0x35, 0x43a1bd76, 0x7, 0x3, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x802}, [@exit]}, &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) 1.124950044s ago: executing program 1 (id=6587): r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000001540), 0x11) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000001580), 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000017c0)=""/4113, 0x1011}], 0x1}, 0x10100) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, 0x0, 0x8080) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x23, 0x2, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0x7f}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000000008009677e7844fa05eb515000000d1d1980000000000950000000000f38e6564f720aa360000e4ea3bdf8800b369c94efedcc39900cf4a1e04fe2a20ff588176fc4ac6dde2e0"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/1219], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x2}, 0x8, 0x10, &(0x7f0000001300), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r4, 0x702, 0xe, 0x700, &(0x7f00000013c0)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x7, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="560a00000400000061b588d96cbb227640000f0000000000c787"], &(0x7f00000009c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=r0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r5}, &(0x7f0000000380), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.063859225s ago: executing program 0 (id=6588): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14084, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 1.063094265s ago: executing program 4 (id=6598): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000600030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20008810) 1.035988646s ago: executing program 2 (id=6589): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000980)={&(0x7f00000009c0)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="89000000120081ae08060cdc030ec0007f03e3f700000fff00e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 932.339598ms ago: executing program 2 (id=6590): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x985, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffeff}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000182000", @ANYRES32=r3], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$kcm(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001480)={@cgroup=r0, r1, 0x2f, 0x10, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000007c0)={0x1, 0x80, 0xf6, 0x2, 0x80, 0x9, 0x0, 0xfff, 0x4024, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x2, @perf_config_ext={0x10001, 0x8}, 0x0, 0xe, 0x28, 0x9, 0xa, 0x8, 0xc, 0x0, 0x10001, 0x0, 0x400}) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) 932.167838ms ago: executing program 3 (id=6591): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x0, 0x10, &(0x7f0000000800), 0x2ca}, 0x48) r1 = perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000bc0)="b90103606989068c3c27004065582f9e0ff008001fffffe1ffff86dd632f0806080600017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000c00)="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", &(0x7f0000000d40)}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) 931.838568ms ago: executing program 4 (id=6592): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa1c4, 0x32, 0x43a1bd72, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x184b}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 843.92835ms ago: executing program 1 (id=6593): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/uts\x00') sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 822.207901ms ago: executing program 1 (id=6594): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000000780)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c}, [@call={0x25, 0x0, 0x0, 0x98000000}], {0x95, 0x0, 0xd00}}, &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000800)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={&(0x7f0000000900)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0xe900) write$cgroup_subtree(r0, &(0x7f0000000980)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000a80)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x180a2, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x2241, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000e00)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x1e, 0x4, &(0x7f0000000f00)=ANY=[], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0d0000000a000000040000000100"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000001040)) perf_event_open$cgroup(&(0x7f0000001080)={0x5, 0x80, 0xfb, 0x8, 0x0, 0x7, 0x0, 0x7, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x100000000, 0x654}, 0x13300, 0x9, 0x8, 0x2, 0x2, 0x5, 0x9, 0x0, 0x0, 0x0, 0x4f}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140), 0x2, 0x0, 0xfffffffffffffcfb}, 0x30040805) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 675.009344ms ago: executing program 0 (id=6595): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x16, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r1, 0x0, 0xe, 0x0, &(0x7f0000000f00)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 624.742615ms ago: executing program 4 (id=6596): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000180)={r1}) 624.223285ms ago: executing program 3 (id=6597): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000340), 0xe) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)}], 0x1}, 0x20000050) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000002) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 521.415128ms ago: executing program 1 (id=6599): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 475.654699ms ago: executing program 2 (id=6600): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x10081, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffc1, 0xa5}, 0x0, 0x10, 0x4, 0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x2000000}, 0x200000, 0x10, &(0x7f0000001300), 0x143}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x36, 0x0, &(0x7f0000000380)="52540012345652540012345786dd600000000000bb400000000000000000200000000000000100000000000000000000ffff00000001", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) 412.133521ms ago: executing program 0 (id=6601): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000b40), 0x120) 401.04611ms ago: executing program 3 (id=6602): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x9a5b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086602, 0x110e22fff2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x10, 0x0, 0xc) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9454, 0xffffffffffffffff, 0x0, &(0x7f0000000c00), 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) sendmsg$inet(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004d80)=[{0x0}, {&(0x7f0000002ac0)="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", 0x725}, {0x0}, {&(0x7f0000004bc0)}, {&(0x7f0000004c80)="4a7b4e08743556c40749bf21a746ad913a9fa30100eb8f895a0b7f081361d6d234064e758275fc5a17661fd86337dcf1b630f4c5bf8ad2c1c451d470dec8c1d49ba36d3223b620e45e2e85fee7d87b4a958ba3707e55aa56c6e42af984fb01fee0f77a74fbb501509235384c65745b4b6dc90d4f4b79115e255dee1e4d50f355e42cd4088bcda832c498faf456e727f5dcf40855d247c71c4585190effc425fcbe98c0b61a7744c26866ff48610f6e23b547", 0xb2}], 0x5}, 0x40000) recvmsg$unix(r2, &(0x7f00000009c0)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x43) socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 349.602452ms ago: executing program 1 (id=6603): socket$kcm(0x10, 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x10c002, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa000a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xbfbfe277, 0xfffc, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x4, &(0x7f0000000fc0)=[{&(0x7f0000001000)="c00e020023000b02d25a806f8c6394f90924fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200), 0x20) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="8900", 0x2}, {&(0x7f0000000600)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0xfe1b) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x3, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000e80)=ANY=[], &(0x7f0000000ec0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1bc0a, r3, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@arena={0x21, 0x0, 0x0, 0x1b, 0x60400, 0xffffffffffffffff, 0x401, '\x00', 0x0, r4, 0x2, 0x1, 0x5}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@o_path={0x0, 0x0, 0x4000, r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="2e00000010008188040f80ec59acbc0413a1810039000000010bfffffffd00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) 283.967174ms ago: executing program 0 (id=6604): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002980)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f0000002a00)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4, &(0x7f0000002b40), &(0x7f0000002b80)}, 0x28) 195.472555ms ago: executing program 3 (id=6605): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x6, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x63) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x80, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x4) perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000000000000020, 0x3bd5}, 0x2003, 0x7fff, 0x1843, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="02", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff0000"], &(0x7f0000000ec0)='GPL\x00', 0x2, 0xde, &(0x7f0000000f00)=""/222}, 0x94) r2 = socket$kcm(0x15, 0x7, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x1d, 0x0, 0xfea5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000011c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) socket$kcm(0x10, 0x5, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)}, 0x0) socket$kcm(0x2, 0x5, 0x84) 137.364447ms ago: executing program 0 (id=6606): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x985, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$kcm(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001480)={@cgroup=r0, r1, 0x2f, 0x10, 0x4}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x7}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000007c0)={0x1, 0x80, 0xf6, 0x2, 0x80, 0x9, 0x0, 0xfff, 0x4024, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x2, @perf_config_ext={0x10001, 0x8}, 0x0, 0xe, 0x28, 0x9, 0xa, 0x8, 0xc, 0x0, 0x10001, 0x0, 0x400}) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=6607): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000000)=""/138, 0x4a, 0x8a, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1}, 0x48) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0xa200, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/user\x00') socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x81400, 0xca, 0xfffffffd, 0x4, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) kernel console output (not intermixed with test programs): lidate_parse: 1 callbacks suppressed [ 1464.834162][T24366] netlink: 201336 bytes leftover after parsing attributes in process `syz.4.5788'. [ 1464.970852][T24378] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5792'. [ 1465.201603][T24388] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1465.208689][T24388] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1465.303297][T24383] netlink: 'syz.2.5793': attribute type 10 has an invalid length. [ 1465.354126][T24386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5791'. [ 1465.442559][T24388] netlink: 'syz.0.5795': attribute type 10 has an invalid length. [ 1465.716777][T24399] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5800'. [ 1465.856576][T24398] netlink: 'syz.0.5801': attribute type 2 has an invalid length. [ 1465.941607][T24398] netlink: 'syz.0.5801': attribute type 8 has an invalid length. [ 1465.981579][T24398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5801'. [ 1466.007621][T24403] device sit0 entered promiscuous mode [ 1466.212378][T24411] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1466.221067][T24411] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1466.267440][T24413] netlink: 'syz.3.5803': attribute type 10 has an invalid length. [ 1466.276557][T24412] FAULT_INJECTION: forcing a failure. [ 1466.276557][T24412] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.295667][T24415] netlink: 'syz.0.5804': attribute type 10 has an invalid length. [ 1466.372984][T24412] CPU: 1 PID: 24412 Comm: syz.1.5802 Not tainted syzkaller #0 [ 1466.380521][T24412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1466.390624][T24412] Call Trace: [ 1466.393936][T24412] [ 1466.396894][T24412] dump_stack_lvl+0x188/0x250 [ 1466.401616][T24412] ? show_regs_print_info+0x20/0x20 [ 1466.406853][T24412] ? load_image+0x410/0x410 [ 1466.411444][T24412] ? __might_sleep+0xf0/0xf0 [ 1466.416078][T24412] ? __lock_acquire+0x7d40/0x7d40 [ 1466.421153][T24412] ? __debug_object_init+0x253/0xc80 [ 1466.426485][T24412] should_fail+0x383/0x4b0 [ 1466.430954][T24412] should_failslab+0x5/0x20 [ 1466.435496][T24412] slab_pre_alloc_hook+0x51/0xc0 [ 1466.440505][T24412] kmem_cache_alloc_trace+0x47/0x290 [ 1466.445827][T24412] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1466.451768][T24412] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1466.457529][T24412] ? sctp_stream_interleave_init+0x54/0x90 [ 1466.463391][T24412] sctp_association_new+0x15d4/0x2400 [ 1466.468819][T24412] sctp_connect_new_asoc+0x2da/0x6a0 [ 1466.474145][T24412] ? __sctp_connect+0xd80/0xd80 [ 1466.479036][T24412] ? __local_bh_enable_ip+0x136/0x1c0 [ 1466.484481][T24412] ? _local_bh_enable+0xa0/0xa0 [ 1466.489386][T24412] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1466.494971][T24412] ? security_sctp_bind_connect+0x85/0xb0 [ 1466.500734][T24412] sctp_sendmsg+0x15e1/0x2940 [ 1466.505469][T24412] ? sctp_getsockopt+0x8a0/0x8a0 [ 1466.510460][T24412] ? aa_af_perm+0x340/0x340 [ 1466.515011][T24412] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1466.521819][T24412] ? aa_sock_msg_perm+0x94/0x150 [ 1466.526796][T24412] ? sock_rps_record_flow+0x17/0x3b0 [ 1466.532134][T24412] ? inet_sendmsg+0x7a/0x2a0 [ 1466.536769][T24412] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1466.542274][T24412] ? inet_send_prepare+0x250/0x250 [ 1466.547426][T24412] ____sys_sendmsg+0x5be/0x8f0 [ 1466.552242][T24412] ? __sys_sendmsg_sock+0x30/0x30 [ 1466.557316][T24412] ? import_iovec+0x6f/0xa0 [ 1466.561873][T24412] ___sys_sendmsg+0x236/0x2e0 [ 1466.566597][T24412] ? __sys_sendmsg+0x290/0x290 [ 1466.571499][T24412] __se_sys_sendmsg+0x1b7/0x2a0 [ 1466.576396][T24412] ? __x64_sys_sendmsg+0x80/0x80 [ 1466.581391][T24412] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1466.587424][T24412] ? lockdep_hardirqs_on+0x94/0x140 [ 1466.592663][T24412] do_syscall_64+0x4c/0xa0 [ 1466.597112][T24412] ? clear_bhb_loop+0x30/0x80 [ 1466.601824][T24412] ? clear_bhb_loop+0x30/0x80 [ 1466.606539][T24412] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1466.612556][T24412] RIP: 0033:0x7fc6f6e77559 [ 1466.617037][T24412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1466.636684][T24412] RSP: 002b:00007fc6f50ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1466.645154][T24412] RAX: ffffffffffffffda RBX: 00007fc6f70fdfa0 RCX: 00007fc6f6e77559 [ 1466.653178][T24412] RDX: 0000000000008040 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1466.661188][T24412] RBP: 00007fc6f50ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.669197][T24412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1466.677205][T24412] R13: 00007fc6f70fe038 R14: 00007fc6f70fdfa0 R15: 00007ffd177f12e8 [ 1466.685240][T24412] [ 1467.097760][T24419] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5815'. [ 1467.363728][T24432] netlink: 'syz.0.5810': attribute type 10 has an invalid length. [ 1467.511369][T24436] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1467.740531][T24443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5813'. [ 1467.976192][T24444] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5811'. [ 