last executing test programs: 4.252785585s ago: executing program 1 (id=5668): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0xb, 0xc}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000040), 0x43) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4087, 0xff7}, {0x0}, {&(0x7f0000003980)=""/4139, 0x102b}], 0x3}, 0x10100) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) sendmsg$kcm(r4, &(0x7f0000005e80)={&(0x7f0000001580)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001600)="3ba170dd00ff38cf45c1f837d07e100b9f243adf5cd078c94568042458977cdbe9a0b14f807d9ed2acd0d5fde237f317ebfb1fb678232e7552", 0x39}, {&(0x7f0000001640)="db56cc81aa0e7124d71e32", 0xb}, {&(0x7f0000001680)="a34cd5b84d", 0x5}, {&(0x7f00000016c0)="8d6634572d9a913d9f5733cd5360cd5b13a4f24955be59e87c656e9b69566fe8d0c5bcbb6fc9477293a3fdab78ac218e06810636e5b239e559d6914ef20d28b6fffe09b5f37e25b327afe9dc5e96abf60f042ccb6949c238b2c7cb7a311659f3436a6d3a9bbd6d61a1925f02270922ebb3b3eea6d0970d4664c623a4dc7168d9a28e65eb4c48f743541b2f32760759b27ba13845f978d49ad28f612577eba51ccb893a9fda888a014aecebf000020e687f1a8101e53657ef7994cca9", 0xbc}, {&(0x7f0000001780)="9125bafc3c8c80f7ff3372a8b0db300eed5446d515dfd0d3d58ddcf7a582cbd827934b4b49fad2db9c943dbe24d8ba32cae91a50fc118ae12ed625fa21d1706182eac0a8ff0bf9b20ab1b7f238e6047030539f9156a3c8436758675b689a474128984568c3353fcedf1e4d066172773b5a6de06a68d9dd3d7215cf67e7998ea0b84de4f2aaf23cd3fd9fee1f4e667ba74bb03f9c1f1f40d997e5be974a8d385069291114b4fbc2a891f8640d4ff9bd4d7d78703d6f351c907c42bef1d70359856db809f88998f72b556c44c60d611da20fbe05a6d0182d9ae9ee69c6ef2f9a8429b0c952c66c736296048b55415ad5d43b59632d68b35e", 0xf7}, {&(0x7f00000049c0)="e419b78888ea995a6c7fed8ef11219741d8a44f1a781fe8642128d2393c7b0ec0f26521d949958a715435eb814f73d9426ab2ff2d3292bef1eddcbca0ba3d74e6ae1719d4d357b20dfc97bbfcdf0fd190aa03d5a0d11d15febbfe0cf51baaa42823603438628ab10af6f0a20e830478bb1fed84383e7f37718c20795e210a3dc0185f9795d725b10e60398dd2c1ed77df1253468439c11dc240324874141764a74a76dabff3835b2e596c9b9b07e79ef198beaaa5a93630e1c5b697255aa24f766ff76a668a61e42342cac387d8e23204069698424e78ceebe40de3cd1dc852bfd93b91a8ad4a2", 0xe7}, {&(0x7f0000004ac0)="994e3de0c199d8462586da91932ddd94bb102fab155ecf068658b3c917a5c79dc82620bf0b1647e740c1ab749e4c48124f849b3877df97c266b55a81248deb2e5ed51bd61bcc1c429c5a764715fadf5b3cd78dafc9cdf64c221a97f0f5b52abdb754540deec43a5be173acb6b595a2e0afb116bc6991e6b3551e519e368b5c274c60c650ed1ceb33113352737df1e6c54fdbf4bdbd24835681a31cab7a3fc361bdd9717ea4e19b265db4ac285c7661e21423be5af5fd7712f7a4", 0xba}, {&(0x7f0000004b80)="d284240f1d394bf22e3cad8d711c2f8bd4443c3992fd17d6e14b822632ec832ba976df90a94134c872fdc871eee1c313ffad9d058976f0a4f3872703f724dd3571e069331b0fcf7b744b4cf935c2d584e1abe7d9da28d5c6803122d35dd644baa441918f7db8c0a47a6b1fff44a6304188e336d3e5b79d02c9071eea9a46182ca845d1aa47b0f1", 0x87}, {&(0x7f0000004c40)="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", 0xdf0}, {&(0x7f0000005c40)="f969f047680f9c2ee66bc23a03cf068fc1cea84ba88c06d2785d60df35c0fcc35a73dc8890f07f1c548b1ea5ee3ee164ada47f6af4c71cd4bf4c9d502dc26274fedf6797abf4e386357756de8f75e090a111ef", 0x53}], 0xa, &(0x7f0000005d80)=[{0xe8, 0x103, 0x3, "52a73f1df67124a4071e9ea26661670cab7bce116e9f7a4ddd56fbc80a99e6e4e18c867bb6bb1ec825f5f30660257f6db1a88fbf0eea55289ca7d60cda405e6ca6314d0af3c7d7c1d94d1aa4a53f0c5cd552df81d9ece0d2ef3de7c84aefca2b70c72d870641197c221b13b45dbf0bc0781ed131a0ba3635c6184492d13a5ad36a577cfc2ed5d111eaa0d86117a809114332a1df80325ce5fba73caa8d62f5d799904a99ae855cd133d7b20535d0ef9ce3ff8b972f76f86940ae667d7098cb1ff62ae1216f7a585b7cf3339fb93e8fe95f"}], 0xe8}, 0x80) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000140), 0x43) getpid() r6 = socket$kcm(0x1e, 0x4, 0x0) close(r6) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/4096, 0xfdef}], 0x1}, 0x10021) perf_event_open(&(0x7f0000005ec0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000005f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000006000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006080)=[{&(0x7f00000060c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) 4.235479117s ago: executing program 2 (id=5669): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4090, 0x8, 0x7ff, 0x6, 0x8, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)="3a92fe", 0x3}], 0x1}, 0x0) 3.698637312s ago: executing program 2 (id=5671): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x3170fdf7a924cfe9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x12105, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000f8f0000000000004b4151d00000000000000e39d6ceab3c39b24f4779750eb793d242a7b2b1014fa41dea1de656de217eaacbea96acc9dd75e49aa79faabbec409e739d311245a01ea4a74a975f76bfa1f2e236395dfa5af8d652cc412af6d46b3986296b77c519326222d1a90c338c978c0cd33f54880ae032974368edd0d0f24fe04d3a43a219f9de6b5356c8f11d4b322086a8a6b76a37ef03df57d5abdd208c260afa7b7bc7be69e6649e3dbca", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000200"/28], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfffffff1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x0, 0x21, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0xd, 0x5, 0xf, 0xfffffffffffffffc, 0xfffffffffffffff0}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001140)='syzkaller\x00', 0x8a6, 0x7e, &(0x7f0000001180)=""/126, 0x40f00, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001240)={0x2, 0x8, 0xffffffff, 0xbe5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001300)=[r4], &(0x7f0000001340)=[{0x2, 0x1, 0x0, 0x1}, {0x5, 0x3, 0x5, 0xa}, {0x4, 0x1, 0x10, 0xb}], 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda9, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="d8000000180081084e81f782db44b9040220080006067c09e8fe55a1bc0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fae91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x6, &(0x7f0000000b40)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000b80)='GPL\x00', 0x5, 0x29e, &(0x7f0000000bc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x7}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$kcm(0xa, 0x1, 0x106) r8 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) 3.472514345s ago: executing program 0 (id=5672): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x300, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800050007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) 3.215173361s ago: executing program 1 (id=5673): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000b52a0743d59400000000000900c4", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000340)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.214556581s ago: executing program 3 (id=5674): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000600), 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) 2.947518018s ago: executing program 2 (id=5675): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x3170fdf7a924cfe9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x12105, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000f8f0000000000004b4151d00000000000000e39d6ceab3c39b24f4779750eb793d242a7b2b1014fa41dea1de656de217eaacbea96acc9dd75e49aa79faabbec409e739d311245a01ea4a74a975f76bfa1f2e236395dfa5af8d652cc412af6d46b3986296b77c519326222d1a90c338c978c0cd33f54880ae032974368edd0d0f24fe04d3a43a219f9de6b5356c8f11d4b322086a8a6b76a37ef03df57d5abdd208c260afa7b7bc7be69e6649e3dbca", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000200"/28], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfffffff1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x0, 0x21, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0xd, 0x5, 0xf, 0xfffffffffffffffc, 0xfffffffffffffff0}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001140)='syzkaller\x00', 0x8a6, 0x7e, &(0x7f0000001180)=""/126, 0x40f00, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001240)={0x2, 0x8, 0xffffffff, 0xbe5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001300)=[r4], &(0x7f0000001340)=[{0x2, 0x1, 0x0, 0x1}, {0x5, 0x3, 0x5, 0xa}, {0x4, 0x1, 0x10, 0xb}], 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda9, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="d8000000180081084e81f782db44b9040220080006067c09e8fe55a1bc0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fae91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x6, &(0x7f0000000b40)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000b80)='GPL\x00', 0x5, 0x29e, &(0x7f0000000bc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x7}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$kcm(0xa, 0x1, 0x106) r8 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) 2.868173406s ago: executing program 1 (id=5676): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4090, 0x8, 0x7ff, 0x6, 0x8, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)="3a92fe", 0x3}], 0x1}, 0x0) 2.867545207s ago: executing program 3 (id=5677): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001900)={&(0x7f0000000080)={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 2.806963853s ago: executing program 0 (id=5678): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="87585d85da215305627e5695c108", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91102b000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 2.607378233s ago: executing program 1 (id=5679): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x13, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r1, @ANYRESOCT, @ANYBLOB="2000000000000000b70500000800000085000000a50000006f0000000000009500"/49], &(0x7f0000000b40)='GPL\x00', 0x6570, 0xd3, &(0x7f0000000c80)=""/211, 0x41000, 0x44, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000dc0)={0x2, 0x3, 0x4, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1e00000001000100040000000300000000110000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000001000000030000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000004000000000000001260d0961d9e2f538b8f90c4e03bb2e18dabc9609878445469b22da792458c7bdb66bbe7bb1d6f8464c64673a3827c9e0ff84f41504c971b90d779476e4e974700782f7104be6b0bf9d1d6661ae10583b74d3df5f3c23b4385093ab46979d876aeae38f104996f13a8d96aaf9f42ba1c80114de1795703dd8da4b22c1ee0050e2db2", @ANYRES32, @ANYBLOB="0500"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000100"/28], 0x50) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbc}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r8, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.461814008s ago: executing program 3 (id=5680): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000000000000000000085000000ad0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2c, 0x0, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r2, 0x58, &(0x7f0000000900)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="9feb010018000000000000008800000088000000040000000300000000000007000000000200000000000010080000000b00000004000004af8a09d63b425b7d397e2c020000000700000000000000000000000500000004000001090000000c00000004000000f7ffffff08000000030000000800000a0800000000000011040000000500000006000000e237c09f030000000003000000030000000000dd3700300000649d5bce63bdef973cb4840a66dbda4a50c3bae1a0327473d0e4575891219295ded2eb390de800dbdf0a268ea6c9d8ea78e082a8276ce9320e8aef9a99e5f2894b31b7e5dbe776fd54755a248a4c4de5b3f4286a3aa467f53385860d967425b3e60b2fd09038b7c4caf50375e76388678d0000e431841cde452c161e54"], &(0x7f0000000a40)=""/161, 0xa4, 0xa1, 0x1, 0xe802}, 0x28) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0xffffffffffffffff, 0x1, 0x18}, 0xc) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3fc, 0x94009, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x3532d29c, 0x6, 0x8, 0x0, 0x0, 0x0, 0x20002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000580)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB='1-2:5/', @ANYRESOCT], 0x31) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00000017c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r6, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000001880)="b15dd7cf1c00000400000000000036af1747da", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.260464439s ago: executing program 0 (id=5681): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4090, 0x8, 0x7ff, 0x6, 0x8, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)="3a92fe", 0x3}], 0x1}, 0x0) 1.995907216s ago: executing program 2 (id=5682): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x200, 0x1c}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@arena={0x21, 0x0, 0x0, 0x30, 0x60400, r0, 0x3, '\x00', r1, r2, 0x3, 0x3, 0x1}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000340), 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.849996471s ago: executing program 0 (id=5683): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x13, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r1, @ANYRESOCT, @ANYBLOB="2000000000000000b70500000800000085000000a50000006f0000000000009500"/49], &(0x7f0000000b40)='GPL\x00', 0x6570, 0xd3, &(0x7f0000000c80)=""/211, 0x41000, 0x44, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000dc0)={0x2, 0x3, 0x4, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1e00000001000100040000000300000000110000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000001000000030000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000004000000000000001260d0961d9e2f538b8f90c4e03bb2e18dabc9609878445469b22da792458c7bdb66bbe7bb1d6f8464c64673a3827c9e0ff84f41504c971b90d779476e4e974700782f7104be6b0bf9d1d6661ae10583b74d3df5f3c23b4385093ab46979d876aeae38f104996f13a8d96aaf9f42ba1c80114de1795703dd8da4b22c1ee0050e2db2", @ANYRES32, @ANYBLOB="0500"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000100"/28], 0x50) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbc}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r8, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 1.584130448s ago: executing program 2 (id=5684): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x2, 0x800, 0xb, &(0x7f0000003b40)) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800000000000000", 0x5c}, {&(0x7f0000000480)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000540)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f0000000640)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.401680267s ago: executing program 3 (id=5685): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x8230794d6280073) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x9, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x7, 0xc1}]}]}, {0x0, [0x61, 0x61, 0x61, 0x0, 0x61, 0x2e, 0x61]}}, 0x0, 0x35, 0x0, 0x1, 0x73}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000040)={'vxcan1\x00', @remote}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@arena={0x21, 0x0, 0x0, 0xf, 0x40000, 0x1, 0x7, '\x00', r4, r0, 0x2, 0x5, 0x4}, 0x50) r5 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='N-'], 0x6a) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r2, r1}, 0xc) 990.239909ms ago: executing program 3 (id=5686): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000600), 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) 914.014477ms ago: executing program 1 (id=5687): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4090, 0x8, 0x7ff, 0x6, 0x8, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000e80)="3a92fe", 0x3}], 0x1}, 0x0) 865.686022ms ago: executing program 2 (id=5688): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000004000000ff0f000007ae8e869a3588ccd2926baedffb87f92a43a8f83a162819d43376cb22d29f08ac76c8b1682a05bc491b80c904dde9df735124067b194b748aa39407510201", @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f00000005c0)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000600)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000100)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 594.551639ms ago: executing program 1 (id=5689): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, 0x0, 0x52}, 0x28) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) 488.36829ms ago: executing program 0 (id=5690): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200008300000000000000970200008500000018000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000ee62d7d60000000000c1050800000024dee857d5ae9c0f9e7949ded934913707c74950ff69faf079dbb91dce275f24e33599ece2551783ff14bdfabd34d4a65d4a01a31fb6b8ed80a5801cd8eb5c66f8dc9608"], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="5c00000052006bab9a3fe3d86e17aa0a0af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c500"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="411e3c7014cd4acc66c2d587aab1", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYRES64, @ANYRES64=r2, @ANYRESOCT=r6, @ANYRES32=r2, @ANYRESHEX=r5], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) 