1468.590822][T24456] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1468.846380][T24456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1469.036815][T24476] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5825'. [ 1469.101323][T24477] validate_nla: 2 callbacks suppressed [ 1469.101344][T24477] netlink: 'syz.0.5824': attribute type 10 has an invalid length. [ 1469.329225][T24486] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1469.336237][T24486] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1469.365663][T24482] netlink: 'syz.3.5826': attribute type 10 has an invalid length. [ 1469.802566][T24486] netlink: 'syz.2.5829': attribute type 10 has an invalid length. [ 1469.820173][T24488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5827'. [ 1470.090551][T24498] netlink: 'syz.1.5831': attribute type 10 has an invalid length. [ 1470.357861][T24502] netlink: 'syz.3.5832': attribute type 10 has an invalid length. [ 1471.158049][T24508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1471.166065][T24508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1471.240018][T24514] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5838'. [ 1471.475977][T24522] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1471.484303][T24522] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1471.511770][T24521] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5841'. [ 1471.736421][T24524] netlink: 'syz.3.5839': attribute type 3 has an invalid length. [ 1471.753867][T24524] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.5839'. [ 1472.008500][T24517] netlink: 'syz.1.5837': attribute type 10 has an invalid length. [ 1472.174294][T24530] netlink: 'syz.2.5844': attribute type 10 has an invalid length. [ 1472.253509][T24529] netlink: 'syz.4.5843': attribute type 2 has an invalid length. [ 1472.281143][T24529] netlink: 'syz.4.5843': attribute type 8 has an invalid length. [ 1472.338951][T24529] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5843'. [ 1472.568347][T24535] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5846'. [ 1473.002607][T15218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.165453][T24554] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1473.172780][T24554] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1473.447436][T15218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.500075][T24549] rxe_eth0 speed is unknown, defaulting to 1000 [ 1473.565610][T15218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.631358][T24561] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5853'. [ 1473.669326][T15218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.714547][T24563] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1473.928328][T24567] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5854'. [ 1474.177685][T24577] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5859'. [ 1474.275442][T24583] validate_nla: 4 callbacks suppressed [ 1474.275460][T24583] netlink: 'syz.2.5858': attribute type 3 has an invalid length. [ 1474.328299][T24583] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.5858'. [ 1474.384255][T24549] chnl_net:caif_netlink_parms(): no params data found [ 1474.488328][T24589] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5861'. [ 1474.755957][T24549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.782664][T24549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.792872][T24549] device bridge_slave_0 entered promiscuous mode [ 1474.801802][T24549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.809076][T24549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.822703][T24549] device bridge_slave_1 entered promiscuous mode [ 1474.949867][T24549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.045189][T24549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.084622][T24606] netlink: 'syz.2.5863': attribute type 10 has an invalid length. [ 1475.142811][ T4348] Bluetooth: hci1: command 0x0409 tx timeout [ 1475.235010][T24549] team0: Port device team_slave_0 added [ 1475.250743][T24610] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1475.257686][T24610] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1475.273489][T24549] team0: Port device team_slave_1 added [ 1475.376496][T24549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.411149][T24549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.478680][T24619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1475.537884][T24549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.601776][T24549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.619025][T24549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.667038][T24549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.753792][T24623] netlink: 'syz.2.5867': attribute type 10 has an invalid length. [ 1475.782001][T24625] netlink: 'syz.1.5868': attribute type 10 has an invalid length. [ 1475.835558][T24549] device hsr_slave_0 entered promiscuous mode [ 1475.860255][T24549] device hsr_slave_1 entered promiscuous mode [ 1476.045802][T24630] netlink: 'syz.0.5870': attribute type 10 has an invalid length. [ 1476.089461][T24633] netlink: 'syz.1.5872': attribute type 10 has an invalid length. [ 1476.330797][T24641] net_ratelimit: 1 callbacks suppressed [ 1476.330837][T24641] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1476.343604][T24641] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1476.402572][T24628] rxe_eth0 speed is unknown, defaulting to 1000 [ 1476.461626][T24643] netlink: 'syz.2.5875': attribute type 2 has an invalid length. [ 1476.484575][T24643] netlink: 'syz.2.5875': attribute type 8 has an invalid length. [ 1476.531320][T24643] __nla_validate_parse: 4 callbacks suppressed [ 1476.531340][T24643] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5875'. [ 1476.811575][T24657] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5877'. [ 1476.988819][T24667] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1476.995639][T24667] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1477.153997][T24672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5879'. [ 1477.223015][T24677] netlink: 'syz.1.5881': attribute type 10 has an invalid length. [ 1477.231433][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 1477.394459][T24684] netlink: 'syz.0.5882': attribute type 10 has an invalid length. [ 1477.437225][T24682] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5884'. [ 1477.656441][T24692] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1477.663242][T24692] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1477.672143][T24694] FAULT_INJECTION: forcing a failure. [ 1477.672143][T24694] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.692647][T24694] CPU: 1 PID: 24694 Comm: syz.0.5888 Not tainted syzkaller #0 [ 1477.700166][T24694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1477.710524][T24694] Call Trace: [ 1477.713858][T24694] [ 1477.716815][T24694] dump_stack_lvl+0x188/0x250 [ 1477.721535][T24694] ? show_regs_print_info+0x20/0x20 [ 1477.726767][T24694] ? load_image+0x410/0x410 [ 1477.731304][T24694] ? __might_sleep+0xf0/0xf0 [ 1477.736120][T24694] ? __lock_acquire+0x7d40/0x7d40 [ 1477.741193][T24694] should_fail+0x383/0x4b0 [ 1477.745660][T24694] should_failslab+0x5/0x20 [ 1477.750195][T24694] slab_pre_alloc_hook+0x51/0xc0 [ 1477.755183][T24694] kmem_cache_alloc_trace+0x47/0x290 [ 1477.760504][T24694] ? sctp_association_new+0x86/0x2400 [ 1477.766477][T24694] sctp_association_new+0x86/0x2400 [ 1477.771725][T24694] sctp_connect_new_asoc+0x2da/0x6a0 [ 1477.777050][T24694] ? __sctp_connect+0xd80/0xd80 [ 1477.781961][T24694] ? __local_bh_enable_ip+0x136/0x1c0 [ 1477.787493][T24694] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1477.793165][T24694] ? security_sctp_bind_connect+0x85/0xb0 [ 1477.798933][T24694] sctp_sendmsg+0x15e1/0x2940 [ 1477.803659][T24694] ? sctp_getsockopt+0x8a0/0x8a0 [ 1477.811448][T24694] ? aa_af_perm+0x340/0x340 [ 1477.816116][T24694] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1477.822575][T24694] ? aa_sock_msg_perm+0x94/0x150 [ 1477.825400][T24549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1477.827549][T24694] ? sock_rps_record_flow+0x17/0x3b0 [ 1477.827585][T24694] ? inet_sendmsg+0xca/0x2a0 [ 1477.827609][T24694] ? inet_send_prepare+0x250/0x250 [ 1477.849818][T24694] ____sys_sendmsg+0x5be/0x8f0 [ 1477.854641][T24694] ? __sys_sendmsg_sock+0x30/0x30 [ 1477.859717][T24694] ? import_iovec+0x6f/0xa0 [ 1477.864265][T24694] ___sys_sendmsg+0x236/0x2e0 [ 1477.868988][T24694] ? __sys_sendmsg+0x290/0x290 [ 1477.873888][T24694] __se_sys_sendmsg+0x1b7/0x2a0 [ 1477.878784][T24694] ? __x64_sys_sendmsg+0x80/0x80 [ 1477.883759][T24694] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1477.889801][T24694] ? lockdep_hardirqs_on+0x94/0x140 [ 1477.895049][T24694] do_syscall_64+0x4c/0xa0 [ 1477.899508][T24694] ? clear_bhb_loop+0x30/0x80 [ 1477.904226][T24694] ? clear_bhb_loop+0x30/0x80 [ 1477.908953][T24694] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1477.914884][T24694] RIP: 0033:0x7f51b32b0559 [ 1477.919343][T24694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.939158][T24694] RSP: 002b:00007f51b1507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1477.948028][T24694] RAX: ffffffffffffffda RBX: 00007f51b3536fa0 RCX: 00007f51b32b0559 [ 1477.956044][T24694] RDX: 0000000004008010 RSI: 0000200000000d40 RDI: 0000000000000003 [ 1477.964060][T24694] RBP: 00007f51b1507090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.972063][T24694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.980094][T24694] R13: 00007f51b3537038 R14: 00007f51b3536fa0 R15: 00007ffeebf63718 [ 1477.988144][T24694] [ 1477.996343][T24697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5889'. [ 1478.025623][T24549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1478.065497][T24549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1478.118507][T24549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1478.414603][T24702] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5890'. [ 1478.510172][T24704] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.5891'. [ 1478.551445][T24712] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1478.558577][T24712] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1478.818234][T24549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.877894][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1478.909857][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1478.984831][T24549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.127259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1479.172223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1479.201518][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.208687][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.247952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1479.288555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1479.301366][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 1479.321961][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.329220][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.370679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1479.418194][T24737] validate_nla: 5 callbacks suppressed [ 1479.418215][T24737] netlink: 'syz.1.5894': attribute type 10 has an invalid length. [ 1479.446059][T24734] netlink: 'syz.0.5896': attribute type 10 has an invalid length. [ 1479.497833][T24743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5899'. [ 1479.543923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1479.587713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1479.710314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1479.729057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1479.753944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1479.815158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1479.878664][T24749] netlink: 'syz.2.5901': attribute type 2 has an invalid length. [ 1479.906366][T24749] netlink: 'syz.2.5901': attribute type 8 has an invalid length. [ 1479.927492][T24749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5901'. [ 1479.947398][T24549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1479.959743][T24549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1479.999521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1480.021761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1480.030792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1480.041585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1480.050296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1480.134686][T24756] netlink: 'syz.1.5902': attribute type 4 has an invalid length. [ 1480.165529][T24756] netlink: 'syz.1.5902': attribute type 7 has an invalid length. [ 1480.229761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1480.332446][T24771] netlink: 'syz.0.5906': attribute type 10 has an invalid length. [ 1480.569547][T15218] device hsr_slave_1 left promiscuous mode [ 1480.583776][T15218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1480.626262][T15218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.653987][T15218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1480.699552][T15218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1480.727736][T15218] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1480.745760][T15218] device bridge_slave_0 left promiscuous mode [ 1480.766182][T15218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.797440][T15218] device veth1_macvtap left promiscuous mode [ 1481.180282][T15218] team0 (unregistering): Port device geneve1 removed [ 1481.391441][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 1481.455991][T15218] team0 (unregistering): Port device team_slave_1 removed [ 1481.515523][T15218] team0 (unregistering): Port device team_slave_0 removed [ 1481.540577][T15218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.590246][T15218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.622346][T15218] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1481.740737][T15218] bond0 (unregistering): (slave team0): Releasing backup interface [ 1481.753977][T15218] team0 (unregistering): Port device bridge0 removed [ 1481.775385][T15218] bond0 (unregistering): Released all slaves [ 1481.802577][T24786] netlink: 'syz.0.5909': attribute type 10 has an invalid length. [ 1481.818286][T24792] netlink: 'syz.2.5911': attribute type 10 has an invalid length. [ 1481.851492][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1481.859082][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1481.895892][T24549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1481.975142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1481.994803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1482.034312][T24809] FAULT_INJECTION: forcing a failure. [ 1482.034312][T24809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.048404][T24809] CPU: 1 PID: 24809 Comm: syz.0.5912 Not tainted syzkaller #0 [ 1482.055910][T24809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1482.066115][T24809] Call Trace: [ 1482.069457][T24809] [ 1482.072413][T24809] dump_stack_lvl+0x188/0x250 [ 1482.077147][T24809] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1482.083358][T24809] ? show_regs_print_info+0x20/0x20 [ 1482.088598][T24809] ? load_image+0x410/0x410 [ 1482.093154][T24809] should_fail+0x383/0x4b0 [ 1482.097612][T24809] _copy_from_user+0x2e/0x170 [ 1482.102328][T24809] get_user_ifreq+0x67/0x170 [ 1482.106967][T24809] sock_ioctl+0x61f/0x700 [ 1482.111354][T24809] ? sock_poll+0x420/0x420 [ 1482.115869][T24809] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1482.120862][T24809] ? security_file_ioctl+0x7c/0xa0 [ 1482.126066][T24809] ? sock_poll+0x420/0x420 [ 1482.130578][T24809] __se_sys_ioctl+0xfa/0x170 [ 1482.135213][T24809] do_syscall_64+0x4c/0xa0 [ 1482.139665][T24809] ? clear_bhb_loop+0x30/0x80 [ 1482.144379][T24809] ? clear_bhb_loop+0x30/0x80 [ 1482.149100][T24809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1482.155027][T24809] RIP: 0033:0x7f51b32b0559 [ 1482.159473][T24809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.179115][T24809] RSP: 002b:00007f51b1507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1482.187572][T24809] RAX: ffffffffffffffda RBX: 00007f51b3536fa0 RCX: 00007f51b32b0559 [ 1482.195573][T24809] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000a [ 1482.203562][T24809] RBP: 00007f51b1507090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.211562][T24809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.219554][T24809] R13: 00007f51b3537038 R14: 00007f51b3536fa0 R15: 00007ffeebf63718 [ 1482.227558][T24809] [ 1482.235577][T24811] netlink: 'syz.1.5913': attribute type 2 has an invalid length. [ 1482.290105][T24811] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5913'. [ 1482.339714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1482.356350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1482.390136][T24549] device veth0_vlan entered promiscuous mode [ 1482.420590][T24549] device veth1_vlan entered promiscuous mode [ 1482.450229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1482.481921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1482.495715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1482.507091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1482.587295][T24549] device veth0_macvtap entered promiscuous mode [ 1482.620114][T24823] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.5916'. [ 1482.651709][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1482.662606][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1482.712008][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1482.724589][T24549] device veth1_macvtap entered promiscuous mode [ 1482.741299][T24830] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5921'. [ 1482.769350][T24828] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.5920'. [ 1482.828995][T24549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.853592][T24549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.870045][T24549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.882595][T24549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.898852][T24549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.912303][T24549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.928798][T24549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.945159][T24549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.976391][T24549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1482.993824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1483.020837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1483.037091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1483.074290][T24549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.111414][T24549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.129991][T24549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.142548][T24549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.152898][T24549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.163958][T24549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.174337][T24549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.185683][T24549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.205637][T24549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1483.227073][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1483.249912][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1483.326325][T24549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.356956][T24549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.375095][T24549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.387855][T24549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.727913][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.776744][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.855063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1483.873691][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.892394][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.930693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1483.981520][T24864] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.5931'. [ 1484.078810][T24869] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5933'. [ 1484.392640][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.399230][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.647799][T24876] validate_nla: 8 callbacks suppressed [ 1484.647821][T24876] netlink: 'syz.0.5936': attribute type 10 has an invalid length. [ 1484.684614][T24882] netlink: 'syz.1.5939': attribute type 10 has an invalid length. [ 1484.693549][T24866] rxe_eth0 speed is unknown, defaulting to 1000 [ 1484.732145][T24884] netlink: 'syz.3.5938': attribute type 10 has an invalid length. [ 1484.862289][T24884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.900286][T24884] device bridge_slave_1 left promiscuous mode [ 1484.936776][T24884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.997976][T24884] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1485.052555][T24890] netlink: 'syz.4.5941': attribute type 3 has an invalid length. [ 1485.071456][T24890] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.5941'. [ 1485.191623][T24899] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.5943'. [ 1485.228141][T24899] delete_channel: no stack [ 1485.392407][T24903] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5945'. [ 1485.439125][T24906] netlink: 'syz.4.5944': attribute type 16 has an invalid length. [ 1485.458998][T24906] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5944'. [ 1485.533922][T24909] netlink: 'syz.4.5944': attribute type 10 has an invalid length. [ 1486.350198][T24918] netlink: 'syz.0.5950': attribute type 9 has an invalid length. [ 1486.885447][T24927] netlink: 'syz.3.5952': attribute type 10 has an invalid length. [ 1487.001257][T24934] tap0: tun_chr_ioctl cmd 1074025673 [ 1487.152092][T24945] netlink: 'syz.4.5955': attribute type 10 has an invalid length. [ 1487.240206][T24947] netlink: 'syz.0.5956': attribute type 3 has an invalid length. [ 1487.291114][T24947] __nla_validate_parse: 5 callbacks suppressed [ 1487.291152][T24947] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.5956'. [ 1487.378011][T24954] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5957'. [ 1487.431329][T24958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.506662][T24958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.514282][T24958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.747805][T24958] team0: Port device bridge0 added [ 1488.143157][T24970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5962'. [ 1488.173004][T24974] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5965'. [ 1488.214070][T24979] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5963'. [ 1488.800412][T24990] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5971'. [ 1488.861191][T24990] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1488.908312][T24990] CPU: 0 PID: 24990 Comm: syz.1.5971 Not tainted syzkaller #0 [ 1488.915843][T24990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1488.925941][T24990] Call Trace: [ 1488.929253][T24990] [ 1488.932216][T24990] dump_stack_lvl+0x188/0x250 [ 1488.936933][T24990] ? show_regs_print_info+0x20/0x20 [ 1488.942164][T24990] ? load_image+0x410/0x410 [ 1488.946705][T24990] sysfs_warn_dup+0x8a/0xa0 [ 1488.951247][T24990] sysfs_do_create_link_sd+0xc0/0x110 [ 1488.956648][T24990] device_add+0x83b/0x1050 [ 1488.961102][T24990] wiphy_register+0x1e74/0x2c40 [ 1488.966000][T24990] ? cfg80211_event_work+0x40/0x40 [ 1488.971142][T24990] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1488.977340][T24990] ? ieee80211_register_hw+0x2835/0x3a60 [ 1488.983016][T24990] ieee80211_register_hw+0x2a03/0x3a60 [ 1488.988512][T24990] ? ieee80211_register_hw+0xa91/0x3a60 [ 1488.994090][T24990] ? ieee80211_tasklet_handler+0x20/0x20 [ 1488.999757][T24990] ? rcu_is_watching+0x11/0xa0 [ 1489.004553][T24990] ? hrtimer_init+0x10c/0x220 [ 1489.009259][T24990] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1489.015013][T24990] hwsim_new_radio_nl+0xa7d/0xc50 [ 1489.020072][T24990] genl_rcv_msg+0xd0b/0xfa0 [ 1489.024743][T24990] ? genl_bind+0x370/0x370 [ 1489.029188][T24990] ? mark_lock+0x94/0x320 [ 1489.033569][T24990] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1489.039715][T24990] ? lock_chain_count+0x20/0x20 [ 1489.044625][T24990] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1489.050860][T24990] ? lockdep_hardirqs_on+0x94/0x140 [ 1489.056109][T24990] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1489.062488][T24990] ? netlink_rcv_skb+0x1c8/0x430 [ 1489.067461][T24990] netlink_rcv_skb+0x1e9/0x430 [ 1489.072272][T24990] ? genl_bind+0x370/0x370 [ 1489.076728][T24990] ? netlink_ack+0xb10/0xb10 [ 1489.081359][T24990] ? down_read+0x1aa/0x2e0 [ 1489.085808][T24990] genl_rcv+0x24/0x40 [ 1489.089816][T24990] netlink_unicast+0x78f/0x940 [ 1489.095238][T24990] netlink_sendmsg+0x8ba/0xbe0 [ 1489.100125][T24990] ? netlink_getsockopt+0x570/0x570 [ 1489.105523][T24990] ? aa_sock_msg_perm+0x94/0x150 [ 1489.110513][T24990] ? apparmor_socket_sendmsg+0x88/0x230 [ 1489.116257][T24990] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1489.122737][T24990] ? security_socket_sendmsg+0x7c/0xa0 [ 1489.128233][T24990] ? netlink_getsockopt+0x570/0x570 [ 1489.133547][T24990] ____sys_sendmsg+0x5be/0x8f0 [ 1489.138537][T24990] ? __sys_sendmsg_sock+0x30/0x30 [ 1489.143601][T24990] ? import_iovec+0x6f/0xa0 [ 1489.148141][T24990] ___sys_sendmsg+0x236/0x2e0 [ 1489.152853][T24990] ? __sys_sendmsg+0x290/0x290 [ 1489.157656][T24990] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1489.163414][T24990] __se_sys_sendmsg+0x1b7/0x2a0 [ 1489.168310][T24990] ? __x64_sys_sendmsg+0x80/0x80 [ 1489.173280][T24990] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1489.179200][T24990] do_syscall_64+0x4c/0xa0 [ 1489.183660][T24990] ? clear_bhb_loop+0x30/0x80 [ 1489.188363][T24990] ? clear_bhb_loop+0x30/0x80 [ 1489.193061][T24990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1489.198977][T24990] RIP: 0033:0x7fc6f6e77559 [ 1489.203419][T24990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.223225][T24990] RSP: 002b:00007fc6f50ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1489.231679][T24990] RAX: ffffffffffffffda RBX: 00007fc6f70fdfa0 RCX: 00007fc6f6e77559 [ 1489.239673][T24990] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1489.247667][T24990] RBP: 00007fc6f6f0eb20 R08: 0000000000000000 R09: 0000000000000000 [ 1489.255655][T24990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.263642][T24990] R13: 00007fc6f70fe038 R14: 00007fc6f70fdfa0 R15: 00007ffd177f12e8 [ 1489.271648][T24990] [ 1489.573398][T25003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5976'. [ 1489.606479][T25007] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5978'. [ 1489.658058][T25009] validate_nla: 10 callbacks suppressed [ 1489.658217][T25009] netlink: 'syz.1.5979': attribute type 10 has an invalid length. [ 1489.824144][T25012] netlink: 'syz.0.5981': attribute type 10 has an invalid length. [ 1489.958286][T25016] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5980'. [ 1490.382258][T25026] netlink: 'syz.0.5985': attribute type 10 has an invalid length. [ 1491.085568][T25044] netlink: 'syz.4.5991': attribute type 2 has an invalid length. [ 1491.128758][T25044] netlink: 'syz.4.5991': attribute type 8 has an invalid length. [ 1491.167936][T25044] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5991'. [ 1491.274600][T25053] netlink: 'syz.3.5995': attribute type 10 has an invalid length. [ 1491.693509][T25060] netlink: 'syz.3.5998': attribute type 10 has an invalid length. [ 1491.866388][T25060] device veth0_macvtap left promiscuous mode [ 1492.008685][T25068] FAULT_INJECTION: forcing a failure. [ 1492.008685][T25068] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.067287][T25068] CPU: 1 PID: 25068 Comm: syz.4.6000 Not tainted syzkaller #0 [ 1492.074912][T25068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1492.085006][T25068] Call Trace: [ 1492.088315][T25068] [ 1492.091272][T25068] dump_stack_lvl+0x188/0x250 [ 1492.095999][T25068] ? show_regs_print_info+0x20/0x20 [ 1492.101241][T25068] ? load_image+0x410/0x410 [ 1492.105782][T25068] ? __might_sleep+0xf0/0xf0 [ 1492.110404][T25068] ? __lock_acquire+0x7d40/0x7d40 [ 1492.115462][T25068] ? __debug_object_init+0x253/0xc80 [ 1492.120794][T25068] should_fail+0x383/0x4b0 [ 1492.125254][T25068] should_failslab+0x5/0x20 [ 1492.129820][T25068] slab_pre_alloc_hook+0x51/0xc0 [ 1492.134794][T25068] kmem_cache_alloc_trace+0x47/0x290 [ 1492.140114][T25068] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1492.146036][T25068] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1492.151779][T25068] ? sctp_stream_interleave_init+0x54/0x90 [ 1492.157613][T25068] sctp_association_new+0x15d4/0x2400 [ 1492.163019][T25068] sctp_connect_new_asoc+0x2da/0x6a0 [ 1492.168327][T25068] ? __sctp_connect+0xd80/0xd80 [ 1492.173190][T25068] ? __local_bh_enable_ip+0x136/0x1c0 [ 1492.178582][T25068] ? _local_bh_enable+0xa0/0xa0 [ 1492.183467][T25068] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1492.189039][T25068] ? security_sctp_bind_connect+0x85/0xb0 [ 1492.194778][T25068] sctp_sendmsg+0x15e1/0x2940 [ 1492.199503][T25068] ? sctp_getsockopt+0x8a0/0x8a0 [ 1492.204462][T25068] ? aa_af_perm+0x340/0x340 [ 1492.208980][T25068] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1492.215409][T25068] ? aa_sock_msg_perm+0x94/0x150 [ 1492.220543][T25068] ? sock_rps_record_flow+0x17/0x3b0 [ 1492.225856][T25068] ? inet_sendmsg+0x7a/0x2a0 [ 1492.230463][T25068] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1492.235764][T25068] ? inet_send_prepare+0x250/0x250 [ 1492.240893][T25068] ____sys_sendmsg+0x5be/0x8f0 [ 1492.245681][T25068] ? __sys_sendmsg_sock+0x30/0x30 [ 1492.250728][T25068] ? import_iovec+0x6f/0xa0 [ 1492.255266][T25068] ___sys_sendmsg+0x236/0x2e0 [ 1492.259966][T25068] ? __sys_sendmsg+0x290/0x290 [ 1492.264773][T25068] __se_sys_sendmsg+0x1b7/0x2a0 [ 1492.269642][T25068] ? __x64_sys_sendmsg+0x80/0x80 [ 1492.274594][T25068] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1492.280598][T25068] ? lockdep_hardirqs_on+0x94/0x140 [ 1492.285827][T25068] do_syscall_64+0x4c/0xa0 [ 1492.290266][T25068] ? clear_bhb_loop+0x30/0x80 [ 1492.295062][T25068] ? clear_bhb_loop+0x30/0x80 [ 1492.299763][T25068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1492.305690][T25068] RIP: 0033:0x7f43192bd559 [ 1492.310124][T25068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.329746][T25068] RSP: 002b:00007f4317514028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1492.338182][T25068] RAX: ffffffffffffffda RBX: 00007f4319543fa0 RCX: 00007f43192bd559 [ 1492.346167][T25068] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1492.354154][T25068] RBP: 00007f4317514090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.362136][T25068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.370121][T25068] R13: 00007f4319544038 R14: 00007f4319543fa0 R15: 00007ffda94ba448 [ 1492.378141][T25068] [ 1492.654592][T25077] netlink: 'syz.0.6004': attribute type 3 has an invalid length. [ 1492.673634][T25077] __nla_validate_parse: 1 callbacks suppressed [ 1492.673652][T25077] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.6004'. [ 1492.699455][T25079] netlink: 'syz.1.6005': attribute type 10 has an invalid length. [ 1492.719222][T25083] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1492.768643][T25085] netlink: 'syz.4.6006': attribute type 10 has an invalid length. [ 1493.095825][T25100] FAULT_INJECTION: forcing a failure. [ 1493.095825][T25100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.217925][T25100] CPU: 1 PID: 25100 Comm: syz.3.6013 Not tainted syzkaller #0 [ 1493.225585][T25100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1493.235678][T25100] Call Trace: [ 1493.238991][T25100] [ 1493.241953][T25100] dump_stack_lvl+0x188/0x250 [ 1493.246673][T25100] ? show_regs_print_info+0x20/0x20 [ 1493.251909][T25100] ? load_image+0x410/0x410 [ 1493.256448][T25100] ? __lock_acquire+0x7d40/0x7d40 [ 1493.261507][T25100] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1493.267795][T25100] ? ktime_get_real_ts64+0x440/0x440 [ 1493.273121][T25100] should_fail+0x383/0x4b0 [ 1493.277583][T25100] _copy_from_user+0x2e/0x170 [ 1493.282298][T25100] __sys_bpf+0x26d/0x6f0 [ 1493.286582][T25100] ? bpf_link_show_fdinfo+0x380/0x380 [ 1493.292014][T25100] __x64_sys_bpf+0x78/0x90 [ 1493.296511][T25100] do_syscall_64+0x4c/0xa0 [ 1493.300961][T25100] ? clear_bhb_loop+0x30/0x80 [ 1493.305705][T25100] ? clear_bhb_loop+0x30/0x80 [ 1493.310424][T25100] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1493.316353][T25100] RIP: 0033:0x7f07d99b5559 [ 1493.320800][T25100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.340448][T25100] RSP: 002b:00007f07d7c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1493.348911][T25100] RAX: ffffffffffffffda RBX: 00007f07d9c3bfa0 RCX: 00007f07d99b5559 [ 1493.356919][T25100] RDX: 0000000000000050 RSI: 00002000000025c0 RDI: 000000000000000a [ 1493.364929][T25100] RBP: 00007f07d7c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.372965][T25100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.381088][T25100] R13: 00007f07d9c3c038 R14: 00007f07d9c3bfa0 R15: 00007ffeb23b5618 [ 1493.389116][T25100] [ 1493.632287][T25108] cgroup: fork rejected by pids controller in /syz2 [ 1493.667165][ T4346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.102720][ T4346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.309088][ T4346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.351221][T25133] rxe_eth0 speed is unknown, defaulting to 1000 [ 1494.405176][ T4346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.463466][T25206] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6021'. [ 1494.700181][T25233] validate_nla: 3 callbacks suppressed [ 1494.700285][T25233] netlink: 'syz.0.6024': attribute type 10 has an invalid length. [ 1494.836297][ T4346] device ip6gretap0 left promiscuous mode [ 1494.849866][ T4346] bridge0: port 2(ip6gretap0) entered disabled state [ 1494.867262][T25112] rxe_eth0 speed is unknown, defaulting to 1000 [ 1495.040178][T25247] netlink: 'syz.0.6027': attribute type 10 has an invalid length. [ 1495.333209][T25133] chnl_net:caif_netlink_parms(): no params data found [ 1495.376826][T25260] netlink: 'syz.3.6030': attribute type 10 has an invalid length. [ 1495.620188][T25258] netlink: 'syz.0.6029': attribute type 2 has an invalid length. [ 1495.630070][T25258] netlink: 'syz.0.6029': attribute type 8 has an invalid length. [ 1495.645667][T25258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6029'. [ 1495.754257][T25264] rxe_eth0 speed is unknown, defaulting to 1000 [ 1495.945893][T25277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6033'. [ 1495.990243][T25133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.006459][T25133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.026989][T25133] device bridge_slave_0 entered promiscuous mode [ 1496.063568][T25133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.076840][T25133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.101422][ T4242] Bluetooth: hci0: command 0x0409 tx timeout [ 1496.113651][T25133] device bridge_slave_1 entered promiscuous mode [ 1496.263773][T25133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.341981][T25289] netlink: 'syz.0.6036': attribute type 10 has an invalid length. [ 1496.406991][T25133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.440841][T25296] netlink: 'syz.3.6038': attribute type 10 has an invalid length. [ 1496.573675][T25133] team0: Port device team_slave_0 added [ 1496.640526][T25133] team0: Port device team_slave_1 added [ 1496.774730][T25304] netlink: 'syz.3.6040': attribute type 10 has an invalid length. [ 1496.826543][T25133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.838344][T25133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.896950][T25133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.004652][T25264] chnl_net:caif_netlink_parms(): no params data found [ 1497.034910][T25133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.051008][T25133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.140208][T25133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.184669][T25318] netlink: 'syz.3.6043': attribute type 2 has an invalid length. [ 1497.200202][T25318] netlink: 'syz.3.6043': attribute type 8 has an invalid length. [ 1497.216363][T25318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6043'. [ 1497.391141][T25133] device hsr_slave_0 entered promiscuous mode [ 1497.421848][T25133] device hsr_slave_1 entered promiscuous mode [ 1497.451509][T25133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1497.476567][T25133] Cannot create hsr debugfs directory [ 1497.541306][ T4242] Bluetooth: hci2: command 0x0409 tx timeout [ 1497.629382][T25264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.637347][T25264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.646149][T25264] device bridge_slave_0 entered promiscuous mode [ 1497.656086][T25264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.665179][T25264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.675341][T25264] device bridge_slave_1 entered promiscuous mode [ 1497.869208][T25264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1497.989289][T25264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.181587][ T4348] Bluetooth: hci0: command 0x041b tx timeout [ 1498.216823][T25264] team0: Port device team_slave_0 added [ 1498.262240][T25264] team0: Port device team_slave_1 added [ 1498.629691][T25351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6051'. [ 1498.672842][T25264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.680066][T25264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1498.751057][T25264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.885968][T25264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.910768][T25264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1498.968318][T25264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.152176][T25264] device hsr_slave_0 entered promiscuous mode [ 1499.160011][T25264] device hsr_slave_1 entered promiscuous mode [ 1499.175659][T25264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1499.184053][T25264] Cannot create hsr debugfs directory [ 1499.379851][T25133] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1499.408302][T25133] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1499.458426][ T4346] device hsr_slave_1 left promiscuous mode [ 1499.468363][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.482115][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.506386][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.518081][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.532053][ T4346] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1499.544763][ T4346] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1499.564146][ T4346] batman_adv: batadv0: Removing interface: veth0_vlan [ 1499.581597][ T4346] device bridge_slave_0 left promiscuous mode [ 1499.601280][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.621088][ T4330] Bluetooth: hci2: command 0x041b tx timeout [ 1499.636316][ T4346] device veth1_macvtap left promiscuous mode [ 1499.648621][ T4346] device veth1_vlan left promiscuous mode [ 1499.659934][ T4346] device veth0_vlan left promiscuous mode [ 1500.155556][ T4346] team0 (unregistering): Port device team_slave_1 removed [ 1500.188703][ T4346] team0 (unregistering): Port device team_slave_0 removed [ 1500.218722][ T4346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.249747][ T4346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.271407][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 1500.286776][ T4346] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1500.364505][ T4346] bond0 (unregistering): (slave team0): Releasing backup interface [ 1500.376883][ T4346] team0 (unregistering): Port device bridge0 removed [ 1500.405064][ T4346] bond0 (unregistering): Released all slaves [ 1500.428045][T25133] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1500.445542][T25133] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1500.578238][T25264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.632209][T25387] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6055'. [ 1500.839622][T25264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.986600][T25389] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6056'. [ 1501.082083][T25264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.153286][T25398] validate_nla: 3 callbacks suppressed [ 1501.153324][T25398] netlink: 'syz.0.6058': attribute type 10 has an invalid length. [ 1501.214012][T25133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.269230][T25264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.305049][T25406] netlink: 'syz.1.6060': attribute type 10 has an invalid length. [ 1501.362553][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1501.370670][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1501.439734][T25133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.461576][T25405] netlink: 'syz.3.6070': attribute type 2 has an invalid length. [ 1501.469514][T25405] netlink: 'syz.3.6070': attribute type 8 has an invalid length. [ 1501.535405][T25405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6070'. [ 1501.554111][T25412] netlink: 'syz.0.6063': attribute type 10 has an invalid length. [ 1501.636097][T25418] netlink: 'syz.1.6064': attribute type 10 has an invalid length. [ 1501.696998][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1501.705576][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 1501.722503][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1501.751999][T15005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.759156][T15005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.824865][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1501.852860][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1501.882020][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1501.909340][T15005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.916536][T15005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.962223][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1502.006873][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1502.086906][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1502.103756][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1502.140282][T25264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1502.174339][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1502.191883][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1502.228993][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1502.279195][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1502.308422][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1502.341351][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 1502.363335][T25264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1502.446020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1502.473669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1502.525749][T25264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1502.577822][T25450] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6071'. [ 1502.616405][T25264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1502.805951][T25457] netlink: 'syz.1.6073': attribute type 10 has an invalid length. [ 1502.954051][T25462] netlink: 'syz.3.6077': attribute type 10 has an invalid length. [ 1503.002239][T25264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.102249][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1503.121456][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1503.188092][T25264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.251486][T25471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6075'. [ 1503.282632][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1503.300464][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1503.356739][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.363946][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1503.413155][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1503.442054][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1503.486130][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1503.519008][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.526211][ T4257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1503.573158][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1503.653735][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1503.673428][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1503.744015][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1503.768514][T25482] netlink: 'syz.0.6089': attribute type 10 has an invalid length. [ 1503.781239][T23600] Bluetooth: hci2: command 0x0419 tx timeout [ 1503.824837][T25133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.857741][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1503.869114][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1503.907605][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1503.925860][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1503.957200][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1503.998939][T25496] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1504.028334][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1504.052742][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1504.104170][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1504.138441][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1504.197945][T25264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1504.213848][T25503] netlink: 'syz.1.6092': attribute type 10 has an invalid length. [ 1504.525035][T25528] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6087'. [ 1504.861740][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1504.870073][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1504.925836][T25264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1504.981143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1504.997933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1505.123249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1505.133719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1505.225787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1505.248201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1505.274205][T25133] device veth0_vlan entered promiscuous mode [ 1505.312075][T25540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6091'. [ 1505.375896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1505.482749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1505.526303][T25133] device veth1_vlan entered promiscuous mode [ 1505.578944][T25547] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6094'. [ 1505.673647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1505.694316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1505.731926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1505.750783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1505.783144][T25264] device veth0_vlan entered promiscuous mode [ 1505.790308][T25553] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6096'. [ 1505.849298][T25133] device veth0_macvtap entered promiscuous mode [ 1505.859217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1505.878215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1505.887547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1505.905472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1505.926831][T25264] device veth1_vlan entered promiscuous mode [ 1505.950274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1505.984611][T25133] device veth1_macvtap entered promiscuous mode [ 