415.926797ms ago: executing program 3 (id=5691): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x3170fdf7a924cfe9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x12105, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000f8f0000000000004b4151d00000000000000e39d6ceab3c39b24f4779750eb793d242a7b2b1014fa41dea1de656de217eaacbea96acc9dd75e49aa79faabbec409e739d311245a01ea4a74a975f76bfa1f2e236395dfa5af8d652cc412af6d46b3986296b77c519326222d1a90c338c978c0cd33f54880ae032974368edd0d0f24fe04d3a43a219f9de6b5356c8f11d4b322086a8a6b76a37ef03df57d5abdd208c260afa7b7bc7be69e6649e3dbca", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000200"/28], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfffffff1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x0, 0x21, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0xd, 0x5, 0xf, 0xfffffffffffffffc, 0xfffffffffffffff0}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001140)='syzkaller\x00', 0x8a6, 0x7e, &(0x7f0000001180)=""/126, 0x40f00, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001240)={0x2, 0x8, 0xffffffff, 0xbe5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001300)=[r4], &(0x7f0000001340)=[{0x2, 0x1, 0x0, 0x1}, {0x5, 0x3, 0x5, 0xa}, {0x4, 0x1, 0x10, 0xb}], 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda9, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="d8000000180081084e81f782db44b9040220080006067c09e8fe55a1bc0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fae91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x6, &(0x7f0000000b40)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000b80)='GPL\x00', 0x5, 0x29e, &(0x7f0000000bc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x7}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$kcm(0xa, 0x1, 0x106) r8 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) 0s ago: executing program 0 (id=5692): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000200)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000240)={r2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff12142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001880)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a2, &(0x7f00000018c0)={'bridge0\x00', @random="1400"}) kernel console output (not intermixed with test programs): devsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.588024][T15576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.755938][T15576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.779964][T20613] netlink: 'syz.3.4660': attribute type 29 has an invalid length. [ 1161.813741][T20613] netlink: 'syz.3.4660': attribute type 29 has an invalid length. [ 1161.858721][T20613] netlink: 'syz.3.4660': attribute type 29 has an invalid length. [ 1161.968446][T20613] netlink: 'syz.3.4660': attribute type 29 has an invalid length. [ 1162.004511][T20620] sit0: left promiscuous mode [ 1162.149291][T20616] sit0: entered promiscuous mode [ 1162.514800][T20626] delete_channel: no stack [ 1162.543146][T13324] Bluetooth: hci2: command tx timeout [ 1163.024640][T20638] netlink: 'syz.3.4667': attribute type 3 has an invalid length. [ 1163.061979][T20638] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4667'. [ 1163.149112][T20635] netlink: 'syz.3.4667': attribute type 46 has an invalid length. [ 1163.543566][T20587] chnl_net:caif_netlink_parms(): no params data found [ 1164.332284][T20674] delete_channel: no stack [ 1164.458173][T20587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.465611][T20587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.473219][T20587] bridge_slave_0: entered allmulticast mode [ 1164.480888][T20587] bridge_slave_0: entered promiscuous mode [ 1164.597187][T20587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.612013][T20587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.612541][T13324] Bluetooth: hci2: command tx timeout [ 1164.620105][T20587] bridge_slave_1: entered allmulticast mode [ 1164.633330][T20587] bridge_slave_1: entered promiscuous mode [ 1164.664493][T20682] sit0: left promiscuous mode [ 1164.794825][T20679] sit0: entered promiscuous mode [ 1165.288943][T20587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.382838][T20587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.495547][T20587] team0: Port device team_slave_0 added [ 1165.685517][T20587] team0: Port device team_slave_1 added [ 1165.814392][T20704] validate_nla: 4 callbacks suppressed [ 1165.814412][T20704] netlink: 'syz.2.4680': attribute type 29 has an invalid length. [ 1165.963308][T20587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.975514][T20587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.054258][T20587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.088147][T20704] netlink: 'syz.2.4680': attribute type 29 has an invalid length. [ 1166.099852][T20707] delete_channel: no stack [ 1166.123548][T20708] netlink: 'syz.2.4680': attribute type 29 has an invalid length. [ 1166.166481][T20587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.195492][T20587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.280490][T20587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.314502][T20711] netlink: 'syz.2.4680': attribute type 29 has an invalid length. [ 1166.678893][T15576] hsr_slave_0: left promiscuous mode [ 1166.692117][T13324] Bluetooth: hci2: command tx timeout [ 1166.715514][T15576] bridge0: port 4(dummy0) entered disabled state [ 1166.755486][T15576] bridge0: port 3(veth1_to_team) entered disabled state [ 1166.770979][T15576] bridge_slave_1: left allmulticast mode [ 1166.777748][T15576] bridge_slave_1: left promiscuous mode [ 1166.784623][T15576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.811102][T15576] bridge_slave_0: left promiscuous mode [ 1166.817743][T15576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.699628][T15576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.210651][T15576] bond0 (unregistering): Released all slaves [ 1168.303170][T20733] sit0: left promiscuous mode [ 1168.376746][T20734] sit0: entered promiscuous mode [ 1168.549052][T20587] hsr_slave_0: entered promiscuous mode [ 1168.574223][T20587] hsr_slave_1: entered promiscuous mode [ 1168.772071][T13324] Bluetooth: hci2: command tx timeout [ 1168.805271][T20744] delete_channel: no stack [ 1169.569908][T20769] netlink: 'syz.0.4694': attribute type 29 has an invalid length. [ 1169.664504][T20769] netlink: 'syz.0.4694': attribute type 29 has an invalid length. [ 1169.807192][T20768] netlink: 'syz.0.4694': attribute type 29 has an invalid length. [ 1169.825231][T20769] netlink: 'syz.0.4694': attribute type 29 has an invalid length. [ 1169.850480][T20776] sit0: left promiscuous mode [ 1170.193692][T20782] sit0: entered promiscuous mode [ 1170.535989][T20785] delete_channel: no stack [ 1170.551489][T20587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1170.569378][T20587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1170.588494][T20587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1170.621980][T20587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1170.940215][T20587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.025523][T20587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.077635][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.084940][ T9521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.124294][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.131561][ T9521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.412357][T20812] netlink: 'syz.3.4704': attribute type 10 has an invalid length. [ 1171.755788][T20825] sit0: left promiscuous mode [ 1172.066765][T20830] delete_channel: no stack [ 1172.426531][T20829] sit0: entered promiscuous mode [ 1172.470309][T20837] netlink: 'syz.2.4709': attribute type 29 has an invalid length. [ 1172.593606][T20837] netlink: 'syz.2.4709': attribute type 29 has an invalid length. [ 1172.604390][T20836] netlink: 'syz.2.4709': attribute type 29 has an invalid length. [ 1172.669590][T20587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.704400][T20834] netlink: 'syz.2.4709': attribute type 29 has an invalid length. [ 1172.854964][T20587] veth0_vlan: entered promiscuous mode [ 1172.889735][T20587] veth1_vlan: entered promiscuous mode [ 1173.028651][T20587] veth0_macvtap: entered promiscuous mode [ 1173.061644][T20587] veth1_macvtap: entered promiscuous mode [ 1173.092905][T20587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.113505][T20587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.129417][T20587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.142761][T20587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.154285][T20587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.166200][T20587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.546734][ T9521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.565757][ T9521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.630601][T13423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.674401][T13423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.807710][T20869] delete_channel: no stack [ 1174.848836][T20882] sit0: entered allmulticast mode [ 1174.974206][T20883] sit0: entered promiscuous mode [ 1175.994399][T20908] netlink: 'syz.1.4722': attribute type 29 has an invalid length. [ 1176.012256][T20908] netlink: 'syz.1.4722': attribute type 29 has an invalid length. [ 1176.057022][T20908] netlink: 'syz.1.4722': attribute type 29 has an invalid length. [ 1176.078672][T20908] netlink: 'syz.1.4722': attribute type 29 has an invalid length. [ 1176.222605][T20912] delete_channel: no stack [ 1176.893275][T20927] sit0: left promiscuous mode [ 1177.564714][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.571445][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.709814][T20933] sit0: entered promiscuous mode [ 1178.139263][T20945] delete_channel: no stack [ 1178.599914][T20967] netlink: 'syz.2.4737': attribute type 29 has an invalid length. [ 1178.630816][T20967] netlink: 'syz.2.4737': attribute type 29 has an invalid length. [ 1178.694818][T20967] netlink: 'syz.2.4737': attribute type 29 has an invalid length. [ 1178.743696][T20967] netlink: 'syz.2.4737': attribute type 29 has an invalid length. [ 1179.013421][T20976] sit0: left promiscuous mode [ 1179.611121][T20982] sit0: entered promiscuous mode [ 1180.120103][T21004] delete_channel: no stack [ 1180.498276][T21022] FAULT_INJECTION: forcing a failure. [ 1180.498276][T21022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.551858][T21022] CPU: 0 PID: 21022 Comm: syz.2.4749 Not tainted syzkaller #0 [ 1180.559421][T21022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1180.569541][T21022] Call Trace: [ 1180.572874][T21022] [ 1180.575855][T21022] dump_stack_lvl+0x18c/0x250 [ 1180.580694][T21022] ? show_regs_print_info+0x20/0x20 [ 1180.585956][T21022] ? load_image+0x420/0x420 [ 1180.590557][T21022] ? __might_fault+0xaa/0x120 [ 1180.595320][T21022] should_fail_ex+0x394/0x4c0 [ 1180.600070][T21022] copyin+0x1a/0x90 [ 1180.603948][T21022] _copy_from_iter+0x532/0x1290 [ 1180.608860][T21022] ? copyout_mc+0x70/0x70 [ 1180.613244][T21022] ? __virt_addr_valid+0x10c/0x380 [ 1180.618415][T21022] ? __virt_addr_valid+0x10c/0x380 [ 1180.623595][T21022] ? __virt_addr_valid+0x10c/0x380 [ 1180.628779][T21022] ? __check_object_size+0x4fc/0xa40 [ 1180.634163][T21022] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 1180.639954][T21022] ? dev_get_by_index+0x22/0x2d0 [ 1180.644947][T21022] ? skb_put+0x112/0x210 [ 1180.649236][T21022] packet_sendmsg+0x32d6/0x49d0 [ 1180.654223][T21022] ? verify_lock_unused+0x140/0x140 [ 1180.659477][T21022] ? __lock_acquire+0x135d/0x7eb0 [ 1180.664542][T21022] ? aa_sk_perm+0x7bb/0x8e0 [ 1180.669098][T21022] ? packet_getsockopt+0xad0/0xad0 [ 1180.674257][T21022] ? tomoyo_mount_permission+0x3e0/0x9d0 [ 1180.679936][T21022] ? aa_sock_msg_perm+0x94/0x150 [ 1180.684922][T21022] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1180.690552][T21022] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1180.695890][T21022] ? security_socket_sendmsg+0x80/0xa0 [ 1180.701395][T21022] ? packet_getsockopt+0xad0/0xad0 [ 1180.706549][T21022] ____sys_sendmsg+0x61b/0x980 [ 1180.711363][T21022] ? __asan_memset+0x22/0x40 [ 1180.716000][T21022] ? __sys_sendmsg_sock+0x30/0x30 [ 1180.721064][T21022] ? __import_iovec+0x3fa/0x850 [ 1180.725968][T21022] ? import_iovec+0x73/0xa0 [ 1180.730515][T21022] ___sys_sendmsg+0x2a6/0x360 [ 1180.735245][T21022] ? get_pid_task+0x20/0x1e0 [ 1180.739879][T21022] ? __sys_sendmsg+0x2b0/0x2b0 [ 1180.744702][T21022] ? __lock_acquire+0x7eb0/0x7eb0 [ 1180.749789][T21022] __se_sys_sendmsg+0x1d0/0x2c0 [ 1180.754689][T21022] ? __x64_sys_sendmsg+0x80/0x80 [ 1180.759709][T21022] ? lockdep_hardirqs_on+0x98/0x150 [ 1180.764959][T21022] do_syscall_64+0x55/0xb0 [ 1180.769429][T21022] ? clear_bhb_loop+0x40/0x90 [ 1180.774153][T21022] ? clear_bhb_loop+0x40/0x90 [ 1180.778875][T21022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1180.784870][T21022] RIP: 0033:0x7f7abbf9f559 [ 1180.789334][T21022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.808983][T21022] RSP: 002b:00007f7abcdaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.817449][T21022] RAX: ffffffffffffffda RBX: 00007f7abc225fa0 RCX: 00007f7abbf9f559 [ 1180.825476][T21022] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1180.833508][T21022] RBP: 00007f7abcdaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.841524][T21022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.849549][T21022] R13: 00007f7abc226038 R14: 00007f7abc225fa0 R15: 00007ffe3c78fbb8 [ 1180.857580][T21022] [ 1181.077039][T21031] netlink: 'syz.0.4753': attribute type 29 has an invalid length. [ 1181.092676][T21031] netlink: 'syz.0.4753': attribute type 29 has an invalid length. [ 1181.134394][T21031] netlink: 'syz.0.4753': attribute type 29 has an invalid length. [ 1181.152545][T21031] netlink: 'syz.0.4753': attribute type 29 has an invalid length. [ 1181.498263][T21038] sit0: left promiscuous mode [ 1181.772603][T21044] delete_channel: no stack [ 1182.356082][T21043] sit0: entered promiscuous mode [ 1182.786501][T21068] netlink: 'syz.2.4766': attribute type 29 has an invalid length. [ 1182.815450][T21068] netlink: 'syz.2.4766': attribute type 29 has an invalid length. [ 1182.930936][T21073] delete_channel: no stack [ 1183.281044][T21083] sit0: left promiscuous mode [ 1183.660063][T21084] sit0: entered promiscuous mode [ 1184.185631][T21101] validate_nla: 1 callbacks suppressed [ 1184.185655][T21101] netlink: 'syz.1.4776': attribute type 10 has an invalid length. [ 1184.227861][T21101] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1184.255132][T21101] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1184.275019][T21101] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1184.317483][T21102] delete_channel: no stack [ 1184.779839][T21120] netlink: 'syz.1.4781': attribute type 29 has an invalid length. [ 1184.789963][T21120] netlink: 'syz.1.4781': attribute type 29 has an invalid length. [ 1184.816082][T21120] netlink: 'syz.1.4781': attribute type 29 has an invalid length. [ 1184.829067][T21122] netlink: 'syz.3.4783': attribute type 6 has an invalid length. [ 1184.848991][T21122] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4783'. [ 1184.906303][T21126] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.4784'. [ 1184.926878][T21126] openvswitch: netlink: Flow key attr not present in new flow. [ 1184.951687][T21125] sit0: left promiscuous mode [ 1185.239745][T21131] sit0: entered promiscuous mode [ 1185.768924][T21144] netlink: 'syz.3.4790': attribute type 39 has an invalid length. [ 1185.794613][T21138] delete_channel: no stack [ 1186.111541][T21141] netlink: 'syz.3.4790': attribute type 39 has an invalid length. [ 1186.417859][T21165] sit0: left promiscuous mode [ 1186.915011][T21166] sit0: entered promiscuous mode [ 1187.218520][T21178] delete_channel: no stack [ 1187.244073][T21181] netlink: 'syz.0.4798': attribute type 29 has an invalid length. [ 1187.255427][T21183] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4799'. [ 1187.282934][T21181] netlink: 'syz.0.4798': attribute type 29 has an invalid