1506.033040][T25133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.081412][T25133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.100055][T25133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.119514][T25133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.130221][T25133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.148833][T25133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.159241][T25133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.177877][T25133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.207215][T25133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1506.238953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1506.255563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1506.267159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1506.297780][T25133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1506.334538][T25133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.368461][T25133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1506.379285][T25133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.389653][T25133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1506.407166][T25133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.417464][T25133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1506.441059][T25133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.469711][T25133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1506.536045][T25264] device veth0_macvtap entered promiscuous mode [ 1506.555437][T25566] validate_nla: 2 callbacks suppressed [ 1506.555476][T25566] netlink: 'syz.3.6102': attribute type 3 has an invalid length. [ 1506.578919][T25566] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.6102'. [ 1506.630608][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1506.646370][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1506.656262][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1506.666834][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1506.676854][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1506.717067][T25133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.731899][T25133] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.740686][T25133] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.778802][T25133] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.793425][T25264] device veth1_macvtap entered promiscuous mode [ 1506.920007][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.940329][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.964525][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.975561][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.988835][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.000010][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.010362][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.023218][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.035162][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.046962][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.059922][T25264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.104987][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.131264][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.148526][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.167150][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.178765][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.202400][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.220810][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.238858][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.258928][T25264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.270093][T25264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.289961][T25264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.298772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1507.313889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1507.325540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1507.335013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1507.353474][T25264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.366445][T25264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.376154][T25264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.395060][T25264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.447467][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.481873][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.515369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1507.581625][T15005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.589500][T15005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.634808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1507.663282][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.696361][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.762498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1507.822507][T15218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.840709][T15218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.915231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1508.028621][T25603] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6113'. [ 1508.125024][T25607] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6115'. [ 1508.212171][T25613] netlink: 'syz.1.6114': attribute type 10 has an invalid length. [ 1508.357849][ T4346] device erspan0 left promiscuous mode [ 1508.390818][ T4346] ¥: port 1(erspan0) entered disabled state [ 1508.432990][T25616] netlink: 'syz.3.6117': attribute type 2 has an invalid length. [ 1508.498867][T25616] netlink: 'syz.3.6117': attribute type 8 has an invalid length. [ 1508.530180][T25616] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6117'. [ 1509.213097][T25643] rxe_eth0 speed is unknown, defaulting to 1000 [ 1509.227330][T25655] device sit0 entered promiscuous mode [ 1509.513122][T25659] netlink: 'syz.2.6131': attribute type 10 has an invalid length. [ 1509.571460][T25659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.591239][T25659] device bridge_slave_1 left promiscuous mode [ 1509.597717][T25659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.609985][T25659] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1509.628246][T25652] rxe_eth0 speed is unknown, defaulting to 1000 [ 1509.801332][T25667] netlink: 'syz.4.6133': attribute type 2 has an invalid length. [ 1509.831485][T25667] netlink: 'syz.4.6133': attribute type 8 has an invalid length. [ 1509.877741][T25667] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6133'. [ 1510.042791][T25669] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6132'. [ 1510.593966][T25680] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6135'. [ 1510.916967][T25643] chnl_net:caif_netlink_parms(): no params data found [ 1511.024701][ T4346] device hsr_slave_0 left promiscuous mode [ 1511.036286][ T4346] device hsr_slave_1 left promiscuous mode [ 1511.048229][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.059555][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.092465][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1511.100005][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.119022][ T4346] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1511.130332][ T4346] device bridge_slave_0 left promiscuous mode [ 1511.142916][T15729] Bluetooth: hci3: command 0x0409 tx timeout [ 1511.154982][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.177491][ T4346] device veth1_macvtap left promiscuous mode [ 1511.509444][ T4346] team0 (unregistering): Port device team_slave_1 removed [ 1511.556561][ T4346] team0 (unregistering): Port device team_slave_0 removed [ 1511.589886][ T4346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.645749][ T4346] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1511.734432][ T4346] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1511.749303][ T4346] bond0 (unregistering): Released all slaves [ 1511.801065][T25694] netlink: 'syz.2.6140': attribute type 10 has an invalid length. [ 1511.898041][T25643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.909547][T25643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.920828][T25643] device bridge_slave_0 entered promiscuous mode [ 1511.963652][T25643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.970916][T25643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.009291][T25643] device bridge_slave_1 entered promiscuous mode [ 1512.151396][T25643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.193626][T25712] netlink: 'syz.3.6143': attribute type 10 has an invalid length. [ 1512.253042][T25643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.354784][T25643] team0: Port device team_slave_0 added [ 1512.375845][T25643] team0: Port device team_slave_1 added [ 1512.545458][T25643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.563052][T25643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.689513][T25643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.808643][T25719] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6149'. [ 1512.858217][T25724] netlink: 'syz.2.6148': attribute type 2 has an invalid length. [ 1512.875930][T25724] netlink: 'syz.2.6148': attribute type 8 has an invalid length. [ 1512.936535][T25724] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6148'. [ 1513.020411][T25643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.032371][T25643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.104835][T25643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.221081][ T4370] Bluetooth: hci3: command 0x041b tx timeout [ 1513.307173][T25643] device hsr_slave_0 entered promiscuous mode [ 1513.341831][T25643] device hsr_slave_1 entered promiscuous mode [ 1513.456481][T25643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1513.483084][T25643] Cannot create hsr debugfs directory [ 1513.730339][T25747] netlink: 'syz.2.6157': attribute type 2 has an invalid length. [ 1513.740817][T25747] netlink: 'syz.2.6157': attribute type 8 has an invalid length. [ 1513.769329][T25747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6157'. [ 1513.959701][T25756] netlink: 'syz.4.6159': attribute type 10 has an invalid length. [ 1514.041523][T25756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.070176][T25756] device bridge_slave_1 left promiscuous mode [ 1514.097368][T25756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.153131][T25756] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1514.182695][T25754] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6160'. [ 1514.358978][T25643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.508036][T25763] netlink: 'syz.2.6162': attribute type 2 has an invalid length. [ 1514.594799][T25763] netlink: 'syz.2.6162': attribute type 8 has an invalid length. [ 1514.642019][T25763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1514.686767][T25643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.763664][T25768] netlink: 'syz.4.6164': attribute type 10 has an invalid length. [ 1514.941879][T25643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.107377][T25643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.311316][ T4370] Bluetooth: hci3: command 0x040f tx timeout [ 1515.406192][T25643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1515.429024][T25643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1515.479049][T25643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1515.522945][T25643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1516.037478][T25643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.098917][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1516.122464][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1516.166771][T25643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.230090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1516.275683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1516.375059][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.382291][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.425625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1516.512203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1516.522876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1516.553202][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.560374][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.573229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1516.601470][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1516.638571][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1516.668958][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1516.704791][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1516.760233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1516.782890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1516.809265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1516.819681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1516.834470][T25643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1516.868449][T25643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1516.896433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1516.965820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1517.018308][T25808] validate_nla: 1 callbacks suppressed [ 1517.018404][T25808] netlink: 'syz.3.6175': attribute type 2 has an invalid length. [ 1517.111206][T25808] netlink: 'syz.3.6175': attribute type 8 has an invalid length. [ 1517.119291][T25808] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6175'. [ 1517.272827][T25813] netlink: 'syz.4.6176': attribute type 2 has an invalid length. [ 1517.311821][T25813] netlink: 'syz.4.6176': attribute type 8 has an invalid length. [ 1517.337535][T25813] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6176'. [ 1517.391421][ T4242] Bluetooth: hci3: command 0x0419 tx timeout [ 1517.402738][T25823] netlink: 'syz.2.6180': attribute type 10 has an invalid length. [ 1517.843088][T25831] netlink: 'syz.3.6181': attribute type 10 has an invalid length. [ 1517.869781][T25832] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6182'. [ 1518.034989][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1518.048030][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1518.075388][T25643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.110549][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1518.120063][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1518.154490][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1518.171955][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1518.193446][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1518.211243][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1518.220636][T25643] device veth0_vlan entered promiscuous mode [ 1518.262571][T25643] device veth1_vlan entered promiscuous mode [ 1518.317115][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1518.326558][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1518.335356][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1518.346077][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1518.359232][T25643] device veth0_macvtap entered promiscuous mode [ 1518.373526][T25643] device veth1_macvtap entered promiscuous mode [ 1518.413650][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.429236][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.477128][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.489309][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.558211][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.630773][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.641957][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.654784][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.666962][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.680793][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.694945][T25643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.734004][T25841] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6187'. [ 1518.778644][T25846] netlink: 'syz.3.6186': attribute type 10 has an invalid length. [ 