length. [ 1187.317304][T21181] netlink: 'syz.0.4798': attribute type 29 has an invalid length. [ 1188.510665][T21211] sit0: left promiscuous mode [ 1188.637587][T21214] delete_channel: no stack [ 1188.772825][T21216] sit0: entered promiscuous mode [ 1188.867515][T21218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4812'. [ 1189.212250][T21237] validate_nla: 4 callbacks suppressed [ 1189.212270][T21237] netlink: 'syz.1.4816': attribute type 29 has an invalid length. [ 1189.585541][T21250] delete_channel: no stack [ 1189.680054][T21256] netlink: 'syz.2.4825': attribute type 11 has an invalid length. [ 1189.723018][T21256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4825'. [ 1189.744359][T21256] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4825'. [ 1189.755908][T21256] openvswitch: netlink: Flow key attribute not present in set flow. [ 1190.137181][T21260] sit0: left promiscuous mode [ 1190.523759][T21261] sit0: entered promiscuous mode [ 1191.010436][T21281] delete_channel: no stack [ 1191.092943][T21284] netlink: 'syz.2.4834': attribute type 39 has an invalid length. [ 1191.211021][T21292] netlink: 'syz.0.4835': attribute type 29 has an invalid length. [ 1191.231488][T21292] netlink: 'syz.0.4835': attribute type 29 has an invalid length. [ 1191.263693][T21292] netlink: 'syz.0.4835': attribute type 29 has an invalid length. [ 1191.653877][T21310] sctp: [Deprecated]: syz.3.4841 (pid 21310) Use of int in max_burst socket option deprecated. [ 1191.653877][T21310] Use struct sctp_assoc_value instead [ 1191.759098][T21312] sit0: left promiscuous mode [ 1192.371071][T21313] sit0: entered promiscuous mode [ 1192.733892][T21321] rxe_eth0 speed is unknown, defaulting to 1000 [ 1192.763610][T21318] delete_channel: no stack [ 1193.358985][T21342] netlink: 'syz.2.4852': attribute type 29 has an invalid length. [ 1193.409683][T21342] netlink: 'syz.2.4852': attribute type 29 has an invalid length. [ 1193.501355][T21342] netlink: 'syz.2.4852': attribute type 29 has an invalid length. [ 1193.883841][T21349] sit0: left promiscuous mode [ 1194.616380][T21350] sit0: entered promiscuous mode [ 1194.797504][T21357] delete_channel: no stack [ 1195.654583][T21379] tap0: tun_chr_ioctl cmd 1074025675 [ 1195.668903][T21379] tap0: persist enabled [ 1195.685092][T21379] tap0: tun_chr_ioctl cmd 1074025675 [ 1195.702913][T21379] tap0: persist enabled [ 1195.713463][T21381] netlink: 'syz.3.4864': attribute type 29 has an invalid length. [ 1195.908501][T21381] netlink: 'syz.3.4864': attribute type 29 has an invalid length. [ 1195.945194][T21382] netlink: 'syz.3.4864': attribute type 29 has an invalid length. [ 1195.992723][T21377] netlink: 'syz.3.4864': attribute type 29 has an invalid length. [ 1196.254767][T21386] sit0: left promiscuous mode [ 1196.930833][T21391] sit0: entered promiscuous mode [ 1197.161961][T21395] delete_channel: no stack [ 1197.445179][T21408] FAULT_INJECTION: forcing a failure. [ 1197.445179][T21408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.476818][T21408] CPU: 0 PID: 21408 Comm: syz.3.4875 Not tainted syzkaller #0 [ 1197.484387][T21408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1197.494504][T21408] Call Trace: [ 1197.497826][T21408] [ 1197.500804][T21408] dump_stack_lvl+0x18c/0x250 [ 1197.505556][T21408] ? show_regs_print_info+0x20/0x20 [ 1197.510816][T21408] ? load_image+0x420/0x420 [ 1197.515378][T21408] ? __might_fault+0xaa/0x120 [ 1197.520125][T21408] ? __lock_acquire+0x7eb0/0x7eb0 [ 1197.525215][T21408] should_fail_ex+0x394/0x4c0 [ 1197.530004][T21408] _copy_from_user+0x2f/0xe0 [ 1197.534673][T21408] ___sys_sendmsg+0x1c7/0x360 [ 1197.539405][T21408] ? get_pid_task+0x20/0x1e0 [ 1197.544057][T21408] ? __sys_sendmsg+0x2b0/0x2b0 [ 1197.548918][T21408] ? __lock_acquire+0x7eb0/0x7eb0 [ 1197.554031][T21408] __se_sys_sendmsg+0x1d0/0x2c0 [ 1197.558954][T21408] ? __x64_sys_sendmsg+0x80/0x80 [ 1197.563967][T21408] ? lockdep_hardirqs_on+0x98/0x150 [ 1197.569237][T21408] do_syscall_64+0x55/0xb0 [ 1197.573694][T21408] ? clear_bhb_loop+0x40/0x90 [ 1197.578411][T21408] ? clear_bhb_loop+0x40/0x90 [ 1197.583145][T21408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1197.589081][T21408] RIP: 0033:0x7f85f4f9f559 [ 1197.593556][T21408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.613202][T21408] RSP: 002b:00007f85f5de2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.621655][T21408] RAX: ffffffffffffffda RBX: 00007f85f5225fa0 RCX: 00007f85f4f9f559 [ 1197.629661][T21408] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 1197.637673][T21408] RBP: 00007f85f5de2090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.645682][T21408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.653685][T21408] R13: 00007f85f5226038 R14: 00007f85f5225fa0 R15: 00007fff444569f8 [ 1197.661706][T21408] [ 1198.066452][T21420] netlink: 'syz.1.4878': attribute type 29 has an invalid length. [ 1198.086527][T21420] netlink: 'syz.1.4878': attribute type 29 has an invalid length. [ 1198.219263][T21420] netlink: 'syz.1.4878': attribute type 29 has an invalid length. [ 1198.235929][T21424] netlink: 'syz.1.4878': attribute type 29 has an invalid length. [ 1198.640192][T21433] sit0: left promiscuous mode [ 1198.766558][T21434] sit0: entered promiscuous mode [ 1198.889007][T21423] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4881'. [ 1199.318821][T21438] delete_channel: no stack [ 1200.125360][T21466] netlink: 'syz.3.4891': attribute type 29 has an invalid length. [ 1200.308975][T21466] netlink: 'syz.3.4891': attribute type 29 has an invalid length. [ 1200.608316][T21476] sit0: left promiscuous mode [ 1201.079623][T21479] sit0: entered promiscuous mode [ 1201.354915][T21484] delete_channel: no stack [ 1201.399039][T21487] sit0: left promiscuous mode [ 1201.693622][T21494] validate_nla: 2 callbacks suppressed [ 1201.693643][T21494] netlink: 'syz.0.4897': attribute type 1 has an invalid length. [ 1201.858646][T21494] netlink: 'syz.0.4897': attribute type 3 has an invalid length. [ 1201.911151][T21489] sit0: entered promiscuous mode [ 1201.917322][T21494] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4897'. [ 1202.725098][T21522] delete_channel: no stack [ 1203.631984][T21549] delete_channel: no stack [ 1203.654420][T21544] sit0: left promiscuous mode [ 1204.158021][T21551] sit0: entered promiscuous mode [ 1205.549493][T20589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1205.559640][T20589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1205.567969][T20589] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1205.578724][T20589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1205.588804][T20589] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1205.597914][T20589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1205.772263][T13716] bond0: (slave syz_tun): Releasing backup interface [ 1205.817248][T21592] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4927'. [ 1205.986573][T21595] delete_channel: no stack [ 1206.008013][T15572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.058915][T21589] rxe_eth0 speed is unknown, defaulting to 1000 [ 1206.165143][T15572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.280313][T21602] sit0: left promiscuous mode [ 1207.073640][T15572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.103939][T21604] sit0: entered promiscuous mode [ 1207.265725][T15572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.652099][T13324] Bluetooth: hci3: command tx timeout [ 1207.777720][T21624] syz.0.4936[21624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1207.778020][T21624] syz.0.4936[21624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1207.999971][T21589] chnl_net:caif_netlink_parms(): no params data found [ 1208.354256][T21636] delete_channel: no stack [ 1208.770569][T21589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.814810][T21589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.827643][T21589] bridge_slave_0: entered allmulticast mode [ 1208.854538][T21589] bridge_slave_0: entered promiscuous mode [ 1208.883588][T21589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.890818][T21589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.938323][T21589] bridge_slave_1: entered allmulticast mode [ 1208.960372][T21589] bridge_slave_1: entered promiscuous mode [ 1209.294320][T21664] sit0: left promiscuous mode [ 1209.413593][T21656] sit0: entered promiscuous mode [ 1209.732289][T13324] Bluetooth: hci3: command tx timeout [ 1209.925852][T21589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.960471][T21589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.132137][T21684] netlink: 'syz.0.4946': attribute type 29 has an invalid length. [ 1210.163528][T21681] delete_channel: no stack [ 1210.241918][T21684] netlink: 'syz.0.4946': attribute type 29 has an invalid length. [ 1210.250240][T21687] netlink: 'syz.0.4946': attribute type 29 has an invalid length. [ 1210.266654][T21684] netlink: 'syz.0.4946': attribute type 29 has an invalid length. [ 1210.349663][T21589] team0: Port device team_slave_0 added [ 1210.369538][T21589] team0: Port device team_slave_1 added [ 1210.438363][T21589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.452663][T21589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.481143][T21589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.494968][T21589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.514423][T21589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.552207][T21589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.720275][T21589] hsr_slave_0: entered promiscuous mode [ 1210.739078][T21589] hsr_slave_1: entered promiscuous mode [ 1210.746560][T21589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1210.763975][T21589] Cannot create hsr debugfs directory [ 1211.766352][T21720] sit0: left promiscuous mode [ 1211.812031][T13324] Bluetooth: hci3: command tx timeout [ 1211.913703][T21723] delete_channel: no stack [ 1212.317173][T21726] sit0: entered promiscuous mode [ 1212.427499][T21735] netlink: 'syz.3.4959': attribute type 29 has an invalid length. [ 1212.458062][T15572] hsr_slave_0: left promiscuous mode [ 1212.468400][T15572] bridge0: port 3(veth1_to_team) entered disabled state [ 1212.489200][T15572] bridge_slave_0: left allmulticast mode [ 1212.501874][T15572] bridge_slave_0: left promiscuous mode [ 1212.515769][T15572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.549086][T15572] veth0_macvtap: left promiscuous mode [ 1213.241311][T15572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1213.251016][T15572] bond_slave_1 (unregistering): left promiscuous mode [ 1213.374425][T15572] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1213.387418][T15572] bridge_slave_1 (unregistering): left promiscuous mode [ 1213.766110][T15572] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1213.777191][T15572] bridge0 (unregistering): left promiscuous mode [ 1213.785294][T15572] bond0 (unregistering): Released all slaves [ 1213.886557][T21735] netlink: 'syz.3.4959': attribute type 29 has an invalid length. [ 1213.892057][T13324] Bluetooth: hci3: command tx timeout [ 1214.414094][T21759] delete_channel: no stack [ 1214.547438][T21764] netlink: 'syz.0.4966': attribute type 2 has an invalid length. [ 1214.564901][T21764] netlink: 'syz.0.4966': attribute type 11 has an invalid length. [ 1214.574535][T21764] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4966'. [ 1214.593950][T21766] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.4966'. [ 1214.848652][T21772] sit0: left promiscuous mode [ 1215.693494][T21780] sit0: entered promiscuous mode [ 1215.961356][T21793] netlink: 'syz.3.4971': attribute type 29 has an invalid length. [ 1216.040709][T21589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1216.065315][T21793] netlink: 'syz.3.4971': attribute type 29 has an invalid length. [ 1216.092615][T21589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1216.117935][T21589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1216.130758][T21798] netlink: 'syz.3.4971': attribute type 29 has an invalid length. [ 1216.141521][T21793] netlink: 'syz.3.4971': attribute type 29 has an invalid length. [ 1216.162997][T21589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1216.364348][T21589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.430155][T21589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.455660][T15572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.462957][T15572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.487806][T13423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.495043][T13423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.510799][T21807] delete_channel: no stack [ 1217.233039][T21824] sit0: left promiscuous mode [ 1217.912764][T21832] sit0: entered promiscuous mode [ 1218.163108][T21589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.244823][T21849] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4983'. [ 1218.354734][T21589] veth0_vlan: entered promiscuous mode [ 1218.404781][T21589] veth1_vlan: entered promiscuous mode [ 1218.428457][T21850] delete_channel: no stack [ 1218.607181][T21589] veth0_macvtap: entered promiscuous mode [ 1218.637197][T21589] veth1_macvtap: entered promiscuous mode [ 1218.697085][T21589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.733671][T21589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.771879][T21589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.812678][T21589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.862624][T21589] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.881923][T21589] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.893821][T21589] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.903622][T21589] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.924037][T21865] netlink: 'syz.1.4987': attribute type 29 has an invalid length. [ 1219.022301][T21865] netlink: 'syz.1.4987': attribute type 29 has an invalid length. [ 1219.137571][T21871] netlink: 'syz.1.4987': attribute type 29 has an invalid length. [ 1219.214484][T21873] netlink: 'syz.1.4987': attribute type 29 has an invalid length. [ 1219.476623][T15576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.510880][T15576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.531219][T21879] sit0: left promiscuous mode [ 1220.169984][T21883] sit0: entered promiscuous mode [ 1220.388136][T15559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.413861][T15559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.472959][T21902] netlink: 'syz.3.4993': attribute type 10 has an invalid length. [ 1220.554471][T21902] batadv_slave_0: entered promiscuous mode [ 1220.573882][T21902] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1220.638910][T21906] delete_channel: no stack [ 1220.877137][T21914] FAULT_INJECTION: forcing a failure. [ 1220.877137][T21914] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.903012][T21914] CPU: 1 PID: 21914 Comm: syz.1.4996 Not tainted syzkaller #0 [ 1220.910675][T21914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1220.920793][T21914] Call Trace: [ 1220.924187][T21914] [ 1220.927185][T21914] dump_stack_lvl+0x18c/0x250 [ 1220.931935][T21914] ? show_regs_print_info+0x20/0x20 [ 1220.937211][T21914] ? load_image+0x420/0x420 [ 1220.941797][T21914] ? __might_sleep+0xe0/0xe0 [ 1220.946459][T21914] ? __lock_acquire+0x7eb0/0x7eb0 [ 1220.951550][T21914] should_fail_ex+0x394/0x4c0 [ 1220.956310][T21914] should_failslab+0x9/0x20 [ 1220.960870][T21914] slab_pre_alloc_hook+0x59/0x300 [ 1220.965961][T21914] ? __get_vm_area_node+0x125/0x370 [ 1220.971236][T21914] __kmem_cache_alloc_node+0x53/0x260 [ 1220.976772][T21914] ? __get_vm_area_node+0x125/0x370 [ 1220.982036][T21914] kmalloc_node_trace+0x26/0xe0 [ 1220.986963][T21914] __get_vm_area_node+0x125/0x370 [ 1220.992072][T21914] __vmalloc_node_range+0x36f/0x1320 [ 1220.997448][T21914] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 1221.003064][T21914] ? perf_trace_preemptirq_template+0x269/0x330 [ 1221.009392][T21914] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1221.015464][T21914] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1221.021762][T21914] ? aa_get_newest_label+0xfd/0x5c0 [ 1221.027036][T21914] ? free_vm_area+0x50/0x50 [ 1221.031616][T21914] ? end_current_label_crit_section+0x170/0x170 [ 1221.037966][T21914] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 1221.043585][T21914] __vmalloc+0x7a/0x90 [ 1221.047726][T21914] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 1221.053349][T21914] bpf_prog_alloc_no_stats+0x46/0x460 [ 1221.058805][T21914] bpf_prog_alloc+0x3d/0x1a0 [ 1221.063484][T21914] bpf_prog_load+0x6b2/0x1610 [ 1221.068242][T21914] ? map_freeze+0x420/0x420 [ 1221.072808][T21914] ? __might_fault+0xaa/0x120 [ 1221.077536][T21914] ? __lock_acquire+0x7eb0/0x7eb0 [ 1221.082647][T21914] ? __might_fault+0xaa/0x120 [ 1221.087366][T21914] ? __might_fault+0xc6/0x120 [ 1221.092082][T21914] ? __might_fault+0xaa/0x120 [ 1221.096806][T21914] ? bpf_lsm_bpf+0x9/0x10 [ 1221.101185][T21914] ? security_bpf+0x7e/0xa0 [ 1221.105753][T21914] __sys_bpf+0x5ba/0x890 [ 1221.110043][T21914] ? bpf_link_show_fdinfo+0x560/0x560 [ 1221.115465][T21914] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1221.121687][T21914] __x64_sys_bpf+0x7c/0x90 [ 1221.126157][T21914] do_syscall_64+0x55/0xb0 [ 1221.130620][T21914] ? clear_bhb_loop+0x40/0x90 [ 1221.135347][T21914] ? clear_bhb_loop+0x40/0x90 [ 1221.140078][T21914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1221.146071][T21914] RIP: 0033:0x7f5a5519f559 [ 1221.150558][T21914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.170214][T21914] RSP: 002b:00007f5a55f8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1221.178679][T21914] RAX: ffffffffffffffda RBX: 00007f5a55425fa0 RCX: 00007f5a5519f559 [ 1221.186697][T21914] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 0000000000000005 [ 1221.194708][T21914] RBP: 00007f5a55f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.202726][T21914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.210749][T21914] R13: 00007f5a55426038 R14: 00007f5a55425fa0 R15: 00007fffd5498f48 [ 1221.218784][T21914] [ 1221.281968][T21914] syz.1.4996: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1221.355396][T21914] CPU: 0 PID: 21914 Comm: syz.1.4996 Not tainted syzkaller #0 [ 1221.362972][T21914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1221.373085][T21914] Call Trace: [ 1221.376423][T21914] [ 1221.379406][T21914] dump_stack_lvl+0x18c/0x250 [ 1221.384162][T21914] ? show_regs_print_info+0x20/0x20 [ 1221.389432][T21914] ? load_image+0x420/0x420 [ 1221.393987][T21914] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1221.400448][T21914] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1221.407081][T21914] warn_alloc+0x246/0x340 [ 1221.411452][T21914] ? __get_vm_area_node+0x125/0x370 [ 1221.416710][T21914] ? zone_watermark_ok_safe+0x230/0x230 [ 1221.422297][T21914] ? rcu_is_watching+0x15/0xb0 [ 1221.427113][T21914] ? __get_vm_area_node+0x356/0x370 [ 1221.432358][T21914] __vmalloc_node_range+0x394/0x1320 [ 1221.437708][T21914] ? perf_trace_preemptirq_template+0x269/0x330 [ 1221.444008][T21914] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1221.450043][T21914] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1221.456252][T21914] ? aa_get_newest_label+0xfd/0x5c0 [ 1221.461552][T21914] ? free_vm_area+0x50/0x50 [ 1221.466109][T21914] ? end_current_label_crit_section+0x170/0x170 [ 1221.472409][T21914] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 1221.478003][T21914] __vmalloc+0x7a/0x90 [ 1221.482125][T21914] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 1221.487724][T21914] bpf_prog_alloc_no_stats+0x46/0x460 [ 1221.493146][T21914] bpf_prog_alloc+0x3d/0x1a0 [ 1221.497787][T21914] bpf_prog_load+0x6b2/0x1610 [ 1221.502518][T21914] ? map_freeze+0x420/0x420 [ 1221.507068][T21914] ? __might_fault+0xaa/0x120 [ 1221.511793][T21914] ? __lock_acquire+0x7eb0/0x7eb0 [ 1221.516875][T21914] ? __might_fault+0xaa/0x120 [ 1221.521594][T21914] ? __might_fault+0xc6/0x120 [ 1221.526306][T21914] ? __might_fault+0xaa/0x120 [ 1221.531028][T21914] ? bpf_lsm_bpf+0x9/0x10 [ 1221.535402][T21914] ? security_bpf+0x7e/0xa0 [ 1221.539954][T21914] __sys_bpf+0x5ba/0x890 [ 1221.544253][T21914] ? bpf_link_show_fdinfo+0x560/0x560 [ 1221.549683][T21914] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1221.555905][T21914] __x64_sys_bpf+0x7c/0x90 [ 1221.560366][T21914] do_syscall_64+0x55/0xb0 [ 1221.564830][T21914] ? clear_bhb_loop+0x40/0x90 [ 1221.569561][T21914] ? clear_bhb_loop+0x40/0x90 [ 1221.574296][T21914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1221.580239][T21914] RIP: 0033:0x7f5a5519f559 [ 1221.584701][T21914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.604354][T21914] RSP: 002b:00007f5a55f8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1221.612812][T21914] RAX: ffffffffffffffda RBX: 00007f5a55425fa0 RCX: 00007f5a5519f559 [ 1221.620825][T21914] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 0000000000000005 [ 1221.628833][T21914] RBP: 00007f5a55f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.636842][T21914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.644850][T21914] R13: 00007f5a55426038 R14: 00007f5a55425fa0 R15: 00007fffd5498f48 [ 1221.652882][T21914] [ 1221.661048][T21916] netlink: 'syz.0.4998': attribute type 29 has an invalid length. [ 1221.702348][T21916] netlink: 'syz.0.4998': attribute type 29 has an invalid length. [ 1221.731542][T21914] Mem-Info: [ 1221.735931][T21914] active_anon:14956 inactive_anon:0 isolated_anon:0 [ 1221.735931][T21914] active_file:19685 inactive_file:40403 isolated_file:0 [ 1221.735931][T21914] unevictable:768 dirty:35 writeback:0 [ 1221.735931][T21914] slab_reclaimable:10825 slab_unreclaimable:94625 [ 1221.735931][T21914] mapped:23218 shmem:1364 pagetables:542 [ 1221.735931][T21914] sec_pagetables:0 bounce:0 [ 1221.735931][T21914] kernel_misc_reclaimable:0 [ 1221.735931][T21914] free:1317682 free_pcp:9339 free_cma:0 [ 1221.797202][T21918] netlink: 'syz.0.4998': attribute type 29 has an invalid length. [ 1221.825272][T21916] netlink: 'syz.0.4998': attribute type 29 has an invalid length. [ 1221.891360][T21914] Node 0 active_anon:59724kB inactive_anon:0kB active_file:78740kB inactive_file:161412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92772kB dirty:140kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11900kB pagetables:2168kB sec_pagetables:0kB all_unreclaimable? no [ 1221.941881][T21914] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1222.063924][T21914] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1222.116936][T20589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1222.127230][T21914] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 1222.141982][T21914] Node 0 DMA32 free:1350512kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:60044kB inactive_anon:0kB active_file:78740kB inactive_file:160576kB unevictable:1536kB writepending:148kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:24856kB local_pcp:3384kB free_cma:0kB [ 1222.184923][T21914] lowmem_reserve[]: 0 0 0 0 0 [ 1222.189778][T21914] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1222.235808][T20589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1222.252599][T20589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1222.278052][T21914] lowmem_reserve[]: 0 0 0 0 0 [ 1222.283720][T20589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1222.291559][T20589] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1222.299107][T21914] Node 1 Normal free:3895524kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25800kB local_pcp:14244kB free_cma:0kB [ 1222.299182][T21914] lowmem_reserve[]: 0 0 0 0 0 [ 1222.299230][T21914] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 1222.338733][T20589] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1222.356243][T21914] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1222.363717][T21914] Node 0 DMA32: 519*4kB (UME) 640*8kB (UME) 521*16kB (UME) 1137*32kB (UME) 509*64kB (UME) 77*128kB (UME) 80*256kB (UM) 34*512kB (UME) 17*1024kB (UM) 13*2048kB (UM) 292*4096kB (UM) = 1372300kB [ 1222.383717][T21914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1222.395918][T21914] Node 1 Normal: 133*4kB (UME) 26*8kB (U) 18*16kB (UE) 35*32kB (UE) 16*64kB (UME) 3*128kB (U) 1*256kB (E) 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3895524kB [ 1222.415027][T21914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1222.456834][T21914] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1222.467287][T21914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1222.477113][T21914] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1222.486688][T21914] 61452 total pagecache pages [ 1222.491531][T21914] 0 pages in swap cache [ 1222.496467][T21914] Free swap = 124460kB [ 1222.501319][T21914] Total swap = 124996kB [ 1222.506451][T21914] 2097051 pages RAM [ 1222.510434][T21914] 0 pages HighMem/MovableOnly [ 1222.515796][T21914] 421729 pages reserved [ 1222.520130][T21914] 0 pages cma reserved [ 1222.745804][T21927] rxe_eth0 speed is unknown, defaulting to 1000 [ 1222.983199][T15559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.233574][T21938] rxe_eth0 speed is unknown, defaulting to 1000 [ 1223.241238][T21944] sit0: entered allmulticast mode [ 1223.336631][T15559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.367014][T21946] sit0: entered promiscuous mode [ 1223.570594][T15559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.675038][T15559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.812437][T21959] delete_channel: no stack [ 1224.016572][T21969] netlink: 'syz.0.5007': attribute type 29 has an invalid length. [ 1224.084629][T21969] netlink: 'syz.0.5007': attribute type 29 has an invalid length. [ 1224.115251][T21968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.124319][T21968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.138627][T21968] bridge0: entered allmulticast mode [ 1224.226340][T21972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.233663][T21972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.241223][T21972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.248529][T21972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.260430][T21972] bridge0: entered promiscuous mode [ 1224.268601][T21966] netlink: 'syz.0.5007': attribute type 29 has an invalid length. [ 1224.283571][T21969] netlink: 'syz.0.5007': attribute type 29 has an invalid length. [ 1224.305449][T21967] delete_channel: no stack [ 1224.452682][T13324] Bluetooth: hci4: command tx timeout [ 1224.600145][T21981] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5008'. [ 1224.777967][T21981] team0: Port device team_slave_0 removed [ 1224.798625][T21981] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1225.056508][T21927] chnl_net:caif_netlink_parms(): no params data found [ 1225.632059][T21927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.642562][T21927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.652028][T21927] bridge_slave_0: entered allmulticast mode [ 1225.659485][T21927] bridge_slave_0: entered promiscuous mode [ 1225.686493][T21927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.705590][T21927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.718127][T21927] bridge_slave_1: entered allmulticast mode [ 1225.728340][T21927] bridge_slave_1: entered promiscuous mode [ 1225.870079][T22010] sit0: left promiscuous mode [ 1226.466183][T22022] delete_channel: no stack [ 1226.528615][T21927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.538511][T13324] Bluetooth: hci4: command tx timeout [ 1226.548611][T22017] sit0: entered promiscuous mode [ 1226.643458][T21927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.788278][T22026] netlink: 'syz.2.5015': attribute type 5 has an invalid length. [ 1226.837857][T22037] netlink: 'syz.1.5016': attribute type 29 has an invalid length. [ 1226.849974][T21927] team0: Port device team_slave_0 added [ 1226.952785][T22037] netlink: 'syz.1.5016': attribute type 29 has an invalid length. [ 1226.987845][T22039] netlink: 'syz.1.5016': attribute type 29 has an invalid length. [ 1227.021143][T21927] team0: Port device team_slave_1 added [ 1227.200311][T22033] netlink: 'syz.0.5017': attribute type 11 has an invalid length. [ 1227.217871][T22033] netlink: 'syz.0.5017': attribute type 11 has an invalid length. [ 1227.241503][T22037] netlink: 'syz.1.5016': attribute type 29 has an invalid length. [ 1227.280137][T21927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.289623][T21927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.336580][T21927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.366644][T22033] netlink: 'syz.0.5017': attribute type 11 has an invalid length. [ 1227.389349][T22033] netlink: 'syz.0.5017': attribute type 11 has an invalid length. [ 1227.403067][T22033] netlink: 'syz.0.5017': attribute type 11 has an invalid length. [ 1227.432847][T21927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.444985][T21927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.491613][T21927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.873218][T22045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.904751][T22045] bridge_slave_1: left allmulticast mode [ 1227.912151][T22045] bridge_slave_1: left promiscuous mode [ 1227.924927][T22045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.956333][T22045] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1228.223071][T21927] hsr_slave_0: entered promiscuous mode [ 1228.425323][T22071] delete_channel: no stack [ 1228.612423][T13324] Bluetooth: hci4: command tx timeout [ 1228.870777][T21927] hsr_slave_1: entered promiscuous mode [ 1228.880408][T21927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1228.935339][T21927] Cannot create hsr debugfs directory [ 1229.353958][T15559] hsr_slave_0: left promiscuous mode [ 1229.372537][T15559] bridge0: port 3(veth1_to_team) entered disabled state [ 1229.422783][T15559] bridge_slave_1: left allmulticast mode [ 1229.428816][T15559] bridge_slave_1: left promiscuous mode [ 1229.463715][T15559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.488242][T15559] bridge_slave_0: left allmulticast mode [ 1229.505080][T15559] bridge_slave_0: left promiscuous mode [ 1229.517342][T15559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.548201][T22086] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5026'. [ 1229.602070][T15559] veth0_macvtap: left promiscuous mode [ 1229.610218][T15559] veth1_vlan: left promiscuous mode [ 1229.617407][T15559] veth0_vlan: left promiscuous mode [ 1230.481233][T15559] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1230.494085][T15559] batadv_slave_0 (unregistering): left promiscuous mode [ 1230.628960][T15559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.638444][T15559] bond_slave_1 (unregistering): left promiscuous mode [ 1230.692251][T13324] Bluetooth: hci4: command tx timeout [ 1230.966487][T15559] bond0 (unregistering): Released all slaves [ 1231.060647][T22087] sit0: left promiscuous mode [ 1231.136547][T22091] sit0: entered promiscuous mode [ 1232.073177][T22116] delete_channel: no stack [ 1232.598027][T22147] sit0: left promiscuous mode [ 1233.317108][T22155] validate_nla: 47 callbacks suppressed [ 1233.317130][T22155] netlink: 'syz.0.5036': attribute type 29 has an invalid length. [ 1233.388696][T22152] sit0: entered promiscuous mode [ 1233.478726][T22155] netlink: 'syz.0.5036': attribute type 29 has an invalid length. [ 1233.552214][T22156] netlink: 'syz.0.5036': attribute type 29 has an invalid length. [ 1233.585451][T22157] netlink: 'syz.0.5036': attribute type 29 has an invalid length. [ 1233.798422][T21927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1233.827837][T21927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1233.848896][T21927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1233.877091][T21927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1233.889808][T22170] delete_channel: no stack [ 1234.193788][T21927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.277803][T21927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.389002][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.396357][ T9521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.461745][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.469122][ T9521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.548529][T22188] netlink: 'syz.2.5044': attribute type 39 has an invalid length. [ 1234.566900][T22188] macvlan0: entered promiscuous mode [ 1234.573760][T22188] macvlan0: entered allmulticast mode [ 1234.974148][T22194] sit0: left promiscuous mode [ 1235.376453][T22198] sit0: entered promiscuous mode [ 1235.828200][T21927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.907107][T22219] delete_channel: no stack [ 1235.926475][T22223] netlink: 'syz.0.5050': attribute type 29 has an invalid length. [ 1235.954792][T22223] netlink: 'syz.0.5050': attribute type 29 has an invalid length. [ 1236.002080][T22223] netlink: 'syz.0.5050': attribute type 29 has an invalid length. [ 1236.024488][T22223] netlink: 'syz.0.5050': attribute type 29 has an invalid length. [ 1236.065128][T21927] veth0_vlan: entered promiscuous mode [ 1236.107217][T21927] veth1_vlan: entered promiscuous mode [ 1236.207755][T21927] veth0_macvtap: entered promiscuous mode [ 1236.240626][T21927] veth1_macvtap: entered promiscuous mode [ 1236.287556][T21927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1236.312547][T21927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.327473][T21927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1236.365442][T21927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.380444][T21927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.394454][T21927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.405606][T21927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.418377][T21927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1236.447968][T21927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.457885][T21927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.466918][T21927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.482227][T21927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.743059][T15559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.764039][T15559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.845534][T15560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.877906][T15560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.432655][T22254] sit0: left promiscuous mode [ 1238.011260][T22256] sit0: entered promiscuous mode [ 1238.582252][T22279] delete_channel: no stack [ 1238.873695][T22285] netlink: 'syz.2.5063': attribute type 29 has an invalid length. [ 1238.908014][T22285] netlink: 'syz.2.5063': attribute type 29 has an invalid length. [ 1238.940709][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.947288][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.962552][T22285] netlink: 'syz.2.5063': attribute type 29 has an invalid length. [ 1238.994564][T22285] netlink: 'syz.2.5063': attribute type 29 has an invalid length. [ 1239.051015][T22286] delete_channel: no stack [ 1239.211078][T20589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1239.222172][T20589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1239.242341][T20589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1239.258784][T20589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1239.266946][T20589] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1239.274839][T20589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1239.560315][T15559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.629475][T22294] rxe_eth0 speed is unknown, defaulting to 1000 [ 1239.703564][T15559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.076954][T15559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.277201][T15559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.442926][T22321] delete_channel: no stack [ 1240.540969][T22325] delete_channel: no stack [ 1240.603737][T22323] sit0: entered allmulticast mode [ 1240.660993][T22327] sit0: entered promiscuous mode [ 1241.169848][T22335] sit0: left promiscuous mode [ 1241.331980][T13324] Bluetooth: hci1: command tx timeout [ 1241.406362][T22339] netlink: 'syz.1.5074': attribute type 29 has an invalid length. [ 1241.718452][T22343] sit0: left promiscuous mode [ 1241.775407][T22342] sit0: entered promiscuous mode [ 1241.932858][T22345] sit0: entered promiscuous mode [ 1242.110333][T22339] netlink: 'syz.1.5074': attribute type 29 has an invalid length. [ 1242.142571][T22294] chnl_net:caif_netlink_parms(): no params data found [ 1242.214582][T22357] netlink: 'syz.3.5075': attribute type 29 has an invalid length. [ 1242.280663][T22357] netlink: 'syz.3.5075': attribute type 29 has an invalid length. [ 1242.370886][T22358] netlink: 'syz.3.5075': attribute type 29 has an invalid length. [ 1242.415902][T22357] netlink: 'syz.3.5075': attribute type 29 has an invalid length. [ 1242.795511][T22294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.810223][T22294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.828435][T22294] bridge_slave_0: entered allmulticast mode [ 1242.837989][T22294] bridge_slave_0: entered promiscuous mode [ 1242.897203][T22294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.911106][T22294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.928570][T22294] bridge_slave_1: entered allmulticast mode [ 1242.940703][T22294] bridge_slave_1: entered promiscuous mode [ 1243.163354][T22381] delete_channel: no stack [ 1243.187378][T22294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.212602][T22294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.226921][T22384] sit0: left promiscuous mode [ 1243.412368][T13324] Bluetooth: hci1: command tx timeout [ 1245.492065][T20589] Bluetooth: hci1: command tx timeout [ 1246.483007][T22388] sit0: entered promiscuous mode [ 1246.550223][T22390] sit0: left promiscuous mode [ 1246.605062][T22392] sit0: entered promiscuous mode [ 1246.714078][T22395] delete_channel: no stack [ 1246.735411][T22294] team0: Port device team_slave_0 added [ 1246.771211][T22294] team0: Port device team_slave_1 added [ 1246.927786][T22294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.957283][T22294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.012030][T22294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.046397][T22294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.075043][T22294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.123833][T22294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.405374][T22413] sit0: left promiscuous mode [ 1247.572450][T20589] Bluetooth: hci1: command tx timeout [ 1247.651188][T22419] delete_channel: no stack [ 1247.693747][T22294] hsr_slave_0: entered promiscuous mode [ 1247.701126][T22294] hsr_slave_1: entered promiscuous mode [ 1247.732071][T22294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.739817][T22294] Cannot create hsr debugfs directory [ 1247.788590][T22407] sit0: entered promiscuous mode [ 1248.774307][T22437] sit0: left promiscuous mode [ 1251.409450][T22440] sit0: entered promiscuous mode [ 1251.538085][T22445] sit0: left promiscuous mode [ 1251.631627][T22446] sit0: entered promiscuous mode [ 1251.678706][T22447] delete_channel: no stack [ 1252.072808][T22455] delete_channel: no stack [ 1252.812764][T22471] sit0: left promiscuous mode [ 1252.909810][T22469] sit0: entered promiscuous mode [ 1253.643502][T22480] netlink: 'syz.1.5103': attribute type 29 has an invalid length. [ 1256.231430][T15559] hsr_slave_0: left promiscuous mode [ 1256.245092][T15559] hsr_slave_1: left promiscuous mode [ 1256.253210][T15559] bridge0: port 3(veth1_to_team) entered disabled state [ 1256.268305][T15559] bridge_slave_1: left allmulticast mode [ 1256.274956][T15559] bridge_slave_1: left promiscuous mode [ 1256.280798][T15559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.294150][T15559] bridge_slave_0: left allmulticast mode [ 1256.301168][T15559] bridge_slave_0: left promiscuous mode [ 1256.310538][T15559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.930838][T22496] delete_channel: no stack [ 1257.103367][T15559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.116562][T15559] bond_slave_1 (unregistering): left promiscuous mode [ 1257.458652][T15559] bond0 (unregistering): Released all slaves [ 1257.529488][T22480] netlink: 'syz.1.5103': attribute type 29 has an invalid length. [ 1257.541897][T22485] netlink: 'syz.1.5103': attribute type 10 has an invalid length. [ 1257.614191][T22485] team0 (unregistering): Port device team_slave_0 removed [ 1257.643796][T22485] team0 (unregistering): Port device team_slave_1 removed [ 1257.949207][T22503] netlink: 'syz.3.5108': attribute type 29 has an invalid length. [ 1257.971913][T22500] delete_channel: no stack [ 1257.998884][T22294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1258.048670][T22503] netlink: 'syz.3.5108': attribute type 29 has an invalid length. [ 1258.095381][T22294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1258.129568][T22294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1258.192586][T22505] netlink: 'syz.3.5108': attribute type 29 has an invalid length. [ 1258.233255][T22294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1258.268850][T22508] netlink: 'syz.3.5108': attribute type 29 has an invalid length. [ 1258.294729][T22503] netlink: 'syz.3.5108': attribute type 29 has an invalid length. [ 1258.400717][T22503] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5108'. [ 1258.653628][T22294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.688059][T22294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.732313][T13423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.739618][T13423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.761773][T13423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.769062][T13423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.161264][T22528] sit0: left promiscuous mode [ 1259.997257][T22533] sit0: entered promiscuous mode [ 1260.392374][T22294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.580999][T22294] veth0_vlan: entered promiscuous mode [ 1260.607966][T22294] veth1_vlan: entered promiscuous mode [ 1260.680720][T22294] veth0_macvtap: entered promiscuous mode [ 1260.718316][T22294] veth1_macvtap: entered promiscuous mode [ 1260.794936][T22294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.831229][T22294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.851638][T22294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.876466][T22294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.900296][T22294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.950838][T22294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.013404][T22294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.032187][T22294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.043425][T22294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.054098][T22294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.065138][T22294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.077239][T22294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.090506][T22294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.136586][T22294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.150161][T22294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.164487][T22294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.386560][T15560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.431823][T15560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.513085][T13423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.537470][T13423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.595307][T22567] sit0: left promiscuous mode [ 1261.703555][T22577] netlink: 'syz.2.5117': attribute type 29 has an invalid length. [ 1262.206044][T22576] sit0: entered promiscuous mode [ 1262.375643][T22577] netlink: 'syz.2.5117': attribute type 29 has an invalid length. [ 1262.410727][T22574] netlink: 'syz.2.5117': attribute type 29 has an invalid length. [ 1262.450049][T22571] netlink: 'syz.2.5117': attribute type 10 has an invalid length. [ 1262.675238][T22571] team0 (unregistering): Port device team_slave_1 removed [ 1262.721970][T22578] netlink: 'syz.2.5117': attribute type 29 has an invalid length. [ 1262.799602][T22590] netlink: 'syz.1.5118': attribute type 39 has an invalid length. [ 1262.968629][T22596] delete_channel: no stack [ 1263.360103][T22610] netlink: 'syz.3.5120': attribute type 29 has an invalid length. [ 1263.393074][T22610] netlink: 'syz.3.5120': attribute type 29 has an invalid length. [ 1263.443290][T22607] netlink: 'syz.3.5120': attribute type 29 has an invalid length. [ 1263.480843][T22610] netlink: 'syz.3.5120': attribute type 29 has an invalid length. [ 1264.108773][T22618] sit0: entered allmulticast mode [ 1264.217885][T22619] sit0: entered promiscuous mode [ 1264.750801][T22625] sit0: left promiscuous mode [ 1265.198848][T22627] sit0: left promiscuous mode [ 1265.550866][T22632] sit0: entered promiscuous mode [ 1265.683342][T22633] sit0: entered promiscuous mode [ 1265.847976][T22637] delete_channel: no stack [ 1266.565844][T22650] delete_channel: no stack [ 1266.607027][T22656] sit0: left promiscuous mode [ 1266.901521][T22662] validate_nla: 8 callbacks suppressed [ 1266.901544][T22662] netlink: 'syz.3.5139': attribute type 29 has an invalid length. [ 1267.232068][T22659] sit0: entered promiscuous mode [ 1267.438133][T22662] netlink: 'syz.3.5139': attribute type 29 has an invalid length. [ 1267.556753][T22664] netlink: 'syz.3.5139': attribute type 29 has an invalid length. [ 1267.596116][T22667] sit0: left promiscuous mode [ 1267.858003][T22675] netlink: 'syz.1.5141': attribute type 29 has an invalid length. [ 1268.077168][T22665] netlink: 'syz.3.5139': attribute type 29 has an invalid length. [ 1268.184543][T22669] sit0: entered promiscuous mode [ 1268.352095][T22675] netlink: 'syz.1.5141': attribute type 29 has an invalid length. [ 1268.419229][T22677] netlink: 'syz.1.5141': attribute type 29 has an invalid length. [ 1268.589841][T22683] delete_channel: no stack [ 1268.617799][T22681] delete_channel: no stack [ 1268.885597][T22691] netlink: 'syz.3.5148': attribute type 29 has an invalid length. [ 1268.926720][T22691] netlink: 'syz.3.5148': attribute type 29 has an invalid length. [ 1269.036655][T22691] netlink: 'syz.3.5148': attribute type 29 has an invalid length. [ 1269.249187][T22698] sit0: left promiscuous mode [ 1269.692733][T22702] sit0: entered promiscuous mode [ 1270.103263][T22707] sit0: left promiscuous mode [ 1270.674091][T22710] sit0: entered promiscuous mode [ 1270.912078][T22716] sit0: left promiscuous mode [ 1271.007044][T22717] sit0: entered promiscuous mode [ 1271.106330][T22720] delete_channel: no stack [ 1271.364938][T22724] delete_channel: no stack [ 1271.921322][T22737] sit0: left promiscuous mode [ 1272.328159][T22745] validate_nla: 10 callbacks suppressed [ 1272.328182][T22745] netlink: 'syz.2.5163': attribute type 29 has an invalid length. [ 1272.357083][T22747] sit0: left promiscuous mode [ 1272.376533][T22746] sit0: entered promiscuous mode [ 1272.516799][T22748] sit0: entered promiscuous mode [ 1272.592995][T22744] netlink: 'syz.2.5163': attribute type 29 has an invalid length. [ 1272.601520][T22749] netlink: 'syz.2.5163': attribute type 29 has an invalid length. [ 1272.919282][T22758] sit0: left promiscuous mode [ 1272.969325][T22759] delete_channel: no stack [ 1273.345481][T22764] sit0: entered promiscuous mode [ 1273.378248][T22771] delete_channel: no stack [ 1273.475303][T22766] sit0: left promiscuous mode [ 1273.569189][T22768] sit0: entered promiscuous mode [ 1273.659514][T22773] delete_channel: no stack [ 1273.842642][T22776] sit0: left promiscuous mode [ 1274.033529][T22786] netlink: 'syz.1.5174': attribute type 29 has an invalid length. [ 1274.562371][T22779] sit0: entered promiscuous mode [ 1274.633627][T22786] netlink: 'syz.1.5174': attribute type 29 has an invalid length. [ 1274.653463][T22785] netlink: 'syz.1.5174': attribute type 29 has an invalid length. [ 1274.665590][T22782] netlink: 'syz.1.5174': attribute type 29 has an invalid length. [ 1275.091096][T22798] delete_channel: no stack [ 1275.118697][T22792] sit0: left promiscuous mode [ 1275.652404][T22803] sit0: entered promiscuous mode [ 1275.783677][T22812] delete_channel: no stack [ 1275.839518][T22811] sit0: left promiscuous mode [ 1276.342095][T22821] sit0: left promiscuous mode [ 1276.760976][T22826] delete_channel: no stack [ 1276.812352][T22814] sit0: entered promiscuous mode [ 1276.947188][T22818] netlink: 'syz.0.5183': attribute type 39 has an invalid length. [ 1276.964233][T22818] macvlan0: entered promiscuous mode [ 1276.977238][T22818] macvlan0: entered allmulticast mode [ 1277.014710][T22824] sit0: entered promiscuous mode [ 1277.068047][T22830] netlink: 'syz.1.5189': attribute type 29 has an invalid length. [ 1277.127625][T22830] netlink: 'syz.1.5189': attribute type 29 has an invalid length. [ 1277.578256][T22848] sit0: left promiscuous mode [ 