1518.786970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1518.808440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1518.827822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1518.845597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1518.866492][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1518.884340][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.900708][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1518.925619][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.940421][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1518.956530][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.967622][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1518.986343][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.997259][T25643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.013422][T25643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.028906][T25643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1519.045217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1519.069344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1519.148916][T25643] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.164879][T25643] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.189066][T25643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.199358][T25643] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.405518][T25861] netlink: 'syz.1.6192': attribute type 10 has an invalid length. [ 1519.595487][T25873] netlink: 'syz.4.6196': attribute type 10 has an invalid length. [ 1520.077542][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.081336][T25883] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6198'. [ 1520.105304][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.122692][T25882] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6199'. [ 1520.147476][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1520.224008][T25887] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6200'. [ 1520.260486][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.280495][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.326206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1520.485374][T25897] netlink: 'syz.4.6201': attribute type 10 has an invalid length. [ 1520.894642][T25913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6209'. [ 1520.936243][T25912] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6210'. [ 1521.002316][T25912] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1521.589550][T25919] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6211'. [ 1522.496498][T25942] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6220'. [ 1522.838472][T25939] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6219'. [ 1522.920836][T25951] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6222'. [ 1523.055510][ T4346] device hsr_slave_0 left promiscuous mode [ 1523.132247][ T4346] device hsr_slave_1 left promiscuous mode [ 1523.178778][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1523.187578][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1523.208733][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1523.230481][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1523.249367][ T4346] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1523.267589][ T4346] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1523.279261][ T4346] batman_adv: batadv0: Removing interface: veth0_vlan [ 1523.314600][ T4346] device bridge_slave_0 left promiscuous mode [ 1523.327403][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.349680][ T4346] device veth1_macvtap left promiscuous mode [ 1523.356219][ T4346] device veth1_vlan left promiscuous mode [ 1523.370841][ T4346] device veth0_vlan left promiscuous mode [ 1524.149038][ T4346] team0 (unregistering): Port device team_slave_1 removed [ 1524.186644][ T4346] team0 (unregistering): Port device team_slave_0 removed [ 1524.399272][ T4346] team0 (unregistering): Port device bridge0 removed [ 1524.461383][T25962] validate_nla: 4 callbacks suppressed [ 1524.461403][T25962] netlink: 'syz.1.6236': attribute type 10 has an invalid length. [ 1524.488133][T25964] netlink: 'syz.4.6225': attribute type 2 has an invalid length. [ 1524.503100][T25964] netlink: 'syz.4.6225': attribute type 8 has an invalid length. [ 1524.528227][T25964] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6225'. [ 1524.719855][T25984] netlink: 'syz.4.6231': attribute type 10 has an invalid length. [ 1525.128852][T26009] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6238'. [ 1525.277763][T26004] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6239'. [ 1525.354377][T26012] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6241'. [ 1525.779385][T26026] netlink: 'syz.2.6245': attribute type 2 has an invalid length. [ 1525.864433][T26026] netlink: 'syz.2.6245': attribute type 8 has an invalid length. [ 1525.962823][T26026] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6245'. [ 1526.387618][T26032] netlink: 'syz.0.6258': attribute type 10 has an invalid length. [ 1526.482653][T26032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.547064][T26032] device bridge_slave_1 left promiscuous mode [ 1526.575317][T26032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.748184][T26032] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1526.965972][T26050] FAULT_INJECTION: forcing a failure. [ 1526.965972][T26050] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.050354][T26050] CPU: 1 PID: 26050 Comm: syz.4.6253 Not tainted syzkaller #0 [ 1527.057902][T26050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1527.068007][T26050] Call Trace: [ 1527.071329][T26050] [ 1527.074292][T26050] dump_stack_lvl+0x188/0x250 [ 1527.079013][T26050] ? show_regs_print_info+0x20/0x20 [ 1527.084253][T26050] ? load_image+0x410/0x410 [ 1527.088811][T26050] ? __lock_acquire+0x7d40/0x7d40 [ 1527.093880][T26050] ? lock_chain_count+0x20/0x20 [ 1527.098778][T26050] should_fail+0x383/0x4b0 [ 1527.103256][T26050] should_failslab+0x5/0x20 [ 1527.107794][T26050] slab_pre_alloc_hook+0x51/0xc0 [ 1527.112771][T26050] ? __feat_register_sp+0x1c9/0x3f0 [ 1527.118284][T26050] __kmalloc_track_caller+0x69/0x330 [ 1527.123614][T26050] ? __feat_register_sp+0x1c9/0x3f0 [ 1527.128866][T26050] kmemdup+0x22/0x50 [ 1527.132791][T26050] __feat_register_sp+0x1c9/0x3f0 [ 1527.137857][T26050] dccp_feat_init+0x2b9/0xdd0 [ 1527.142562][T26050] ? dccp_write_timer+0xcc0/0xcc0 [ 1527.147616][T26050] ? init_timer_key+0x6b/0x2a0 [ 1527.152410][T26050] ? dccp_feat_parse_options+0x2310/0x2310 [ 1527.158253][T26050] ? init_timer_key+0x15d/0x2a0 [ 1527.163137][T26050] ? dccp_reqsk_send_ack+0x30/0x30 [ 1527.168275][T26050] ? dccp_write_timer+0xcc0/0xcc0 [ 1527.173326][T26050] ? inet_csk_init_xmit_timers+0x81/0xf0 [ 1527.179079][T26050] dccp_v6_init_sock+0x1b/0xb0 [ 1527.183880][T26050] inet6_create+0xd88/0x1130 [ 1527.188539][T26050] __sock_create+0x473/0x910 [ 1527.193167][T26050] __sys_socket+0xe2/0x170 [ 1527.197703][T26050] __x64_sys_socket+0x76/0x80 [ 1527.202435][T26050] do_syscall_64+0x4c/0xa0 [ 1527.206900][T26050] ? clear_bhb_loop+0x30/0x80 [ 1527.211606][T26050] ? clear_bhb_loop+0x30/0x80 [ 1527.216315][T26050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1527.222241][T26050] RIP: 0033:0x7faf2cd97559 [ 1527.226689][T26050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.246327][T26050] RSP: 002b:00007faf2afee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1527.254784][T26050] RAX: ffffffffffffffda RBX: 00007faf2d01dfa0 RCX: 00007faf2cd97559 [ 1527.262786][T26050] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1527.270783][T26050] RBP: 00007faf2afee090 R08: 0000000000000000 R09: 0000000000000000 [ 1527.278782][T26050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1527.286794][T26050] R13: 00007faf2d01e038 R14: 00007faf2d01dfa0 R15: 00007ffdcbb79178 [ 1527.294814][T26050] [ 1527.330083][T26056] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6255'. [ 1527.487542][T26060] FAULT_INJECTION: forcing a failure. [ 1527.487542][T26060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.542691][T26060] CPU: 0 PID: 26060 Comm: syz.3.6259 Not tainted syzkaller #0 [ 1527.550282][T26060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1527.560399][T26060] Call Trace: [ 1527.563776][T26060] [ 1527.566792][T26060] dump_stack_lvl+0x188/0x250 [ 1527.571570][T26060] ? show_regs_print_info+0x20/0x20 [ 1527.576891][T26060] ? load_image+0x410/0x410 [ 1527.581533][T26060] ? __lock_acquire+0x7d40/0x7d40 [ 1527.586662][T26060] ? alloc_pages+0x452/0x560 [ 1527.591390][T26060] should_fail+0x383/0x4b0 [ 1527.595945][T26060] _copy_from_iter+0x234/0x1160 [ 1527.600900][T26060] ? __lock_acquire+0x7d40/0x7d40 [ 1527.606051][T26060] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 1527.611544][T26060] ? __virt_addr_valid+0x3c6/0x470 [ 1527.616744][T26060] ? __check_object_size+0x30c/0x410 [ 1527.622150][T26060] skb_copy_datagram_from_iter+0xf1/0x6c0 [ 1527.627957][T26060] ? __might_sleep+0xf0/0xf0 [ 1527.632638][T26060] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 1527.638883][T26060] ? skb_put+0x10e/0x200 [ 1527.643252][T26060] unix_stream_sendmsg+0x678/0xc90 [ 1527.648609][T26060] ? unix_show_fdinfo+0xa0/0xa0 [ 1527.653536][T26060] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1527.660113][T26060] ? apparmor_socket_sendmsg+0x88/0x230 [ 1527.665763][T26060] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1527.671120][T26060] ? security_socket_sendmsg+0x7c/0xa0 [ 1527.676655][T26060] ? unix_show_fdinfo+0xa0/0xa0 [ 1527.681592][T26060] ____sys_sendmsg+0x5be/0x8f0 [ 1527.682630][T26062] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6256'. [ 1527.686479][T26060] ? __sys_sendmsg_sock+0x30/0x30 [ 1527.686578][T26060] ? import_iovec+0x6f/0xa0 [ 1527.686642][T26060] ___sys_sendmsg+0x236/0x2e0 [ 1527.686735][T26060] ? __sys_sendmsg+0x290/0x290 [ 1527.686980][T26060] __se_sys_sendmsg+0x1b7/0x2a0 [ 1527.687042][T26060] ? __x64_sys_sendmsg+0x80/0x80 [ 1527.687090][T26060] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1527.687195][T26060] ? lockdep_hardirqs_on+0x94/0x140 [ 1527.687260][T26060] do_syscall_64+0x4c/0xa0 [ 1527.687287][T26060] ? clear_bhb_loop+0x30/0x80 [ 1527.687317][T26060] ? clear_bhb_loop+0x30/0x80 [ 1527.687373][T26060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1527.687404][T26060] RIP: 0033:0x7f07d99b5559 [ 1527.687466][T26060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.687491][T26060] RSP: 002b:00007f07d7c0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1527.687524][T26060] RAX: ffffffffffffffda RBX: 00007f07d9c3bfa0 RCX: 00007f07d99b5559 [ 1527.687566][T26060] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1527.687586][T26060] RBP: 00007f07d7c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1527.687605][T26060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1527.687624][T26060] R13: 00007f07d9c3c038 R14: 00007f07d9c3bfa0 R15: 00007ffeb23b5618 [ 1527.829722][T26060] [ 1528.163489][T26071] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6261'. [ 1528.385831][T26078] netlink: 'syz.2.6263': attribute type 10 has an invalid length. [ 1528.436244][T26081] netlink: 'syz.4.6264': attribute type 10 has an invalid length. [ 1528.715838][T26093] netlink: 'syz.2.6278': attribute type 10 has an invalid length. [ 1528.819079][T26100] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6270'. [ 1529.346049][T26116] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1529.405827][T26117] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6279'. [ 1529.483318][T26120] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.6276'. [ 1529.680912][T26125] validate_nla: 1 callbacks suppressed [ 1529.716855][T26125] netlink: 'syz.0.6280': attribute type 10 has an invalid length. [ 1529.795497][T26121] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6275'. [ 1530.239671][T26138] netlink: 'syz.1.6282': attribute type 10 has an invalid length. [ 1530.341832][T26142] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1530.371702][T26142] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1531.028609][T26159] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.6291'. [ 1531.527047][T26176] netlink: 'syz.4.6296': attribute type 10 has an invalid length. [ 1531.887362][T26188] netlink: 'syz.0.6301': attribute type 10 has an invalid length. [ 1532.024158][T26190] device syzkaller0 entered promiscuous mode [ 1532.046057][T26186] netlink: 'syz.3.6299': attribute type 10 has an invalid length. [ 1532.301705][T26202] FAULT_INJECTION: forcing a failure. [ 1532.301705][T26202] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.314932][T26202] CPU: 1 PID: 26202 Comm: syz.4.6306 Not tainted syzkaller #0 [ 1532.322439][T26202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1532.332534][T26202] Call Trace: [ 1532.335848][T26202] [ 1532.338830][T26202] dump_stack_lvl+0x188/0x250 [ 1532.343575][T26202] ? show_regs_print_info+0x20/0x20 [ 1532.348810][T26202] ? load_image+0x410/0x410 [ 1532.353351][T26202] ? __might_sleep+0xf0/0xf0 [ 1532.357986][T26202] ? __lock_acquire+0x7d40/0x7d40 [ 1532.363053][T26202] ? mark_lock+0x94/0x320 [ 1532.367426][T26202] should_fail+0x383/0x4b0 [ 1532.371981][T26202] should_failslab+0x5/0x20 [ 1532.376517][T26202] slab_pre_alloc_hook+0x51/0xc0 [ 1532.381499][T26202] __kmalloc+0x6b/0x340 [ 1532.385691][T26202] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 1532.391459][T26202] tomoyo_realpath_from_path+0xed/0x5e0 [ 1532.397080][T26202] tomoyo_path_number_perm+0x251/0x6b0 [ 1532.402591][T26202] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1532.408096][T26202] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1532.415211][T26202] security_file_ioctl+0x6c/0xa0 [ 1532.420198][T26202] __se_sys_ioctl+0x48/0x170 [ 1532.424827][T26202] do_syscall_64+0x4c/0xa0 [ 1532.429376][T26202] ? clear_bhb_loop+0x30/0x80 [ 1532.434092][T26202] ? clear_bhb_loop+0x30/0x80 [ 1532.438804][T26202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1532.444727][T26202] RIP: 0033:0x7faf2cd97559 [ 1532.449176][T26202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.468816][T26202] RSP: 002b:00007faf2afee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1532.477276][T26202] RAX: ffffffffffffffda RBX: 00007faf2d01dfa0 RCX: 00007faf2cd97559 [ 1532.485294][T26202] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 1532.493313][T26202] RBP: 00007faf2afee090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.501324][T26202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1532.509342][T26202] R13: 00007faf2d01e038 R14: 00007faf2d01dfa0 R15: 00007ffdcbb79178 [ 1532.517464][T26202] [ 1532.530301][T26202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1532.537853][T26202] device wlan1 entered promiscuous mode [ 1532.680197][T26206] netlink: 'syz.3.6308': attribute type 10 has an invalid length. [ 1532.754074][T26210] __nla_validate_parse: 4 callbacks suppressed [ 1532.754093][T26210] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6309'. [ 1532.770201][T26218] netlink: 'syz.4.6311': attribute type 1 has an invalid length. [ 1532.913046][T26210] device wlan1 entered promiscuous mode [ 1532.963100][T26221] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.6313'. [ 1533.567110][T26238] netlink: 'syz.2.6318': attribute type 10 has an invalid length. [ 1533.665879][T26245] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6322'. [ 1533.829841][T26253] netlink: 'syz.3.6326': attribute type 3 has an invalid length. [ 1533.961221][T26253] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6326'. [ 1534.564414][T26273] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6330'. [ 1534.646157][T26286] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1534.803435][T26290] netlink: 'syz.1.6337': attribute type 10 has an invalid length. [ 1534.887066][T26296] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.6340'. [ 1534.927578][T26301] FAULT_INJECTION: forcing a failure. [ 1534.927578][T26301] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.966138][T26301] CPU: 1 PID: 26301 Comm: syz.0.6342 Not tainted syzkaller #0 [ 1534.973671][T26301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1534.983770][T26301] Call Trace: [ 1534.987228][T26301] [ 1534.990200][T26301] dump_stack_lvl+0x188/0x250 [ 1534.994926][T26301] ? show_regs_print_info+0x20/0x20 [ 1535.000164][T26301] ? load_image+0x410/0x410 [ 1535.004712][T26301] ? __might_sleep+0xf0/0xf0 [ 1535.009340][T26301] ? __lock_acquire+0x7d40/0x7d40 [ 1535.014407][T26301] ? __debug_object_init+0x253/0xc80 [ 1535.019737][T26301] should_fail+0x383/0x4b0 [ 1535.024213][T26301] should_failslab+0x5/0x20 [ 1535.028755][T26301] slab_pre_alloc_hook+0x51/0xc0 [ 1535.033779][T26301] kmem_cache_alloc_trace+0x47/0x290 [ 