1278.210573][T22854] validate_nla: 2 callbacks suppressed [ 1278.210626][T22854] netlink: 'syz.2.5197': attribute type 9 has an invalid length. [ 1278.226980][T22854] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5197'. [ 1278.329954][T22852] sit0: entered promiscuous mode [ 1278.781049][T22859] delete_channel: no stack [ 1279.069366][T22867] sit0: left promiscuous mode [ 1279.732099][T22871] sit0: entered promiscuous mode [ 1279.828904][T22881] sit0: left promiscuous mode [ 1280.047034][T22880] sit0: entered promiscuous mode [ 1280.538227][T22896] sit0: left promiscuous mode [ 1280.658118][T22889] sit0: entered promiscuous mode [ 1280.673352][T22900] delete_channel: no stack [ 1280.963545][T22898] sit0: left promiscuous mode [ 1281.100375][T22899] sit0: entered promiscuous mode [ 1281.490032][T22919] netlink: 'syz.2.5216': attribute type 19 has an invalid length. [ 1281.659690][T22917] sit0: left promiscuous mode [ 1281.668489][T22924] netlink: 'syz.2.5216': attribute type 3 has an invalid length. [ 1281.668523][T22924] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1281.908836][T22926] netlink: 'syz.2.5216': attribute type 3 has an invalid length. [ 1281.964485][T22926] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1282.329576][T22919] netlink: 'syz.2.5216': attribute type 19 has an invalid length. [ 1282.342126][T22922] sit0: entered promiscuous mode [ 1282.532249][T22929] sit0: left promiscuous mode [ 1282.643338][T22930] sit0: entered promiscuous mode [ 1282.827192][T22939] netlink: 'syz.3.5219': attribute type 29 has an invalid length. [ 1282.902427][T22939] netlink: 'syz.3.5219': attribute type 29 has an invalid length. [ 1282.944052][T22939] netlink: 'syz.3.5219': attribute type 29 has an invalid length. [ 1283.002219][T22939] netlink: 'syz.3.5219': attribute type 29 has an invalid length. [ 1283.079773][T22941] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1283.359986][T22945] sit0: left promiscuous mode [ 1283.903791][T22953] sit0: entered promiscuous mode [ 1284.093049][T22959] netlink: 'syz.1.5226': attribute type 29 has an invalid length. [ 1284.322448][T22959] netlink: 'syz.1.5226': attribute type 29 has an invalid length. [ 1284.342944][T22963] sit0: left promiscuous mode [ 1284.455951][T22958] netlink: 'syz.1.5226': attribute type 29 has an invalid length. [ 1284.482401][T22962] netlink: 'syz.1.5226': attribute type 29 has an invalid length. [ 1284.520999][T22965] delete_channel: no stack [ 1285.596339][T22992] delete_channel: no stack [ 1285.700914][T22991] sit0: entered promiscuous mode [ 1285.998705][T23000] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5240'. [ 1287.092547][T13324] Bluetooth: hci2: command 0x0406 tx timeout [ 1287.641991][T23003] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1288.229438][T23018] delete_channel: no stack [ 1288.423416][T23023] bridge0: entered promiscuous mode [ 1288.446345][T23023] bridge0: entered allmulticast mode [ 1288.631261][T23029] netlink: 'syz.2.5250': attribute type 29 has an invalid length. [ 1288.667598][T23029] netlink: 'syz.2.5250': attribute type 29 has an invalid length. [ 1288.690907][T23033] netlink: 'syz.2.5250': attribute type 29 has an invalid length. [ 1288.728984][T23029] netlink: 'syz.2.5250': attribute type 29 has an invalid length. [ 1289.460671][T23046] delete_channel: no stack [ 1289.878573][T23064] netlink: 'syz.2.5261': attribute type 29 has an invalid length. [ 1289.976400][T23064] netlink: 'syz.2.5261': attribute type 29 has an invalid length. [ 1290.057784][T23063] sit0: left promiscuous mode [ 1290.547872][T23062] netlink: 'syz.2.5261': attribute type 29 has an invalid length. [ 1290.556843][T23064] netlink: 'syz.2.5261': attribute type 29 has an invalid length. [ 1290.581918][T23067] sit0: entered promiscuous mode [ 1291.240404][T23081] delete_channel: no stack [ 1291.597216][T23097] netlink: 'syz.1.5274': attribute type 29 has an invalid length. [ 1291.616515][T23097] netlink: 'syz.1.5274': attribute type 29 has an invalid length. [ 1291.654717][T23097] netlink: 'syz.1.5274': attribute type 29 has an invalid length. [ 1291.703846][T23097] netlink: 'syz.1.5274': attribute type 29 has an invalid length. [ 1291.959496][T23102] sit0: left promiscuous mode [ 1292.659337][T23104] sit0: entered promiscuous mode [ 1293.124858][T23117] delete_channel: no stack [ 1293.475964][T23136] netlink: 'syz.0.5289': attribute type 29 has an invalid length. [ 1293.495758][T23136] netlink: 'syz.0.5289': attribute type 29 has an invalid length. [ 1294.492716][T23150] delete_channel: no stack [ 1294.987944][T23164] sit0: left promiscuous mode [ 1295.117952][T23166] sit0: entered promiscuous mode [ 1295.277250][T23171] sit0: left promiscuous mode [ 1295.412842][T23168] sit0: entered promiscuous mode [ 1295.433213][T23174] validate_nla: 2 callbacks suppressed [ 1295.433233][T23174] netlink: 'syz.1.5304': attribute type 29 has an invalid length. [ 1295.726060][T23177] delete_channel: no stack [ 1296.107603][T23174] netlink: 'syz.1.5304': attribute type 29 has an invalid length. [ 1296.132228][T23176] netlink: 'syz.1.5304': attribute type 29 has an invalid length. [ 1296.160775][T23179] netlink: 'syz.1.5304': attribute type 29 has an invalid length. [ 1296.755947][T23199] delete_channel: no stack [ 1299.642028][T23206] sit0: left promiscuous mode [ 1299.742000][T23207] sit0: entered promiscuous mode [ 1299.882727][T23212] netlink: 'syz.2.5317': attribute type 29 has an invalid length. [ 1299.908779][T23212] netlink: 'syz.2.5317': attribute type 29 has an invalid length. [ 1299.942413][T23212] netlink: 'syz.2.5317': attribute type 29 has an invalid length. [ 1299.981465][T23212] netlink: 'syz.2.5317': attribute type 29 has an invalid length. [ 1300.134816][T23220] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.5321'. [ 1300.388915][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.395504][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.424708][T23231] netlink: 'syz.0.5326': attribute type 3 has an invalid length. [ 1300.432706][T23231] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5326'. [ 1300.867398][T23242] netlink: 'syz.2.5332': attribute type 10 has an invalid length. [ 1300.897690][T23242] netlink: 'syz.2.5332': attribute type 10 has an invalid length. [ 1300.981575][T23247] sit0: left promiscuous mode [ 1301.169079][T20589] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 1301.541176][T23255] sit0: entered promiscuous mode [ 1301.564042][T23264] netlink: 'syz.3.5337': attribute type 29 has an invalid length. [ 1301.791386][T23264] netlink: 'syz.3.5337': attribute type 29 has an invalid length. [ 1301.804531][T23265] netlink: 'syz.3.5337': attribute type 29 has an invalid length. [ 1301.825714][T23268] netlink: 'syz.2.5338': attribute type 3 has an invalid length. [ 1301.834277][T23266] netlink: 'syz.3.5337': attribute type 29 has an invalid length. [ 1301.842374][T23268] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5338'. [ 1302.365121][T23284] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5344'. [ 1302.392714][T23284] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1302.429242][T23284] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5344'. [ 1302.811580][T23301] netlink: 'syz.3.5351': attribute type 3 has an invalid length. [ 1302.830172][T23301] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1303.264708][T23315] netlink: 'syz.1.5354': attribute type 29 has an invalid length. [ 1303.288364][T23315] netlink: 'syz.1.5354': attribute type 29 has an invalid length. [ 1303.326760][T23317] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5356'. [ 1303.346448][T23317] netlink: set zone limit has 4 unknown bytes [ 1304.909160][T23365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5376'. [ 1304.941840][T23365] veth1_to_team: entered promiscuous mode [ 1304.956994][T23365] veth1_to_team: entered allmulticast mode [ 1304.972697][T23365] bridge0: port 3(veth1_to_team) entered blocking state [ 1305.003212][T23365] bridge0: port 3(veth1_to_team) entered disabled state [ 1305.031575][T23365] bridge0: port 3(veth1_to_team) entered blocking state [ 1305.038849][T23365] bridge0: port 3(veth1_to_team) entered forwarding state [ 1305.315013][T23376] FAULT_INJECTION: forcing a failure. [ 1305.315013][T23376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1305.362433][T23376] CPU: 1 PID: 23376 Comm: syz.3.5381 Not tainted syzkaller #0 [ 1305.370010][T23376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1305.380126][T23376] Call Trace: [ 1305.383448][T23376] [ 1305.386423][T23376] dump_stack_lvl+0x18c/0x250 [ 1305.391167][T23376] ? show_regs_print_info+0x20/0x20 [ 1305.396431][T23376] ? load_image+0x420/0x420 [ 1305.400997][T23376] ? __might_fault+0xaa/0x120 [ 1305.405737][T23376] ? __lock_acquire+0x7eb0/0x7eb0 [ 1305.410811][T23376] should_fail_ex+0x394/0x4c0 [ 1305.415532][T23376] _copy_from_iter+0x1cd/0x1290 [ 1305.420418][T23376] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 1305.425848][T23376] ? copyout_mc+0x70/0x70 [ 1305.430215][T23376] ? __virt_addr_valid+0x10c/0x380 [ 1305.435366][T23376] ? __virt_addr_valid+0x10c/0x380 [ 1305.440521][T23376] ? __virt_addr_valid+0x10c/0x380 [ 1305.445685][T23376] ? __check_object_size+0x4fc/0xa40 [ 1305.451057][T23376] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 1305.456830][T23376] ? dev_get_by_index+0x22/0x2d0 [ 1305.461806][T23376] ? skb_put+0x112/0x210 [ 1305.466142][T23376] packet_sendmsg+0x32d6/0x49d0 [ 1305.471063][T23376] ? verify_lock_unused+0x140/0x140 [ 1305.476312][T23376] ? __lock_acquire+0x135d/0x7eb0 [ 1305.481385][T23376] ? aa_sk_perm+0x7bb/0x8e0 [ 1305.485944][T23376] ? packet_getsockopt+0xad0/0xad0 [ 1305.491112][T23376] ? tomoyo_mount_permission+0x3e0/0x9d0 [ 1305.496792][T23376] ? aa_sock_msg_perm+0x94/0x150 [ 1305.501777][T23376] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1305.507372][T23376] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1305.512703][T23376] ? security_socket_sendmsg+0x80/0xa0 [ 1305.518229][T23376] ? packet_getsockopt+0xad0/0xad0 [ 1305.523385][T23376] ____sys_sendmsg+0x61b/0x980 [ 1305.528215][T23376] ? __asan_memset+0x22/0x40 [ 1305.532848][T23376] ? __sys_sendmsg_sock+0x30/0x30 [ 1305.537905][T23376] ? __import_iovec+0x5f2/0x850 [ 1305.542807][T23376] ? import_iovec+0x73/0xa0 [ 1305.547351][T23376] ___sys_sendmsg+0x2a6/0x360 [ 1305.552059][T23376] ? get_pid_task+0x20/0x1e0 [ 1305.556695][T23376] ? __sys_sendmsg+0x2b0/0x2b0 [ 1305.561522][T23376] ? __lock_acquire+0x7eb0/0x7eb0 [ 1305.566627][T23376] __se_sys_sendmsg+0x1d0/0x2c0 [ 1305.571528][T23376] ? __x64_sys_sendmsg+0x80/0x80 [ 1305.576516][T23376] ? lockdep_hardirqs_on+0x98/0x150 [ 1305.581771][T23376] do_syscall_64+0x55/0xb0 [ 1305.586230][T23376] ? clear_bhb_loop+0x40/0x90 [ 1305.590948][T23376] ? clear_bhb_loop+0x40/0x90 [ 1305.595671][T23376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1305.601621][T23376] RIP: 0033:0x7f547199f559 [ 1305.606085][T23376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1305.625739][T23376] RSP: 002b:00007f5472920028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1305.634197][T23376] RAX: ffffffffffffffda RBX: 00007f5471c25fa0 RCX: 00007f547199f559 [ 1305.642211][T23376] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 1305.650225][T23376] RBP: 00007f5472920090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.658230][T23376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.666242][T23376] R13: 00007f5471c26038 R14: 00007f5471c25fa0 R15: 00007ffe8c999d18 [ 1305.674265][T23376] [ 1305.966854][T23384] validate_nla: 3 callbacks suppressed [ 1305.966885][T23384] netlink: 'syz.2.5383': attribute type 10 has an invalid length. [ 1306.026190][T23384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5383'. [ 1306.067617][T23384] veth1_to_team: entered promiscuous mode [ 1306.077833][T23384] veth1_to_team: entered allmulticast mode [ 1306.086406][T23384] bridge0: port 2(veth1_to_team) entered blocking state [ 1306.097351][T23384] bridge0: port 2(veth1_to_team) entered disabled state [ 1306.843240][T23400] cgroup: fork rejected by pids controller in /syz2 [ 1308.461377][T23449] cgroup: fork rejected by pids controller in /syz3 [ 1308.833408][T13324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1308.862281][T13324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1308.876694][T13324] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1308.885134][T13324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1308.897200][T13324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1308.905890][T13324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1308.912137][T23464] FAULT_INJECTION: forcing a failure. [ 1308.912137][T23464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.930427][T23464] CPU: 0 PID: 23464 Comm: syz.1.5410 Not tainted syzkaller #0 [ 1308.937988][T23464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1308.948092][T23464] Call Trace: [ 1308.951418][T23464] [ 1308.954404][T23464] dump_stack_lvl+0x18c/0x250 [ 1308.959156][T23464] ? show_regs_print_info+0x20/0x20 [ 1308.964424][T23464] ? load_image+0x420/0x420 [ 1308.968997][T23464] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1308.974709][T23464] should_fail_ex+0x394/0x4c0 [ 1308.979460][T23464] _copy_to_user+0x2f/0xa0 [ 1308.983955][T23464] simple_read_from_buffer+0xe7/0x150 [ 1308.989404][T23464] proc_fail_nth_read+0x1e8/0x260 [ 1308.994527][T23464] ? proc_fault_inject_write+0x360/0x360 [ 1309.000238][T23464] ? fsnotify_perm+0x271/0x5e0 [ 1309.005068][T23464] ? proc_fault_inject_write+0x360/0x360 [ 1309.010772][T23464] vfs_read+0x298/0x990 [ 1309.015006][T23464] ? kernel_read+0x1e0/0x1e0 [ 1309.019659][T23464] ? __fget_files+0x28/0x460 [ 1309.024318][T23464] ? __fget_files+0x3fc/0x460 [ 1309.029117][T23464] ? __fdget_pos+0x2a3/0x330 [ 1309.033779][T23464] ? ksys_read+0x74/0x260 [ 1309.038179][T23464] ksys_read+0x151/0x260 [ 1309.042498][T23464] ? vfs_write+0x9a0/0x9a0 [ 1309.046983][T23464] ? lockdep_hardirqs_on+0x98/0x150 [ 1309.052256][T23464] do_syscall_64+0x55/0xb0 [ 1309.056735][T23464] ? clear_bhb_loop+0x40/0x90 [ 1309.061486][T23464] ? clear_bhb_loop+0x40/0x90 [ 1309.066234][T23464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1309.072196][T23464] RIP: 0033:0x7f5a5515fd8e [ 1309.076667][T23464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1309.096339][T23464] RSP: 002b:00007f5a55f8afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1309.104816][T23464] RAX: ffffffffffffffda RBX: 00007f5a55f8b6c0 RCX: 00007f5a5515fd8e [ 1309.112849][T23464] RDX: 000000000000000f RSI: 00007f5a55f8b0a0 RDI: 0000000000000004 [ 1309.120884][T23464] RBP: 00007f5a55f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.128916][T23464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1309.136967][T23464] R13: 00007f5a55426038 R14: 00007f5a55425fa0 R15: 00007fffd5498f48 [ 1309.145052][T23464] [ 1309.198924][T23460] rxe_eth0 speed is unknown, defaulting to 1000 [ 1310.089722][T23460] chnl_net:caif_netlink_parms(): no params data found [ 1310.352606][T23460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.359999][T23460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.367957][T23460] bridge_slave_0: entered allmulticast mode [ 1310.376609][T23460] bridge_slave_0: entered promiscuous mode [ 1310.386781][T23460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.394190][T23460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.402946][T23460] bridge_slave_1: entered allmulticast mode [ 1310.410537][T23460] bridge_slave_1: entered promiscuous mode [ 1310.449823][T23460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.464659][T23460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.547849][T23460] team0: Port device team_slave_0 added [ 1310.573374][T23460] team0: Port device team_slave_1 added [ 1310.692888][T23460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.699929][T23460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.758039][T23460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.817139][T23460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.843412][T23460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.952199][T23460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.014237][T13324] Bluetooth: hci0: command tx timeout [ 1311.023860][T23495] cgroup: fork rejected by pids controller in /syz0 [ 1311.128666][T20589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1311.135818][T23460] hsr_slave_0: entered promiscuous mode [ 1311.146869][T20589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1311.156323][T20589] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1311.168640][T23460] hsr_slave_1: entered promiscuous mode [ 1311.177225][T23460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1311.185521][T23460] Cannot create hsr debugfs directory [ 1311.191623][T20589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1311.202107][T20589] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1311.210430][T20589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1311.323632][T23500] rxe_eth0 speed is unknown, defaulting to 1000 [ 1311.619619][T23460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.797318][T23460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.934298][T23460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.113123][T23460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.280396][T23500] chnl_net:caif_netlink_parms(): no params data found [ 1312.546824][T23460] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1312.569191][T23500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.583356][T23500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.595824][T23500] bridge_slave_0: entered allmulticast mode [ 1312.608625][T23500] bridge_slave_0: entered promiscuous mode [ 1312.628096][T23500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.639304][T23500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.650884][T23500] bridge_slave_1: entered allmulticast mode [ 1312.661618][T23500] bridge_slave_1: entered promiscuous mode [ 1312.679670][T23460] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1312.728895][T23460] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1312.759835][T23460] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1312.778335][T23500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.806695][T13324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1312.817645][T13324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1312.826871][T13324] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1312.836549][T13324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1312.845527][T23500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.855928][T13324] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1312.865278][T13324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1312.920411][T23500] team0: Port device team_slave_0 added [ 1312.930233][T23500] team0: Port device team_slave_1 added [ 1312.992370][T23500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.003421][T23500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.032286][T23500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.045561][T23500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.054703][T23500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.081532][T23500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.092833][T13324] Bluetooth: hci0: command tx timeout [ 1313.104122][T23521] rxe_eth0 speed is unknown, defaulting to 1000 [ 1313.209597][T23500] hsr_slave_0: entered promiscuous mode [ 1313.225400][T23500] hsr_slave_1: entered promiscuous mode [ 1313.243890][T23500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1313.251546][T23500] Cannot create hsr debugfs directory [ 1313.254394][T13324] Bluetooth: hci3: command tx timeout [ 1313.429564][T23525] ipvlan1: entered promiscuous mode [ 1313.441830][T23525] ipvlan1: entered allmulticast mode [ 1313.448659][T23525] veth0_vlan: entered allmulticast mode [ 1313.677142][T23500] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.730013][T23528] netlink: 'syz.1.5429': attribute type 33 has an invalid length. [ 1313.738763][T23528] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5429'. [ 1313.814412][T23460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.840268][T23460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.884474][T23500] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.946966][T13423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.954291][T13423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.031573][T23500] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.068243][T13423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.075534][T13423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1314.119100][T23521] chnl_net:caif_netlink_parms(): no params data found [ 1314.186985][T23500] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.414436][T23521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.442784][T23521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.450144][T23521] bridge_slave_0: entered allmulticast mode [ 1314.491244][T23521] bridge_slave_0: entered promiscuous mode [ 1314.533874][T23521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.541118][T23521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.560631][T23521] bridge_slave_1: entered allmulticast mode [ 1314.569384][T23521] bridge_slave_1: entered promiscuous mode [ 1314.705796][T23521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.763749][T23541] cgroup: fork rejected by pids controller in /syz1 [ 1314.823381][T23521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.903071][T23500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1314.948692][T13324] Bluetooth: hci1: command tx timeout [ 1314.967387][T23500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1314.988804][T23500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1315.006472][T23521] team0: Port device team_slave_0 added [ 1315.018704][T23521] team0: Port device team_slave_1 added [ 1315.029864][T23500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1315.115566][T23460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.125584][T23521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.134475][T23521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.161596][T23521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.172997][T13324] Bluetooth: hci0: command tx timeout [ 1315.182785][T23521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.189940][T23521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.216580][T23521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.337323][T13324] Bluetooth: hci3: command tx timeout [ 1315.350753][T23521] hsr_slave_0: entered promiscuous mode [ 1315.364382][T23521] hsr_slave_1: entered promiscuous mode [ 1315.370977][T23521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1315.379447][T23521] Cannot create hsr debugfs directory [ 1315.537795][T23460] veth0_vlan: entered promiscuous mode [ 1315.696283][T23521] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.724223][T23460] veth1_vlan: entered promiscuous mode [ 1315.943696][T13423] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.092954][T23521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.295086][T13423] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.427262][T23521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.563759][T13423] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.575736][T20589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1316.585478][T20589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1316.594897][T20589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1316.607101][T20589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1316.617593][T20589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1316.628296][T20589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1316.673853][T23521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.720058][T23500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.760891][T13423] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.783306][T23460] veth0_macvtap: entered promiscuous mode [ 1316.808440][T23460] veth1_macvtap: entered promiscuous mode [ 1316.818764][T23548] rxe_eth0 speed is unknown, defaulting to 1000 [ 1316.864390][T23500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1316.918002][T15580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.925297][T15580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.966193][T23460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.997304][T23460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.007878][T23460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.022452][T13324] Bluetooth: hci1: command tx timeout [ 1317.035602][T23460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.046094][T23460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.064789][T23460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.081519][T23460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.114250][T15580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.121514][T15580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.151509][T23460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.168872][T23460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.180882][T23460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.191864][T23460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.204612][T23460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.215181][T23460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.225374][T23460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.236626][T23460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.248781][T23460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.262116][T13324] Bluetooth: hci0: command tx timeout [ 1317.393309][T23460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.402621][T23460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.411393][T23460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.420329][T23460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.423032][T13324] Bluetooth: hci3: command tx timeout [ 1317.593187][T23521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1317.605386][T23521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1317.616332][T23521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1317.627933][T23521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1318.108960][T15560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.120963][T15560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.287338][T23548] chnl_net:caif_netlink_parms(): no params data found [ 1318.313842][T15560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.331963][T15560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.479672][T23500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.694239][T13324] Bluetooth: hci2: command tx timeout [ 1318.802488][T23548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.809778][T23548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.836705][T23548] bridge_slave_0: entered allmulticast mode [ 1318.853640][T23548] bridge_slave_0: entered promiscuous mode [ 1318.873175][T23548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.880478][T23548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.928840][T23548] bridge_slave_1: entered allmulticast mode [ 1318.961894][T23548] bridge_slave_1: entered promiscuous mode [ 1319.092312][T13324] Bluetooth: hci1: command tx timeout [ 1319.501951][T13324] Bluetooth: hci3: command tx timeout [ 1319.834710][T23521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.861381][T23548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.924740][T23500] veth0_vlan: entered promiscuous mode [ 1319.945761][T23548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.097975][T23548] team0: Port device team_slave_0 added [ 1320.136457][T23548] team0: Port device team_slave_1 added [ 1320.186047][T23521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.207444][T23500] veth1_vlan: entered promiscuous mode [ 1320.327525][T15580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.335117][T15580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.413300][T15580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.420534][T15580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.531202][T23500] veth0_macvtap: entered promiscuous mode [ 1320.558584][T23548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.566663][T23548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.599094][T23548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.620670][T23548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.629931][T23548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.670991][T23548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.699444][T13423] hsr_slave_0: left promiscuous mode [ 1320.719477][T13423] hsr_slave_1: left promiscuous mode [ 1320.729983][T13423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1320.746799][T13423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.755726][T13423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1320.773377][T13423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.775464][T13324] Bluetooth: hci2: command tx timeout [ 1320.791513][T13423] bridge_slave_1: left allmulticast mode [ 1320.819897][T13423] bridge_slave_1: left promiscuous mode [ 1320.834638][T13423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.863659][T13423] bridge_slave_0: left allmulticast mode [ 1320.869466][T13423] bridge_slave_0: left promiscuous mode [ 1320.877997][T13423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.922679][T13423] veth1_macvtap: left promiscuous mode [ 1320.928347][T13423] veth0_macvtap: left promiscuous mode [ 1320.942710][T13423] veth1_vlan: left promiscuous mode [ 1320.948204][T13423] veth0_vlan: left promiscuous mode [ 1321.183272][T13324] Bluetooth: hci1: command tx timeout [ 1322.059900][T13423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.117464][T13423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.542163][T13423] bond0 (unregistering): Released all slaves [ 1322.683073][T23500] veth1_macvtap: entered promiscuous mode [ 1322.757705][T23548] hsr_slave_0: entered promiscuous mode [ 1322.764742][T23548] hsr_slave_1: entered promiscuous mode [ 1322.856453][T13324] Bluetooth: hci2: command tx timeout [ 1323.082486][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.131761][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.162564][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.182987][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.202094][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.249331][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.259416][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.270269][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.290088][T23500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.394239][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.425187][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.465841][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.485852][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.500356][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.515798][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.526367][T23500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.561923][T23500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.603701][T23500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.748062][T23500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.770796][T23500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.801424][T23500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.831733][T23500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.529869][T23521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.711489][ T9521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.751855][ T9521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.872043][ T9526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.879969][ T9526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.921535][T23521] veth0_vlan: entered promiscuous mode [ 1324.932244][T13324] Bluetooth: hci2: command tx timeout [ 1325.006146][T23521] veth1_vlan: entered promiscuous mode [ 1325.036985][T23548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1325.102765][T23548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1325.116535][T23548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1325.157686][T23548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1325.291262][T23521] veth0_macvtap: entered promiscuous mode [ 1325.326953][T23521] veth1_macvtap: entered promiscuous mode [ 1325.577168][T23642] sit0: entered allmulticast mode [ 1325.609970][T23645] sit0: entered promiscuous mode [ 1325.810577][T23521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.831442][T23521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.850169][T23521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.861275][T23521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.872033][T23521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.894223][T23521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.907921][T23521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.927729][T23521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.940790][T23521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.959456][T23521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.987259][T23521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1326.034923][T23521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.072752][T23521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.083353][T23521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.112990][T23521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.132293][T23521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.151966][T23521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.171747][T23521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.193307][T23521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.204157][T23521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.222064][T23521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.246706][T23521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1326.326945][T23521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.363329][T23521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.392009][T23521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.421638][T23521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.859662][T23548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.947183][T13423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.979491][T13423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.103013][T23548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.112240][T13423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.132695][T13423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.177958][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.185262][ T9526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.230723][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.238038][ T9526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.459354][T23548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1327.491212][T23548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1328.945041][T23689] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5450'. [ 1329.218657][T23548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.267182][T23709] netlink: 'syz.0.5452': attribute type 1 has an invalid length. [ 1329.322506][T23709] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5452'. [ 1329.444399][T23548] veth0_vlan: entered promiscuous mode [ 1329.477470][T23548] veth1_vlan: entered promiscuous mode [ 1329.536568][T23548] veth0_macvtap: entered promiscuous mode [ 1329.559285][T23548] veth1_macvtap: entered promiscuous mode [ 1329.628463][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.657745][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.679050][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.707128][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.751788][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.781714][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.802753][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.841965][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.863231][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.885199][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.904900][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.917426][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.931628][T23548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.222435][T23727] sit0: entered allmulticast mode [ 1330.283334][T23728] sit0: entered promiscuous mode [ 1330.408746][T23732] delete_channel: no stack [ 1330.426704][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.442320][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.466220][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.485260][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.508966][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.525197][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.537298][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.548506][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.558925][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.571454][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.592014][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.607427][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.645965][T23548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.687847][T23548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.709251][T23548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.719892][T23548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.737584][T23548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.006432][T23742] sit0: left promiscuous mode [ 1331.680901][T23749] sit0: entered promiscuous mode [ 1332.032109][T13423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.057700][T13423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.181172][T15559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.199517][T15559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.543712][T23770] delete_channel: no stack [ 1333.010745][T23780] sit0: entered allmulticast mode [ 1333.067839][T23783] sit0: entered promiscuous mode [ 1333.521549][T23794] sit0: left promiscuous mode [ 1334.102943][T23798] sit0: entered promiscuous mode [ 1334.354543][T23812] netlink: 'syz.0.5477': attribute type 10 has an invalid length. [ 1334.392637][T23812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5477'. [ 1334.419485][T23812] veth1_to_team: entered promiscuous mode [ 1334.439309][T23812] veth1_to_team: entered allmulticast mode [ 1334.474265][T23812] bridge0: port 3(veth1_to_team) entered blocking state [ 1334.490594][T23814] delete_channel: no stack [ 1334.495495][T23812] bridge0: port 3(veth1_to_team) entered disabled state [ 1334.548048][T23812] bridge0: port 3(veth1_to_team) entered blocking state [ 1334.555561][T23812] bridge0: port 3(veth1_to_team) entered forwarding state [ 1334.774269][T23821] ¥: port 1(team0) entered blocking state [ 1334.782957][T23821] ¥: port 1(team0) entered disabled state [ 1334.812115][T23821] team0: entered allmulticast mode [ 1334.817400][T23821] team_slave_0: entered allmulticast mode [ 1334.851920][T23821] team_slave_1: entered allmulticast mode [ 1334.868930][T23821] team0: entered promiscuous mode [ 1334.881827][T23821] team_slave_0: entered promiscuous mode [ 1334.898212][T23821] team_slave_1: entered promiscuous mode [ 1334.915434][T23817] team0: left allmulticast mode [ 1334.964573][T23817] team_slave_0: left allmulticast mode [ 1334.996541][T23817] team_slave_1: left allmulticast mode [ 1335.012447][T23817] team0: left promiscuous mode [ 1335.017824][T23817] team_slave_0: left promiscuous mode [ 1335.033230][T23817] team_slave_1: left promiscuous mode [ 1335.052715][T23817] ¥: port 1(team0) entered disabled state [ 1335.228384][T23829] sit0: left promiscuous mode [ 1335.704414][T23831] sit0: entered allmulticast mode [ 1335.736073][T23830] sit0: entered promiscuous mode [ 1335.840049][T23834] sit0: entered promiscuous mode [ 1336.047291][T23841] delete_channel: no stack [ 1336.334729][T23846] rxe_eth0 speed is unknown, defaulting to 1000 [ 1336.588452][T23863] sit0: left promiscuous mode [ 1337.163624][T23865] sit0: entered promiscuous mode [ 1337.628872][T23874] delete_channel: no stack [ 1338.795144][T23907] delete_channel: no stack [ 1338.976116][T23916] netlink: 'syz.1.5514': attribute type 13 has an invalid length. [ 1339.004203][T23916] netlink: 'syz.1.5514': attribute type 21 has an invalid length. [ 1340.631335][T23937] ¥: port 1(team0) entered blocking state [ 1340.653094][T23949] delete_channel: no stack [ 1340.659156][T23937] ¥: port 1(team0) entered disabled state [ 1340.673323][T23937] team0: entered allmulticast mode [ 1340.678586][T23937] team_slave_0: entered allmulticast mode [ 1340.688867][T23937] team_slave_1: entered allmulticast mode [ 1340.709865][T23937] team0: entered promiscuous mode [ 1340.719272][T23937] team_slave_0: entered promiscuous mode [ 1340.729591][T23937] team_slave_1: entered promiscuous mode [ 1340.755891][T23944] team0: left allmulticast mode [ 1340.762404][T23944] team_slave_0: left allmulticast mode [ 1340.767934][T23944] team_slave_1: left allmulticast mode [ 1340.777444][T23944] team0: left promiscuous mode [ 1340.785621][T23944] team_slave_0: left promiscuous mode [ 1340.791308][T23944] team_slave_1: left promiscuous mode [ 1340.805654][T23944] ¥: port 1(team0) entered disabled state [ 1341.339986][T23964] netlink: 'syz.2.5530': attribute type 13 has an invalid length. [ 1341.352568][T23963] netlink: 'syz.2.5530': attribute type 21 has an invalid length. [ 1342.322207][T23984] netlink: 'syz.2.5536': attribute type 27 has an invalid length. [ 1342.397483][T23984] netlink: 'syz.2.5536': attribute type 3 has an invalid length. [ 1342.494300][T23984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5536'. [ 1343.144359][T23991] ¥: port 1(team0) entered blocking state [ 1343.162710][T23991] ¥: port 1(team0) entered disabled state [ 1343.185515][T23991] team0: entered allmulticast mode [ 1343.191008][T23991] team_slave_0: entered allmulticast mode [ 1343.211892][T23991] team_slave_1: entered allmulticast mode [ 1343.234303][T23991] team0: entered promiscuous mode [ 1343.239484][T23991] team_slave_0: entered promiscuous mode [ 1343.247970][T23991] team_slave_1: entered promiscuous mode [ 1343.305925][T23996] team0: left allmulticast mode [ 1343.310885][T23996] team_slave_0: left allmulticast mode [ 1343.350698][T23998] netlink: 'syz.2.5541': attribute type 27 has an invalid length. [ 1343.359391][T23998] netlink: 'syz.2.5541': attribute type 3 has an invalid length. [ 1343.368049][T23998] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5541'. [ 1343.378381][T23996] team_slave_1: left allmulticast mode [ 1343.392713][T23996] team0: left promiscuous mode [ 1343.398918][T23996] team_slave_0: left promiscuous mode [ 1343.409888][T23996] team_slave_1: left promiscuous mode [ 1343.418745][T23996] ¥: port 1(team0) entered disabled state [ 1344.124548][T24028] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1344.205042][T24028] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1345.050297][T24052] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1347.530806][T24057] sit0: left promiscuous mode [ 1348.502162][T24066] sit0: entered promiscuous mode [ 1348.862215][T24081] sit0: left promiscuous mode [ 1349.437489][T24085] sit0: entered promiscuous mode [ 1349.616403][T24087] sit0: left promiscuous mode [ 1349.742043][T24091] sit0: entered promiscuous mode [ 1350.278177][T24105] netlink: 'syz.0.5573': attribute type 13 has an invalid length. [ 1350.332874][T24105] netlink: 'syz.0.5573': attribute type 21 has an invalid length. [ 1351.086850][T24126] sit0: left promiscuous mode [ 1351.606029][T24131] sit0: entered promiscuous mode [ 1352.035759][T24151] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1353.830592][T24180] sit0: left promiscuous mode [ 1354.031440][T24179] delete_channel: no stack Stopping sshd: [ 1354.453816][T24187] sit0: left promiscuous mode stopped /usr/sbin/sshd (pid 5545) OK[ 1354.662031][T24189] sit0: entered promiscuous mode Stopping crond: [ 1355.009286][T24198] sit0: left promiscuous mode stopped /usr/sbin/crond (pid 5527) OK [ 1355.514307][T24204] sit0: entered promiscuous mode Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5448) [ 1355.936448][T24220] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app Stopping network: [ 1356.578376][T24231] sit0: left promiscuous mode [ 1356.937176][T24239] delete_channel: no stack [ 1357.367561][T24238] sit0: entered promiscuous mode [ 1357.965248][T24261] sit0: left promiscuous mode [ 1358.657875][T24265] sit0: entered promiscuous mode OK Stopping iptables: OK [ 1359.392405][T24284] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app Stopping system message bus: [ 1360.171078][T24296] sit0: entered promiscuous mode [ 1360.212715][T24297] delete_channel: no stack done [ 1361.228107][T24313] sit0: left promiscuous mode [ 1361.719960][T24316] sit0: entered promiscuous mode [ 1361.832152][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.838596][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.252876][T24324] netlink: 'syz.0.5637': attribute type 13 has an invalid length. [ 1362.297461][T24325] netlink: 'syz.0.5637': attribute type 21 has an invalid length. [ 1362.570774][T24331] netlink: 'syz.1.5638': attribute type 13 has an invalid length. [ 1362.662793][T24331] netlink: 'syz.1.5638': attribute type 21 has an invalid length. [ 1363.412660][T24344] delete_channel: no stack [ 1363.889265][T24359] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1363.910613][T24359] syzkaller0: entered promiscuous mode [ 1363.930820][T24359] syzkaller0: entered allmulticast mode Stopping klogd: OK [ 1365.101123][T24368] netlink: 'syz.1.5649': attribute type 13 has an invalid length. [ 1365.214016][T24372] netlink: 'syz.1.5649': attribute type 21 has an invalid length. Stopping acpid: [ 1365.847204][T24383] delete_channel: no stack [ 1366.141071][T24387] sit0: left promiscuous mode [ 1366.563178][T24389] sit0: entered promiscuous mode [ 1366.649228][T24392] netlink: 'syz.3.5656': attribute type 13 has an invalid length. [ 1366.659513][T24393] netlink: 'syz.3.5656': attribute type 21 has an invalid length. OK Stopping syslogd: stopped /sbin/syslogd (pid 5136) OK umount: can't remount debugfs read-only [ 1369.310016][T24436] sit0: left promiscuous mode [ 1370.120901][T24439] sit0: entered promiscuous mode [ 1370.409842][T24447] netlink: 'syz.2.5671': attribute type 13 has an invalid length. [ 1370.473230][T24447] netlink: 'syz.2.5671': attribute type 21 has an invalid length. [ 1370.547644][T24450] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1370.581958][T24450] syzkaller0: entered promiscuous mode [ 1370.592098][T24450] syzkaller0: entered allmulticast mode [ 1370.936748][T24456] netlink: 'syz.2.5675': attribute type 13 has an invalid length. [ 1370.985015][T24456] netlink: 'syz.2.5675': attribute type 21 has an invalid length. [ 1371.745536][T24467] sit0: left promiscuous mode [ 1372.521568][T24470] sit0: entered promiscuous mode [ 1372.654171][T24475] sit0: left promiscuous mode [ 1372.872028][T24480] sit0: entered promiscuous mode [ 1373.313627][T24489] syzkaller0: entered promiscuous mode [ 1373.319198][T24489] syzkaller0: entered allmulticast mode [ 1373.854534][T24506] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5692'. [ 1373.950142][T24506] netlink: 'syz.0.5692': attribute type 3 has an invalid length. [ 1373.970335][T24506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5692'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.17 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 1376.525595][T24502] netlink: 'syz.3.5691': attribute type 13 has an invalid length. [ 1376.546715][T24503] netlink: 'syz.3.5691': attribute type 21 has an invalid length. [ 1376.554976][T24506] bridge0: port 4(batadv0) entered blocking state [ 1376.573027][T24506] bridge0: port 4(batadv0) entered disabled state [ 1376.579981][T24506] batadv0: entered allmulticast mode [ 1376.613660][T24506] batadv0: entered promiscuous mode [ 1376.619874][T24506] bridge0: port 4(batadv0) entered blocking state [ 1376.626534][T24506] bridge0: port 4(batadv0) entered forwarding state [ 1376.733521][T15573] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1376.743392][T15573] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1376.772396][T24508] smc: removing ib device rxe0 [ 1376.840981][T24508] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1376.943657][T24508] ACPI: PM: Preparing to enter system sleep state S5 [ 1377.025922][T24508] kvm: exiting hardware virtualization [ 1377.060333][T24508] reboot: Power down serialport: VM disconnected.