1535.039124][T26301] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1535.045097][T26301] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1535.051087][T26301] ? sctp_stream_interleave_init+0x54/0x90 [ 1535.056961][T26301] sctp_association_new+0x15d4/0x2400 [ 1535.062396][T26301] sctp_connect_new_asoc+0x2da/0x6a0 [ 1535.067740][T26301] ? __sctp_connect+0xd80/0xd80 [ 1535.072630][T26301] ? __local_bh_enable_ip+0x136/0x1c0 [ 1535.078048][T26301] ? _local_bh_enable+0xa0/0xa0 [ 1535.083010][T26301] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1535.088603][T26301] ? security_sctp_bind_connect+0x85/0xb0 [ 1535.094364][T26301] sctp_sendmsg+0x15e1/0x2940 [ 1535.099113][T26301] ? sctp_getsockopt+0x8a0/0x8a0 [ 1535.104116][T26301] ? aa_af_perm+0x340/0x340 [ 1535.108667][T26301] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1535.115136][T26301] ? aa_sock_msg_perm+0x94/0x150 [ 1535.120139][T26301] ? sock_rps_record_flow+0x17/0x3b0 [ 1535.125513][T26301] ? inet_sendmsg+0x7a/0x2a0 [ 1535.130143][T26301] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1535.135469][T26301] ? inet_send_prepare+0x250/0x250 [ 1535.140627][T26301] ____sys_sendmsg+0x5be/0x8f0 [ 1535.145440][T26301] ? __sys_sendmsg_sock+0x30/0x30 [ 1535.150516][T26301] ? import_iovec+0x6f/0xa0 [ 1535.155062][T26301] ___sys_sendmsg+0x236/0x2e0 [ 1535.159817][T26301] ? __sys_sendmsg+0x290/0x290 [ 1535.164660][T26301] __se_sys_sendmsg+0x1b7/0x2a0 [ 1535.169554][T26301] ? __x64_sys_sendmsg+0x80/0x80 [ 1535.174617][T26301] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1535.180657][T26301] ? lockdep_hardirqs_on+0x94/0x140 [ 1535.185990][T26301] do_syscall_64+0x4c/0xa0 [ 1535.190449][T26301] ? clear_bhb_loop+0x30/0x80 [ 1535.195169][T26301] ? clear_bhb_loop+0x30/0x80 [ 1535.199896][T26301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1535.205850][T26301] RIP: 0033:0x7f8e82bb2559 [ 1535.210312][T26301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.229954][T26301] RSP: 002b:00007f8e80e09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1535.238414][T26301] RAX: ffffffffffffffda RBX: 00007f8e82e38fa0 RCX: 00007f8e82bb2559 [ 1535.246420][T26301] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1535.254425][T26301] RBP: 00007f8e80e09090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.262450][T26301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.270469][T26301] R13: 00007f8e82e39038 R14: 00007f8e82e38fa0 R15: 00007fff45003d78 [ 1535.278771][T26301] [ 1535.536542][T26312] netlink: 'syz.0.6345': attribute type 9 has an invalid length. [ 1535.575966][T26312] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6345'. [ 1535.801816][T26328] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6350'. [ 1535.957950][T26327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6352'. [ 1536.078773][T26333] netlink: 'syz.2.6354': attribute type 10 has an invalid length. [ 1537.079630][T26359] netlink: 'syz.0.6363': attribute type 10 has an invalid length. [ 1537.623135][T26376] netlink: 'syz.3.6369': attribute type 10 has an invalid length. [ 1537.792364][T26383] netlink: 'syz.0.6375': attribute type 10 has an invalid length. [ 1537.943728][T26394] __nla_validate_parse: 2 callbacks suppressed [ 1537.943767][T26394] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6378'. [ 1538.197172][T26396] netlink: 'syz.3.6377': attribute type 10 has an invalid length. [ 1538.464272][T26404] netlink: 'syz.2.6381': attribute type 10 has an invalid length. [ 1538.699846][T26412] rxe_eth0 speed is unknown, defaulting to 1000 [ 1538.729661][T26411] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6384'. [ 1538.941523][T26421] netlink: 'syz.2.6387': attribute type 10 has an invalid length. [ 1538.954552][T26426] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6389'. [ 1539.364712][T26443] netlink: 'syz.2.6394': attribute type 10 has an invalid length. [ 1540.435973][T26465] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6400'. [ 1540.928684][T26487] netlink: 'syz.0.6404': attribute type 10 has an invalid length. [ 1540.978757][T26486] netlink: 'syz.3.6406': attribute type 10 has an invalid length. [ 1541.252272][T26494] netlink: 'syz.2.6409': attribute type 10 has an invalid length. [ 1541.399316][T26504] netlink: 'syz.0.6412': attribute type 10 has an invalid length. [ 1542.116242][T26527] FAULT_INJECTION: forcing a failure. [ 1542.116242][T26527] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.207413][T26518] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6418'. [ 1542.254019][T26527] CPU: 1 PID: 26527 Comm: syz.1.6422 Not tainted syzkaller #0 [ 1542.261557][T26527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1542.271679][T26527] Call Trace: [ 1542.275016][T26527] [ 1542.277995][T26527] dump_stack_lvl+0x188/0x250 [ 1542.282736][T26527] ? show_regs_print_info+0x20/0x20 [ 1542.288088][T26527] ? load_image+0x410/0x410 [ 1542.292656][T26527] ? __might_sleep+0xf0/0xf0 [ 1542.297296][T26527] ? __lock_acquire+0x7d40/0x7d40 [ 1542.302371][T26527] ? netlink_insert+0xe90/0x11f0 [ 1542.307393][T26527] should_fail+0x383/0x4b0 [ 1542.311896][T26527] should_failslab+0x5/0x20 [ 1542.316452][T26527] slab_pre_alloc_hook+0x51/0xc0 [ 1542.321455][T26527] kmem_cache_alloc_node+0x47/0x2c0 [ 1542.327136][T26527] ? __alloc_skb+0xf4/0x750 [ 1542.331731][T26527] __alloc_skb+0xf4/0x750 [ 1542.336131][T26527] netlink_sendmsg+0x654/0xbe0 [ 1542.340979][T26527] ? netlink_getsockopt+0x570/0x570 [ 1542.346218][T26527] ? aa_sock_msg_perm+0x94/0x150 [ 1542.351221][T26527] ? apparmor_socket_sendmsg+0x88/0x230 [ 1542.356832][T26527] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1542.362177][T26527] ? security_socket_sendmsg+0x7c/0xa0 [ 1542.367689][T26527] ? netlink_getsockopt+0x570/0x570 [ 1542.372960][T26527] ____sys_sendmsg+0x5be/0x8f0 [ 1542.377812][T26527] ? __sys_sendmsg_sock+0x30/0x30 [ 1542.382916][T26527] ? import_iovec+0x6f/0xa0 [ 1542.387482][T26527] ___sys_sendmsg+0x236/0x2e0 [ 1542.392240][T26527] ? __sys_sendmsg+0x290/0x290 [ 1542.397104][T26527] ? trace_event_raw_event_lock+0x250/0x250 [ 1542.403107][T26527] __se_sys_sendmsg+0x1b7/0x2a0 [ 1542.408024][T26527] ? __x64_sys_sendmsg+0x80/0x80 [ 1542.413001][T26527] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1542.419071][T26527] ? lockdep_hardirqs_on+0x94/0x140 [ 1542.424336][T26527] do_syscall_64+0x4c/0xa0 [ 1542.428804][T26527] ? clear_bhb_loop+0x30/0x80 [ 1542.433524][T26527] ? clear_bhb_loop+0x30/0x80 [ 1542.438240][T26527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1542.444165][T26527] RIP: 0033:0x7fc6f6e77559 [ 1542.448616][T26527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.468362][T26527] RSP: 002b:00007fc6f50ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1542.476835][T26527] RAX: ffffffffffffffda RBX: 00007fc6f70fdfa0 RCX: 00007fc6f6e77559 [ 1542.484858][T26527] RDX: 0000000000000000 RSI: 0000200000001340 RDI: 0000000000000003 [ 1542.492883][T26527] RBP: 00007fc6f50ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.500891][T26527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.508996][T26527] R13: 00007fc6f70fe038 R14: 00007fc6f70fdfa0 R15: 00007ffd177f12e8 [ 1542.517069][T26527] [ 1542.611760][T26528] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1542.682758][T26530] netlink: 'syz.4.6421': attribute type 10 has an invalid length. [ 1542.739303][T26522] netlink: 'syz.3.6420': attribute type 10 has an invalid length. [ 1542.916502][T26537] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.6424'. [ 1543.112911][T26542] netlink: 'syz.0.6426': attribute type 10 has an invalid length. [ 1543.230633][T26546] netlink: 'syz.2.6428': attribute type 10 has an invalid length. [ 1543.937722][T26561] netlink: 'syz.2.6431': attribute type 10 has an invalid length. [ 1544.093834][T26561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.152035][T26561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.159247][T26561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.243513][T26561] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1544.394711][T26567] netlink: 'syz.0.6434': attribute type 10 has an invalid length. [ 1544.455683][T26569] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6435'. [ 1545.257213][T26587] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.6441'. [ 1545.324685][T26582] rxe_eth0 speed is unknown, defaulting to 1000 [ 1545.575038][T26600] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1545.695614][T26606] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1545.783968][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.790347][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.091863][T26582] chnl_net:caif_netlink_parms(): no params data found [ 1546.162300][T26627] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.6455'. [ 1546.183375][T26624] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6454'. [ 1546.307071][T26622] validate_nla: 7 callbacks suppressed [ 1546.307112][T26622] netlink: 'syz.3.6452': attribute type 10 has an invalid length. [ 1546.416571][ T4346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.487114][T26582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.496257][T26582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.510814][T26582] device bridge_slave_0 entered promiscuous mode [ 1546.520422][T26582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.528055][T26582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.536846][T26582] device bridge_slave_1 entered promiscuous mode [ 1546.584464][ T4346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.640286][T26636] netlink: 'syz.0.6456': attribute type 10 has an invalid length. [ 1546.754106][ T4346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.780363][T26582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1546.793989][T26639] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.6457'. [ 1546.810073][T26645] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.6459'. [ 1546.850054][T26582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.893721][ T4346] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.991277][ T4370] Bluetooth: hci5: command 0x0409 tx timeout [ 1547.052033][T26582] team0: Port device team_slave_0 added [ 1547.089753][T26582] team0: Port device team_slave_1 added [ 1547.142114][T26649] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6460'. [ 1547.236041][T26582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.249584][T26582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.295433][T26582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.310289][T26582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.317577][T26582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.354870][T26582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.363422][T26662] netlink: 'syz.2.6464': attribute type 9 has an invalid length. [ 1547.431657][T26662] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6464'. [ 1547.524154][T26582] device hsr_slave_0 entered promiscuous mode [ 1547.532478][T26667] netlink: 'syz.2.6464': attribute type 9 has an invalid length. [ 1547.541832][T26582] device hsr_slave_1 entered promiscuous mode [ 1547.556876][T26582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1547.565204][T26582] Cannot create hsr debugfs directory [ 1547.604257][T26673] netlink: 'syz.4.6466': attribute type 3 has an invalid length. [ 1547.934167][T26679] netlink: 'syz.4.6472': attribute type 10 has an invalid length. [ 1548.041713][T26679] team0: Port device macvlan1 added [ 1548.163965][T26686] tun0: tun_chr_ioctl cmd 1074025681 [ 1548.709010][T26711] netlink: 'syz.0.6478': attribute type 1 has an invalid length. [ 1548.977441][T26728] IPv6: Can't replace route, no match found [ 1549.071687][T18928] Bluetooth: hci5: command 0x041b tx timeout [ 1549.137870][T26582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1549.200567][T26582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1549.222590][T26582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1549.260557][T26582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1549.642393][T26582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.712457][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1549.720536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1549.742548][T26582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.849043][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1549.878826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1549.899043][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.906208][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.945098][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1549.967310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1549.981035][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.988191][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.003486][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1550.015274][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1550.092188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1550.122298][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1550.153773][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1550.193545][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1550.219667][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1550.242383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1550.272261][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1550.288334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1550.355018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1550.390559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1550.440873][ T4346] device hsr_slave_0 left promiscuous mode [ 1550.458831][T26785] netlink: 'syz.3.6504': attribute type 9 has an invalid length. [ 1550.480542][ T4346] device hsr_slave_1 left promiscuous mode [ 1550.481320][T26785] __nla_validate_parse: 7 callbacks suppressed [ 1550.481371][T26785] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6504'. [ 1550.502351][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.551543][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.566565][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.581487][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.597484][ T4346] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1550.608924][ T4346] batman_adv: batadv0: Removing interface: veth0_vlan [ 1550.619556][ T4346] device bridge_slave_0 left promiscuous mode [ 1550.627766][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.646790][ T4346] device veth1_macvtap left promiscuous mode [ 1550.656602][ T4346] device veth1_vlan left promiscuous mode [ 1550.666419][ T4346] device veth0_vlan left promiscuous mode [ 1550.824074][ T4346] team0 (unregistering): Port device geneve1 removed [ 1550.926418][ T4346] team0 (unregistering): Port device virt_wifi0 removed [ 1551.036170][ T4346] team0 (unregistering): Port device team_slave_1 removed [ 1551.144824][ T1111] Bluetooth: hci5: command 0x040f tx timeout [ 1551.167130][ T4346] team0 (unregistering): Port device bridge0 removed [ 1551.312670][T26788] netlink: 'syz.3.6504': attribute type 9 has an invalid length. [ 1551.378071][T26788] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6504'. [ 1551.557786][T26802] device bridge_slave_0 left promiscuous mode [ 1551.589442][T26802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.770567][T26806] IPv6: Can't replace route, no match found [ 1551.806654][T26807] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6508'. [ 1551.898743][T26582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.926913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1551.967338][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1552.029084][T26815] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6516'. [ 1552.116387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1552.139794][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1552.202395][T26582] device veth0_vlan entered promiscuous mode [ 1552.217185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1552.230363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1552.298797][T26582] device veth1_vlan entered promiscuous mode [ 1552.328285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1552.337185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1552.348328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1552.459797][T26827] netlink: 'syz.4.6519': attribute type 10 has an invalid length. [ 1552.480751][T26827] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6519'. [ 1552.597735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1552.616660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1552.654636][T26582] device veth0_macvtap entered promiscuous mode [ 1552.703285][T26582] device veth1_macvtap entered promiscuous mode [ 1552.784376][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.843247][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.859781][T26837] netlink: 'syz.4.6525': attribute type 9 has an invalid length. [ 1552.898736][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.906284][T26837] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6525'. [ 1552.930692][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.951021][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.972177][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.996768][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.021861][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.045282][T26582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.080533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1553.126380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1553.161933][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1553.186652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1553.216546][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.228346][ T4370] Bluetooth: hci5: command 0x0419 tx timeout [ 1553.251379][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.281024][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.301384][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.321596][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.341708][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.367871][T26582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.388817][T26582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.420714][T26582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.469222][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1553.481384][T26838] netlink: 'syz.4.6525': attribute type 9 has an invalid length. [ 1553.493959][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1553.528893][T26838] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6525'. [ 1553.543404][T26582] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.581039][T26582] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.600250][T26582] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.620512][T26582] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.643942][T26849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6529'. [ 1553.697188][T26852] device bridge_slave_0 left promiscuous mode [ 1553.711936][T26852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.873506][T26852] bond0: (slave bridge0): Releasing backup interface [ 1554.035452][T26853] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6530'. [ 1554.237147][T26865] netlink: 'syz.0.6535': attribute type 10 has an invalid length. [ 1554.256060][T26865] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6535'. [ 1554.527928][T15005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.544655][T15005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.616099][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1554.644428][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.665127][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.681985][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1554.802339][T26885] netlink: 'syz.0.6544': attribute type 9 has an invalid length. [ 1555.029157][T26890] netlink: 'syz.0.6544': attribute type 9 has an invalid length. [ 1555.150596][T26893] device sit0 entered promiscuous mode [ 1555.894525][T26911] netlink: 'syz.4.6552': attribute type 10 has an invalid length. [ 1555.926289][T26911] device hsr0 entered promiscuous mode [ 1555.954806][T26911] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1555.988034][T26911] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1555.998976][T26911] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1556.037579][T26911] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1556.428834][T26924] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1556.517894][T26924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1556.600679][T26934] ¥: port 1(team0) entered blocking state [ 1556.620866][T26934] ¥: port 1(team0) entered disabled state [ 1556.633210][T26934] device team0 entered promiscuous mode [ 1556.638967][T26934] device team_slave_0 entered promiscuous mode [ 1556.663882][T26934] device team_slave_1 entered promiscuous mode [ 1556.702919][T26935] device team0 left promiscuous mode [ 1556.721860][T26935] device team_slave_0 left promiscuous mode [ 1556.749086][T26935] device team_slave_1 left promiscuous mode [ 1556.793070][T26935] ¥: port 1(team0) entered disabled state [ 1557.068609][T26953] device syzkaller0 entered promiscuous mode [ 1557.095539][T26953] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 1557.550219][T26966] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1557.614443][T26966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1557.825903][T26978] ¥: port 1(team0) entered blocking state [ 1557.872473][T26978] ¥: port 1(team0) entered disabled state [ 1557.901661][T26978] device team0 entered promiscuous mode [ 1557.909513][T26978] device team_slave_0 entered promiscuous mode [ 1557.918762][T26978] device team_slave_1 entered promiscuous mode [ 1557.931887][T26978] device bridge0 entered promiscuous mode [ 1557.954448][T26985] device team0 left promiscuous mode [ 1557.971145][T26985] device team_slave_0 left promiscuous mode [ 1557.977278][T26985] device team_slave_1 left promiscuous mode [ 1557.983983][T26985] device bridge0 left promiscuous mode [ 1557.989785][T26985] ¥: port 1(team0) entered disabled state [ 1558.155529][T26993] netlink: 'syz.1.6587': attribute type 4 has an invalid length. [ 1558.189122][T26993] __nla_validate_parse: 3 callbacks suppressed [ 1558.189166][T26993] netlink: 203252 bytes leftover after parsing attributes in process `syz.1.6587'. [ 1558.506891][T27010] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1558.587473][T27010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1558.671843][T27024] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6599'. [ 1558.870755][T27032] ¥: port 1(team0) entered blocking state [ 1558.892875][T27032] ¥: port 1(team0) entered disabled state [ 1558.929496][T27032] device team0 entered promiscuous mode [ 1558.940507][T27032] device team_slave_0 entered promiscuous mode [ 1558.951276][T27032] device team_slave_1 entered promiscuous mode [ 1558.967816][T27036] netlink: 'syz.1.6603': attribute type 10 has an invalid length. [ 1558.977801][T27036] device macvlan0 entered promiscuous mode [ 1558.993779][T27028] device team0 left promiscuous mode [ 1558.999394][T27028] device team_slave_0 left promiscuous mode [ 1559.008126][T27028] device team_slave_1 left promiscuous mode [ 1559.018349][T27028] ¥: port 1(team0) entered disabled state [ 1559.186307][T24552] Bluetooth: hci1: Unknown advertising packet type: 0x203a [ 1559.186576][T24552] ================================================================== [ 1559.202259][T24552] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12cf/0x3ca0 [ 1559.210163][T24552] Read of size 1 at addr ffff88806355f607 by task kworker/u5:0/24552 [ 1559.218248][T24552] [ 1559.220613][T24552] CPU: 0 PID: 24552 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1559.228255][T24552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1559.238339][T24552] Workqueue: hci1 hci_rx_work [ 1559.243123][T24552] Call Trace: [ 1559.246416][T24552] [ 1559.249365][T24552] dump_stack_lvl+0x188/0x250 [ 1559.254086][T24552] ? show_regs_print_info+0x20/0x20 [ 1559.259307][T24552] ? load_image+0x410/0x410 [ 1559.263844][T24552] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1559.269341][T24552] print_address_description+0x60/0x2d0 [ 1559.274918][T24552] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 1559.280046][T24552] kasan_report+0xdf/0x130 [ 1559.284485][T24552] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 1559.289874][T24552] hci_le_meta_evt+0x12cf/0x3ca0 [ 1559.294921][T24552] ? hci_event_packet+0x363/0x1310 [ 1559.300064][T24552] ? __lock_acquire+0x7d40/0x7d40 [ 1559.305114][T24552] ? hci_remote_host_features_evt+0x240/0x240 [ 1559.311214][T24552] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1559.316868][T24552] ? mark_lock+0x94/0x320 [ 1559.321215][T24552] ? mutex_unlock+0x10/0x10 [ 1559.325822][T24552] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1559.331837][T24552] ? lock_chain_count+0x20/0x20 [ 1559.336795][T24552] ? __rwlock_init+0x140/0x140 [ 1559.341575][T24552] hci_event_packet+0xe0b/0x1310 [ 1559.346555][T24552] ? _raw_spin_unlock+0x40/0x40 [ 1559.351467][T24552] ? rcu_lock_release+0x20/0x20 [ 1559.356691][T24552] ? hci_send_to_monitor+0x9c/0x4a0 [ 1559.362000][T24552] hci_rx_work+0x255/0xa10 [ 1559.366446][T24552] process_one_work+0x867/0xff0 [ 1559.371331][T24552] ? worker_detach_from_pool+0x240/0x240 [ 1559.377093][T24552] ? lockdep_hardirqs_off+0x70/0x100 [ 1559.382402][T24552] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1559.387447][T24552] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1559.393011][T24552] ? wq_worker_running+0x97/0x170 [ 1559.398055][T24552] worker_thread+0xad7/0x12a0 [ 1559.402768][T24552] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1559.408699][T24552] kthread+0x42e/0x520 [ 1559.412785][T24552] ? rcu_lock_release+0x20/0x20 [ 1559.417650][T24552] ? kthread_blkcg+0xd0/0xd0 [ 1559.422267][T24552] ret_from_fork+0x1f/0x30 [ 1559.426734][T24552] [ 1559.429787][T24552] [ 1559.432131][T24552] Allocated by task 27043: [ 1559.436562][T24552] __kasan_kmalloc+0xaf/0xe0 [ 1559.441175][T24552] __alloc_skb+0x22c/0x750 [ 1559.445626][T24552] vhci_write+0xbd/0x440 [ 1559.449970][T24552] vfs_write+0x748/0xd70 [ 1559.454228][T24552] ksys_write+0x153/0x260 [ 1559.458571][T24552] do_syscall_64+0x4c/0xa0 [ 1559.462999][T24552] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1559.468909][T24552] [ 1559.471247][T24552] The buggy address belongs to the object at ffff88806355f400 [ 1559.471247][T24552] which belongs to the cache kmalloc-512 of size 512 [ 1559.485318][T24552] The buggy address is located 7 bytes to the right of [ 1559.485318][T24552] 512-byte region [ffff88806355f400, ffff88806355f600) [ 1559.498957][T24552] The buggy address belongs to the page: [ 1559.504602][T24552] page:ffffea00018d5700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6355c [ 1559.514787][T24552] head:ffffea00018d5700 order:2 compound_mapcount:0 compound_pincount:0 [ 1559.523215][T24552] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1559.531219][T24552] raw: 00fff00000010200 ffffea00017e6700 0000000500000005 ffff888017841c80 [ 1559.539834][T24552] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1559.548607][T24552] page dumped because: kasan: bad access detected [ 1559.555107][T24552] page_owner tracks the page as allocated [ 1559.560842][T24552] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4235, ts 423740482528, free_ts 423656147846 [ 1559.580141][T24552] get_page_from_freelist+0x24f6/0x2670 [ 1559.585721][T24552] __alloc_pages+0x1ee/0x480 [ 1559.590338][T24552] new_slab+0xc0/0x4b0 [ 1559.595032][T24552] ___slab_alloc+0x807/0xdd0 [ 1559.599642][T24552] __kmalloc+0x11d/0x340 [ 1559.603894][T24552] __register_sysctl_table+0xa32/0x1240 [ 1559.609467][T24552] __devinet_sysctl_register+0x2ba/0x380 [ 1559.615156][T24552] devinet_sysctl_register+0x17c/0x1f0 [ 1559.620637][T24552] inetdev_init+0x28c/0x4d0 [ 1559.625156][T24552] inetdev_event+0x26f/0x1350 [ 1559.629859][T24552] raw_notifier_call_chain+0xcb/0x160 [ 1559.635246][T24552] register_netdevice+0x12a8/0x1720 [ 1559.640465][T24552] register_netdev+0x37/0x50 [ 1559.645067][T24552] vti6_init_net+0x234/0x2e0 [ 1559.649751][T24552] ops_init+0x360/0x5f0 [ 1559.653929][T24552] setup_net+0x39e/0xa10 [ 1559.658187][T24552] page last free stack trace: [ 1559.662877][T24552] __free_pages_ok+0x8b1/0x950 [ 1559.667658][T24552] free_nonslab_page+0xde/0x150 [ 1559.672528][T24552] proc_sys_call_handler+0x4fe/0x6c0 [ 1559.677858][T24552] vfs_read+0x75e/0xd50 [ 1559.682030][T24552] ksys_read+0x153/0x260 [ 1559.686291][T24552] do_syscall_64+0x4c/0xa0 [ 1559.690732][T24552] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1559.696650][T24552] [ 1559.698986][T24552] Memory state around the buggy address: [ 1559.704634][T24552] ffff88806355f500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1559.712708][T24552] ffff88806355f580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1559.720792][T24552] >ffff88806355f600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1559.728864][T24552] ^ [ 1559.732944][T24552] ffff88806355f680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1559.741021][T24552] ffff88806355f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1559.749102][T24552] ================================================================== [ 1559.757173][T24552] Disabling lock debugging due to kernel taint [ 1559.769242][T24552] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1559.776475][T24552] CPU: 0 PID: 24552 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 1559.785531][T24552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1559.795632][T24552] Workqueue: hci1 hci_rx_work [ 1559.800545][T24552] Call Trace: [ 1559.803870][T24552] [ 1559.806853][T24552] dump_stack_lvl+0x188/0x250 [ 1559.811569][T24552] ? show_regs_print_info+0x20/0x20 [ 1559.816802][T24552] ? load_image+0x410/0x410 [ 1559.821346][T24552] panic+0x2f8/0x850 [ 1559.825280][T24552] ? bpf_jit_dump+0xd0/0xd0 [ 1559.829825][T24552] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1559.835846][T24552] ? _raw_spin_unlock+0x40/0x40 [ 1559.840738][T24552] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 1559.845918][T24552] check_panic_on_warn+0x80/0xa0 [ 1559.850904][T24552] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 1559.856052][T24552] end_report+0x6d/0xf0 [ 1559.860245][T24552] kasan_report+0x102/0x130 [ 1559.864777][T24552] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 1559.869928][T24552] hci_le_meta_evt+0x12cf/0x3ca0 [ 1559.874926][T24552] ? hci_event_packet+0x363/0x1310 [ 1559.880073][T24552] ? __lock_acquire+0x7d40/0x7d40 [ 1559.885150][T24552] ? hci_remote_host_features_evt+0x240/0x240 [ 1559.891260][T24552] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1559.896914][T24552] ? mark_lock+0x94/0x320 [ 1559.901263][T24552] ? mutex_unlock+0x10/0x10 [ 1559.905805][T24552] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1559.911821][T24552] ? lock_chain_count+0x20/0x20 [ 1559.916691][T24552] ? __rwlock_init+0x140/0x140 [ 1559.921469][T24552] hci_event_packet+0xe0b/0x1310 [ 1559.926430][T24552] ? _raw_spin_unlock+0x40/0x40 [ 1559.931295][T24552] ? rcu_lock_release+0x20/0x20 [ 1559.936160][T24552] ? hci_send_to_monitor+0x9c/0x4a0 [ 1559.941378][T24552] hci_rx_work+0x255/0xa10 [ 1559.945822][T24552] process_one_work+0x867/0xff0 [ 1559.950700][T24552] ? worker_detach_from_pool+0x240/0x240 [ 1559.956444][T24552] ? lockdep_hardirqs_off+0x70/0x100 [ 1559.961750][T24552] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1559.966788][T24552] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1559.972353][T24552] ? wq_worker_running+0x97/0x170 [ 1559.977391][T24552] worker_thread+0xad7/0x12a0 [ 1559.982098][T24552] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1559.988011][T24552] kthread+0x42e/0x520 [ 1559.992094][T24552] ? rcu_lock_release+0x20/0x20 [ 1559.996963][T24552] ? kthread_blkcg+0xd0/0xd0 [ 1560.001566][T24552] ret_from_fork+0x1f/0x30 [ 1560.006013][T24552] [ 1560.009193][T24552] Kernel Offset: disabled [ 1560.013554][T24552] Rebooting in 86400 seconds..